CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
mrubyOSS-FuzzHeap-buffer-overflow in mrb_memsearchNo scoremrubyOSS-FuzzHeap-buffer-overflow in mrb_memsearchNo scores2opcOSS-FuzzGlobal-buffer-overflow in ReadVariantArrayBuiltInTypeNo scoreman-dbDebianman-db - sandboxing fixesNo score- google chromeUse after free in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to...8.8 High
- google chromeOut of bounds read in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to...6.5 Medium
- remyandrade travel journal using php and mysql with source codeA stored cross-site scripting (XSS) vulnerability in Travel Journal Using PHP and MySQL with...6.1 Medium
- aitangbao springboot-managerspringboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/role.5.4 Medium
- aitangbao springboot-managerspringboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sysContent/add.5.4 Medium
- aitangbao springboot-managerspringboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/user.5.4 Medium
- aitangbao springboot-managerspringboot-manager v1.6 is vulnerable to Arbitrary File Upload. The system does not filter the...5.4 Medium
- remyandrade travel journal using php and mysql with source codeA stored cross-site scripting (XSS) vulnerability in Travel Journal Using PHP and MySQL with...6.1 Medium
- wukongopensource wukongcrm, 5kcrm wukong crm +1 moreAn issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute...9.8 Critical
- eyoucmsCross Site Scripting vulnerability in the input parameter in eyoucms v.1.6.5 allows a remote...6.1 Medium
- eyoucmsCross Site Scripting vulnerability in the path parameter in eyoucms v.1.6.5 allows a remote...6.1 Medium
- eyoucmsCross Site Scripting vulnerability in num parameter in eyoucms v.1.6.5 allows a remote attacker...6.1 Medium
- eyoucmsCross Site Scripting (XSS) vulnerability in is_water parameter in eyoucms v.1.6.5 allows a remote...6.1 Medium
- flycms project flycmsCross Site Request Forgery vulnerability in FlyCms v.1.0 allows a remote attacker to execute...8.8 High
- genesisedu parent student portal, manuelaldape parents \& student portal +1 moreCross-site scripting (XSS) vulnerability in Parents & Student Portal in Genesis School Management...6.1 Medium
- eyoucmsCross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote...6.1 Medium
- laravel livewirelivewire Cross-Site Request Forgery vulnerability8.8 High
- google androidIn TBD of TBD, there is a possible out of bounds write due to a missing bounds check. This could...7.8 High
- google android, mediatek, inc. mt6985, mt8127, mt8135, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8176, mt8183, mt8185, mt8188, mt8188t, mt8195, mt8195z, mt8312c, mt8312d +1 moreIn alac decoder, there is a possible information disclosure due to an incorrect bounds check....9.8 Critical
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8185, mt8321, mt8385, mt8666, mt8667, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797, mt8798 +1 moreIn keyInstall, there is a possible escalation of privilege due to type confusion. This could lead...6.7 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6779, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6895, mt6983, mt6985, mt8163, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8176, mt8185, mt8188, mt8188t +1 moreIn alac decoder, there is a possible out of bounds write due to an incorrect error handling. This...8.8 High
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6779, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6895, mt6983, mt6985, mt8321, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797, mt8798 +1 moreIn mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead...7.5 High
- google android, mediatek mt2713, mt6781 +6 more +8 moreIn da, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- mediatek mt2735, mt6297, mt6833 +19 more +21 moreIn Modem NL1, there is a possible system crash due to an improper input validation. This could...7.5 High
- google androidIn removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race...7.0 High
- google androidIn setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer...7.5 High
- google androidIn injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible...7.8 High
- google androidIn startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to...7.8 High
- google androidIn onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from...7.8 High
- google androidIn BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from...7.8 High
- google androidIn multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer...7.8 High
- google androidIn attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write...9.8 Critical
- google androidIn btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an...5.5 Medium
- google androidIn multiple files, there is a possible way to capture the device screen when disallowed by device...7.8 High
- google androidIn startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config...7.8 High
- arm 5th gen gpu architecture kernel driver, bifrost gpu kernel driver, valhall gpu kernel driver +2 moreMali GPU Kernel Driver allows improper GPU memory processing operations7.8 High
- arm bifrost gpu kernel driver, valhall gpu kernel driver +1 moreMali GPU Kernel Driver allows improper GPU memory processing operations7.0 High
- relic project relicAn issue in the cp_bbs_sig function in relic/src/cp/relic_cp_bbs.c of Relic relic-toolkit 0.6.0...8.8 High
- trendnet tew-822dre firmwareAn issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via...6.8 Medium
:unknown:AndroidNo score:unknown:AndroidNo score- connectwise screenconnect, automate +1 moreConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote...8.1 High
- connectwise screenconnect, automate +1 moreConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers...5.5 Medium
- qualcomm ar8035 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +64 more +66 moreUse of Out-of-range Pointer Offset in WLAN HOST8.6 High
- qualcomm ar8035 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +68 more +70 moreStack-based Buffer Overflow in WLAN HOST8.6 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcm8550 firmware +6 more +8 moreUse of out-of-range pointer offset in Video7.8 High
- Show moreLoading…