CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- phpmyfaqphpMyFAQ sharing FAQ functionality can easily be abused for phishing purposes6.5 Medium
- suluSulu is vulnerable to HTML Injection via Autocomplete Suggestion2.7 Low
- phpmyfaqUser Removal Page Allows Spoofing Of User Details5.7 Medium
- vyperlang vyperVyper SHA3 code generation bug3.7 Low
- silabs gecko software development kit, silabs.com gsdk +1 moreZigbee Unauthenticated DoS via NWK Sequence number manipulation7.5 High
- b&r industrial automation automation runtimeSDM Web interface vulnerable to XSS6.1 Medium
starletteRootDuplicate Advisory: Starlette Content-Type Header ReDoS7.5 High- mozilla firefox for ios, firefox mobile +1 moreWhen a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before...6.1 Medium
- b&r industrial automation automation runtimeFTP uses unsecure encryption mechanisms9.8 Critical
- gnu cpio, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreCpio: extraction allows symlinks which enables remote command execution5.3 Medium
- 1panel-dev 1panel1Panel set-cookie is missing the Secure keyword6.5 Medium
- mate-desktop engrampaPath traversal via crafted cpio archives in Engrampa archivers8.2 High
- fastapiexpert python-multipart, encode starlette, tiangolo fastapi +2 morepython-multipart vulnerable to content-type header Regular expression Denial of Service7.5 High
- fortinet fortisiemAn improper neutralization of special elements used in an os command ('os command injection') in...9.7 Critical
- fortinet fortisiemAn improper neutralization of special elements used in an os command ('os command injection') in...9.7 Critical
- qibosoft qibocms x1QiboSoft QiboCMS X1 Pay.php rmb_pay deserialization7.3 High
- unknown 3dprint lite3DPrint Lite < 1.9.1.5 - Unauthenticated Arbitrary File Upload9.8 Critical
- linux kernelRace condition vulnerability in Linux kernel media/dvb-core in dvbdmx_write()5.3 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreRace condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()4.6 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreRace condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interval_set()4.6 Medium
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreRace condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()4.6 Medium
- linux kernelRace condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set()4.6 Medium
- linux kernelRace condition vulnerability in Linux kernel media/xc4000 xc4000_get_frequency()3.3 Low
- linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreRace condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan()5.0 Medium
- linux kernelRace condition vulnerability in Linux kernel sound/hda snd_hdac_regmap_sync5.3 Medium
- linux kernelRace condition vulnerability in Linux kernel drm/exynos exynos_drm_crtc_atomic_disable5.3 Medium
- sharp display solutions, ltd. p403, p463, p553, p703, p801, x554un, x464un, x554uns, x464unv, x474hb, x464uns, x554unv, x555uns, x555unv, x754hb, x554hb, e705, e805, e905, un551s, un551vs, x551uhd, x651uhd, x841uhd, x981uhd, md551c8, sharp nec e705 firmware, nec e805 firmware +24 more +26 moreSharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB,...9.8 Critical
- five star plugins star restaurant reviews, fivestarplugins five star restaurant menu +1 moreWordPress Five Star Restaurant Reviews Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- gordon böhme, antonio leutsch structured content (json-ld) #wpsc, wpsc-plugin structured content +1 moreWordPress Structured Content Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- dan's art add customer for woocommerceWordPress Add Customer for WooCommerce Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- mightythemes mighty addons for elementor, mighty addons +1 moreWordPress Mighty Addons for Elementor Plugin <= 1.9.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- jgadbois calculatorpro calculatorsWordPress CalculatorPro Calculators Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- mjs software pt sign ups – beautiful volunteer sign ups and management made easy, mjssoftware sign ups +1 moreWordPress PT Sign Ups Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- noah kagan scroll triggered boxWordPress Scroll Triggered Box Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- biteship, biteship biteship: plugin ongkos kirim kurir instant, reguler, kargo +1 moreWordPress Biteship Plugin <= 2.2.24 is vulnerable to Cross Site Scripting (XSS)7.1 High
- mediatek nr15, mediatek, inc. mt2735, mt6297, mt6833, mt6853, mt6855, mt6873, mt6875, mt6875t, mt6877, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt8675, mt8791, mt8791t, mt8797 +1 moreIn Modem NL1, there is a possible system crash due to an improper input validation. This could...7.5 High
- google android, mediatek, inc. mt5583, mt5586, mt5691, mt5695, mt5696, mt9010, mt9011, mt9012, mt9015, mt9016, mt9020, mt9021, mt9022, mt9025, mt9026, mt9216, mt9218, mt9220, mt9221, mt9222, mt9255, mt9256, mt9266, mt9269, mt9286, mt9288, mt9602, mt9603, mt9610, mt9611, mt9612, mt9613, mt9615, mt9617, mt9618, mt9629, mt9630, mt9631, mt9632, mt9633, mt9636, mt9638, mt9639, mt9649, mt9650, mt9652, mt9653, mt9660, mt9666, mt9667, mt9669, mt9671, mt9675, mt9679, mt9685, mt9686, mt9688, mt9689 +1 moreIn TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, mediatek, inc. mt5583, mt5586, mt5691, mt5695, mt5696, mt9010, mt9011, mt9012, mt9015, mt9016, mt9020, mt9021, mt9022, mt9025, mt9026, mt9216, mt9218, mt9220, mt9221, mt9222, mt9255, mt9256, mt9266, mt9269, mt9286, mt9288, mt9602, mt9603, mt9610, mt9611, mt9612, mt9613, mt9615, mt9617, mt9618, mt9629, mt9630, mt9631, mt9632, mt9633, mt9636, mt9638, mt9639, mt9649, mt9650, mt9652, mt9653, mt9660, mt9666, mt9667, mt9669, mt9671, mt9675, mt9679, mt9685, mt9686, mt9688, mt9689 +1 moreIn TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, mediatek mt6735, mt6737 +33 more +35 moreIn ged, there is a possible out of bounds write due to an integer overflow. This could lead to...4.4 Medium
- google android, mediatek mt6739, mt6753 +38 more +40 moreIn telephony, there is a possible escalation of privilege due to a permissions bypass. This could...7.8 High
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8185, mt8321, mt8385, mt8666, mt8667, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797, mt8798 +1 moreIn keyInstall, there is a possible out of bounds write due to a missing bounds check. This could...6.7 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6895, mt6983, mt6985, mt8321, mt8385, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8797, mt8798 +1 moreIn keyInstall, there is a possible escalation of privilege due to type confusion. This could lead...6.7 Medium
- mdempfle advanced iframeWordPress Advanced iFrame Plugin <= 2023.10 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- dan dulaney dan's embedder for google calendar, dandulaney dan\'s embedder for google calendar +1 moreWordPress Dan's Embedder for Google Calendar Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- axis os, os 2020, os 2022 +2 moreInsufficient input validation in VAPIX API create_overlay.cgi5.4 Medium
- axis communications ab os, axis m3024-lve firmware, m3025-ve firmware +9 more +11 moreBrandon Rothel from QED Secure Solutions has found that the VAPIX API tcptest.cgi did not have a...6.3 Medium
- tenda ac9 firmwareBuffer Overflow vulnerability in the function setSchedWifi in Tenda AC9 v.3.0, firmware version v...9.8 Critical
- flusity, flushcms +1 moreCross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to...8.8 High
- flusityCross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to...8.8 High
- stimulsoft dashboards.jsStimulsoft Dashboard.JS Cross Site Scripting vulnerability5.4 Medium
- Show moreLoading…