CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- contiki-ngUnvalidated DIO prefix info length in RPL-Lite in Contiki-NG7.5 High
- contiki-ngInsufficient boundary checks for DIO and DAO messages in RPL-Lite in Contiki-NG8.6 High
- contiki-ngOut-of-bounds write in the radio driver for Contiki-NG nRF platforms7.0 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication4.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal4.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper IP Address Verification in GlobalProtect Gateway6.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface6.6 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface6.8 Medium
- schneider electric harmony control relay rmnf22tb30, harmony timer relay renf22r2mmw, se renf22r2mmw firmware +1 more +3 moreCWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of...8.8 High
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreCWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized...7.1 High
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu (part numbers bmxp34*) +46 more +48 moreCWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication...8.1 High
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreCWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access...7.7 High
- f5 big-ip, big-ip pem, big-ip policy enforcement manager +2 moreBIG-IP PEM vulnerability7.5 High
- f5 nginx plus, nginx open source +1 moreNGINX HTTP/3 QUIC vulnerability7.5 High
- f5 nginx plus, nginx open source +1 moreNGINX HTTP/3 QUIC vulnerability7.5 High
- f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +2 moreF5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerability7.5 High
- f5 big-ip, big-ip advanced firewall manager +1 moreBIG-IP AFM vulnerability7.5 High
- f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +2 moreBIG-IP Advanced WAF and ASM Configuration utility vulnerability3.8 Low
- f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +2 moreBIG-IP Advanced WAF and ASM vulnerability7.5 High
- f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +2 moreBIG-IP ASM and Advanced WAF vulnerability7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreBIG-IP TMM vulnerability7.5 High
- f5 big-ip, big-ip next spk, big-ip access policy manager +12 more +14 moreBIG-IP HTTP/2 vulnerability7.5 High
- f5 big-ip next cnf, big-ip next spk, big-ip next cloud-native network functions +2 moreBIG-IP Next CNF & SPK vulnerability7.1 High
- f5 f5os - appliance, f5os - chassis, f5os-a +1 more +3 moreF5OS vulnerability6.2 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreBIG-IP SSL Client Certificate LDAP and CRLDP Authentication profiles vulnerability7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreAppliance mode iControl REST vulnerability8.7 High
- f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +2 moreBIG-IP Websockets vulnerability7.5 High
- f5 big-ip, big-ip advanced firewall manager +1 moreF5 AFM Signature Matching Vulnerability7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreBIG-IP Appliance mode iAppsLX vulnerability6.0 Medium
- f5 f5os - appliance, f5os - chassis, f5os-a +1 more +3 moreF5OS QKView utility vulnerability5.5 Medium
- f5 big-ip, big-iq, big-ip access policy manager +11 more +13 moreBIG-IP and BIG-IQ secure copy vulnerability6.7 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreBIG-IP iControl REST API Vulnerability7.2 High
clamavUbuntuclamav vulnerabilitiesNo score- grafana, grafana grafana-csv-datasource +1 moreSSRF in CSV Datasource Plugin5.0 Medium
- grafana grafana-json-datasource, json api data source +1 moreImproper Path Sanitization in JSON Datasource Plugin8.0 High
- ibm jazz for service managementIBM Jazz for Service Management information disclosure5.3 Medium
- suse container suse/manager/5.0/x86 64/server:5.0.0-beta1.2.122, opensuse leap 15.5, opensuse tumbleweed +20 more +22 moretomcat packaging allows for escalation to root from tomcat user7.8 High
- intel sgx dcapImproper input validation in some Intel(R) SGX DCAP software for Windows before version 1.19.100...3.8 Low
- intel mpi libraryUncontrolled search path for some Intel(R) MPI Library Software before version 2021.11 may allow...6.7 Medium
- intel system support utilityUncontrolled search path element in some Intel(R) SSU software before version 3.0.0.2 may allow...6.7 Medium
- intel system usage reportIncorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901...6.7 Medium
- intel system usage report, system usage report for gameplay +1 moreUncontrolled search path in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may...6.7 Medium
- intel quickassist technology driverOut-of-bounds read in some Intel(R) QAT software drivers for Windows before version QAT1.7-W-1.11...6.5 Medium
- intel server platform services, netapp hci bootstrap os, hci compute node bios +2 moreUncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04...4.9 Medium
- intel system usage report for gameplayImproper access control in some Intel(R) SUR software before version 2.4.10587 may allow an...7.1 High
- intel ispc, implicit spmd program compiler +1 moreUncontrolled search path in some Intel(R) ISPC software before version 1.21.0 may allow an...6.7 Medium
- intel administrative tools for intel network adapters, ethernet connections boot utility\, preboot images\, and efi drivers +1 moreInsecure inherited permissions in some Intel(R) Ethernet tools and driver install software may...6.7 Medium
- intel ethernet adapter complete driver, ethernet adapter complete driver pack +1 moreImproper access control element in some Intel(R) Ethernet tools and driver install software,...6.7 Medium
- intel field programmable gate array software development kit for opencl, software development kit for opencl +1 moreUncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an...6.7 Medium
- intel advisor, cluster checker, distribution for python +13 more +15 moreImproper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for...7.8 High
- Show moreLoading…