Archive
January 2024
Vulnerabilities first published in this month (UTC), newest first.
2,612 results · Feed
-
High 7.4
Hitron Systems DVR LGUVR-8H Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR LGUVR-8H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
-
High 7.4
Hitron Systems DVR LGUVR-4H Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR LGUVR-4H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
-
High 7.4
Hitron Systems DVR HVR-16781 Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR HVR-16781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
-
High 7.4
Hitron Systems DVR HVR-8781 Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR HVR-8781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
-
High 7.4
Hitron Systems DVR HVR-4781 Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR HVR-4781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
-
Medium 4.0
Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()
An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.
-
Medium 6.3
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.6.4, macOS …
-
Medium 5.9
A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions. Th…
-
High 8.8
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15…
KEV Jan 23, 2024 -
Medium 5.5
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.5 a…
-
High 8.8
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 16.7.5 and i…
-
High 7.5
The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17…
-
Medium 5.5
An issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macO…
-
Medium 6.2
A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS S…
-
Medium 6.2
The issue was addressed with improved authentication. This issue is fixed in iOS 17.3 and iPadOS 17.3. Stolen Device Pr…
-
High 7.5
The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 an…
-
High 7.8CVE-2024-23208 Public exploit
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2. Processing a file may …
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.3, macOS Ventura 13.6.4. An app ma…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.3. Processing web content…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5…
-
Low 3.3
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 1…
-
Medium 6.5
An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPa…
-
Medium 5.5
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 1…
-
Low 3.3
A privacy issue was addressed with improved handling of user preferences. This issue is fixed in Safari 17.3, iOS 16.7.…
-
Medium 5.5
This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 17, watchOS 10, macOS Sonoma 14, …
-
Medium 5.5
An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6.4. A lo…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS …
-
Low 3.3
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.3 and iPadOS 17.…
-
Critical 9.8
An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an u…
-
Medium 6.5
An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext cop…
-
Critical 9.8
An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. The device provides a WiFi access point for initial co…
-
Critical 9.8CVE-2023-36177 EPSS 28%
An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain s…
-
Critical 9.8
Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFn…
-
Medium 5.7
Meross MSH30Q 4.5.23 is vulnerable to Cleartext Transmission of Sensitive Information. During the device setup phase, t…
-
High 8.8
The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing…
-
Medium 5.5
In the Linux kernel before 6.5.9, there is a NULL pointer dereference in send_acknowledge in net/nfc/nci/spi.c.
-
Medium 6.1
A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.8 allows remote attack…
-
Medium 5.4
Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious users to create a backdoor by re…