Skip to content
OpenAdvisories

Archive

January 2024

Vulnerabilities first published in this month (UTC), newest first.

← December 2023 2024 / January February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

1,235 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-51743

    Buffer Overflow vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Set Upstream Channel ID (UCID) parameter at its web interface. A remote attacker could exploit this vulnerability by supplying …

    Hathway Skyworth Router CM5100
  • Medium 6.5
    CVE-2023-51742

    Buffer Overflow vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Add Downstream Frequency parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specia…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51739

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Device Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted i…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51738

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Network Name (SSID) parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially c…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51737

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Preshared Phrase parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially craf…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51736

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the L2TP/PPTP Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially cr…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51735

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Pre-shared key parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafte…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51734

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Identity parameter under Remote endpoint settings at its web interface. A remote attacker could exploit this vulnerability by s…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51733

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Identity parameter under Local endpoint settings at its web interface. A remote attacker could exploit this vulnerability by su…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51732

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the IPsec Tunnel Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially cra…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51731

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Hostname parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted inpu…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51730

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Password parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51729

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51728

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Password parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51727

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51726

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Server Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially craf…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51725

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Contact Email Address parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51724

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the URL parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to …

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51723

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Description parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted i…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51722

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 3 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51721

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 2 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51720

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 1 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51719

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Traceroute parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted in…

    Hathway Skyworth Router CM5100
  • Medium 6.5
    CVE-2023-36235

    An issue in webkul qloapps before v1.6.0 allows an attacker to obtain sensitive information via the id_order parameter.

  • Medium 6.1
    CVE-2023-48858 Public exploit

    A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9 allows remote attackers to injec…

  • Medium 6.1
    CVE-2023-46952

    Cross Site Scripting vulnerability in ABO.CMS v.5.9.3 allows an attacker to execute arbitrary code via a crafted payloa…

  • Medium 6.1
    CVE-2023-25295

    A Cross Site Scripting (XSS) vulnerability in evewa3ajax.php in GRUEN eVEWA3 Community 31 through 53 allows attackers t…

  • Medium 5.4
    CVE-2023-52069

    kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL parameter.

  • Medium 4.6
    CVE-2023-49515

    Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allo…

  • Medium 6.5
    CVE-2024-23525

    The Spreadsheet::ParseXLSX package before 0.30 for Perl allows XXE attacks because it neglects to use the no_xxe option…

    libspreadsheet-parsexlsx-perl libspreadsheet-parsexlsx-perl Debian Ubuntu
  • Medium 6.1
    CVE-2024-22714

    Stupid Simple CMS <=1.2.4 is vulnerable to Cross Site Scripting (XSS) in the editing section of the article content.

  • Medium 4.9
    CVE-2024-22407

    Broken Access Control order API in Shopware

    Shopware is an open headless commerce platform. In the Shopware CMS, the state handler for orders fails to sufficiently verify user authorizations for actions that modify the payment, delivery, and/or order status. Due to this inadequate implementation, users…

    shopware shopware shopware/platform shopware/core Packagist
  • Medium 6.5
    CVE-2024-22411 Public exploit

    Cross site scripting in Action messages on Avo

    Avo is a framework to create admin panels for Ruby on Rails apps. In Avo 3 pre12, any HTML inside text that is passed to `error` or `succeed` in an `Avo::BaseAction` subclass will be rendered directly without sanitization in the toast/notification that appear…

    avo-hq avo avo RubyGems
  • Medium 6.5
    CVE-2024-22192

    Ursa CL-Signatures Revocation allows verifiers to generate unique identifiers for holders

    Ursa is a cryptographic library for use with blockchains. The revocation scheme that is part of the Ursa CL-Signatures implementations has a flaw that could impact the privacy guarantees defined by the AnonCreds verifiable credential model. Notably, a malicio…

    hyperledger-archives ursa ursa anoncreds-clsignatures crates.io
  • Medium 6.5
    CVE-2024-21670

    CL-Signatures Revocation Scheme in Ursa has flaws that allow a holder to demonstrate non-revocation of a revoked credential

    Ursa is a cryptographic library for use with blockchains. The revocation schema that is part of the Ursa CL-Signatures implementations has a flaw that could impact the privacy guarantees defined by the AnonCreds verifiable credential model, allowing a malicio…

    hyperledger-archives ursa ursa anoncreds-clsignatures crates.io
  • Medium 5.4
    CVE-2024-20987

    Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). The supported version tha…

    Oracle BI Publisher (formerly XML Publisher)
  • Medium 6.5
    CVE-2024-20985

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affecte…

    Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  • Medium 4.9
    CVE-2024-20983

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

    Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  • Medium 4.9
    CVE-2024-20981

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

    Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  • Medium 5.4
    CVE-2024-20979

    Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that a…

    Oracle BI Publisher (formerly XML Publisher)