CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- barangay population monitoring system, barangay management system project management system +1 moreBarangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS)...5.4 Medium
- barangay management system project management systemBarangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS)...5.4 Medium
- swftoolsA global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at...7.8 High
- 4ipnet eap-767, eap-767 firmware +1 moreCommand Injection vulnerability discovered in 4ipnet EAP-767 device v3.42.00 within the web...8.8 High
- 4ipnet eap-767, eap-767 firmware +1 more4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control. The device uses the same set...9.8 Critical
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.0 +3 more +5 moreOpenstack: deleting a non existing access rule deletes another existing access rule in it's scope5.5 Medium
- cusg content management systemBlind SQL Injection vulnerability in CU Solutions Group (CUSG) Content Management System (CMS)...7.5 High
- cusg content management systemCross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System ...6.1 Medium
- cusg content management systemCross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System ...6.1 Medium
- tianocore edk2, canonical lxd, canonical ltd. ubuntu edk ii +1 more +3 moreAn insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an...6.7 Medium
- zoom, zoom communications inc. clients, zoom meeting sdk +2 more +4 moreZoom Clients - Business Logic Error6.5 Medium
- zoom, zoom communications inc. clients, zoom meeting software development kit +2 more +4 moreZoom Clients - Improper Authentication4.9 Medium
- zoom, zoom communications inc. clients, zoom meeting software development kit +2 more +4 moreZoom Clients - Untrusted Search Path7.2 High
- zoom, zoom video communications, inc. desktop client for windows, zoom vdi client for windows, and zoom meeting sdk for windows, zoom meeting software development kit +1 more +3 moreZoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation6.8 Medium
- zoom, zoom video communications, inc. desktop client for windows, zoom vdi client for windows, and zoom meeting sdk for windows, zoom meeting software development kit +1 more +3 moreZoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation6.8 Medium
- devfile registry-support, red hat openshift developer tools and services, openshift container platform 4 +1 more +3 moreRegistry-support: decompress can delete files outside scope via relative paths8.0 High
- grafana, grafana enterprise +1 moreEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 Medium
- typo3TYPO3 Install Tool vulnerable to Code Execution7.2 High
- amd ryzen™ 3000 series processors with radeon™ graphics, ryzen™ 4000 series desktop processors with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics +140 more +142 moreImproper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel...6.0 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +5 more +7 moreImproper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI...7.1 High
- amd ryzen™ embedded 5000, ryzen™ embedded v2000, ryzen embedded 5600e firmware +9 more +11 moreInsufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA...7.8 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 moreDue to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause...4.9 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 moreFailure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data...6.0 Medium
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console9.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console9.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console9.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console9.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console9.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console9.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console8.0 High
- github enterprise serverPath traversal vulnerability in GitHub Enterprise Server that allowed arbitrary file read with a specially crafted GitHub Pages artifact upload6.3 Medium
- debian linux, fedoraproject fedora, openidc mod auth openidc +2 moreDenial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc7.5 High
- github enterprise serverCross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise...6.5 Medium
- mhenrixon sidekiq-unique-jobsCross-site Scripting sidekiq-unique-jobs UI server vulnerability7.1 High
- contribsys sidekiqCross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to...6.1 Medium
- contribsys sidekiqCross Site Scripting vulnerability in Contribsys Sidekiq6.1 Medium
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +16 more +18 moreInternet Shortcut Files Security Feature Bypass Vulnerability8.1 High
- microsoft exchange server, exchange server 2016 cumulative update 23, exchange server 2019 cumulative update 13 +1 more +3 moreMicrosoft Exchange Server Elevation of Privilege Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Printing Service Spoofing Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability7.0 High
- microsoft azure kubernetes serviceMicrosoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability9.0 Critical
- microsoft azure file syncMicrosoft Azure File Sync Elevation of Privilege Vulnerability5.3 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.1 +1 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability8.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +1 more +3 moreMicrosoft Office OneNote Remote Code Execution Vulnerability7.8 High
- microsoft dynamics 365 business central, dynamics 365 business central 2022 release wave 2, dynamics 365 business central 2023 release wave 1 +1 more +3 moreMicrosoft Dynamics Business Central/NAV Information Disclosure Vulnerability8.0 High
- microsoft outlook, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Outlook Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows DNS Information Disclosure Vulnerability5.5 Medium
- microsoft azure kubernetes serviceMicrosoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability9.0 Critical
- microsoft teams for android, teams +1 moreMicrosoft Teams for Android Information Disclosure Vulnerability5.0 Medium
- Show moreLoading…