Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
38,964 results · page 359 of 780
Jan 21, 2024LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetrieCVE-2024-23751 · Other software · Llamaindex · reported by MITRECritical 9.8
LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetriever, RetrieverQueryEngine, and PGVectorSQLQueryEngine. For example, an attacker might be able to delete this year's student records via "Drop the Students table" within English language input.
- Product
- Llamaindex
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 21, 2024The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument.CVE-2024-23731 · Other software · Embedchain · reported by MITRECritical 9.8
The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument.
- Product
- Embedchain
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 21, 2024The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAMCVE-2024-23730 · Other software · Llamahub · reported by MITRECritical 9.8
The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.
- Product
- Llamahub
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 19, 2024An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execCVE-2023-51925 · Other software · Yonyou · reported by MITRECritical 9.8
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
- Product
- Yonbip
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 19, 2024An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via CVE-2023-51924 · Other software · Yonyou · reported by MITRECritical 9.8
An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
- Product
- Yonbip
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 19, 2024An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.CVE-2023-51906 · Other software · Yonyou · reported by MITRECritical 9.8
An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component.
- Product
- Yonbip
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 19, 2024An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execCVE-2023-51928 · Other software · Yonyou · reported by MITRECritical 9.8
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
- Product
- Yonbip
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 19, 2024YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript() method.CVE-2023-51927 · Other software · Yonyou · reported by MITRECritical 9.8
YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript() method.
- Product
- Yonbip
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 19, 2024An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component.CVE-2023-51892 · Other software · Weaver · reported by MITRECritical 9.8
An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component.
- Product
- E-cology
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comweaver.com.cn
Jan 19, 2024File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the server.CVE-2021-31314 · Other software · Ejinshan · reported by MITRECritical 9.8
File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the server.
- Product
- Terminal Security System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 19, 2024Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modifCVE-2024-23687 · Other software · Openlibraryfoundation · reported by VulnCheckCritical 9.1
Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.
- Product
- Mod-data-export-spring
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 19, 2024Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue.CVE-2024-23679 · Other software · Enonic · reported by VulnCheckCritical 9.8
Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. An remote and unauthenticated attacker can use prior sessions due to the lack of invalidating session attributes.
- Product
- XP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 19, 2024An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insufficient parsing in the parser.nim componCVE-2023-50694 · Other software · Dom96 · reported by MITRECritical 9.8
An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insufficient parsing in the parser.nim component.
- Product
- Httpbeast
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Jan 19, 2024An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request.CVE-2023-50693 · Other software · Jester Project · reported by MITRECritical 9.8
An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request.
- Product
- Jester
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Jan 19, 2024Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different types of data without authCVE-2023-51947 · Other software · Actidata · reported by MITRECritical 9.1
Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different types of data without authentication.
- Product
- Actinas SL 2u-8 RDX Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comactidata.com
Jan 19, 2024In the module "Jms Setting" (jmssetting) from Joommasters for PrestaShop, a guest can perform SQL injection in versions <= 1.1.0.CVE-2023-50030 · Other software · Joommasters · reported by MITRECritical 9.8
In the module "Jms Setting" (jmssetting) from Joommasters for PrestaShop, a guest can perform SQL injection in versions <= 1.1.0. The method `JmsSetting::getSecondImgs()` has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a blind SQL injection.
- Product
- Jmssetting
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.friendsofpresta.orgjoommasters.com
Jan 19, 2024In the module "Sliding cart block" (blockslidingcart) up to version 2.3.8 from PrestashopModules.eu for PrestaShop, a guest can perform SQL injection.CVE-2023-50028 · Websites & servers · Prestashopmodules · reported by MITRECritical 9.8
In the module "Sliding cart block" (blockslidingcart) up to version 2.3.8 from PrestashopModules.eu for PrestaShop, a guest can perform SQL injection.
- Product
- Sliding Cart Block
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaddons.prestashop.comsecurity.friendsofpresta.org
Jan 19, 2024In the module mib < 1.6.1 from MyPresta.eu for PrestaShop, a guest can perform SQL injection.CVE-2023-46351 · Other software · Mypresta · reported by MITRECritical 9.8
In the module mib < 1.6.1 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The methods `mib::getManufacturersByCategory()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
- Product
- Manufacturers (brands) Images Block
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmypresta.eusecurity.friendsofpresta.org
Jan 19, 2024SunnyToo stblogsearch up to v1.0.0 was discovered to contain a SQL injection vulnerability via the StBlogSearchClass::prepareSearch component.CVE-2023-43985 · Other software · Sunnytoo · reported by MITRECritical 9.8
SunnyToo stblogsearch up to v1.0.0 was discovered to contain a SQL injection vulnerability via the StBlogSearchClass::prepareSearch component.
- Product
- Stblogsearch
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.friendsofpresta.orgsunnytoo.com
Jan 19, 2024An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp file.CVE-2023-27168 · Other software · Xpand-it · reported by MITRECritical 9.8
An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp file.
- Product
- Write-back Manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbalwurk.combalwurk.github.io
Jan 19, 2024Stripe Payment Plugin for WooCommerce: SQL InjectionCVE-2024-0705 · WordPress plugins & themes · reported by WordfenceCritical 9.8
The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Stripe Payment Plugin for WooCommerce
- Affected
- up to 3.7.9
- What to do
- Affects up to 3.7.9. Update Stripe Payment Plugin for WooCommerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Jan 18, 2024ASUS Armoury Crate has a vulnerability in arbitrary file write and allows remote attackers to access or modify arbitrary files by sending specific HTTP requestsCVE-2023-5716 · Network & remote access · ASUS · reported by twcert@cert.org.twCritical 9.8
ASUS Armoury Crate has a vulnerability in arbitrary file write and allows remote attackers to access or modify arbitrary files by sending specific HTTP requests without permission.
- Product
- Armoury Crate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtwcert.org.twtwcert.org.tw
Jan 18, 2024Nextcloud Global Site Selector is a tool which allows you to run multiple small Nextcloud instances and redirect users to the right server.CVE-2024-22212 · Other software · nextcloud · reported by GitHubCritical 9.6
Nextcloud Global Site Selector is a tool which allows you to run multiple small Nextcloud instances and redirect users to the right server. A problem in the password verification method allows an attacker to authenticate as another user. It is recommended that the Nextcloud Global Site Selector is upgraded to version 1.4.1, 2.1.2, 2.3.4 or 2.4.5. There are no known workarounds for this issue.
- Product
- security-advisories
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 18, 2024This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.CVE-2023-40051 · Other software · Progress Software Corporation · reported by security@progress.comCritical 9.1
This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can formulate a request for a WEB transport that allows unintended file uploads to a server directory path on the system running PASOE. If the upload contains a payload that can further exploit the server or its network, the launch of a larger scale attack may be possible.
- Product
- OpenEdge
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcommunity.progress.comprogress.com
Jan 18, 2024IBM App Connect Enterprise 11.0.0.1 through 11.0.0.24 and 12.0.1.0 through 12.0.11.0 could allow a remote attacker to obtain sensitive information or cause a deCVE-2024-22317 · Other software · IBM · reported by psirt@us.ibm.comCritical 9.1
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.24 and 12.0.1.0 through 12.0.11.0 could allow a remote attacker to obtain sensitive information or cause a denial of service due to improper restriction of excessive authentication attempts. IBM X-Force ID: 279143.
- Product
- App Connect Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comibm.com
Jan 18, 2024Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mergen Software Quality Management System allows SQL InjecCVE-2023-5806 · Other software · Mergen Software · reported by iletisim@usom.gov.trCritical 9.8
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mergen Software Quality Management System allows SQL Injection. This issue affects Quality Management System: before v1.2.
- Product
- Quality Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiberguvenlik.gov.trusom.gov.tr
Jan 18, 2024A flaw was found in X.Org server.CVE-2023-6816 · Other software · Red Hat · reported by Red HatCritical 9.8
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
- Product
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.comaccess.redhat.com
Jan 17, 2024pyLoad is a free and open-source Download Manager written in pure Python.CVE-2024-22416 · Other software · pyload · reported by GitHubCritical 9.6
pyLoad is a free and open-source Download Manager written in pure Python. The `pyload` API allows any API call to be made using GET requests. Since the session cookie is not set to `SameSite: strict`, this opens the library up to severe attack possibilities via a Cross-Site Request Forgery (CSRF) attack. As a result any API call can be made via a CSRF attack by an unauthenticated user. This issue has been addressed in release `0.5.0b3.dev78`. All users are advised to upgrade.
- Product
- pyload
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 17, 2024Studio Network Solutions ShareBrowser before 7.0 on macOS mishandles signature verification, aka PMP-2636.CVE-2023-44077 · Other software · Studionetworksolutions · reported by MITRECritical 9.8
Studio Network Solutions ShareBrowser before 7.0 on macOS mishandles signature verification, aka PMP-2636.
- Product
- Sharebrowser
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordkhronokernel.comsupport.studionetworksolutions.com
Jan 17, 2024Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3.CVE-2024-0643 · Other software · Cires21 · reported by cve-coordination@incibe.esCritical 10
Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise.
- Product
- C21 Live Encoder and Live Mosaic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 17, 2024Inadequate access control in the C21 Live Encoder and Live Mosaic product, version 5.3.CVE-2024-0642 · Other software · Cires21 · reported by cve-coordination@incibe.esCritical 9.8
Inadequate access control in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to access the application as an administrator user through the application endpoint, due to lack of proper credential management.
- Product
- C21 Live Encoder and Live Mosaic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 17, 2024Social Warfare: Remote Code ExecutionCVE-2021-4434 · WordPress plugins & themes · reported by WordfenceCritical 10
The Social Warfare plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.5.2 via the 'swp_url' parameter. This allows attackers to execute code on the server.
- Product
- Social Warfare
- Affected
- up to 3.5.2
- What to do
- Affects up to 3.5.2. Update Social Warfare to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpacketstormsecurity.comwordfence.com
Jan 16, 2024Shopware is an open headless commerce platform.CVE-2024-22406 · Other software · shopware · reported by GitHubCritical 9.3
Shopware is an open headless commerce platform. The Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated using the parameters in the “aggregations” object. The ‘name’ field in this “aggregations” object is vulnerable SQL-injection and can be exploited using time-based SQL-queries. This issue has been addressed and users are advised to update to Shopware 6.5.7.4. For older versions of 6.1, 6.2, 6.3 and 6.4 corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.
- Product
- shopware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 16, 2024In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub_40E700 function within the cgibin is susceptible to stack overflow.CVE-2024-22916 · Other software · dlink · reported by MITRECritical 9.8
In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub_40E700 function within the cgibin is susceptible to stack overflow.
- Product
- go-rt-ac750_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordkee02p.github.iodlink.com
Jan 16, 2024An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the 'lang' parameter.CVE-2023-52042 · Other software · totolink · reported by MITRECritical 9.8
An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the 'lang' parameter.
- Product
- x6000r_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordkee02p.github.iokee02p.github.io
Jan 16, 2024An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request.CVE-2023-39691 · Other software · Kodcloud · reported by MITRECritical 9.8
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request.
- Product
- Kodbox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.mo60.cnblog.mo60.cn
Jan 16, 2024An issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary code via the sub_410118 function of the shttpd program.CVE-2023-52041 · Other software · Totolink · reported by MITRECritical 9.8
An issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary code via the sub_410118 function of the shttpd program.
- Product
- X6000r Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordkee02p.github.iokee02p.github.io
Jan 16, 2024A stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware veraion v1.23 allows attackers to overwrite other values located CVE-2023-49351 · Other software · Edimax · reported by MITRECritical 9.8
A stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware veraion v1.23 allows attackers to overwrite other values located on the stack due to an incorrect use of the strcpy() function.
- Product
- Br-6478ac Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 16, 2024WordPress Database Administrator: Does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated usersCVE-2023-3211 · WordPress plugins & themes · reported by WPScanCritical 9.8
The WordPress Database Administrator WordPress plugin through 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
- Product
- WordPress Database Administrator
- Affected
- up to 1.0.3
- What to do
- Affects up to 1.0.3. Update WordPress Database Administrator to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Jan 16, 2024GiveWP: Does not properly escape user input before it reaches SQL queriesCVE-2023-0224 · WordPress plugins & themes · reported by WPScanCritical 9.8
The GiveWP WordPress plugin before 2.24.1 does not properly escape user input before it reaches SQL queries, which could let unauthenticated attackers perform SQL Injection attacks
- Product
- GiveWP
- Fixed in
- 2.24.1
- What to do
- Update GiveWP to 2.24.1 or newer.
Jan 16, 2024School Management: Contains an obfuscated backdoor injected in it's license checking code that registers a REST API handlerCVE-2022-1609 · WordPress plugins & themes · reported by WPScanCritical 9.8
The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site.
- Product
- School Management
- Fixed in
- 9.9.7
- What to do
- Update School Management to 9.9.7 or newer.
Jan 16, 2024Buffer overflow vulnerability in the FLP module.CVE-2023-52103 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
Buffer overflow vulnerability in the FLP module. Successful exploitation of this vulnerability may cause out-of-bounds read.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comhttps
Jan 16, 2024Component exposure vulnerability in the Wi-Fi module.CVE-2023-52101 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
Component exposure vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service availability and integrity.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jan 16, 2024Aria Automation contains a Missing Access Control vulnerability.CVE-2023-34063 · Other software · VMware · reported by security@vmware.comCritical 9.9
Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows.
- Product
- Aria Automation
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 16, 2024Atlassian Confluence Data Center and Server Template Injection VulnerabilityCVE-2023-22527 · Websites & servers · Atlassian · reported by security@atlassian.comExploitedRansomwareCritical 9.8
Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution.
- Product
- Confluence Data Center and Server
- On CISA’s list since
- Jan 24, 2024 (federal fix deadline Feb 14, 2024)
- What to do
- Attackers are using this now. Install Atlassian’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogpacketstormsecurity.comconfluence.atlassian.com
Jan 15, 2024Essential Blocks: Does not prevent unauthenticated attackers from overwriting local variablesCVE-2023-6623 · WordPress plugins & themes · reported by WPScanCritical 9.8
The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks.
- Product
- Essential Blocks
- Fixed in
- 4.4.3
- What to do
- Update Essential Blocks to 4.4.3 or newer.
Jan 15, 2024Estatik Real Estate: Unserializes user input via some of its cookiesCVE-2023-6049 · WordPress plugins & themes · reported by WPScanCritical 9.8
The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget chain is present on the blog
- Product
- Estatik Real Estate
- Fixed in
- 4.1.1
- What to do
- Update Estatik Real Estate to 4.1.1 or newer.
Jan 15, 2024Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2.CVE-2023-46226 · Websites & servers · Apache Software Foundation · reported by security@apache.orgCritical 9.8
Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue.
- Product
- Apache IoTDB
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comlists.apache.org
Jan 15, 2024pkg_postinst in the Gentoo ebuild for Slurm through 22.05.3 unnecessarily calls chown to assign root's ownership on files in the live root filesystem.CVE-2020-36770 · Other software · Gentoo · reported by MITRECritical 9.8
pkg_postinst in the Gentoo ebuild for Slurm through 22.05.3 unnecessarily calls chown to assign root's ownership on files in the live root filesystem. This could be exploited by the slurm user to become the owner of root-owned files.
- Product
- Ebuild For Slurm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugs.gentoo.orgbugs.gentoo.org
Jan 14, 2024Intumit inc.CVE-2024-0552 · Other software · Intumit inc. · reported by twcert@cert.org.twCritical 9.8
Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arbitrary commands on the remote server.
- Product
- SmartRobot
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtwcert.org.twtwcert.org.tw
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.