CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 moreKerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.5.3 Medium
- fluentd fluentbit, treasuredata fluent bit +1 morefluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia...7.5 High
- libminglibming 0.4.8 contains a memory leak vulnerability in /libming/src/actioncompiler/listaction.c.4.3 Medium
- opendmarcOpenDMARC 1.4.2 contains a null pointer dereference vulnerability in /OpenDMARC/libopendmarc...7.5 High
- emqx nanomqnanomq 0.21.2 contains a Use-After-Free vulnerability in /nanomq/nng/src/core/socket.c.6.5 Medium
- openndsopenNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.5.5 Medium
- tenda ac9 firmwareA Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06...9.8 Critical
- flusityflusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in...6.5 Medium
- itflowCross Site Scripting vulnerability in ITFlow.org before commit v...6.1 Medium
- niushop b2b2c multi-businessSQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows...9.8 Critical
- niushop b2b2c multi-businessSQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers...9.8 Critical
- fontforge, debian linux, fedoraproject fedora +2 moreSplinefont in FontForge through 20230101 allows command injection via crafted archives or...6.5 Medium
- fontforge, debian linux, fedoraproject fedora +2 moreSplinefont in FontForge through 20230101 allows command injection via crafted filenames.4.2 Medium
- innovaphone pbxAn issue was discovered on Innovaphone PBX before 14r1 devices. The password form, used to...6.5 Medium
- nagios xiAn issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted...9.8 Critical
- nagios xiSQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary...9.8 Critical
- tencent cmdb, blueking configuration management database +1 moreTencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery ...8.1 High
- indo sol profinet inspektor nt, indu-sol profinet-inspektor nt firmware +1 moreIn Indo-Sol PROFINET-INspektor NT through 2.4.0, a path traversal vulnerability in the...7.5 High
- indu-sol profinet-inspektor nt, indo sol profinet inspektor nt +1 moreIn Indo-Sol PROFINET-INspektor NT through 2.4.0, a command injection vulnerability in the...9.8 Critical
- bagistoBagisto Cross-Site Request Forgery vulnerability8.8 High
- phpgurukul complaint management systemSourceCodester Complaint Management System Lodge Complaint Section register-complaint.php unrestricted upload6.3 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreUser can manually send request at manager permission to modify system configurations7.1 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreSSRF - file:// unsanitized access to underlying host files9.6 Critical
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreUser can submit message to self-XSS8.1 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePrivilege Escalation in mintplex-labs/anything-llm8.1 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePrevent timing attack for single-user password check7.1 High
- linux, linux kernel +1 moremoxart: fix potential use-after-free on remove path7.8 High
- linux, linux kernel +1 morenet: hso: fix NULL-deref on disconnect regression5.5 Medium
- linux, linux kernel +1 morenet: hso: fix null-ptr-deref during tty device unregistration5.5 Medium
- linux, linux kernel +1 morethermal: core: Fix NULL pointer dereference in zone registration error path5.5 Medium
- linux, linux kernel +1 morecrypto: rsa - add a check for allocation failure5.5 Medium
- linux, linux kernel +1 moreice: Fix some null pointer dereference issues in ice_ptp.c5.5 Medium
- linux, linux kernel +1 moredrm/radeon: check the alloc_workqueue return value in radeon_crtc_init()5.5 Medium
- linux, linux kernel +1 moredrivers/amd/pm: fix a use-after-free in kv_parse_power_table7.8 High
- linux, linux kernel +1 moreclass: fix use-after-free in class_register()7.8 High
- linux, linux kernel +1 moremfd: syscon: Fix null pointer dereference in of_syscon_register()5.5 Medium
- linux, linux kernel +1 morepower: supply: Fix null pointer dereference in smb2_probe5.5 Medium
- mintplexlabs anythingllm, mintplex-labs mintplex-labs/anything-llm, mintplex-labs\/anything-llm +2 moreSSRF on AWS deployed instances of AnythingLLM via /metadata9.9 Critical
gpacOSS-FuzzHeap-buffer-overflow in BS_ReadByteNo score- f-secure email and server security, withsecure atlant, client security +4 more +6 moreCertain WithSecure products allow a Denial of Service because the engine scanner can go into an...7.5 High
- amazon fire osAmazon Fire OS 7 before 7.6.6.9 and 8 before 8.1.0.3 allows Fire TV applications to establish...5.9 Medium
- code-projects employee management systemSourceCodester Employee Management System Project Assignment Report assignp.php cross site scripting3.5 Low
- langchain, langchain-ai langchain-ai/langchain, langchain-ai\/langchain +2 moreServer-side Request Forgery In Recursive URL Loader3.7 Low
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics cross-site scripting5.4 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics Mobile Server denial of service6.5 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics cross-origin resource sharing5.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics cross-site request forgery4.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics cross-site scripting6.1 Medium
- linux, linux kernel +1 morePCI/ASPM: Fix deadlock when enabling ASPM5.5 Medium
- linux, linux kernel +1 moreRevert "kobject: Remove redundant checks for whether ktype is NULL"5.5 Medium
- Show moreLoading…