CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- vinchin backup and recoveryVinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution ...8.8 High
- vinchin backup and recoveryVinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials.9.8 Critical
- vinchin backup and recoveryVinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials.9.8 Critical
- vinchin backup and recoveryVinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution ...8.8 High
- vinchin backup and recoveryVinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution ...8.8 High
- liveconfigDirectory Traversal Vulnerability in LiveConfig before v.2.5.2 allows a remote attacker to obtain...7.5 High
- kihron serverrpexposerDirectory Traversal vulnerability in Kihron ServerRPExposer v.1.0.2 and before allows a remote...8.8 High
- xiandafu beetlBeetl Server-Side Template Injection vulnerability9.8 Critical
- gttb gtb central consoleAn issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at...9.8 Critical
- gttb gtb central consoleAn issue was discovered in GTB Central Console 15.17.1-30814.NG. The method...7.2 High
- meshcentralYlianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.7.5 High
- blurams lumi security camera a31c firmwareAn issue in Blurams Lumi Security Camera (A31C) v.2.3.38.12558 allows a physically proximate...6.8 Medium
- nagios xiA stored cross-site scripting (XSS) vulnerability in the NOC component of Nagios XI version up to...5.4 Medium
- blurams lumi security camera a31c firmwareAn issue in Blurams Lumi Security Camera (A31C) v23.0406.435.4120 allows attackers to execute...9.8 Critical
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature.9.8 Critical
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export...9.8 Critical
- eptura archibusAn issue was discovered in the Archibus app 4.0.3 for iOS. It uses a local database that is...7.8 High
- solar log base 15 firmware, solar-log 2000 pm\+ firmware +1 moreA vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base...5.4 Medium
- softwarefx chart fxAn issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read...7.5 High
- ibm powerscIBM PowerSC information Disclosure5.9 Medium
- rapid software llc scada, rapidscada rapid scada +1 moreGeneration of Error Message Containing Sensitive Information in Rapid SCADA5.3 Medium
- rapid software llc scada, rapidscada rapid scada +1 morePlaintext Storage of a Password in Rapid SCADA6.2 Medium
- rapid software llc scada, rapidscada rapid scada +1 moreUse of Hard-Coded Credentials in Rapid SCADA9.8 Critical
- rapid software llc scada, rapidscada rapid scada +1 moreOpen Redirect in Rapid SCADA5.4 Medium
- rapid software llc scada, rapidscada rapid scada +1 moreIncorrect Permission Assignment for Critical Resource in Rapid SCADA7.8 High
- rapid software llc scada, rapidscada rapid scada +1 moreRelative Path Traversal in Rapid SCADA6.5 Medium
- rapid software llc scada, rapidscada rapid scada +1 moreRapid SCADA Path Traversal8.8 High
- ping identity pingdirectoryDelegated Admin Virtual Attribute Provider Privilege Escalation7.7 High
- crafatarCrafatar path traversal vulnerability7.5 High
- machinesense feverwarn, feverwarn firmware +1 moreMachineSense FeverWarn Improper Input Validation8.1 High
- machinesense feverwarn, feverwarn firmware +1 moreMachineSense FeverWarn Improper Access Control8.8 High
- machinesense feverwarn, feverwarn firmware +1 moreMachineSense FeverWarn Missing Authentication for Critical Function7.5 High
- machinesense feverwarn, feverwarn firmware +1 moreMachineSense FeverWarn Missing Authentication for Critical Function10.0 Critical
- machinesense feverwarn, feverwarn firmware +1 moreMachineSense FeverWarn Use of Hard-coded Credentials9.1 Critical
- machinesense feverwarn, feverwarn firmware +1 moreMachineSense FeverWarn Missing Authentication for Critical Function7.7 High
- discourse discourse-group-membership-ip-block, group membership ip blocks +1 morediscourse-group-membership-ip-block is exposing potentially sensitive custom fields4.3 Medium
- objectplanet opinioCryptographically weak PRNG in Opinio 7.229.8 Critical
- helix sync, perforce helix sync +1 moreCommand Injection in Helix Sync3.6 Low
- gessler gmbh web-master, gesslergmbh web-master firmware +1 moreUse of a Broken or Risky Cryptographic Algorithm in Gessler GmbH WEB-MASTER4.4 Medium
- gessler gmbh web-master, gesslergmbh web-master firmware +1 moreUse of Hard-coded Credentials in Gessler GmbH WEB-MASTER9.8 Critical
- pixee java code security toolkit, java-security-toolkit +1 more`ZipSecurity#isBelowCurrentDirectory` is vulnerable to partial-path traversal vulnerability5.4 Medium
- academy software foundation openexrOpenEXR Heap Overflow in Scanline Deep Data Parsing9.1 Critical
- sew-eurodrive movitools motionstudioSEW-EURODRIVE MOVITOOLS MotionStudio Improper Restriction of XML External Entity Reference5.5 Medium
- statamic cms, statamic +1 moreStatamic account takeover via XSS and password reset link8.2 High
- vyperlang vyperVyper bounds check on built-in `slice()` function can be overflowed9.8 Critical
- mobyMoby classic builder cache poisoning6.9 Medium
- joinmastodon mastodonMastodon Remote user impersonation and takeover9.4 Critical
- brefphp brefBref Body Parsing Inconsistency in Event-Driven Functions3.7 Low
- brefphp brefBref Uploaded Files Not Deleted in Event-Driven Functions6.5 Medium
- brefphp brefBref Multiple Value Headers Not Supported in ApiGatewayFormatV24.8 Medium
- Show moreLoading…