CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP HTTP Header Can Expose Versions5.3 Medium
- debian linux, linux kernel +1 morenetfilter: nft_set_rbtree: skip end interval element from gc7.8 High
- linux, linux kernel, netapp ontap tools +2 morenetfilter: nft_set_rbtree: skip sync GC for new elements in this transaction7.8 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal vulnerable to Denial of Service5.0 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal has a Stored XSS with Blog entries (Insecure defaults)9.0 Critical
- totolink x6000r, x6000r firmware +1 moreTotolink X6000R shadow hard-coded credentials2.5 Low
- openvpn connectThe nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not...7.8 High
- imaging data commons libdicomA use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data...8.1 High
- imaging data commons libdicomA use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data...8.1 High
- apache dolphinschedulerApache DolphinScheduler: Arbitrary File Read Vulnerability7.5 High
- apache dolphinschedulerApache DolphinScheduler: Session do not expire after password change6.5 Medium
- apache dolphinschedulerApache DolphinScheduler: Insecure TLS TrustManager used in HttpUtil7.3 High
- apache dolphinschedulerRemote Code Execution in Apache Dolphinscheduler9.8 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal defaults to a low work factor for the default password hashing algorithm8.1 High
- oppo usercenter credit sdk, usercenter credit software development kit +1 moreOPPO Usercenter Credit sdk9.1 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal has an XXE vulnerability in Java2WsddTask._format8.0 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Allows Templates to be Viewed via the UI or API5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Allows Authenticated Users with View Permissions to Edit Permissions6.5 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Information Disclosure Vulnerability in the Control Panel4.3 Medium
- frentix openolat, frentix gmbh openolat lms +1 moreStored Cross-Site Scripting (XSS) within the Media Center5.4 Medium
- frentix openolat, frentix gmbh openolat lms +1 moreMultiple Stored Cross-Site Scripting Vulnerabilities5.4 Medium
- spring security, vmware spring security +1 moreCVE-2024-22234: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated7.4 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Does Not Properly Restrict Membership to Child Site Based on Parent Site Options5.4 Medium
- liferay dxp, digital experience platform +1 moreLiferay Vulnerable to Open Redirect via Adaptive Media Administration Page6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to Open Redirect in Countries Management's Edit Region Page6.1 Medium
- jackdewey link libraryLink Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting6.5 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode6.4 Medium
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +25 more +27 moreA format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP...8.1 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex h series firmware +24 more +26 moreA format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch...5.7 Medium
- zyxel atp series firmware, nwa50ax firmware, usg flex 50(w) series firmware +45 more +47 moreA post-authentication command injection vulnerability in the file upload binary in Zyxel ATP...7.2 High
- zyxel atp series firmware, usg flex series firmware, atp100 firmware +18 more +20 moreA null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4...6.5 Medium
- hitachi global link managerEL Injection Vulnerability in Hitachi Global Link Manager7.6 High
- electron-pdfelectron-pdf 20.0.0 - Local File Read via Server Side XSS7.5 High
readstatOSS-FuzzHeap-buffer-overflow in sav_process_rowNo score- mrcmsSQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via...6.5 Medium
- mz-automation lib60870, libiec61850 +1 moreBuffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to...6.2 Medium
- novel-plusAn arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1...9.8 Critical
- tug tex livetexlive-bin commit c515e was discovered to contain heap buffer overflow via the function...8.1 High
- elfutils project elfutilselfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef()...4.0 Medium
- opennav nav2, openrobotics robot operating system +1 moreInappropriate pointer order of map_sub_ and map_free(map_) (amcl_node.cpp) in Open Robotics...8.1 High
- opennav nav2, openrobotics robot operating system +1 moreInappropriate pointer order of laser_scan_filter_.reset() and tf_listener_.reset() (amcl_node.cpp...9.1 Critical
- opennav nav2, openrobotics robot operating system +1 moreOpen Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to...6.5 Medium
- opennav nav2, openrobotics robot operating system +1 moreOpen Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to...3.3 Low
- qemuBuffer Overflow vulnerability in Qemu before v.8.2.0 allows a remote attacker to execute...8.8 High
- unisys stealthAn issue discovered in Unisys Stealth 5.3.062.0 allows attackers to view sensitive information...7.5 High
- auntvt timoAn issue in Timo v.2.0.3 allows a remote attacker to execute arbitrary code via the filetype...9.8 Critical
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- Show moreLoading…