CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- scrapy, scrapy scrapy/scrapy +1 moreXML External Entity (XXE) Vulnerability in scrapy/scrapy7.5 High
- nodejs undiciBackpressure request ignored in fetch() in Undici6.5 Medium
- manageengine exchange reporter plus, zohocorp manageengine exchange reporter plus +1 moreSQL Injection8.3 High
- dell recoverpoint for virtual machines, recoverpoint for vms +1 moreDell RecoverPoint for Virtual Machines 5.3.x contains an OS Command injection vulnerability. An...7.2 High
- dell recoverpoint for virtual machines, recoverpoint for vms +1 moreDell RecoverPoint for Virtual Machines 5.3.x contains a brute force/dictionary attack...6.5 Medium
- debian linux, fedoraproject fedora, redhat enterprise linux +1 more +3 moreThe implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a...6.5 Medium
- nodejs undiciProxy-Authorization header not cleared on cross-origin redirect in fetch in Undici3.9 Low
- nodejs nodeA vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack...6.5 Medium
- node.js, nodejs node +1 moreThe Node.js Permission Model does not clarify in the documentation that wildcards should be only...5.0 Medium
- node.js, nodejs node, nodejs +2 moreNode.js depends on multiple built-in utility functions to normalize paths provided to node:fs...7.9 High
- nodejs node, nodejs +1 moreNode.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked...7.4 High
- node.js, nodejs node, nodejs +2 moresetuid() does not affect libuv's internal io_uring operations if initialized before the call to...7.3 High
- node.js, nodejs node, nodejs +2 moreThe permission model protects itself against path traversal attacks by calling path.resolve() on...7.9 High
- node.js, nodejs node, netapp astra control center +2 moreA vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP...7.5 High
- node.js, nodejs node +1 moreOn Linux, Node.js ignores certain environment variables if those may have been set by an...7.5 High
- alayacare procura, procura portal +1 morePublicly Known Cryptographic Machine Key In Procura Portal Application8.6 High
- google androidIn applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a...3.3 Low
- google androidIn queryChildDocuments of FileSystemProvider.java, there is a possible way to request access to...6.5 Medium
- google androidIn applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due...3.3 Low
boostOSS-FuzzStack-overflow in boost::read_graphviz_detail::parser::parse_subgraphNo score- react-native-documents document pickerReact Native Document Picker Directory Traversal vulnerability7.8 High
- oscommerce ce phoenix, phoenixcart ce phoenix cart +1 moreA remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20...7.2 High
- cszcms csz cms, cszcms +1 moreAn arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to...9.8 Critical
- firebear studio improved import and export, firebearstudio improved import \& export +1 moreA XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved...7.2 High
- tongda2000 office anywhere, office anywhere 2017 +1 moreTongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the ...9.8 Critical
- beyondtrust privilege management for windowsAn issue was discovered in BeyondTrust Privilege Management for Windows before 24.1. When an low...6.3 Medium
- crestron idocv firmware, idocv idocview +1 moreAn issue in idocv v.14.1.3_20231228 allows a remote attacker to execute arbitrary code and obtain...9.8 Critical
- darktrace threat visualizerDOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6...6.1 Medium
- alanclarke urliteAn issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service (DoS) via a...7.5 High
- yetiforce customer relationship managementYetiForceCRM Directory Traversal vulnerability6.5 Medium
- hazelcastHazelcast Platform permission checking in CSV File Source connector6.5 Medium
- open-mss mission support system, mss +1 morePath Manipulation in file mslib/index.py in MSS7.3 High
- opentext alm octane., alm octane +1 moreImproper Neutralization vulnerability affects OpenText ALM Octane.7.5 High
- microfocus operations agentLocal privilege escalation vulnerability could affect OpenText Operations Agent on Non-Windows platforms.8.8 High
nssTuxCare,nsprTuxCare,nspr-develTuxCare +10 more +12 moreUpdate of nssNo score- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution9.0 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability7.9 High
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability9.6 Critical
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution8.0 High
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability9.6 Critical
- silabs gecko software development kit, silabs.com gsdk +1 moreSilicon Labs EFR32 Bluetooth stack denial of service when sending notifications to multiple clients6.5 Medium
- smartcalc osticky, smartcalc.es osticky component for joomla +1 moreExtension - smartcalc.es - Open redirect vulnerability in osTicky component for Joomla <= 2.2.86.1 Medium
nssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +2 more +4 moreUpdate of nssNo scoremicrocode_ctlTuxCareUpdate of microcode_ctlNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +2 more +4 moreUpdate of nssNo scoremicrocode_ctlTuxCareUpdate of microcode_ctlNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +8 more +10 moreUpdate of nssNo scoreamd64-microcodeTuxCareUpdate of alt-phpNo scoreamd64-microcodeTuxCareUpdate of alt-phpNo score- wolfsslImproper (D)TLS key boundary enforcement5.3 Medium
- Show moreLoading…