CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- greenpau caddy-security, github.com\/greenpau\/caddy-security +1 moreAuthentication Bypass by Spoofing in github.com/greenpau/caddy-security5.4 Medium
- authcrunch caddy-securityImproper Restriction of Excessive Authentication Attempts in github.com/greenpau/caddy-security4.8 Medium
- greenpau caddy-securityImproper Neutralization of HTTP Headers in github.com/greenpau/caddy-security4.3 Medium
- authcrunch caddy-security, caddy security +1 moreServer-Side Request Forgery in github.com/greenpau/caddy-security5.3 Medium
- greenpau caddy-securityOpen Redirect in github.com/greenpau/caddy-security5.4 Medium
- authcrunch caddy-securityInsufficient Session Expiration in github.com/greenpau/caddy-security4.8 Medium
- authcrunch caddy-securityCross-site Scripting in github.com/greenpau/caddy-security6.1 Medium
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...6.1 Medium
- oracle business intelligence publisher, oracle corporation bi publisher (formerly xml publisher) +1 moreVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). ...5.4 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). ...4.4 Medium
- oracle installed baseVulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component:...5.4 Medium
- oracle agile product lifecycle management for processVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle...7.3 High
- oracle agile product lifecycle management (plm), agile plm framework, agile product lifecycle management +2 moreVulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The...8.8 High
- oracle customer interaction historyVulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite ...6.1 Medium
- oracle customer interaction historyVulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite ...6.1 Medium
- oracle common applicationsVulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component:...5.4 Medium
- oracle knowledge managementVulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component:...5.4 Medium
- oracle installed baseVulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: HTML UI...6.1 Medium
- oracle corporation crm technical foundation, oracle customer relationship management technical foundation +1 moreVulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite ...4.3 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...4.3 Medium
- oracle installed baseVulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component:...6.1 Medium
- oracle installed baseVulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component:...6.1 Medium
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...7.5 High
- oracle application object libraryVulnerability in the Oracle Application Object Library product of Oracle E-Business Suite ...6.5 Medium
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...8.6 High
- oracle enterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager...7.5 High
- oracle application object libraryVulnerability in the Oracle Application Object Library product of Oracle E-Business Suite ...5.3 Medium
- oracle business intelligence, oracle corporation business intelligence enterprise edition +1 moreVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics ...5.4 Medium
- oracle audit vault and database firewallVulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported...2.6 Low
- oracle audit vault and database firewallVulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported...7.5 High
- oracle web applications desktop integratorVulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business...6.1 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...2.7 Low
- oracle database server, oracle corporation database - enterprise edition +1 moreVulnerability in the Java VM component of Oracle Database Server. Supported versions that are...6.5 Medium
- oracle zfs storage appliance kit, oracle corporation sun zfs storage appliance kit (ak) software +1 moreVulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component:...4.3 Medium
tarantoolOSS-FuzzSegv on unknown address in lj_BC_RET1No score- totolink x5000r firmwareAn issue in TOTOLINK X5000R V.9.1.0u.6369_B20230113 allows a remote attacker to cause a denial of...7.5 High
- redaxoCode injection in REDAXO7.2 High
- bluditCross Site Scripting (XSS) vulnerability in Bludit CMS version 3.15, allows remote attackers to...4.8 Medium
- teltonika trb140 firmware, trb141 firmware, trb142 firmware +2 more +4 moreTeltonika TRB1-series devices with firmware before TRB1_R_00.07.05.2 allow attackers to exploit a...8.3 High
- teltonika-networks rut240 firmwareTeltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make...7.0 High
tufPyPItuf's Metadata API: Targets.get_delegated_role() is missing input validationNo score- netapp storagegridReflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)5.9 Medium
- netapp storagegridDenial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)6.5 Medium
- alf, alfio-event alf.io +1 moreCross-Site Scripting (XSS) via File Upload in Alf.io3.5 Low
- netapp snapcenterImproper Authorization Vulnerability in SnapCenter5.4 Medium
- alf, alfio-event alf.io +1 moreInsufficient Session Expiration in alf.io7.6 High
@scrypted/corenpm,@scrypted/servernpm +1 moreGitHub Security Lab (GHSL) Vulnerability Report, scrypted: `GHSL-2023-218`, `GHSL-2023-219`8.3 High- beyondtrust privilege management for windowsPrivilege Management for Windows < 24.1 Information Leak3.3 Low
- rockwell automation factorytalk® service platform, rockwellautomation factorytalk services platform +1 moreRockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality9.0 Critical
- lenovo thinksystem sr670 v2, thinksystem sr670 v2 firmware +1 moreThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in...2.0 Low
- Show moreLoading…