CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +132 more +134 moreBuffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Video7.3 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +151 more +153 moreUntrusted Pointer Dereference in Video7.3 High
- qualcomm qam8255p firmware, qam8295p firmware, qam8650p firmware +17 more +19 moreImproper Access Control in Automotive Multimedia8.4 High
- qualcomm aqt1000 firmware, ar8035 firmware, c-v2x 9150 firmware +94 more +96 moreBuffer Copy Without Checking Size of Input in HLOS6.7 Medium
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +149 more +151 moreConfiguration Issue in Core5.9 Medium
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +243 more +245 moreBuffer copy without checking size of Input in Core9.3 Critical
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +45 more +47 moreBuffer Over-read in Core7.1 High
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +45 more +47 moreBuffer Copy Without Checking Size of Input in Modem8.2 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +99 more +101 moreImproper Input Validation in Multi-Mode Call Processor7.5 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +99 more +101 moreImproper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor7.5 High
- qualcomm ar8035 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +47 more +49 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment7.8 High
- cybozu kunai, cybozu, inc. cybozu kunai for android +1 moreCybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a...7.5 High
- samsung internetImproper authorization verification vulnerability in Samsung Internet prior to version 24.0...2.4 Low
- notfound galleryImproper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows...4.6 Medium
- samsung uphelper library, samsung mobile uphelper +1 moreImplicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local...5.5 Medium
- samsung galaxy storeImplicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows...5.5 Medium
- samsung galaxy storeImplicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6...5.5 Medium
- samsung galaxy storeImplicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63...5.5 Medium
- samsung galaxy storeImplicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5...5.5 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in bootloader prior to SMR Feb-2024 Release 1 allows attacker to cause...4.4 Medium
- samsung android, samsung mobile devices +1 moreOut out bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024...6.6 Medium
- samsung android, samsung mobile devices +1 moreOut out bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024...6.6 Medium
- samsung android, samsung mobile devices +1 moreOut out bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024...6.6 Medium
- samsung android, samsung mobile devices +1 moreImproper authentication vulnerability in onCharacteristicWriteRequest in Auto Hotspot prior to...8.0 High
- samsung android, samsung mobile devices +1 moreImproper authentication vulnerability in onCharacteristicReadRequest in Auto Hotspot prior to SMR...8.0 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds Read in padmd_vld_ac_prog_refine of libpadm.so prior to SMR Feb-2024 Release 1...4.0 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local...8.4 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local...8.4 High
- samsung android, samsung mobile devices +1 moreImproper caller verification in GameOptimizer prior to SMR Feb-2024 Release 1 allows local...5.1 Medium
- samsung android, samsung mobile devices +1 moreImplicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1...3.3 Low
- canon mf1333c firmware, canon inc. c1333if, color imageclass mf750c series +9 more +11 moreBuffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(...9.8 Critical
- canon i-sensys lbp673cdw, lbp1333c, lbp674c +41 more +43 moreBuffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and...9.8 Critical
- canon inc. c1333i series, c1333p, color imageclass lbp674c +36 more +38 moreBuffer overflow in SLP attribute request process of Office Multifunction Printers and Laser...9.8 Critical
- canon inc. c1333i series, c1333p, color imageclass lbp674c +36 more +38 moreBuffer overflow in the Address Book username process in authentication of Mobile Device Function...9.8 Critical
- canon inc. c1333i series, c1333p, color imageclass lbp674c +36 more +38 moreBuffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(...9.8 Critical
- canon inc. c1333i series, c1333p, color imageclass lbp674c +36 more +38 moreBuffer overflow in the Address Book password process in authentication of Mobile Device Function...9.8 Critical
- canon inc. c1333i series, c1333p, color imageclass lbp674c +36 more +38 moreBuffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser...9.8 Critical
libxml2OSS-FuzzHeap-use-after-free in xmlRemoveIDNo score- rustdeskA default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under...9.8 Critical
- djangoproject djangoDjango denial-of-service attack in the intcomma template filter7.5 High
- stimulsoft dashboards.phpStimulsoft Dashboard.JS directory traversal vulnerability9.8 Critical
- yzmcmsAn issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to...6.1 Medium
- dronecode px4 drone autopilotA Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot...4.2 Medium
- dronecode px4 drone autopilotPX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence...4.2 Medium
- exrick xmallxmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.9.8 Critical
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...9.8 Critical
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...9.8 Critical
- jishenghua jsherpjshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com...9.8 Critical
- jishenghua jsherpjshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.MaterialController: com...9.8 Critical
- jishenghua jsherpjshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController:...9.8 Critical
- Show moreLoading…