CVEs published in January 2024
37 tracked CVEs from 7 vendors had their first vendor advisory published in January 2024: 2 critical, 16 high, 3 in CISA KEV. Newest first.
34 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2024-21893HighCISA KEV
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
Ivanti · 1 advisory - Added
CVE-2023-6779High
off-by-one heap-based buffer overflow in __vsyslog_internal
NetApp, Red Hat · 2 advisories - Added
CVE-2023-6246High
heap-based buffer overflow in __vsyslog_internal
NetApp, Red Hat · 2 advisories - Added
CVE-2023-46231Medium
In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files
Splunk · 1 advisory - Added
CVE-2023-46230High
Splunk Add-on: In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.
Splunk · 1 advisory - Added
CVE-2023-5612Medium
Missing Authorization in GitLab
GitLab · 1 advisory - Added
CVE-2023-6159Medium
Inefficient Regular Expression Complexity in GitLab
GitLab · 1 advisory - Added
CVE-2024-23678High
In Splunk Enterprise for Windows versions below 9.0.8 and 9.1.3, Splunk Enterprise does not correctly sanitize path input data
Splunk · 1 advisory - Added
CVE-2024-23677Medium
In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in…
Splunk · 1 advisory - Added
CVE-2024-23676Medium
In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command
Splunk · 1 advisory - Added
CVE-2024-23675Medium
In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for…
Splunk · 1 advisory - Added
CVE-2023-22514High
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and…
Atlassian · 1 advisory - Added
CVE-2023-22512High
This High severity DoS (Denial of Service) vulnerability was introduced in version 5.6.0 of Confluence Data Center and Server
Atlassian · 1 advisory - Added
CVE-2024-0567High
Gnutls: rejects certificate chain with distributed trust
NetApp, Red Hat · 2 advisories - Added
CVE-2024-0553High
NetApp, Red Hat · 2 advisories - Added
CVE-2024-21674High
This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of Confluence Data Center and Server
Atlassian · 1 advisory - Added
CVE-2024-21673High
This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Center and…
Atlassian · 1 advisory - Added
CVE-2024-21672High
This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center and Server
Atlassian · 1 advisory - Added
CVE-2023-22527CriticalCISA KEV
Atlassian Confluence Data Center and Server Template Injection Vulnerability
Atlassian · 1 advisory - Added
CVE-2023-22526High
Confluence Data Center: This High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of Confluence Data Center.
Atlassian · 1 advisory - Added
CVE-2023-7028CriticalCISA KEV
GitLab Community and Enterprise Editions Improper Access Control Vulnerability
GitLab · 1 advisory - Added
CVE-2024-22165Medium
In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker
Splunk · 1 advisory - Added
CVE-2024-22164Medium
In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker
Splunk · 1 advisory - Added
CVE-2023-47560High
QuMagie: OS command injection vulnerability has been reported to affect QuMagie.
QNAP · 1 advisory - Added
CVE-2023-47559Medium
QuMagie: cross-site scripting (XSS) vulnerability has been reported to affect QuMagie.
QNAP · 1 advisory - Added
QuMagie: SQL injection vulnerability has been reported to affect QuMagie.
QNAP · 1 advisory - Added
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
CVE-2023-41289Medium
OS command injection vulnerability has been reported to affect QcalAgent.
QNAP · 1 advisory - Added
CVE-2023-41288High
Video Station: OS command injection vulnerability has been reported to affect Video Station.
QNAP · 1 advisory - Added
CVE-2023-41287Medium
Video Station: SQL injection vulnerability has been reported to affect Video Station.
QNAP · 1 advisory - Added
CVE-2023-39296High
QTS: prototype pollution vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2023-39294Medium
QTS: OS command injection vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory