CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- ping identity pingfederatePingFederate OAuth client_secret_jwt Authentication Bypass8.8 High
- byzoro smart s40 management platform, smart s40 firmware +1 moreByzoro Smart S40 Management Platform Import web.php unrestricted upload4.7 Medium
- tongda oa 2017, tongda2000 tongda office anywhere +1 moreTongda OA 2017 delete.php sql injection5.5 Medium
- tp-link er7206 omada gigabit vpn router, er7206 firmware +1 moreA command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206...7.2 High
- tp-link er7206 omada gigabit vpn router, er7206 firmware +1 moreA post-authentication command injection vulnerability exists in the PPTP client functionality of...7.2 High
- tp-link er7206 omada gigabit vpn router, er7206 firmware +1 moreA post authentication command injection vulnerability exists in the ipsec policy functionality of...7.2 High
- tp-link er7206 omada gigabit vpn router, er7206 firmware +1 moreA post authentication command injection vulnerability exists in the GRE policy functionality of...7.2 High
- tp-link er7206 omada gigabit vpn router, er7206 firmware +1 moreA post authentication command injection vulnerability exists when configuring the web group...7.2 High
- tp-link er7206 omada gigabit vpn router, er7206 firmware +1 moreA post authentication command injection vulnerability exists when configuring the wireguard VPN...7.2 High
- tp-link er7206 omada gigabit vpn router, er7206 firmware +1 moreA post authentication command injection vulnerability exists when setting up the PPTP global...7.2 High
- tp-link er7206 omada gigabit vpn router, er7206 firmware +1 moreA post authentication command execution vulnerability exists in the web filtering functionality...7.2 High
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy information disclosure6.2 Medium
- ibm powervm hypervisorIBM PowerVM Hypervisor information disclosure5.3 Medium
- solarwinds platformSQL Injection Remote Code Execution Vulnerability8.0 High
- tongda oa 2017, tongda2000 office anywhere, office anywhere 2017 +2 moreTongda OA 2017 delete.php sql injection5.5 Medium
- solarwinds platformSQL Injection Remote Code Execution Vulnerability8.0 High
- enalean tuleapTuleap's content of artifacts might be readable by unauthorized users5.3 Medium
- allegro.ai clearmlA cross-site scripting (XSS) vulnerability in all versions of the web server component of Allegro...9.9 Critical
- allegro.ai clearmlA cross-site request forgery (CSRF) vulnerability in all versions of the api and web server...9.6 Critical
- allegro.ai clearmlLack of authentication in all versions of the fileserver component of Allegro AI’s ClearML...9.8 Critical
- allegro.ai clearmlAllegro AI ClearML path traversal vulnerability8.0 High
- allegro.ai clearmlAllegro AI ClearML vulnerable to deserialization of untrusted data8.0 High
- gnu indentIndent: heap-based buffer overflow in set_buf_break()5.5 Medium
- redhat ansible, fedoraproject fedora, red hat ansible automation platform 2.4 for rhel 8 +7 more +9 moreAnsible-core: possible information leak in tasks that ignore ansible_no_log configuration5.0 Medium
libgit2-syscrates.iolibgit2-sys affected by memory corruption, denial of service, and arbitrary code execution in libgit28.6 High- svix svix-webhookssvix vulnerable to Authentication Bypass5.9 Medium
- apache sling servlets resolverApache Sling Servlets Resolver: Malicious code execution via path traversal8.5 High
- jetbrains toolbox, toolbox app +1 moreIn JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible9.8 Critical
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an...6.1 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives2.8 Low
- jetbrains riderIn JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was...3.3 Low
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL...5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint...4.3 Medium
- red hat eap 7.4.14, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +3 more +5 moreEap-galleon: custom provisioning creates unsecured http-invoker6.8 Medium
- dell encryption, endpoint security suite enterprise, security management server +1 more +3 moreDell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server...6.7 Medium
- dell dup framework, update package framework +1 moreDUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount...6.3 Medium
- dell display managerDell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on...6.6 Medium
- dell display managerDell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege...7.3 High
- dell alienware m15 r6 firmware, alienware m15 r7 firmware, chengming 3900 firmware +289 more +291 moreDell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated...6.7 Medium
- dell command \| monitor, command monitor (dcm) +1 moreDell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion...4.7 Medium
- dell power manager, power manager (dpm) +1 moreDell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in...7.8 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +307 more +309 moreBuffer Over-read in WLAN Firmware7.5 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +11 more +13 moreImproper Validation of Array Index in Display8.4 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8035 firmware +236 more +238 moreBuffer Over-read in WLAN Firmware7.5 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +11 more +13 moreUntrusted Pointer Dereference in Display8.4 High
- qualcomm ar8035 firmware, csr8811 firmware, fastconnect 6800 firmware +140 more +142 moreReachable Assertion in WLAN Firmware7.5 High
- qualcomm aqt1000 firmware, ar8035 firmware, ar9380 firmware +284 more +286 moreNULL Pointer Dereference in WLAN Firmware7.5 High
- Show moreLoading…