CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- inprax izzi connectHard-coded credentials in iZZi connect application9.8 Critical
- comarch erp xlHardcoded password in Comarch ERP XL7.5 High
- comarch erp xlShared Key in Comarch ERP XL6.2 Medium
- comarch erp xlProtocol Downgrade in Comarch ERP XL7.4 High
- eset endpoint antivirus, endpoint security, file security +19 more +21 moreLocal privilege escalation in Windows products7.8 High
- digital-peak dp calendar for joomla, dpcalendar +1 moreExtension - digtal-peak.com - XSS vulnerability in DP Calendar component for Joomla 8.0.0-8.0.146.1 Medium
- fatcatapps landing page cat, landing page cat – coming soon & maintenance pages +1 moreLanding Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages <= 1.7.2 - Unauthenticated Information Exposure5.3 Medium
- algosec fireflowImproper input validation in FireFlow’s VisualFlow workflow editor5.1 Medium
- freebsdStack overflow in ping(8)6.5 Medium
- freebsdMissing bounds check in 9p message handling8.8 High
- freebsdMemory disclosure by stale virtual memory mapping4.0 Medium
- freebsdAIO credential reference count leak7.7 High
- freebsdOut of bound read in elf_note_prpsinfo()4.7 Medium
- fedoraproject unbound, red hat enterprise linux 10, enterprise linux 6 +31 more +33 moreUnbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation8.0 High
- freebsd802.11 heap buffer overflow9.8 Critical
- freebsdBhyve e82545 device emulation out-of-bounds write8.8 High
- freebsdmpr/mps/mpt driver ioctl heap out-of-bounds write7.8 High
- freebsdPotential jail escape vulnerabilities in netmap8.2 High
- freebsdPotential jail escape vulnerabilities in netmap7.5 High
- appleple a-blog cmsURL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a...4.7 Medium
- freebsdjail(2) information leak3.3 Low
- freebsdbhyveload(8) host file access6.3 Medium
- ebm technologies riswebEBM Technologies RISWEB - SQL Injection9.8 Critical
- ebm technologies riswebEBM Technologies RISWEB - Improper Access Control5.3 Medium
- ebm technologies uniweb/solipacs webserver, uniweb, ebmtech uniweb\/solipacs webserver +2 moreEBM Technologies Uniweb/SoliPACS WebServer - SQL Injection8.8 High
- hgiga oaklouds, oaklouds-organization, oaklouds-organization-2.0 +4 more +6 moreHgiga OAKlouds - Arbitrary File Read And Delete9.8 Critical
- hgiga oaklouds, oaklouds-organization-2.0, oaklouds-organization-3.0 +2 more +4 moreHgiga OAKlouds - Command Injection9.8 Critical
- e-web fs-ezviewer, e-webinformationco. fs-ezviewer(web) +1 moreEC-WEB FS-EZViewer(Web) - SQL Injection8.8 High
mrubyOSS-FuzzHeap-buffer-overflow in mrb_memsearchNo scorelibxml2OSS-FuzzHeap-use-after-free in xmlRemoveIDNo scoremrubyOSS-FuzzHeap-buffer-overflow in mrb_memsearchNo score- flusityDirectory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute...9.8 Critical
- tenda ac10 firmwareTenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in...4.6 Medium
- vitalpbxAn issue in VitalPBX v.3.2.4-5 allows an attacker to execute arbitrary code via a crafted payload...7.2 High
- yonyouSQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9...5.9 Medium
- ausweisapp online-ausweis-funktionThe Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15...9.6 Critical
- windriver vxworksAn issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX...7.5 High
- helmDependency management path traversal in helm6.4 Medium
mbedtlsMageiaUpdated mbedtls packages fix security vulnerabilitiesNo score- hp inc. certain hp desktop pc products, hp elite mini 600 g9 firmware, elite mini 800 g9 firmware +35 more +37 morePotential vulnerabilities have been identified in certain HP Desktop PC products using the HP...6.4 Medium
- hp inc. certain hp desktop pc products, hp elite mini 600 g9 firmware, elite mini 800 g9 firmware +35 more +37 morePotential vulnerabilities have been identified in certain HP Desktop PC products using the HP...6.4 Medium
- hp inc. certain hp workstation pcs, hp z440 workstation firmware, z640 workstation firmware +1 more +3 moreA potential security vulnerability has been identified in the system BIOS for certain HP...7.9 High
- canonical lxd, tianocore edk2 +1 moreAn insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS...6.7 Medium
- tenable security centerHTML Injection Vulnerability5.9 Medium
- tenable security centerCommand Injection Vulnerability in Tenable Security Center7.2 High
- squid-cache squid, netapp bluexp +1 moreDenial of Service in HTTP Header parser in squid proxy5.3 Medium
- joinmastodon mastodonDestroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodon3.1 Low
- joinmastodon mastodonExternal OpenID Connect Account Takeover by E-Mail Change in mastodon4.2 Medium
- github enterprise serverImproper Authorization in GitHub Enterprise Server allowed unauthorized workflow execution7.1 High
- cksource ckeditor 4, drupal ckeditor 4 lts - wysiwyg html editor +1 moreCKEditor 4 LTS - WYSIWYG HTML editor - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-0095.4 Medium
- Show moreLoading…