CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- linux, linux kernel +1 morex86/fpu: Stop relying on userspace for info to fault in xsave buffer5.5 Medium
- linux, linux kernel +1 moresched/membarrier: reduce the ability to hammer on sys_membarrier5.5 Medium
- linux, linux kernel +1 moreext4: regenerate buddy after block freeing failed if under fc replay7.8 High
- linux, linux kernel +1 morephy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP5.5 Medium
- brizy, themefusecom brizy – page builder +1 moreBrizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal4.3 Medium
- unitecms addon libraryAddon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- 2day.sk, webikon superfaktura woocommerce, superfaktura woocommerce +1 moreSuperFaktura WooCommerce <= 1.40.3 - Authenticated (Subscriber+) Blind Server-Side Request Forgery5.4 Medium
- inpsyde backwpup, wp media backwpup – wordpress backup & restore plugin +1 moreBackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password2.2 Low
- apostrophecms sanitize-html, fedoraproject fedora +1 moresanitize-html Information Exposure vulnerability5.3 Medium
- antonkueltz fastecdsaUninitialized Variable in fastecdsa7.5 High
- ericteubert archivist, eteubert archivist – custom archive templates +1 moreArchivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting6.1 Medium
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreImproper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office...6.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability8.2 High
- microsoft edge, edge for android +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- lfprojects mlflowInsufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.7.5 High
- lfprojects mlflowInsufficient sanitization in MLflow leads to XSS when running an untrusted recipe.7.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability4.8 Medium
- intel ethernet adapter complete driver, ethernet controller i225-it firmware, ethernet controller i225-lm firmware +1 more +3 moreImproper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an authenticated user to potentially enable escalation of privilege vi…8.4 High
- intel ethernet controller i225 manageability firmware, ethernet adapter complete driver, ethernet controller i225-it firmware +2 more +4 moreImproper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via…7.2 High
- intel ethernet adapter complete driver, ethernet controller i225-it firmware, ethernet controller i225-lm firmware +1 more +3 moreImproper neutralization in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via lo…7.2 High
- intel ethernet adapter complete driver, ethernet controller i225-it firmware, ethernet controller i225-lm firmware +1 more +3 moreInsufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of pri…7.2 High
- intel ethernet adapter, ethernet controller i225 manageability firmware, ethernet adapter complete driver +3 more +5 moreImproper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unauthenticated user to potentially enable information disclosure…5.3 Medium
- intel ethernet adapter, ethernet controller i225 manageability firmware, ethernet adapter complete driver +3 more +5 moreUncaught exception in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local a…7.2 High
- intel ethernet adapter complete driver, ethernet controller i225-it firmware, ethernet controller i225-lm firmware +1 more +3 moreImproper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable denial of service via local…6.0 Medium
- intel ethernet adapter, ethernet controller i225 manageability firmware, ethernet adapter complete driver +3 more +5 moreImproper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unauthenticated user to potentially enable denial of service via…8.6 High
linux-azureUbuntulinux-azure vulnerabilitiesNo score- oretnom23 simple student attendance systemSourceCodester Simple Student Attendance System ?page=attendance&class_id=1 cross site scripting3.5 Low
- code-projects employee management systemSourceCodester Employee Management System login.php sql injection6.9 Medium
- nelzkie15 complete file management systemSourceCodester Complete File Management System Admin Login Form sql injection7.3 High
- silabs.com ember znet sdk, silabs emberznet, emberznet sdk +2 morePotential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer5.3 Medium
- silabs.com ember znet sdk, silabs emberznet, emberznet sdk +2 morePotential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crash5.3 Medium
- nelzkie15 complete file management systemSourceCodester Complete File Management System Login Form index.php sql injection7.3 High
- ibm aspera consoleIBM Aspera Console SQL injection8.6 High
- code-projects library system, library system project system +1 morecode-projects Library System lost-password.php sql injection7.3 High
- code-projects library systemcode-projects Library System registration.php sql injection7.3 High
- code-projects library systemcode-projects Library System registration.php sql injection7.3 High
- linuxfoundation onnx, fedoraproject fedora +1 moreOnnx Out-of-bounds Read vulnerability4.4 Medium
- linuxfoundation onnx, fedoraproject fedora +1 moreOnnx Directory Traversal vulnerability7.5 High
- code-projects library system, library system project system +1 morecode-projects Library System login.php sql injection7.3 High
- code-projects library system, library management system +1 morecode-projects Library System login.php sql injection7.3 High
- apache dolphinschedulerApache DolphinScheduler: Arbitrary js execution as root for authenticated users8.8 High
- codeastro house rental management systemCodeAstro House Rental Management System User Registration Page cross site scripting4.3 Medium
- silabs emberznet, silabs.com ember znet sdk +1 moreSilicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM6.2 Medium
- codeastro house rental management systemCodeAstro House Rental Management System signing.php sql injection7.3 High
- backstage, linuxfoundation backstage backend-common +1 more`@backstage/backend-common` vulnerable to path traversal through symlinks8.7 High
- codeastro simple voting systemCodeAstro Simple Voting System Backend users.php access control5.3 Medium
- phpgurukul tourism management systemPHPGurukul Tourism Management System user-bookings.php cross site scripting2.4 Low
- code-projects crime reporting systemcode-projects Crime Reporting System police_add.php sql injection5.5 Medium
- code-projects crime reporting system, crime reporting system project reporting system +1 morecode-projects Crime Reporting System inchargelogin.php sql injection7.3 High
- c-ares, fedoraproject fedora +1 morec-ares out of bounds read in ares__read_line()4.4 Medium
- Show moreLoading…