CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- stimulsoft dashboard.js, dashboards.js +1 moreStimulsoft Dashboard.JS Cross Site Scripting vulnerability6.1 Medium
- gpacgpac v2.2.1 was discovered to contain a memory leak via the gfio_blob variable in the...7.5 High
- gpacgpac v2.2.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the...7.5 High
- gpacgpac v2.2.1 was discovered to contain a memory leak via the dst_props variable in the...7.5 High
- chendotjs lotos webserverLotos WebServer v0.1.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the...7.5 High
- ireader media-servermedia-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the...7.5 High
- ireader media-servermedia-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the...7.5 High
- artifex mupdfmupdf v1.23.9 was discovered to contain a memory leak via the menuEntry variable in the...7.5 High
- artifex mupdfmupdf v1.23.9 was discovered to contain a memory leak via the menuEntry variable in the...7.5 High
- plone docker official imageAn issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for...9.8 Critical
- b3log symphonyAn issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via...9.8 Critical
- vim, fedoraproject fedora +1 moreVim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls...7.8 High
- mingsoft mcmsmingSoft MCMS File Upload vulnerability8.8 High
- stock management system project management systemSQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute...9.8 Critical
- eyuepcanyilmaz root quick rebootThe com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for...7.5 High
- yarnpkg yarn, fedora extra packages for enterprise linux, fedora +2 moreYarn: untrusted search path7.7 High
- blockmason credit-protocolblockmason credit-protocol UCAC CreditProtocol.sol executeUcacTx denial of service4.3 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +5 more +7 moreKernel: marvin vulnerability side-channel leakage in the rsa decryption operation6.5 Medium
- mpedraza2020 intranet del monterrosompedraza2020 Intranet del Monterroso cargos.php sql injection5.5 Medium
- samwilson planet-freoplanet-freo auth.inc.php comparison3.7 Low
dracutMageiaUpdated dracut package fixes enabling microcodeNo score- ibm powervm hypervisorIBM PowerVM Hypervisor information disclosure5.3 Medium
- ibm business automation workflow, cloud pak for business automation +1 moreIBM Business Automation Workflow cross-site scripting5.4 Medium
htslibOSS-FuzzHeap-buffer-overflow in hts_logNo scoreclamavOSS-FuzzHeap-buffer-overflow in pdf_finalize_stringNo score- malwarebytes binisoft windows firewall controlMalwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute...9.8 Critical
- xmlsoft libxml2, siemens simatic s7-1500 tm mfp - gnu/linux subsystem, sinec nms +2 moreAn issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML...7.5 High
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 morelibexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile...5.5 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 morelibexpat through 2.5.0 allows a denial of service (resource consumption) because many full...7.5 High
- meinbergglobal lantime firmwareAn issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID...6.5 Medium
- meinbergglobal lantime firmwareAn issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID...7.2 High
- artifex ghostscriptArtifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector...9.8 Critical
- sourcecodester crud without page reload, remyandrade crud without page reload\/refresh +1 moreSourceCodester CRUD without Page Reload fetch_data.php cross site scripting3.5 Low
- arcadia technology, llc crafty controllerImproper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 47.5 High
- cayenne anonymous restricted contentAnonymous Restricted Content <= 1.6.2 - Protection Mechanism Bypass5.3 Medium
- dearhive dear flipbook – pdf flipbook, 3d flipbook, pdf embed, pdf viewer, pdf flipbook\, 3d flipbook +1 morePDF Flipbook, 3D Flipbook – DearFlip <= 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scripting5.4 Medium
- hcltechsw hcl devops deploy, hcl launch, hcl software launch / devops deploy +2 moreHCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosure6.2 Medium
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix Platform6.5 Medium
- jspxcmsJspxcms information disclosure5.3 Medium
- ibm security verify access appliance, security verify access docker, security verify access +2 moreIBM Security Access Manager Container denial of service6.5 Medium
- ibm security verify access appliance, security verify access docker, security verify access +2 moreIBM Security Access Manager Container gain access8.3 High
- ibm security verify access appliance, security verify access docker, security verify access +2 moreIBM Security Access Manager Container improper file validation6.2 Medium
- ibm security verify access appliance, security verify access docker, security verify access +2 moreIBM Security Access Manager Container XML external entity injection7.1 High
- ibm security verify access appliance, security verify access docker, security verify access +2 moreIBM Security Access Manager Container unauthorized access7.3 High
remark-images-downloadnpmZmarkdown Server-Side Request Forgery (SSRF) in remark-download-imagesNo scorezmarkdownnpmLocal File Inclusion vulnerability in zmarkdownNo score- ibm security verify access appliance, security verify access docker, security verify access +2 moreIBM Security Access Manager denial of service7.5 High
ckbcrates.ioNervos CKB Permit load cell data from memoryNo scoreckbcrates.ioNervos CKB Pool does not remove the conflicting transactions from the statisticsNo scorerlespinasse/github-slug-actionGitHub Actionsgithub-slug-action use of `set-env` Runner commands which are processed via stdoutNo score- Show moreLoading…