CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
pypop-genomicsPyPIPyPop C extensions possible vulnerability: missing arguments and redundant null pointersNo score- hoppscotchContent spoofing - real Hoppscotch emails5.4 Medium
- showdownjs showdownShowdownjs Denial of Service5.3 Medium
- linux, linux kernel +1 moreIB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests7.8 High
- linux, linux kernel +1 moreHID: usbhid: fix info leak in hid_submit_ctrl5.5 Medium
- linux, linux kernel +1 moref2fs: fix to avoid potential deadlock5.5 Medium
- linux, linux kernel +1 morei2c: Fix a potential use after free7.8 High
- linux, linux kernel +1 morenetlabel: fix out-of-bounds memory accesses9.1 Critical
- medikoo es5-extes5-ext Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`0.0 None
- getkirby kirbyKirby cross-site scripting (XSS) in the link field "Custom" type4.6 Medium
- esphomeESPHome remote code execution via arbitrary file write7.2 High
- oisf libhtp, fedoraproject fedora +1 moreLibHTP unbounded folded header handling leads to denial service7.5 High
- ggerganov llama.cppA heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY...8.8 High
- ggerganov llama.cppA heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str...8.8 High
- ggerganov llama.cppA heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors...8.8 High
- ggml llama.cppA heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality...8.8 High
- ggerganov llama.cppA heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality...8.8 High
- wiloke myshopkit, woocommerce coupon popup, smartbar, slide in | myshopkit, myshopkit-popup-smartbar-slidein +2 moreWordPress WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit Plugin <= 1.0.9 is vulnerable to Sensitive Data Exposure5.3 Medium
- oisf suricata, fedoraproject fedora +1 moreSuricata http2: header handling evasion5.3 Medium
- oisf suricata, fedoraproject fedora +1 moreSuricata http: heap use after free with http.request_header and http.response_header keywords7.1 High
- oisf suricata, fedoraproject fedora +1 morecrafted traffic can cause denial of service7.5 High
- bplugins icons font loaderWordPress Icons Font Loader Plugin <= 1.1.4 is vulnerable to Arbitrary File Upload7.2 High
- oisf suricata, fedoraproject fedora +1 moreSuricata's pgsql: memory exhaustion use on record parsing7.5 High
- joomunited wp media folderWordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File Upload9.9 Critical
- skymoonlabs movetoWordPress MoveTo Plugin <= 6.2 is vulnerable to Arbitrary File Upload10.0 Critical
- sysbasics easy checkout field editor, woocommerce easy checkout field editor, fees & discounts, woocommerce easy checkout field editor +2 moreWordPress WooCommerce Easy Checkout Field Editor, Fees & Discounts Plugin <= 3.5.12 is vulnerable to Arbitrary File Upload10.0 Critical
- linux, linux kernel +1 morebinder: signal epoll threads of self-work5.5 Medium
- sma sunny webbox, sunny webbox firmware +1 moreClickjacking vulnerability in Sunny Webbox6.4 Medium
- sma cluster controller, clcon-10 firmware, clcon-s-10 firmware +2 moreCross-Site Request Forgery vulnerability in SMA Cluster Controller8.8 High
- nlnet labs routinator, fedoraproject fedora +1 moreRoutinator terminates when RTR connection is reset too quickly after opening7.5 High
- moxa eds-4008 series, eds-4008 firmware, eds-4009 series +11 more +13 moreEDS-4000/G4000 Series IP Forwarding Vulnerability6.5 Medium
- hexagon qognify vms client viewer, qognify vms client viewer +1 moreLocal Privilege Escalation via DLL Hijacking6.7 Medium
- apache camelApache Camel issue on ExchangeCreatedEvent2.9 Low
- lg electronics signage, lg webos signage +1 moreAbsolute path traversal attack on LG Signage3.0 Low
- lg electronics signage, lg webos signage +1 moreRemote Code Execution attack on LG Signage6.3 Medium
- line corporation armeriaArmeria SAML authentication bypass due to missing validation on unsigned SAML messages9.1 Critical
- code-projects employee management systemSourceCodester Employee Management System myprofile.php sql injection6.3 Medium
- code-projects employee management systemSourceCodester Employee Management System cancel.php sql injection6.3 Medium
- code-projects employee management systemSourceCodester Employee Management System psubmit.php sql injection7.3 High
- rack-cors project rack-cors, rylabs rack cors middleware +1 moreRack CORS Middleware has Insecure File Permissions9.1 Critical
- bentley assetwise alim web, assetwise information integrity server +1 moreIn the Bentley ALIM Web application, certain configuration settings can cause exposure of a user...9.1 Critical
- ijl orjsonorjson does not limit recursion for deeply nested JSON documents7.5 High
- pretixpretix mishandles file validation9.8 Critical
- langchain experimental, langchain-experimental +1 moreLangChain Experimental vulnerable to arbitrary code execution9.8 Critical
- jstrieb url pagesA DOM based cross-site scripting (XSS) vulnerability in the component index.html of jstrieb...6.1 Medium
- tabatkins railroad-diagram generatorA DOM based cross-site scripting (XSS) vulnerability in the component generator.html of tabatkins...6.1 Medium
- web-platform-testsA DOM based cross-site scripting (XSS) vulnerability in the component /dom/ranges/Range-test...6.1 Medium
- No product listedA DOM based cross-site scripting (XSS) vulnerability in the component /beep/Beep.Instrument.js of...6.1 Medium
- mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +5 more +7 moreKerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.5.5 Medium
- mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 moreKerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5...7.5 High
- Show moreLoading…