CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
ckbcrates.ioNervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic resultNo scoreckbcrates.ioNervos CKB Snappy decompress length can be very large and causes out of memory errorNo scoreckbcrates.ioNervos CKB Panic on malformed inputNo score- ibm security verify access appliance, security verify access docker, security verify access +2 moreIBM Security Access Manager Container privilege escalation6.2 Medium
libavifOSS-FuzzUNKNOWN READ in LLVMFuzzerRunDriverNo scorego.etcd.io/etcdGo,go.etcd.io/etcd/v3Go +1 moreEtcd auth Inaccurate logging of authentication attempts for users with CN-based auth onlyNo scorego.etcd.io/etcdGo,go.etcd.io/etcd/v3Go +1 moreEtcd embed auto compaction retention negative value causing a compaction loop or a crashNo scorego.etcd.io/etcdGo,go.etcd.io/etcd/v3Go +1 moreEtcd Gateway TLS endpoint validation only confirms TCP reachabilityNo scorego.etcd.io/etcdGo,go.etcd.io/etcd/client/pkg/v3Go +1 moreEtcd pkg Insecure ciphers are allowed by defaultNo score- codeastro employee task management system, employee task management system project task management system +1 moreCodeAstro Employee Task Management System attendance-info.php denial of service5.4 Medium
- logpoint siemThe Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize...5.4 Medium
- reprise license manager, reprisesoftware reprise license manager +1 moreIncorrect access control in Reprise License Management Software Reprise License Manager v15.1...7.5 High
- reprisesoftware reprise license managerIncorrect access control in Reprise License Management Software Reprise License Manager v15.1...8.8 High
- openbiopenBI Phar User.php addxinzhi deserialization6.3 Medium
- remyandrade testimonial page managerSourceCodester Testimonial Page Manager HTTP GET Request delete-testimonial.php sql injection7.3 High
ckbcrates.ioNervos CKB node panics when processing a block which parent timestamp is too newNo scoreckbcrates.ioNervos CKB BlockTimeTooNew should not be considered as invalid blockNo scoreckbcrates.ioNervos CKB DoS: Process exists when p2p discovery protocol receives unsupported peer IPNo scoreckbcrates.ioNervos CKB P2P DoS AttacksNo score- remyandrade testimonial page managerSourceCodester Testimonial Page Manager HTTP POST Request add-testimonial.php cross site scripting4.3 Medium
- iobit itop vpn, itop vpn +1 moreiTop VPN IOCTL ITopVpnCallbackProcess.sys denial of service5.5 Medium
PowerShellNuGetPowerShell is subject to remote code execution vulnerability8.8 High- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix Platform3.0 Low
- armcode alienipArmcode AlienIP Locate Host denial of service3.3 Low
ckbcrates.ioNervos CKB Unaligned Pointer DereferenceNo score- navicatNavicat MySQL Conecction denial of service3.3 Low
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix Platform3.3 Low
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix Platform3.0 Low
- south river webdriveSouth River WebDrive New Secure WebDAV denial of service3.3 Low
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix Platform3.0 Low
- hyper cdcatalog, hyperprog cdcat +1 moreHyper CdCatalog HCF File denial of service3.3 Low
- global scape cuteftpGlobal Scape CuteFTP denial of service3.3 Low
- amppsAMPPS Encryption Passphrase denial of service5.3 Medium
github.com/siderolabs/talosGoTalos Linux ships runc vulnerable to the escape to the host attack8.6 High- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix Platform5.4 Medium
- rizone soft notepad3Rizone Soft Notepad3 Encryption Passphrase denial of service3.3 Low
- munsoft easy outlook express recoveryMunsoft Easy Outlook Express Recovery Registration Key denial of service3.3 Low
- munsoft easy archive recoveryMunsoft Easy Archive Recovery Registration Key denial of service3.3 Low
- antisamy project antisamyAntiSamy malicious input can provoke XSS when preserving comments6.1 Medium
- vyperlang vyperVyper external calls can overflow return data to return input buffer3.7 Low
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero3.4 Low
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud8.8 High
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud4.7 Medium
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud6.7 Medium
- qnap qsync centralQsync Central8.0 High
- qnap photo stationPhoto Station7.4 High
- qnap photo stationPhoto Station5.5 Medium
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud3.8 Low
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud3.8 Low
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud3.8 Low
- Show moreLoading…