CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- openvpn, openvpn gui +1 moreThe OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions...8.4 High
- debug-js debugWordPress Debug Plugin <= 1.10 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- john tendik jtrt responsive tables, jtrt responsive tables project responsive tables +1 moreWordPress JTRT Responsive Tables Plugin <= 4.1.9 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- linux, linux kernel +1 moreksmbd: validate session id and tree id in compound request9.1 Critical
- linux, linux kernel +1 moreksmbd: fix out of bounds in init_smb2_rsp_hdr()9.1 Critical
- linux, linux kernel +1 moreksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()9.8 Critical
- frédéric gilles fg drupal to wordpress, fg joomla to wordpress, fg prestashop to woocommerce +2 moreCross-Site Request Forgery (CSRF) vulnerability in FG PrestaShop, FG Drupal and FG Joomla WordPress plugins4.3 Medium
- ideabox creations powerpack pro for elementor, powerpack addons for elementor pro for elementor, powerpackelements powerpack addons for elementor +2 moreWordPress PowerPack Pro for Elementor Plugin < 2.10.8 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- developingtheweb quicksand post filter jquery, mark stockton quicksand post filter jquery plugin +1 moreWordPress Quicksand Post Filter jQuery Plugin Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- themify builder, themifyme themify builder +1 moreWordPress Themify Builder Plugin <= 7.0.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- janis elsts admin menu editorWordPress Admin Menu Editor Plugin <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- blackbam tinymce and tinymce advanced professsional formats and stylesWordPress TinyMCE Professional Formats and Styles Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- 3dflipbook 3d flipbook, iberezansky 3d flipbook – pdf embedder, pdf flipbook viewer, flipbook image gallery +1 more3D FlipBook – PDF Flipbook WordPress <= 1.15.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Bookmarks6.4 Medium
- presstigers simple job boardSimple Job Board <= 2.10.8 - Missing Authorization to Unauthenticated Information Disclosure5.3 Medium
- mondula multi step formWordPress Multi Step Form Plugin <= 1.7.18 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- apple macos, tvos, watchos +3 more +5 moreThe issue was addressed with improved bounds checks. This issue is fixed in watchOS 10.1, macOS...7.8 High
- apple macos, tvos, ios and ipados +2 more +4 moreThe issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.1,...7.8 High
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS...5.5 Medium
- apple ipados, macos, tvos +3 more +5 moreThe issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14...5.5 Medium
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1. An...7.5 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS...5.5 Medium
- apple macos, watchos, ios and ipados +2 more +4 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple macos, tvos, watchos +3 more +5 moreThis issue was addressed with improved state management. This issue is fixed in tvOS 17.1,...5.5 Medium
- apple ios, ipados, macos +5 more +7 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple ios and ipados, ipad os, iphone os +2 moreThis issue was addressed with improved state management. This issue is fixed in iOS 17.1 and...4.6 Medium
- apple ios and ipados, ipad os, iphone os +2 moreThe issue was addressed with improved handling of caches. This issue is fixed in iOS 17.1 and...4.3 Medium
- apple macos, safari, ios and ipados +5 more +7 moreAn inconsistent user interface issue was addressed with improved state management. This issue is...4.3 Medium
- apple macosAn access issue was addressed with improvements to the sandbox. This issue is fixed in macOS...8.6 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS...5.5 Medium
- apple macos, watchos, ios and ipados +2 more +4 moreA privacy issue was addressed with improved handling of files. This issue is fixed in watchOS 10...5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple macos, ios and ipados, ipad os +1 more +3 moreThe issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1,...4.4 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS...5.5 Medium
- apple ios, ios and ipados, ipad os +1 more +3 moreThe issue was addressed with improved bounds checks. This issue is fixed in iOS 17.1 and iPadOS...7.8 High
- apple macos, tvos, watchos +3 more +5 moreA permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 17.1,...5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS...5.5 Medium
- apple macos, ios and ipados, ipad os +1 more +3 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1...5.3 Medium
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed with improved handling of symlinks. This issue is fixed in watchOS 10.1,...7.8 High
- apple ios and ipados, ipad os, iphone os +2 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1...3.3 Low
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS...5.5 Medium
- vmware aria operations, cloud foundation +1 moreVMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor...6.7 Medium
- gsheetconnector woocommerce google sheet connector, westerndeal gsheetconnector for woocommerce – send your orders and products to google sheet in real-time +1 moreWooCommerce Google Sheet Connector <= 1.3.11 - Missing Authorization5.3 Medium
- webfactory database reset, webfactoryltd wp database reset +1 moreDatabase Reset <= 3.22 - Cross-Site Request Forgery to WP Reset Plugin Installation4.7 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Calendar module and Liferay DXP vulnerable to Cross-site Scripting, content spoofing5.4 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a...5.4 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a...8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57...5.4 Medium
- Show moreLoading…