Skip to content

CyberSecBulletin

CVEs published on January 1, 2024

5 vulnerabilities, ordered with the most urgent first.

8.8 High severity
Rengine: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50094Jan 1, 2024YogeshojhaEPSS 13.5%
9.8 Critical severity
affiliate-toolkit: Missing Authorization
CVE-2023-5877Jan 1, 2024Affiliate-toolkit
9.8 Critical severity
Engineers Online Portal: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-0182Jan 1, 2024SourceCodester
7.5 High severity
X-cube-safea1: Buffer Copy without Checking Size of Input
CVE-2023-50096Jan 1, 2024St
7.5 High severity
PayHere Payment Gateway: Insertion of Sensitive Information into Log File
CVE-2023-6064Jan 1, 2024PayHere Payment Gateway