CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- drupal, drupal core, link +2 moreDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-0045.4 Medium
- drupal, drupal core +1 moreDrupal core - Moderately critical - Gadget Chain - SA-CORE-2025-0037.5 High
- drupal, drupal core +1 moreDrupal core - Moderately critical - Access bypass - SA-CORE-2025-0024.6 Medium
- drupal, drupal core +1 moreDrupal core - Critical - Cross site scripting - SA-CORE-2025-0016.1 Medium
- drupal, drupal core +1 moreDrupal core - Moderately critical - Denial of Service - SA-CORE-2025-0055.3 Medium
- drupal, drupal core +1 moreDrupal core - Moderately critical - Gadget chain - SA-CORE-2024-0089.8 Critical
- drupal, drupal core +1 moreDrupal core - Moderately critical - Gadget chain - SA-CORE-2024-0079.8 Critical
- drupal, drupal core +1 moreDrupal core - Less critical - Gadget chain - SA-CORE-2024-0069.8 Critical
- drupal, drupal core +1 moreDrupal core - Moderately critical - Access bypass - SA-CORE-2024-0048.1 High
- drupal, drupal core +1 moreDrupal core Denial of Service vulnerability5.3 Medium
- drupal, drupal core +1 moreDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-0035.4 Medium
- opensc project opensc, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 moreOpensc: memory use after free in authentic driver when updating token info3.4 Low
- exiv2Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv25.5 Medium
- exiv2Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv25.5 Medium
- gitlabPrivilege Chaining in GitLab6.5 Medium
- redhat undertow, red hat build of quarkus, data grid 8 +12 more +14 moreUndertow: directory traversal vulnerability5.3 Medium
- azure azure-uamqp-c, microsoft azure uamqp +1 moreAzure IoT Platform Device SDK Remote Code Execution Vulnerability9.8 Critical
- dbartholomae lambda-middleware, lambda-middleware frameguard +1 moredbartholomae lambda-middleware frameguard JSON Mime-Type JsonDeserializer.ts redos3.5 Low
- ibm robotic process automationIBM Robotic Process Automation information disclosure4.6 Medium
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its...7.8 High
- ibm cics tx standard, cics tx, cics tx advanced +2 moreIBM CICS TX information disclosure5.9 Medium
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains SQL Injection vulnerability. An authenticated...4.5 Medium
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contain a path traversal vulnerability in its...3.3 Low
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_nas...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains a Cross-site scripting vulnerability. An...6.4 Medium
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_dc...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contain an OS Command Injection Vulnerability in its...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in the...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains a Command Injection Vulnerability in svc_oscheck...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains a cross-site scripting (XSS) vulnerability. An...5.7 Medium
- ibm cics tx standard, cics tx, cics tx advanced +2 moreIBM CICS TX session fixation4.3 Medium
- dell unity, unity operating environment +1 moreDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its...7.8 High
- ibm cics tx standard, cics tx, cics tx advanced +2 moreIBM CICS TX information disclosure5.9 Medium
- ibm datastage, datastage on cloud pak for data +1 moreIBM DataStage on Cloud Pak for Data information disclosure4.9 Medium
- chartjs project chartjsChart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site Scripting in New Chart5.4 Medium
- ghozylab popup builder, popup builder builder +1 morepopup-builder < 4.2.6 - Admin+ SSRF & File Read7.2 High
- ays-pro popup boxPopup Box Pro < 20.9.0 - Admin+ Stored XSS4.8 Medium
- chartjs chart.js, chartjs project chartjs +1 moreChart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site Scripting5.4 Medium
- unknown web3, miniorange web3 - crypto wallet login \& nft token gating +1 moreWeb3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass9.8 Critical
- storeapps smart managerSmart Manager < 8.28.0 - Admin+ SQL Injection7.2 High
- spider-themes eazydocsEazyDocs < 2.4.0 - Subscriber+ Arbitrary Posts Deletion and Document Management4.3 Medium
- calenfretts lastuneslasTunes <= 3.6.1 - Settings Update via CSRF5.4 Medium
- mappresspro mappress maps, mappress maps for wordpress +1 moreMapPress Maps for WordPress < 2.88.15 - Contributor+ Stored XSS5.4 Medium
- deconf analytics insights, unknown analytics insights for google analytics 4 (aiwp) +1 moreAnalytics Insights for Google Analytics 4 < 6.3 - Open Redirect6.1 Medium
- tri gigpressGigPress <= 2.3.29 - Admin+ Stored Cross Site Scripting4.8 Medium
- Show moreLoading…