January 2024
Published in January 2024
- criticalexploitedCVE-2024-21893: Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerabi…cisa-kev
- known exploitedpublic exploitCVE-2016-20017
- criticalexploitedCVE-2022-48618: Apple Multiple Products Memory Corruption Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-15133
- criticalGitLab Critical Security Release: 16.8.1, 16.7.4, 16.6.6, 16.5.8gitlab
- known exploitedCVE-2022-48618
- criticalGitLab Critical Security Release: 16.8.1, 16.7.4, 16.6.6, 16.5.8gitlab
- known exploitedpublic exploitCVE-2023-22527
- unknownexploitedJenkins Security Advisory 2024-01-24jenkins
- known exploitedpublic exploitCVE-2023-23752
- criticalexploitedCVE-2024-23222: Apple Multiple Products WebKit Type Confusion Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2023-27524
- criticalexploitedCVE-2023-35082: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2023-29300
- criticalexploitedCVE-2023-6549: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2023-29357
- criticalexploitedCVE-2024-0519: Google Chromium V8 Out-of-Bounds Memory Access Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2023-34048
- criticalexploitedCVE-2018-15133: Laravel Deserialization of Untrusted Data Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2023-35082
- unknownGitLab Patch Release: 16.7.3 16.6.5 16.5.7gitlab
- known exploitedpublic exploitCVE-2023-38203
- unknownGitLab Patch Release: 16.7.3 16.6.5 16.5.7gitlab
- known exploitedCVE-2023-41990
- unknown[Update] Multiple Vulnerabilities in GitLab (January 12, 2024)cert-fr-alerte
- known exploitedpublic exploitCVE-2023-46805
- criticalexploitedGitLab Critical Security Release: 16.7.2, 16.6.4, 16.5.6gitlab
- known exploitedCVE-2023-6548
- criticalexploitedGitLab Critical Security Release: 16.7.2, 16.6.4, 16.5.6gitlab
- known exploitedpublic exploitCVE-2023-6549
- unknownexploited[Update] Multiple vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways (January 11, 2024)cert-fr-alerte
- known exploitedpublic exploitCVE-2023-7024
- criticalexploitedCVE-2024-21887: Ivanti Connect Secure and Policy Secure Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2023-7028
- criticalexploitedCVE-2023-46805: Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2023-7101
- criticalexploitedCVE-2023-29357: Microsoft SharePoint Server Privilege Escalation Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-0519
- criticalexploitedCVE-2023-27524: Apache Superset Insecure Default Initialization of Resource Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-21887
- criticalexploitedCVE-2023-7024: Google Chromium WebRTC Heap Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-21893
- criticalexploitedCVE-2023-7101: Spreadsheet::ParseExcel Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-23222
- known exploitedpublic exploitCVE-2024-23897