CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- intel thunderbolt dch driverImproper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version...4.3 Medium
- intel thunderbolt dch driverImproper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version...5.0 Medium
- intel thunderbolt dch driverUncontrolled resource consumption in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before...5.5 Medium
- intel thunderbolt dch driverImproper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version...5.5 Medium
- intel thunderbolt dch driverImproper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before...6.1 Medium
- intel thunderbolt dch driverImproper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version...6.3 Medium
- intel thunderbolt dch driverUnquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before...6.7 Medium
- intel thunderbolt dch driverImproper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before...6.5 Medium
- intel thunderbolt dch driverUncontrolled search path element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before...6.7 Medium
- intel thunderbolt dch driverImproper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.7.7 High
- intel thunderbolt dch driverImproper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version...7.9 High
- intel thunderbolt dch driverImproper access control in the Intel(R) Thunderbolt(TM) DCH drivers for Windows may allow an...8.2 High
- uni-pa university marketing & computer internet trade inc. university information systemSQLi in UNI-PA's University Information System9.8 Critical
- apache supersetApache Superset: Allows for uncontrolled resource consumption via a ZIP bomb (version range fix for CVE-2023-46104)6.5 Medium
- sharp corporation energy management controller with cloud services, sharp jh-rv11 firmware, jh-rvb1 firmware +2 more +4 moreEnergy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows...8.8 High
- sharp corporation energy management controller with cloud services, sharp jh-rv11 firmware, jh-rvb1 firmware +2 moreServer-side request forgery vulnerability in Energy Management Controller with Cloud Services JH...8.1 High
- sharp corporation energy management controller with cloud services, sharp jh-rv11 firmware, jh-rvb1 firmware +2 morePath traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11...6.5 Medium
- sharp corporation energy management controller with cloud services, sharp jh-rv11 firmware, jh-rvb1 firmware +2 moreCross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 ...9.3 Critical
- sharp corporation energy management controller with cloud services, sharp jh-rv11 firmware, jh-rvb1 firmware +2 moreCross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH...6.5 Medium
- sharp corporation energy management controller with cloud services, sharp jh-rv11 firmware, jh-rvb1 firmware +2 moreImproper access control vulnerability exists in Energy Management Controller with Cloud Services...6.5 Medium
- sharp corporation energy management controller with cloud services, sharp jh-rv11 firmware, jh-rvb1 firmware +2 moreImproper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1...8.8 High
- dell secure connect gateway, secure connect gateway-appliance, secure connect gateway-application +2 moreIn Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10...5.4 Medium
- dell secure connect gateway, secure connect gateway-appliance, secure connect gateway-application +2 moreIn Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10...5.4 Medium
- dell supportassist for business pcs, supportassist for home pcs +1 moreIn Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs...7.8 High
- dell supportassist client consumer, supportassist for home pcs +1 moreDell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass...6.3 Medium
- dell supportassist for home pcs, supportassist client consumer +1 moreDell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for...7.2 High
- dell e-lab navigator, mobility - e-lab navigator +1 moreDell E-Lab Navigator, [3.1.9, 3.2.0], contains an Insecure Direct Object Reference Vulnerability...4.4 Medium
- digdagAbsolute path traversal vulnerability in digdag server5.3 Medium
- zoom, zoom video communications, inc. desktop client for windows, zoom vdi client for windows, and zoom meeting sdk for windows, zoom meeting software development kit +2 more +4 moreZoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation9.6 Critical
- zoom, zoom communications inc. clients, zoom meeting software development kit +3 more +5 moreZoom Clients - Improper Input Validation5.4 Medium
- redaxoRedaxo v5.15.1 was discovered to contain a remote code execution (RCE) vulnerability via the...7.2 High
- redaxoA cross-site scripting (XSS) vulnerability in Redaxo v5.15.1 allows attackers to execute...4.8 Medium
- code-projects simple admin panelA cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to...6.1 Medium
- code-projects simple admin panelA cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to...5.4 Medium
- code-projects simple admin panelA cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to...5.4 Medium
- code-projects simple admin panelSimple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- code-projects task manager, task manager in php with source code project manager in php with source code +1 moreTask Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID...9.8 Critical
- code-projects task managerA cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute...6.1 Medium
- code-projects task managerTask Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID...9.8 Critical
- code-projects task manager, task manager app manager app +1 moreA cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute...6.1 Medium
- code-projects task managerA cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute...6.1 Medium
- oretnom23 online medicine ordering systemOnline Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- sherlock employee management systemEmployee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- sherlock employee management systemEmployee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- sherlock employee management systemAn issue in Employee Managment System v1.0 allows attackers to bypass authentication via...9.8 Critical
- sherlock employee management systemEmployee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- sherlock employee management systemEmployee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- rems simple expense tracker appSimple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- rems simple expense tracker appSimple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- rems barangay population monitoring systemBarangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- Show moreLoading…