Vulnerabilities > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-19 | CVE-2023-50028 | SQL Injection vulnerability in Prestashopmodules Sliding Cart Block In the module "Sliding cart block" (blockslidingcart) up to version 2.3.8 from PrestashopModules.eu for PrestaShop, a guest can perform SQL injection. | 9.8 |
| 2024-01-19 | CVE-2023-50030 | SQL Injection vulnerability in Joommasters Jmssetting In the module "Jms Setting" (jmssetting) from Joommasters for PrestaShop, a guest can perform SQL injection in versions <= 1.1.0. | 9.8 |
| 2024-01-19 | CVE-2023-51947 | Missing Authentication for Critical Function vulnerability in Actidata Actinas SL 2U-8 RDX Firmware 3.2.03 Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different types of data without authentication. | 9.1 |
| 2024-01-19 | CVE-2024-0712 | Unspecified vulnerability in Byzoro Smart S150 Firmware 31R02B15 A vulnerability was found in Byzoro Smart S150 Management Platform V31R02B15. | 9.8 |
| 2024-01-19 | CVE-2023-5716 | Unspecified vulnerability in Asus Armoury Crate ASUS Armoury Crate has a vulnerability in arbitrary file write and allows remote attackers to access or modify arbitrary files by sending specific HTTP requests without permission. | 9.8 |
| 2024-01-18 | CVE-2024-22415 | Path Traversal vulnerability in Jupyter Language Server Protocol Integration jupyter-lsp is a coding assistance tool for JupyterLab (code navigation + hover suggestions + linters + autocompletion + rename) using Language Server Protocol. | 9.8 |
| 2024-01-18 | CVE-2024-22212 | Unspecified vulnerability in Nextcloud Global Site Selector Nextcloud Global Site Selector is a tool which allows you to run multiple small Nextcloud instances and redirect users to the right server. | 9.8 |
| 2024-01-18 | CVE-2024-22419 | Out-of-bounds Write vulnerability in Vyperlang Vyper Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. | 9.8 |
| 2024-01-18 | CVE-2023-40051 | Unrestricted Upload of File with Dangerous Type vulnerability in Progress Openedge and Openedge Innovation This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can formulate a request for a WEB transport that allows unintended file uploads to a server directory path on the system running PASOE. | 9.9 |
| 2024-01-18 | CVE-2024-22317 | Unspecified vulnerability in IBM APP Connect Enterprise IBM App Connect Enterprise 11.0.0.1 through 11.0.0.24 and 12.0.1.0 through 12.0.11.0 could allow a remote attacker to obtain sensitive information or cause a denial of service due to improper restriction of excessive authentication attempts. | 9.1 |