CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). ...4.9 Medium
- mysql, oracle mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql server, netapp active iq unified manager, oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...4.9 Medium
- oracle mysql server, netapp active iq unified manager, oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...4.9 Medium
- oracle mysql server, netapp active iq unified manager, oncommand insight +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- No product listedIn QUIC in RFC 9000, the Latency Spin Bit specification (section 17.4) does not strictly...4.3 Medium
- projeqtorCross Site Scripting (XSS) vulnerability in ProjeQtOr 11.0.2 allows a remote attacker to execute...6.1 Medium
- tenda ax12 firmware, ax3 firmware, ax9 firmware +2 more +4 moreAn access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12...8.8 High
- enhancesoft osticketCross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows...6.1 Medium
- liferay portal, digital experience platform +1 morePrivilege escalation in Liferay Portal6.3 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page8.8 High
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers6.3 Medium
- kumaf pyhtml2pdfpyhtml2pdf 0.0.6 - Local File Read via Server Side XSS7.5 High
- suite crm crm, salesagility suitecrm +1 moreSuite CRM v7.14.2 - RCE via Local File Inclusion9.9 Critical
- torrentpierTorrentpier 2.4.1 - RCE10.0 Critical
- loomioLoomio 2.22.0 - Code injection7.2 High
- agronholm cbor2, fedoraproject fedora +1 moreCBOR2 decoder has potential buffer overflow7.5 High
- prestashopPrestashop vulnerable to path disclosure in JavaScript variable5.8 Medium
- brivo acs100, acs300, acs100 firmware, acs300 firmware +2 moreWeb UI OS Command Injection in Brivo ACS100, ACS3007.4 High
- brivo acs100, acs300, acs100 firmware, acs300 firmware +2 moreLocal Access to Sensitive Data in Brivo ACS100 and ACS3007.1 High
- netapp active iq unified manager, oncommand workflow automation, red hat openshift serverless +35 more +37 moreUndertow: out-of-memory error after several closed connections with wildfly-http-client protocol7.5 High
- zephyrproject zephyrBluetooth characteristic LESC security requirement not enforced without additional flags8.2 High
- dfir-iris iris, iris-web +1 moreImproper Neutralization of Alternate XSS Syntax in iris-web4.6 Medium
- alf, alfio-event alf.io +1 moreIDOR make user can read e-mail log sent by other events7.2 High
- alf, alfio-event alf.io +1 moreIDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERS8.8 High
- misskeyLack of media type verification of Activity Streams objects allows impersonation and takeover of remote accounts7.1 High
- linuxfoundation yocto, yocto project yoctoproject, yoctoproject poky +2 moreYocto Project Security Advisory - BitBake/Toaster8.8 High
- eprosima fast dds, fast-dds +1 moreDisconnect Vulnerability in RTPS Packets Used by SROS29.7 Critical
- renesas arm-trusted-firmware, rcar gen3 v2.5 +1 moreFIP Header Integer Overflow2.0 Low
- fedoraproject fedora, moodle +1 moreMsa-24-0006: idor on dashboard comments block3.5 Low
- fedoraproject fedora, moodle +1 moreMsa-24-0005: csrf risk in language import utility4.3 Medium
- fedoraproject fedora, moodle +1 moreMsa-24-0004: forum export did not respect activity group settings4.3 Medium
- moodle h5p, fedoraproject fedora, moodle +2 moreMsa-24-0003: h5p attempts report did not respect activity group settings4.3 Medium
- fedoraproject fedora, moodle +1 moreMsa-24-0002: forum search accepted random parameters in its url5.3 Medium
- fedoraproject fedora, moodle +1 moreMsa-24-0001: denial of service risk in file picker unzip functionality7.5 High
- pimcore admin-ui-classic-bundle, admin classic bundle +1 morePimcore Host Header Injection in user invitation link8.1 High
io.root.org.postgresql:postgresqlRoot,org.postgresql:postgresqlRoot +1 moreDuplicate Advisory: SQL injection in pgjdbc10.0 Critical- joinmastodon mastodonLack of media type verification of Activity Streams objects allows impersonation of remote accounts8.5 High
- pgjdbc, postgresql jdbc driver, fedoraproject fedora +2 morepgjdbc SQL Injection via line comment generation10.0 Critical
libdav1d-syscrates.iolibdav1d-sys affected by dav1d AV1 decoder integer overflow5.9 Medium- laborofficefreeWeak MySQL database root password in LaborOfficeFree6.8 Medium
- laborofficefreeWeak MySQL database root password in LaborOfficeFree6.8 Medium
- laborofficefreeEncrypted database credentials in LaborOfficeFree6.8 Medium
- laborofficefreeWeak permission vulnerability in LaborOfficeFree4.7 Medium
- videolan dav1d, apple ipados, iphone os +4 more +6 moreInteger overflow in VideoLAN dav1d5.9 Medium
- Show moreLoading…