CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- b&r industrial automation automation studio, net/pvi, br-automation automation net\/pvi +2 moreAutomation Studio and PVI Multiple unquoted service path vulnerabilities7.2 High
- b&r industrial automation automation studio, net/pvi +1 moreAutomation Studio and PVI Multiple incorrect permission assignments for services8.2 High
- kddi corporation home spot cube2, kddi home spot cube 2 firmware +1 moreHeap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By...9.8 Critical
- b&r industrial automation automation studioRCE in B&R Automation Studio with crafted project files8.3 High
- kddi corporation home spot cube2, kddi home spot cube 2 firmware +1 moreStack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing...7.5 High
- openatom openharmonyDsoftbus has an improper input validation vulnerability4.7 Medium
- openatom openharmonyDsoftbus has an integer overflow vulnerability2.9 Low
- openatom openharmonyDsoftbus has an improper input validation vulnerability4.7 Medium
- openatom openharmonyDsoftbus has an out-of-bounds write vulnerability4.2 Medium
- openatom openharmonyDsoftbus has a use after free vulnerability8.2 High
- openatom openharmonyDsoftbus has an integer overflow vulnerability2.9 Low
- openatom openharmonyDsoftbus has an out-of-bounds read vulnerability2.9 Low
- openatom openharmonyDsoftbus has an out-of-bounds read vulnerability2.9 Low
- line corporation central dogmaCentral Dogma Authentication Bypass Vulnerability via Session Leakage9.3 Critical
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery4.3 Medium
- optimole – optimize images in real time, super page cache, rsocial revive social – social media auto post and scheduling automation plugin +10 more +12 moreThemeIsle SDK <= Various Versions - Missing Authorization5.3 Medium
- plotly dashDash apps vulnerable to Cross-site Scripting6.5 Medium
- veronalabs slimstat analyticsSlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 moreNinja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection5.9 Medium
- ibm soar qradar plugin appIBM SOAR QRadar Plugin App log injection4.3 Medium
- ibm soar qradar plugin appIBM SOAR QRadar Plugin App directory traversal8.1 High
- ibm soar qradar plugin appIBM SOAR QRadar Plugin App improper access controls6.5 Medium
- ibm aspera faspexIBM Aspera Faspex cross-site scripting4.8 Medium
- ibm storage cephIBM Storage Ceph denial of service2.6 Low
- ibm operational decision managerIBM Operational Decision Manager code execution9.8 Critical
- ibm operational decision managerIBM Operational Decision Manager JDNI injection8.1 High
- ibm maximo asset managementIBM Maximo Asset Management improper access control6.5 Medium
- ibm powerscIBM PowerSC information disclosure5.9 Medium
- ibm powerscIBM PowerSC information disclosure3.7 Low
- ibm powerscIBM PowerSC clickjacking6.5 Medium
- ibm powerscIBM PowerSC forced browsing6.5 Medium
- ibm powerscIBM PowerSC session fixation6.3 Medium
- ibm powerscIBM PowerSC improper authentication5.3 Medium
- ibm powerscIBM PowerSC cross-resource origin sharing5.3 Medium
- ibm powerscIBM PowerSC session fixation6.3 Medium
- ibm powerscIBM PowerSC weak security5.3 Medium
- ibm powerscIBM PowerSC information disclosure5.9 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.3 High
- ibm powerscIBM PowerSC HTML injection6.1 Medium
gpacOSS-FuzzHeap-buffer-overflow in gsfdmx_probe_dataNo score- ibm powerscIBM PowerSC information Disclosure7.5 High
- xenforoXenForo before 2.2.14 allows Directory Traversal (with write access) by an authenticated user who...8.1 High
- flusityCross Site Request Forgery (CSRF) vulnerability in flusity-CMS v.2.33, allows remote attackers to...8.8 High
- apktoolAprktool before 2.9.3 on Windows allows ../ and /.. directory traversal.9.8 Critical
- flusityCross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to...8.8 High
- xunruicmsCross-site scripting (XSS) vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote...6.1 Medium
- mrcmsMRCMS 3.0 contains an Arbitrary File Read vulnerability in /admin/file/edit.do as the incoming...7.5 High
- mrcmsMRCMS 3.0 contains a Cross-Site Scripting (XSS) vulnerability via /admin/system/saveinfo.do.5.4 Medium
- jfinalcms project jfinalcmsJFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data.9.8 Critical
- miroMiro Desktop 0.8.18 on macOS allows Electron code injection.9.8 Critical
- Show moreLoading…