CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- fastify session Session 1.17.5 - LFR via chat attachment 5.5 Medium
- recipes Recipes 1.5.10 - Blind SSRF 6.5 Medium
- netentsec application security gateway, ns-asg application security gateway, application security gateway firmware +2 more Netentsec NS-ASG Application Security Gateway list_localuser.php sql injection 6.3 Medium
- danielparks dp-golang, puppet-golang +1 more dp-golang Go installation could be owned by wrong user 7.3 High
- linux, linux kernel +1 more net/nfc: fix use-after-free llcp_sock_bind/connect 7.8 High
- linux, linux kernel +1 more soc/tegra: regulators: Fix locking up when voltage-spread is out of range 5.5 Medium
- linux, linux kernel +1 more async_xor: increase src_offs when dropping destination page 7.1 High
- linux, linux kernel +1 more rtw88: Fix array overrun in rtw_get_tx_power_params() 7.8 High
- linux, linux kernel +1 more mt76: fix potential DMA mapping leak 5.3 Medium
- linux, linux kernel +1 more drm: bridge/panel: Cleanup connector on bridge detach 7.8 High
- linux, linux kernel +1 more KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs 5.5 Medium
- linux, linux kernel +1 more KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU 7.8 High
- linux, linux kernel +1 more KVM: Stop looking for coalesced MMIO zones if the bus is destroyed 7.8 High
- linux, linux kernel +1 more crypto: sun8i-ss - fix result memory leak on error path 5.5 Medium
- linux, linux kernel +1 more regmap: set debugfs_name to NULL after it is freed 7.8 High
- linux, linux kernel +1 more crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map 5.5 Medium
- linux, linux kernel +1 more crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init 5.5 Medium
- linux, linux kernel +1 more mtd: require write permissions for locking and badblock ioctls 7.1 High
- linux, linux kernel +1 more bus: qcom: Put child node before return 5.5 Medium
- linux, linux kernel +1 more soundwire: stream: fix memory leak in stream config error path 5.5 Medium
- linux, linux kernel +1 more m68k: mvme147,mvme16x: Don't wipe PCC timer config bits 5.5 Medium
- linux, linux kernel +1 more spi: Fix use-after-free with devm_spi_alloc_* 7.8 High
- jhpyle docassemble Docassemble unauthorized access through URL manipulation 7.5 High
- jhpyle docassemble Docassemble open redirect 6.1 Medium
- jhpyle docassemble Docassemble HTML and javascript injection 6.1 Medium
- zhicms ZhiCms setcontroller.php index code injection 6.3 Medium
- zhicms ZhiCms mcontroller.php getindexdata sql injection 6.3 Medium
- panabit panalog Panabit Panalog sprog_upstatus.php sql injection 7.3 High
- microsoft edge, edge for android +1 more Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability 4.3 Medium
- hypr workforce access Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce... 5.5 Medium
- delta electronics cncsoft-b, deltaww dopsoft, delta electronics cncsoft-b v1.0.0.4 dopsoft +2 more Delta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path Element 7.8 High
- nway pro, nwaypro +1 more Nway Pro Argument index.php ajax_login_submit_form information exposure 5.3 Medium
- openbmb xagent OpenBMB XAgent Privileged Mode sandbox 5.3 Medium
- github enterprise server Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed Privilege Escalation 6.3 Medium
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more OpenZeppelin Contracts base64 encoding may read from potentially dirty memory 6.5 Medium
- aveva edge, platform common services +1 more AVEVA Edge products Uncontrolled Search Path Element 7.3 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 more ZDI-CAN-22674: Adobe Acrobat Reader DC PDF File Parsing Use-After-Free Remote Code Execution Vulnerability 7.8 High
- linux, linux kernel +1 more s390/vfio-ap: always filter entire AP matrix 8.2 High
- linux, linux kernel +1 more riscv: Fix module loading free order 7.8 High
- linux, linux kernel +1 more arm64/sme: Always exit sme_alloc() early with existing storage 5.5 Medium
- linux, linux kernel +1 more fs/proc/task_mmu: move mmu notification mechanism inside mm lock 7.8 High
- linux, linux kernel +1 more btrfs: scrub: avoid use-after-free when chunk length is not 64K aligned 7.8 High
- linux, linux kernel +1 more net/smc: fix illegal rmb_desc access in SMC-D connection dump 5.5 Medium
- debian linux, linux kernel +1 more tcp: make sure init the accept_queue's spinlocks once 7.8 High
- linux, linux kernel +1 more netfs, fscache: Prevent Oops in fscache_put_cache() 5.5 Medium
- linux, linux kernel +1 more xsk: fix usage of multi-buffer BPF helpers for ZC XDP 7.5 High
- linux, linux kernel +1 more wifi: iwlwifi: fix a memory corruption 7.8 High
- linux, linux kernel +1 more ksmbd: fix global oob in ksmbd_nl_policy 7.8 High
- linux, linux kernel +1 more PM: sleep: Fix possible deadlocks in core system-wide PM code 5.5 Medium
- linux, linux kernel +1 more erofs: fix lz4 inplace decompression 7.1 High
- Show olderLoading…