CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- atlassian assets discovery data centerThis High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all...7.2 High
- atlassian confluence data center, confluence server +1 moreThis High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data...8.5 High
- ciliumCilium has unencrypted ingress/health traffic when using Wireguard transparent encryption6.1 Medium
- vmware enhanced authentication plugin, enhanced authentication plug-in (eap) +1 moreSession Hijack Vulnerability in Deprecated EAP Browser Plugin7.8 High
- vmware enhanced authentication plug-in (eap), enhanced authentication plugin +1 moreArbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin9.6 Critical
- fit2cloud jumpserverJumpServer Open Redirect Vulnerability4.3 Medium
- decidimDecidim vulnerable to cross-site scripting (XSS) in the dynamic file uploads6.3 Medium
- decidim, scambra devise invitable +1 moreDecidim's devise_invitable gem vulnerable to circumvention of invitation token expiry period5.7 Medium
- hp inc. certain laserjet pro, hp enterprise laserjet, hp laserjet managed printersCertain LaserJet Pro, HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Buffer Overflow, Potential Remote Code Execution9.8 Critical
- ubiquiti inc unifi access points, unifi express, unifi lte backup +2 more +4 moreA malformed discovery packet sent by a malicious actor with preexisting access to the network...7.5 High
- decidimDecidim vulnerable to possible CSRF attack at questionnaire templates preview4.5 Medium
- decidimDecidim has race condition in Endorsements3.1 Low
- joomla joomla\!, joomla! project cms +1 more[20240202] - Core - Open redirect in installation application4.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20240204] - Core - XSS in mail address outputs6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20240203] - Core - XSS in media selection fields6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20240201] - Core - Insufficient session expiration in MFA management views6.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20240205] - Core - Inadequate content filtering within the filter code6.5 Medium
- netiq client login extension, opentext netiq client login extension +1 moreElevation of Privilege attack on NetIQ Client login extension7.1 High
- libbiosig project libbiosig, fedoraproject fedora +1 moreAn out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The...9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreA double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig...9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreA double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The...9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreA heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig...9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreAn integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig...9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreAn integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig...9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreAn out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig...9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreA use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project...9.8 Critical
- apache camelApache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository9.8 Critical
- apache camelApache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository7.8 High
- weston embedded uc-tcp-ip, silicon labs gecko platform +1 moreA denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston...5.9 Medium
- weston embedded uc-tcp-ip, silicon labs gecko platform +1 moreA denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston...5.9 Medium
- weston embedded uc-http, silabs gecko platform, gecko software development kit +2 moreA heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston...10.0 Critical
- weston embedded uc-tcp-ipA double-free vulnerability exists in the IP header loopback parsing functionality of Weston...8.7 High
- emerson data record ad, flexlogger, g web development software +6 more +8 moreIncorrect directory permissions for the shared NI RabbitMQ service may allow a local...7.8 High
- emerson data record ad, flexlogger, g web development software +5 more +7 moreIncorrect permissions for shared NI SystemLink Elixir based services7.8 High
- ibm common licensingIBM Common Licensing information disclosure4.0 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP vulnerable to theft of hashed password6.5 Medium
- mozilla firefoxMemory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory...8.1 High
- mozilla firefoxThe incorrect object was checked for NULL in the built-in profiler, potentially leading to...6.5 Medium
- mozilla firefoxWhen opening a website using the `firefox://` protocol handler, SameSite cookies were not...8.3 High
- mozilla firefoxThe `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious website could have used a combination of exiting fullscreen mode and ...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf a website set a large custom cursor, portions of the cursor could have overlapped with the...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA website could have obscured the fullscreen notification by using a dropdown select input...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen storing and re-accessing data on a networking channel, the length of buffers may have been...7.5 High
- fortinet fortimanager, fortianalyzer +1 moreA relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0...8.6 High
- liferay dxp, portal, ibexa digital experience platform +1 more +3 moreLiferay Portal and Liferay DXP User Enumeration Vulnerability5.3 Medium
- Show moreLoading…