CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- linux, linux kernel +1 morepwm: Fix out-of-bounds access in of_pwm_single_xlate()7.8 High
- debian linux, linux kernel +1 moreKVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache8.8 High
- linux, linux kernel +1 morenet: qualcomm: rmnet: fix global oob in rmnet_policy7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morenet: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events5.5 Medium
- linux, linux kernel +1 moremlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreEDAC/thunderx: Fix possible out-of-bounds string access7.8 High
- linux, linux kernel +1 moreefivarfs: force RO when remounting if SetVariable is not supported5.5 Medium
- linux, linux kernel +1 morebpf: fix check for attempt to corrupt spilled pointer5.5 Medium
- linux, linux kernel +1 moredrm/sched: Fix bounds limiting when given a malformed entity7.8 High
- linux, linux kernel +1 moredrm/amd/display: Fix NULL pointer dereference at hibernate5.5 Medium
- linux, linux kernel +1 moremedia: v4l: async: Fix duplicated list deletion5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreblock: add check that partition length needs to be aligned with block size5.5 Medium
- linux, linux kernel +1 moreserial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed7.8 High
- linux, linux kernel +1 moreserial: imx: fix tx statemachine deadlock5.5 Medium
- linux, linux kernel +1 moreiommu: Don't reserve 0-length IOVA region7.8 High
- linux, linux kernel +1 morenvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length7.5 High
- linux, linux kernel +1 morehisi_acc_vfio_pci: Update migration data pointer correctly on saving/resume7.1 High
- codeastro membership management systemCodeAstro Membership Management System Add Members Tab unrestricted upload4.7 Medium
- codeastro membership management systemCodeAstro Membership Management System Logo unrestricted upload4.7 Medium
- demososo dm enterprise website building systemDemososo DM Enterprise Website Building System Cookie indexDM_load.php dmlogin improper authentication7.3 High
- linux, linux kernel +1 moreksmbd: validate mech token in session setup9.1 Critical
- sitepact contact form 7 extension for klaviyo, sitepact +1 moreWordPress Sitepact's Contact Form 7 Extension For Klaviyo Plugin <= 1.0.5 is vulnerable to SQL Injection7.1 High
- raaj trambadia pexels: free stock photos, raajtram pexels\ +1 moreWordPress Pexels: Free Stock Photos Plugin <= 1.2.2 is vulnerable to Server Side Request Forgery (SSRF)4.9 Medium
- arne franken all in one faviconWordPress All In One Favicon Plugin <= 4.7 is vulnerable to Arbitrary File Deletion6.8 Medium
- extend themes colibri page builderColibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh4.3 Medium
- colibriwp colibri, extend themes colibri wp +1 moreColibri WP <= 1.0.94 - Cross-Site Request Forgery to Limited Plugin Installation4.3 Medium
- extend themes colibri page builderColibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder4.3 Medium
- pagelayer, softaculous page builder: pagelayer – drag and drop website builder +1 morePage Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button4.6 Medium
- socialdriverSocialdriver < 2024 - Prototype Pollution to XSS6.1 Medium
- linux, linux kernel +1 morei2c: i801: Fix block process call transactions7.1 High
- m-files serverDenial of service condition in M-Files Server4.3 Medium
- hcl software sametime chat, hcltech sametime +1 moreHCL Sametime Chat is affected by an unimplemented feature in the UI3.9 Low
- zestard admin side data storage for contact form 7Admin side data storage for Contact Form 7 <= 1.1.1 - Missing Authorization to Unauthenticated Bookmark Status Alteration4.3 Medium
- zestard admin side data storage for contact form 7Admin side data storage for Contact Form 7 <= 1.1.1 - Cross-Site Request Forgery4.3 Medium
- zestard admin side data storage for contact form 7Admin side data storage for Contact Form 7 plugin <= 1.1.1 - Missing Authorization to Unauthenticated Read Status Update5.3 Medium
- zestard admin side data storage for contact form 7Admin side data storage for Contact Form 7 <= 1.1.1 - Authenticated (Admin+) SQL Injection7.2 High
- pivotal software spring framework, spring framework, netapp active iq unified manager +2 moreCVE-2024-22243: Spring Framework URL Parsing with Host Validation8.1 High
- d-link dir-600m c1, dir-600m c1 firmware, dlink dir-600m firmware +2 moreD-Link DIR-600M C1 Telnet Service buffer overflow7.5 High
- limbasLimbas main_admin.php sql injection3.9 Low
- tenable identity exposure, identity exposure secure relay +1 moreDLL Injection in Tenable Identity Exposure Secure Relay7.3 High
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB Web Interface cstecgi.cgi loginAuth stack-based overflow9.8 Critical
- totolink ax3000, x6000r, x6000r ax3000 +1 more +3 moreTotolink X6000R AX3000 shttpd cstecgi.cgi setWizardCfg command injection6.3 Medium
- google chromeInappropriate implementation in Sign-In in Google Chrome prior to 1.3.36.351 allowed a remote...6.5 Medium
- google chromeUse after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker...8.8 High
- google chromeUse after free in DevTools in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to...8.8 High
- hitrontech coda-4582u firmware, coda-4589 firmware +1 moreHitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex...9.8 Critical
- crmeb javaSQL Injection vulnerability in CRMEB crmeb_java v.1.3.4 and before allows a remote attacker to...7.5 High
- yealink configuration encryption toolInsecure AES key in Yealink Configuration Encrypt Tool below verrsion 1.2. A single, vendorwide,...9.8 Critical
- ethercreation ecgeneratebarcode, generate barcode on invoice \/ delivery slip +1 moreIn the module "Generate barcode on invoice / delivery slip" (ecgeneratebarcode) from Ether...8.8 High
- ecomiz survey tmaIn the module "Survey TMA" (ecomiz_survey_tma) up to version 2.0.0 from Ecomiz for PrestaShop, a...7.5 High
- Show moreLoading…