January 2024
2,698 CVEs published, −3% on December 2023 and +3% on January 2023. CISA added 21 to KEV.
2024 month by month
- Critical
- 31212% of the 2,600 with a CVSS score
- Added to CISA KEV
- 2113 of this month's CVEs are in KEV, listed a median 22 days after publication
- Vendors
- 1,3874,441 products
- Top weakness
- XSSCWE-79 · 447 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Linux, Mediawiki152133new
- 2Ооо «ред Софт»Ред Ос14394new
- 3UnknownEventon, Essential Real Estate, Estatik Real Estate Plugin1397nonenew
- 4Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Special Edition Для «эльбрус», Astra Linux Common Edition11144new
- 5Ао «ивк»Альт Сп 10, Альт 8 Сп8512new
- 6ApplemacOS, iOS and iPadOS, iPadOS8413new
- 7GtkwaveGtkwave820nonenew
- 8MicrosoftWindows Server 2022, Windows Server 2022, 23h2 Edition (Server Core Installation), Windows Server 2022 (Server Core Installation)8251new
- 9TonybybellGtkwave820nonenew
- 10Ао "нппкт"Осон Основа Оnyx8234new
- 11PyPIPaddlepaddle, Pyload-ng, Whoogle-search7714nonenew
- 12Red HatRed Hat Enterprise Linux, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 97732new
- 13TotolinkA3300R Firmware, N200RE, LR1200GB Firmware7335nonenew
- 14MavenDe.tum.in.ase:artemis-java-test-sandbox, Com.jfinal:jfinal, Io.jenkins.plugins:gitlab-branch-source6291new
- 15GoogleAndroid, Chrome, Google Chrome6141new
- 16FedoraprojectFedora, Extra Packages For Enterprise Linux5622new
- 17TendaAX1803 Firmware, AC10U, W9 Firmware5523nonenew
- 18GoGithub.com/cubefs/cubefs, Github.com/0xjacky/nginx-ui, Github.com/moby/buildkit465nonenew
- 19KashiparaFood Management System, Billing Software, Travel Website4617nonenew
- 20OracleMySQL Server, MySQL, E-business Suite430nonenew
- 21LinuxLinux Kernel, Linux, Kernel4202new
- 22AjaysharmaCups Easy410nonenew
- 23Cups EasyCups Easy (Purchase & Inventory)410nonenew
- 24Fedora ProjectFedora, Fedora Epel3721new
- 25PackagistGilacms/gila, Tinymce/tinymce, Wwbn/avideo363nonenew
Severity
How this month's CVEs score on CVSS; 98 have no score yet. Severity is not exploitation.
- Critical312
- High909
- Medium1,234
- Low145
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS447
- CWE-787Out-of-bounds Write186
- CWE-89SQL Injection185
- CWE-352CSRF103
- CWE-12176
- CWE-200Information Exposure74
- CWE-119Memory Buffer Bounds73
- CWE-20Improper Input Validation71
- CWE-284Improper Access Control71
- CWE-22Path Traversal69
- CWE-78OS Command Injection69
- CWE-416Use After Free68
- CWE-862Missing Authorization64
- CWE-434Unrestricted File Upload58
- CWE-120Buffer Overflow57
- CWE-190Integer Overflow55
- CWE-125Out-of-bounds Read53
- CWE-94Code Injection43
- CWE-77Command Injection42
- CWE-400Resource Consumption37
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins68719% of sector-tagged CVEs
- OSS Libraries43312% of sector-tagged CVEs
- Operating Systems40911% of sector-tagged CVEs
- Enterprise Software37210% of sector-tagged CVEs
- Networking Infrastructure2978% of sector-tagged CVEs
- Hardware Firmware2086% of sector-tagged CVEs
- Mobile Apps1865% of sector-tagged CVEs
- ICS / OT / IoT1614% of sector-tagged CVEs
- 7 smaller sectors628
- Not yet classified267
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 787Out-of-bounds Write | 89SQL Injection | 352CSRF | 121 | 200Information Exposure | 119Memory Buffer Bounds | 20Improper Input Validation | 284Improper Access Control | 22Path Traversal |
|---|---|---|---|---|---|---|---|---|---|---|
| Сообщество Свободного Программного Обеспечения | 8 | 16 | 1 | 2 | 1 | 3 | 6 | 5 | 3 | 6 |
| Ооо «ред Софт» | 9 | 15 | 2 | 2 | 2 | 6 | 3 | 5 | 7 | |
| Ооо «русбитех-астра» | 1 | 11 | 1 | 2 | 4 | 8 | 1 | 1 | ||
| Ао «ивк» | 1 | 9 | 1 | 1 | 3 | 6 | 1 | 1 | ||
| Apple | 6 | 11 | 5 | 2 | 3 | 2 | ||||
| Gtkwave | 19 | 3 | 23 | |||||||
| Tonybybell | 19 | 3 | 23 | |||||||
| Ао «нппкт» | 1 | 10 | 2 | 2 | 2 | 4 | ||||
| Microsoft Corp | 2 | 1 | 8 | 3 | ||||||
| PyPI | 10 | 4 | 1 | 1 | 1 | 1 | 3 | 7 | ||
| Totolink | 7 | 21 | 1 | 3 | ||||||
| Apple Inc. | 6 | 10 | 3 | 1 | 3 | 1 |
CVEs published in January 2024
47 vulnerabilities from this month that were exploited in the wild (CISA KEV), covered in the news, explained on cve.tools or searched for. Known-exploited first, then by CVSS.
- CVE-2023-7028Weak Password Recovery Mechanism for Forgotten Password in GitLabKEV10.0
- CVE-2023-22527A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected vers...KEV9.8
- CVE-2024-23897Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's content...KEV9.8
- CVE-2024-21887A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted reques...KEV9.1
- CVE-2024-0519Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)KEV8.8
- CVE-2024-23222A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 1...KEV8.8
- CVE-2023-46805An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.KEV8.2
- CVE-2023-6549Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory ReadKEV8.2
- CVE-2024-21893A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access c...KEV8.2
- CVE-2023-41974A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with ke...KEV7.8
- CVE-2024-1086Use-after-free in Linux kernel's netfilter: nf_tables componentKEV7.8
- CVE-2022-48618The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may b...KEV7.0
- CVE-2023-6548Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authen...KEV5.5
- CVE-2022-2586It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.KEV5.3
- CVE-2024-0769D-Link DIR-859 HTTP POST Request hedwig.cgi path traversalKEV5.3
- CVE-2024-22216In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish server is configured for remote system management, unauthorized access can occur,...10.0
- CVE-2024-20253A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This ...9.9
- CVE-2024-21669Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC9.9
- CVE-2024-21917Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability9.8
- CVE-2024-23771darkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which makes it easier for remote attackers to bypass authentication via a timing side channel.9.8
- CVE-2024-23625D-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability9.6
- CVE-2024-21625One-click remote code execution via malicious deep link8.8
- CVE-2024-21627Some attribute not escaped in Validate::isCleanHTML method8.1
- CVE-2023-47473Directory Traversal vulnerability in fuwushe.org iFair versions 23.8_ad0 and before allows an attacker to obtain sensitive information via a crafted script.7.5
- CVE-2023-49961WALLIX Bastion 7.x, 8.x, 9.x and 10.x and WALLIX Access Manager 3.x and 4.x have Incorrect Access Control which can lead to sensitive data exposure.7.5
- CVE-2024-0241encoded_id-rails Denial of Service Vulnerability7.5
- CVE-2024-23838TrueLayer.Client SSRF when fetching payment or payment provider7.5
- CVE-2024-0307Kashipara Dynamic Lab Management System login_process.php sql injection7.3
- CVE-2024-0510HaoKeKeJi YiQiNiu Api.php http_post server-side request forgery7.3
- CVE-2024-21488Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_process exec function without input sanitization. If (attacker-controlled) user in...7.3
- CVE-2023-46474File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to the start_import.php file.7.2
- CVE-2024-0507Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server6.5
- CVE-2024-0271Kashipara Food Management System addmaterial_edit.php sql injection6.3
- CVE-2024-0495Kashipara Billing Software HTTP POST Request party_submit.php sql injection6.3
- CVE-2024-0238EventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata Update6.1
- CVE-2024-22639iGalerie v3.0.22 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Titre (Title) field in the editing interface.6.1
- CVE-2024-22725Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS) vulnerability. The vulnerability was present in the server's error reporting.6.1
- CVE-2024-23905Jenkins Red Hat Dependency Analytics Plugin 0.7.1 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Je...5.4
- CVE-2024-0305Guangzhou Yingke Electronic Technology Ncast Guest Login IPSetup.php information disclosure5.3
- CVE-2024-0546EasyFTP LIST Command denial of service5.3
- CVE-2024-0725ProSSHD denial of service5.3
- CVE-2024-21645pyLoad Log Injection5.3
- CVE-2024-21654rubygems.org MFA Bypass through password reset function could allow account takeover 4.8
- CVE-2024-21982 CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9 4.8
- CVE-2024-22401All users can reset the allowed apps list for Nextcloud Guest App users4.1
- CVE-2024-0186HuiRan Host Reseller System HTTP POST Request password recovery3.7
- CVE-2024-0942Totolink N200RE V5 cstecgi.cgi session expiration3.7