Skip to content
OpenAdvisories

Archive

January 2024

Vulnerabilities first published in this month (UTC), newest first.

← December 2023 2024 / January February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

2,612 results · Feed

  • Medium 4.7
    CVE-2024-0924

    Tenda AC10U formSetPPTPServer stack-based overflow

    A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49_multi_TDE01. This affects the function formSetPPTPServer. The manipulation of the argument startIp leads to stack-based buffer overflow. It is possible to initiate the att…

    Tenda AC10U
  • High 7.1
    CVE-2023-6291

    Keycloak: redirect_uri validation bypass

    A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other user…

    Red Hat Red Hat Single Sign-On 7 Red Hat Data Grid 8 Red Hat Fuse 7 Maven
  • Medium 4.7
    CVE-2024-0923

    Tenda AC10U formSetDeviceName stack-based overflow

    A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.49_multi_TDE01. Affected by this issue is the function formSetDeviceName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may b…

    Tenda AC10U
  • Medium 4.7
    CVE-2024-0922

    Tenda AC10U formQuickIndex stack-based overflow

    A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49_multi_TDE01. Affected by this vulnerability is the function formQuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be laun…

    Tenda AC10U
  • Medium 4.7
    CVE-2024-0921 EPSS 38%

    D-Link DIR-816 A2 Web Interface setDeviceSettings os command injection

    A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statusc…

    D-Link DIR-816 A2 Network devices
  • Unscored —
    RUSTSEC-2024-0397

    `conrod` is unmaintained

    The crate `conrod` has been [deprecated] since version 0.62.0 released in December 2018. The functionality was split across multiple different crates, with the core functionality being transferred to `conrod_core`. An overview can be found in the [conrod repo…

    conrod crates.io
  • Unscored —
    RUSTSEC-2024-0396

    `conrod_core` is unmaintained

    The `conrod_core` crate is no longer maintained. The author suggests [`egui`](https://crates.io/crates/egui) as a potential alternative.

    conrod_core crates.io
  • High 8.2
    CVE-2024-23896

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stock.php, in the batchno parameter. Exp…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23894

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancecreate.php, in the issuance…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23893

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/costcentermodify.php, in the costcenteri…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23892

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/costcentercreate.php, in the costcenteri…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23891

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemcreate.php, in the itemid parameter.…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23890

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itempopup.php, in the description parame…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23889

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemgroupcreate.php, in the itemgroupid …

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23888

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stocktransactionslist.php, in the itemid…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23887

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grncreate.php, in the grndate parameter.…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23886

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemmodify.php, in the bincardinfo param…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23885

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/countrymodify.php, in the countryid para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23884

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnmodify.php, in the grndate parameter.…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23883

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructuremodify.php, in the descripti…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23882

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxcodecreate.php, in the taxcodeid para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23881

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/statelist.php, in the description parame…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23880

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxcodelist.php, in the description para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23879

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/statemodify.php, in the description para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23878

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnprint.php, in the grnno parameter. Ex…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23877

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/currencycreate.php, in the currencyid pa…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23876

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructurecreate.php, in the descripti…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23875

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancedisplay.php, in the issuanc…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23874

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/companymodify.php, in the address1 param…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23873

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/currencymodify.php, in the currencyid pa…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23872

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/locationmodify.php, in the description p…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23871

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/unitofmeasurementmodify.php, in the desc…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23870

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancelist.php, in the delete par…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23869

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuanceprint.php, in the issuancen…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23868

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnlist.php, in the deleted parameter. E…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23867

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/statecreate.php, in the stateid paramete…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23866

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/countrycreate.php, in the countryid para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23865

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructurelist.php, in the description…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23864

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/countrylist.php, in the description para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23863

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructuredisplay.php, in the descript…

    Cups Easy Cups Easy (Purchase & Inventory)