CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- pquicIn PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt...6.5 Medium
- litespeedtech lsquicIn LiteSpeed QUIC (LSQUIC) Library before 4.0.4, DCID validation is mishandled.9.8 Critical
- minbrowser minIn Min before 1.31.0, local files are not correctly treated as unique security origins, which...8.8 High
- misp-project mispAn issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an...9.8 Critical
- mispAn issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a...9.8 Critical
- axiosys bento4Bento4 v1.6.0-640 was discovered to contain a NULL pointer dereference via the...5.5 Medium
- axiosys bento4Bento4 v1.6.0-640 was discovered to contain a NULL pointer dereference via the AP4_StszAtom:...5.5 Medium
- axiosys bento4Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4_UrlAtom::AP4_UrlAtom...5.5 Medium
- axiosys bento4Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4_DataBuffer:...6.5 Medium
- enlightenment imlib2imlib2 v1.9.1 was discovered to mishandle memory allocation in the function init_imlib_fonts().8.8 High
- enlightenment imlib2An issue in the imlib_free_image_and_decache function of imlib2 v1.9.1 allows attackers to cause...8.8 High
- enlightenment imlib2An issue in the imlib_load_image_with_error_return function of imlib2 v1.9.1 allows attackers to...8.8 High
- hugin project huginAn issue in the HuginBase::PTools::setDestImage function of Hugin v2022.0.0 allows attackers to...7.8 High
- hugin project huginImproper handling of values in HuginBase::PTools::Transform::transform of Hugin 2022.0.0 leads to...7.8 High
- hugin project huginAn issue in the HuginBase::ImageVariable<double>::linkWith function of Hugin v2022.0.0 allows...7.8 High
- hugin project huginAn issue in the HuginBase::PanoramaMemento::loadPTScript function of Hugin v2022.0.0 allows...7.8 High
- hotel management system project management systemCode-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel...8.8 High
- hotel management system project management systemCode-projects Hotel Managment System 1.0 allows SQL Injection via the 'eid' parameter in Hotel...9.8 Critical
- hotel management system project management systemCode-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel...9.8 Critical
- hotel management system project management systemCode-projects Hotel Managment System 1.0, allows SQL Injection via the 'sid' parameter in Hotel...9.8 Critical
- code-projects simple school management systemCode-projects Simple School Managment System 1.0 allows Authentication Bypass via the username...8.8 High
- code-projects simple school management systemCode-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at ...8.8 High
- code-projects simple school management systemCode-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at ...8.8 High
- code-projects simple school management systemCode-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at...8.8 High
- code-projects simple school management systemCode-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at...8.8 High
- code-projects cinema seat reservation systemCode-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at "...9.8 Critical
- code-projects simple school management systemCode-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter...8.8 High
- code-projects simple school management systemCode-projects Simple School Managment System 1.0 allows Authentication Bypass via the username...8.8 High
- code-projects simple school management systemCode-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter...8.8 High
- remyandrade event student attendance systemSourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student'...9.8 Critical
- 9bis kittyKiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the...7.8 High
- 9bis kittyKiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the...7.8 High
- icinga, icinga icingaweb2-module-director +1 moreIcinga Director configuration is susceptible to Cross-Site Request Forgery8.3 High
- boostmyshopSQL Injection vulnerability in Boostmyshop (boostmyshopagent) module for Prestashop versions 1.1...9.8 Critical
- 9bis kittyKiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable,...7.8 High
- cisco clamavClamAV VirusEvent File Processing Command Injection Vulnerability5.3 Medium
- prestamonster multi accessories proSQL injection vulnerability in Presta Monster "Multi Accessories Pro" (hsmultiaccessoriespro)...9.8 Critical
- innovadeluxe manufacturer or supplier alphabetical searchSQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" ...9.8 Critical
- zalify easy emailCross Site Scripting (XSS) vulnerability in EasyEmail v.4.12.2 and before allows a local attacker...6.1 Medium
- getgrav gravCross-site scripting (XSS) vulnerability in Grav5.4 Medium
- getsentry sentrySSRF in Sentry via Phabricator integration4.3 Medium
- openobserveOpenObserve Privilege Escalation Vulnerability in Users API10.0 Critical
- openobserveOpenObserve Unauthorized Access Vulnerability in Users API9.1 Critical
- miraheze wikidiscoverCross-Site Scripting in WikiDiscover4.9 Medium
- paessler prtg network monitorPaessler PRTG Network Monitor Cross-Site Scripting Authentication Bypass Vulnerability8.8 High
- qolsys, inc. iq panel 4, iq4 hub, johnsoncontrols qolsys iq4 hub firmware +1 more +3 moreUnauthorized access to settings in Qolsys IQ Panel 4 and IQ4 Hub7.3 High
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable to Arbitrary Write Through Symlink Attack7.7 High
- ezaeza Potential Heap Overflow Vulnerability for AArch647.8 High
- kubernetes apiserverRancher API Server Cross-site Scripting Vulnerability8.3 High
- rancher normanNorman API Cross-site Scripting Vulnerability8.3 High
- Show moreLoading…