CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- remyandrade daily habit trackerCross Site Scripting vulnerability in Daily Habit Tracker v.1.0 allows a remote attacker to...6.1 Medium
- oaooa pichomeFile Upload vulnerability index.php in Pichome v.1.1.01 allows a remote attacker to execute...9.8 Critical
- softwarepublico e-sic livreFile Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote...8.8 High
- dlink dir-816 firmwareAn issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via...9.8 Critical
- easycorp zentaoZentao v18.0 to v18.10 was discovered to contain a remote code execution (RCE) vulnerability via...9.8 Critical
- cellinx nvt web serverAn issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014 allows...5.3 Medium
- postgresql, supabase postgres +1 moreSupabase PostgreSQL v15.1 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- easycorp zentao, zentao biz, zentao max +2 moreAn arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10...9.8 Critical
- cotonti sienaA stored cross-site scripting (XSS) vulnerability in the Edit Page function of Cotonti CMS v0.9...5.4 Medium
- xuxueli xxl-jobXXL-JOB vulnerable to Server-Side Request Forgery8.8 High
- yealink meeting serverYealink Meeting Server before v26.0.0.66 was discovered to contain an OS command injection...9.8 Critical
- setorinformatica s.i.lSetor Informatica S.I.L version 3.0 is vulnerable to Open Redirect via the hprinter parameter,...6.1 Medium
- xxyopen novel-plusAn arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions at com...9.8 Critical
- xxyopen novel-plusAn arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb...9.8 Critical
- xxyopen novel-plusAn arbitrary File download vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb...9.8 Critical
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass...9.8 Critical
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass...9.8 Critical
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...9.8 Critical
- novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...9.8 Critical
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...9.8 Critical
- jishenghua jsherpjshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com...9.8 Critical
- withsecure client security, elements endpoint protection, email and server security +1 more +3 moreCertain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client...6.7 Medium
- ploneThe HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221),...7.5 High
- binance trust walletThe Binance Trust Wallet app for iOS in commit 3cd6e8f647fbba8b5d8844fcd144365a086b629f, git tag...7.5 High
- apple ios, ipados, macos +5 more +7 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3...6.5 Medium
- akauntingAn OS command injection vulnerability exists in Akaunting v3.1.3 and earlier. An attacker can...9.8 Critical
- forescout secureconnectorInsecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local...7.0 High
- store-opart op\'art easy redirectPrestaShop Op'art Easy Redirect >= 1.3.8 and <= 1.3.12 is vulnerable to SQL Injection via...9.8 Critical
- axigen mobile webmailWebAdmin in Axigen 10.3.x before 10.3.3.61, 10.4.x before 10.4.24, and 10.5.x before 10.5.10...6.1 Medium
- axigen mail serverCross Site Scripting vulnerability in Axigen WebMail v.10.5.7 and before allows a remote attacker...9.6 Critical
- n-able n-centralAn issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain...9.8 Critical
- n-able passportalThe N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log...7.5 High
- ncratleos terminal handlerMultiple Cross-Site Request Forgery (CSRF) chaining in NCR Terminal Handler v.1.5.1 allows...8.8 High
- fedorindutny ipNPM IP package incorrectly identifies some private IP addresses as public9.8 Critical
- mitel unify openscape xpressions webassistantAn issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42...9.8 Critical
- mitel unify openscape xpressions webassistantAn issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42...8.8 High
- unify openscape voice trace managerAn issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It...4.3 Medium
- unify openscape voice trace managerAn issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It...8.8 High
- unify openscape voice trace managerAn issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It...6.1 Medium
- fedora, openvswitch, rdo openstack rdo +5 more +7 moreOpenvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet7.5 High
- egerieAn issue discovered in Egerie Risk Manager v4.0.5 allows attackers to bypass the signature...8.8 High
- octobercms octoberOctober CMS Cross-site Scripting vulnerability7.8 High
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- gitlabMissing Authorization in GitLab6.7 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- libuvImproper Domain Lookup that potentially leads to SSRF attacks in libuv7.3 High
- elastic apm serverAPM Server Insertion of Sensitive Information into Log File5.7 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 moreKernel: null pointer dereference in __nvmet_req_complete6.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +22 more +24 moreKernel: null pointer dereference in nvmet_tcp_execute_request6.5 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 moreKernel: null pointer dereference in nvmet_tcp_build_iovec6.5 Medium
- Show moreLoading…