CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- google chromeInappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a...6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote...8.8 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting9.0 Critical
- davidcramer plugin groupsPlugin Groups <= 2.0.6 - Missing Authorization to Unauthenticated Denial of Service6.5 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting9.6 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting9.6 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting9.6 Critical
- dfinity agent-js, icp-js-core +1 moreagent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`9.1 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Message Board widget and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Expando module and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP's Users Admin module vulnerable to stored Cross-site Scripting9.0 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP vulnerable to Cross-site Scripting9.6 Critical
github.com/cosmos/cosmos-sdkGoASA-2024-002: Default `PrepareProposalHandler` may produce invalid proposals when used with default `SenderNonceMempool`5.3 Mediumgithub.com/cosmos/cosmos-sdkGoASA-2024-003: Missing `BlockedAddressed` Validation in Vesting Module6.5 Medium- delskayn rquickjs, surrealdb +1 moreSurrealDB before 1.1.1 Format String via Scripting Functions9.0 Critical
- surrealdbSurrealDB before 1.2.0 Denial of Service via Nonexistent Function7.1 High
- surrealdbSurrealDB before 1.2.1 Denial of Service via Parsing Error7.1 High
docker-clientOSS-FuzzSecurity exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBufferNo score- archerirm archerArcher Platform 6.x before 6.14 P2 HF1 (6.14.0.2.1) contains a reflected XSS vulnerability. A...5.7 Medium
- archer platform, archerirm archer +1 moreArcher Platform 6.8 before 6.14 P2 (6.14.0.2) contains an improper access control vulnerability....4.3 Medium
- churchcrmA XSS vulnerability was found in the ChurchCRM v.5.5.0 functionality, edit your event, where...6.1 Medium
- churchcrmChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection (Time-based) via the...9.8 Critical
- churchcrmChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the EID...5.3 Medium
- churchcrmA reflected cross-site scripting (XSS) vulnerability in ChurchCRM 5.5.0 allows remote attackers...6.1 Medium
- churchcrmChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the...9.8 Critical
- churchcrmChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection (Time-based) via the...9.1 Critical
- churchcrmChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection (Time-based) via the...8.1 High
- churchcrmChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection (Time-based) via the...7.5 High
- terrasoft creatio terrasoft crm, creatio crm creatio +1 moreDirectory Traversal vulnerability in Terrasoft, Creatio Terrasoft CRM v.7.18.4.1532 allows a...7.5 High
- emlog, emlog pro project pro +1 moreThere is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering...6.1 Medium
- slims senayan library management system, slims project slims +1 moreSLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop...4.9 Medium
- he3app he3 appAn issue in He3 App for macOS version 2.0.17, allows remote attackers to execute arbitrary code...9.8 Critical
- wireshark, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Wireshark team Wireshark before v.4.2.0 allows a remote attacker...7.5 High
- wiresharkAn issue in Wireshark team Wireshark before v.4.2.0 allows a remote attacker to cause a denial of...7.5 High
- wireshark, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Wireshark team Wireshark before v.4.2.0 allows a remote attacker...7.5 High
- hackmd codimdHackMD CodiMD <2.5.2 is vulnerable to Denial of Service.7.5 High
- terminalfour formbank, terminalfour +1 moreAn issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and...6.3 Medium
- sigb pmbA SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote...7.2 High
- pmb project pmbFile Upload vulnerability in pmb/camera_upload.php in PMB 7.4.7 and earlier allows attackers to...7.2 High
- pmb project pmbA SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier...9.8 Critical
- pmb project pmbA SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier...9.8 Critical
- td advanced dashboard, tdbank td-advanced-dashboard +1 moreThe TD Bank TD Advanced Dashboard client through 3.0.3 for macOS allows arbitrary code execution...8.4 High
arm-trusted-firmwareAlpineTrusted Firmware-A (TF-A) before 2.10 has a potential read out-of-bounds in the SDEI service. The...4.4 Medium- pmb project pmbSQL injection vulnerability in PMB v.7.4.7 and earlier allows a remote attacker to execute...7.5 High
- pmb services pmbSQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote...9.8 Critical
- tenda ac23 firmwareA stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07...8.0 High
- tenda ac21 firmwareA stack overflow vulnerability in Tenda AC21 with firmware version US_AC21V1.0re_V16.03.08...8.8 High
- Show moreLoading…