CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- utarit solipay mobile, solipay mobile app +1 moreHardcoded Credentals in SoliClub Mobile App7.5 High
- utarit solipay mobile, solipay mobile app +1 moreSQLi in Utarit's Smart Deposit System9.8 Critical
- utarit solipay mobile, solipay mobile app +1 moreSensetive Data Exposure in Utarit's Soliclub7.5 High
- scrapy, scrapy scrapy/scrapy +1 moreAuthorization Header Leak During Cross-Domain Redirect in scrapy/scrapy7.5 High
- postahsil online payment systemSQLi in PosTahsil's Online Payment System9.8 Critical
- scrapy, scrapy scrapy/scrapy +1 moreReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider7.5 High
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreA use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7...9.8 Critical
- fortinet fortiosAn improper certificate validation vulnerability in Fortinet FortiOS 7.0.0 - 7.0.13, 7.2.0 - 7.2...4.4 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet...4.7 Medium
- fortinet forticlientems, forticlient enterprise management server +1 moreAn improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0...7.9 High
- fortinet fortinacAn improper neutralization of input during web page generation ('cross-site scripting') in...6.8 Medium
- vmware salt projectSpecially crafted url can be created which leads to a directory traversal in the salt file server7.7 High
- vmware salt projectSyndic cache directory creation is vulnerable to a directory traversal attack5.0 Medium
- adobe commerceStored admin XSS via PayPal authentication certificate5.4 Medium
- adobe commerceForce high-usage of resources by generating unlimited coupons: Adobe Commerce4.9 Medium
- adobe commerce[Spain] CSRF to delete Requisition Lists at Adobe Commerce4.3 Medium
- adobe commerce[Adobe Commerce] Stored XSS from low privileged admin user on every admin page, bypassing CVE-2023-292979.1 Critical
- adobe commerceCommand injection in data collector backup due to insufficient patching of CVE-2023-382089.1 Critical
- suse manager server module 4.3Insecure handling SSH key in SUSE Manager when bootstrapping new clients6.4 Medium
- dell esi (enterprise storage integrator) for sap lama, enterprise storage integrator for sap lama, enterprise storage integrator for sap landscape management +2 moreDELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information...9.8 Critical
- dell esi (enterprise storage integrator) for sap lama, enterprise storage integrator for sap lama, enterprise storage integrator for sap landscape management +2 moreDELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an improper access...7.3 High
- dell enterprise sonic os, enterprise sonic distribution +1 moreDell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below...9.8 Critical
- shopex ecshopECshop view_sendlist.php sql injection6.3 Medium
- dell smartfabric os10Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection...9.8 Critical
- dell smartfabric os10Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ...9.1 Critical
- adobe substance3d - designer, substance 3d designer +1 moreAdobe Substance 3D Designer PICT Parsing Out-Of-Bounds Read Vulnerability7.8 High
- adobe auditionZDI-CAN-22647: Adobe Audition AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe framemaker publishing serverAdobe FrameMaker Publishing Server Authentication Bypass Vulnerability | CVE-2023-44324 bypass9.8 Critical
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 more[TianfuCup] JP2K Image Parsing Out-Of-Bounds Write7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreTALOS-2023-1901 - Adobe Acrobat Reader FileAttachment PDAnnot destroy use-after-free vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreTALOS-2023-1906 - Adobe Acrobat Reader Font CPAL integer overflow vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 more[TianfuCup] out-of-bounds access vulnerability when parsing jpeg20007.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreTALOS-2023-1908 - Adobe Acrobat Reader Font CharStrings INDEX out-of-bounds read vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 more[ZS-VR-23-360] Adobe Acrobat Reader Parsing OTF font Denial-of-Service Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreTALOS-2023-1909 - Adobe Acrobat Reader Font avar SegmentMaps out-of-bounds read vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreZDI-CAN-22516: Adobe Acrobat Pro DC AcroForm Use-After-Free Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreZDI-CAN-22727: Adobe Acrobat Pro DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreZDI-CAN-22822: Adobe Acrobat Pro DC AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreTALOS-2023-1910 - Adobe Acrobat Reader Font CharStrings CharStringsOffset out-of-bounds read vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreTALOS-2023-1905 - Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreTALOS-2023-1890 - Adobe Acrobat Reader Annot3D object zoom event use-after-free vulnerability7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreAdobe Substance 3D Paint PICT Parsing Access Violation Write Vulnerability7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreAdobe Substance 3D Paint PSD Parsing Out-Of-Bounds Write Vulnerability7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreAdobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability II5.5 Medium
- adobe substance3d - painter, substance 3d painter +1 moreAdobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability III5.5 Medium
- adobe substance3d - painter, substance 3d painter +1 moreAdobe Substance 3D Paint PSD Parsing Out-Of-Bounds Write Vulnerability7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreAdobe Substance 3D Paint RAS File Parsing Out-Of-Bounds Read Vulnerability7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreAdobe Substance 3D Paint ICO Parsing Access Violation Write Vulnerability7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreAdobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability I5.5 Medium
- adobe substance3d - painter, substance 3d painter +1 moreAdobe Substance 3D Painter v9.0.1Build2822 Buffer Overflow Vulnerability7.8 High
- Show moreLoading…