CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- codeastro university management systemCodeAstro University Management System Attendance Management att_add.php cross site scripting2.4 Low
- espruinoEspruino 2v20 (commit fcc9ba4) was discovered to contain an Out-of-bounds Read via...7.5 High
- espruinoEspruino 2v20 (commit fcc9ba4) was discovered to contain a Stack Overflow via the...7.5 High
- tendacn cp3 firmwareAn issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to...5.5 Medium
- lineagrafica multilingual and multistore sitemap proPath Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" ...7.5 High
- sinch mailjetIn the module "Mailjet" (mailjet) from Mailjet for PrestaShop before versions 3.5.1, a guest can...7.5 High
- hipresta gift wrapping proSQL Injection vulnerability in HiPresta "Gift Wrapping Pro" (hiadvancedgiftwrapping) module for...9.8 Critical
- jsishJsish v3.5.0 (commit 42c694c) was discovered to contain a use-after-free via the SplitChar at ....9.8 Critical
- jsishJsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c.9.8 Critical
- jsishJsish v3.5.0 (commit 42c694c) was discovered to contain a stack-overflow via the component...9.8 Critical
- atmailAtmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter...9.8 Critical
- superwebmailerSuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS)...6.1 Medium
- mail2world, mail2world webmail +1 moreMail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting...6.1 Medium
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...9.8 Critical
- samsung magicianImproper privilege control for the named pipe in Samsung Magician PC Software 8.0.0 (for Windows)...7.3 High
- bookingcalendar project bookingcalendarSQL Injection vulnerability in RM bookingcalendar module for PrestaShop versions 2.7.9 and before...9.8 Critical
- axigen mobile webmailCross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0...5.4 Medium
- schuhfriedAn issue in SCHUHFRIED v.8.22.00 allows remote attacker to obtain the database password via...9.8 Critical
- tenable nessusA SQL injection vulnerability exists where an authenticated, low-privileged remote attacker...6.5 Medium
- tenable nessusStored XSS vulnerability4.8 Medium
- juanpao jpshopJuanpao JPShop UploadsController.php actionUpdate unrestricted upload6.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to...9.8 Critical
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker...9.8 Critical
- hid global iclass se cp1000 encoder, iclass se processors, iclass se reader modules +13 more +15 moreInsecure Default Initialization of Resource in HID Global5.9 Medium
- juanpao jpshopJuanpao JPShop API PosterController.php actionUpdate unrestricted upload6.3 Medium
- juanpao jpshopJuanpao JPShop API MaterialController.php actionUpdate unrestricted upload6.3 Medium
- juanpao jpshopJuanpao JPShop API ComboController.php actionIndex unrestricted upload6.3 Medium
- westermo lynx, l206-f2g firmware +1 moreWestermo Lynx5.4 Medium
- westermo lynx, l206-f2g1 firmware, l206-f2g firmware +2 moreWestermo Lynx Code Injection8.0 High
- westermo lynx, l206-f2g firmware +1 moreWestermo Lynx Cross-site Scripting5.4 Medium
- westermo lynx, l206-f2g firmware +1 moreWestermo Lynx Permissive Cross-domain Policy with Untrusted Domains6.6 Medium
- libgit2libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`8.6 High
- westermo lynx, l206-f2g firmware +1 moreWestermo Lynx Cross-site Scripting5.4 Medium
- juanpao jpshopJuanpao JPShop API ComboController.php actionIndex unrestricted upload6.3 Medium
- libgit2libgit2 is vulnerable to a denial of service attack in `git_revparse_single`7.5 High
- westermo lynx, l206-f2g firmware +1 moreWestermo Lynx Cleartext Transmission of Sensitive Information5.7 Medium
- westermo lynx, l206-f2g firmware +1 moreWestermo Lynx Cross-site Scripting5.4 Medium
- westermo lynx, l206-f2g firmware +1 moreWestermo Lynx 206-F2G Cross-Site Request Forgery8.0 High
- juanpao jpshopJuanpao JPShop API AppController.php unrestricted upload6.3 Medium
- juanpao jpshopJuanpao JPShop API params.php hard-coded key3.1 Low
- ujcms jspxcmsJspxcms find_text.do cross site scripting3.5 Low
- vmware aria operations for networksAria Operations for Networks contains a cross site scripting vulnerability. A malicious actor...4.3 Medium
- vmware aria operations for networksAria Operations for Networks contains a local file read vulnerability. A malicious actor with...4.9 Medium
- vmware aria operations for networksAria Operations for Networks contains a local privilege escalation vulnerability. A console user...5.3 Medium
- vmware aria operations for networksAria Operations for Networks contains a cross site scripting vulnerability. A malicious actor...6.4 Medium
- vmware aria operations for networksAria Operations for Networks contains a local privilege escalation vulnerability. A console user...7.8 High
- ujcms jspxcmsJspxcms filter_text.do cross site scripting3.5 Low
- sepidz sepidzdigitalmenusepidz SepidzDigitalMenu Waiters information disclosure5.3 Medium
- byzoro smart s20 management platform, smart s20 firmware +1 moreByzoro Smart S20 Management Platform sysmanageajax.php sql injection4.7 Medium
- gnu grub2, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreGrub2: grub2-set-bootflag can be abused by local (pseudo-)users3.3 Low
- Show moreLoading…