CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- badge.team hacker hotel badge 2024DoS attack when broadcasting billboard messages6.5 Medium
- iperov deepfacelabDeepFaceLab main.py apply_xseg deserialization5.0 Medium
- netgear r7000, r7000 firmware +1 moreNetgear R7000 Web Management Interface debuginfo.htm information disclosure4.3 Medium
- netgear r7000, r7000 firmware +1 moreNetgear R7000 Web Management Interface currentsetting.htm information disclosure5.3 Medium
upxOSS-FuzzUNKNOWN READ in PackLinuxElf32::adjABSNo scoremrubyOSS-FuzzHeap-buffer-overflow in mrb_memsearchNo score- expressvpnExpressVPN before 12.73.0 on Windows, when split tunneling is used, sends DNS requests according...7.5 High
- qanythingqanything_kernel/connector/database/mysql/mysql_client.py in qanything.ai QAnything before 1.2.0...9.8 Critical
- dropbox samly, samly elixr +1 moreSamly access control vulnerability9.8 Critical
- glewlwyd sso server project sso serverGlewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirect_uri.6.1 Medium
- rhonabwy project rhonabwy, debian linux +1 moreIn Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable...9.8 Critical
- ibireme yyjson, fedoraproject fedora +1 moreyyjson has a Double Free vulnerability8.6 High
- reproducible builds diffoscope, fedoraproject fedora +1 morediffoscope Path Traversal vulnerability7.5 High
- flusityflusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...8.8 High
- flusityflusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...8.8 High
- flusityflusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...8.8 High
- ghostGhost has possible Cross-site Scripting issue9.0 Critical
- connect2id nimbus jose\+jwtDenial of Service in Connect2id Nimbus JOSE+JWT7.5 High
- objectcomputing openddsIn OpenDDS through 3.27, there is a segmentation fault for a DataWriter with a large value of...7.5 High
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender - Resiliency Service information disclosure6.2 Medium
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender - Resiliency Service information disclosure4.4 Medium
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender - Resiliency Service privilege escalation8.0 High
- ibm semeru runtimeIBM Semeru Runtime information disclosure5.9 Medium
- myagileprivacy my agile privacy – the only gdpr solution for wordpress that you can truly trust, my agile privacy +1 moreWordPress My Agile Privacy Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- realmag777 active products tables for woocommerce. professional products tables for woocommerce store, pluginus woot +1 moreWordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- wp hosting pay with vipps and mobilepay for woocommerceWordPress Pay with Vipps for WooCommerce Plugin <= 1.14.13 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- automattic crowdsignal dashboard, automattic, inc. crowdsignal dashboard – polls, surveys & more +1 moreWordPress Crowdsignal Dashboard – Polls, Surveys & more Plugin <= 3.0.11 is vulnerable to Cross Site Scripting (XSS)7.1 High
- if so plugin if-so dynamic content personalization, if-so dynamic content personalization +1 moreWordPress If-So Dynamic Content Personalization Plugin <= 1.6.3.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- howard ehrenberg custom post carousels with owlWordPress Custom Post Carousels with Owl Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- clicktotweet click to tweetWordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- calculators world cc bmi calculator, cc bmi calculator +1 moreWordPress CC BMI Calculator Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- start booking scheduling plugin – online booking for wordpress, startbooking scheduling plugin +1 moreWordPress Scheduling Plugin – Online Booking for WordPress Plugin <= 3.5.10 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- heateor social login wordpress, social login, team heateor heateor social login wordpress +2 moreWordPress Heateor Social Login Plugin <= 1.1.30 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- wp auto listings auto listings – car listings & car dealership plugin for wordpress, wpautolistings auto listings +1 moreWordPress Auto Listings Plugin <= 2.6.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- beds24 online booking, mark kinchin beds24 online booking +1 moreWordPress Beds24 Online Booking Plugin <= 2.0.23 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- logichunt owl carousel – wordpress owl carousel slider, owl carousel +1 moreWordPress OWL Carousel Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- wpoperation ultra companion – companion plugin for wpoperation themes, ultra companion +1 moreWordPress Ultra Companion Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- web-soudan mw wp formWordPress MW WP Form Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- leap13 premium addons for elementorWordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- linksys wrt54gl, wrt54gl firmware +1 moreLinksys WRT54GL Web Management Interface SysInfo1.htm information disclosure4.3 Medium
- awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +1 moreAwesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()5.3 Medium
- awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +1 moreAwesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()4.3 Medium
- awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +1 moreAwesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection8.8 High
- linksys wrt54gl, wrt54gl firmware +1 moreLinksys WRT54GL Web Management Interface wlaninfo.htm information disclosure4.3 Medium
- hcl software sametime, hcltech sametime chat and meetings +1 moreHCL Sametime is impacted by clickjacking4.8 Medium
- dell bsafe ssl-jDell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message...4.4 Medium
- hcl software sametimeHCL Sametime is impacted by an autocomplete enabled vulnerability4.0 Medium
- envoyproxy envoyEnvoy crashes when idle and request per try timeout occur within the backoff interval7.5 High
- envoyproxy envoyExcessive CPU usage when URI template matcher is configured using regex in Envoy4.3 Medium
- Show moreLoading…