CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- linux, linux kernel +1 moredmaengine: idxd: fix wq cleanup of WQCFG registers5.5 Medium
- linux, linux kernel +1 moreixgbe: Fix NULL pointer dereference in ethtool loopback test5.5 Medium
- linux, linux kernel +1 morenetfilter: nft_limit: avoid possible divide error in nft_limit_init5.5 Medium
- linux, linux kernel +1 moreixgbe: fix unbalanced device enable/disable in suspend/resume5.5 Medium
- linux, linux kernel +1 morenetfilter: nftables: clone set element expression template7.8 High
- linux, linux kernel +1 morenet: Make tcp_allowed_congestion_control readonly in non-init netns7.3 High
- linux, linux kernel +1 morech_ktls: Fix kernel panic9.8 Critical
- linux, linux kernel +1 moreARM: 9063/1: mm: reduce maximum number of CPUs if DEBUG_KMAP_LOCAL is enabled7.0 High
- linux, linux kernel +1 moreARM: footbridge: fix PCI interrupt mapping5.5 Medium
- linux, linux kernel +1 morebpf: Use correct permission flag for mixed signed bounds arithmetic7.1 High
- wpdeveloper notificationx, wpdevteam notificationx – fomo, live sales notification, woocommerce sales popup, gdpr, social proof, announcement banner & floating notification bar +1 moreNotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection9.8 Critical
- villatheme thank you page customizer for woocommerce – increase your sales, woocommerce thank you page customizer +1 moreThank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution5.4 Medium
- villatheme thank you page customizer for woocommerce – increase your sales, woocommerce thank you page customizer +1 moreThank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Data Export4.3 Medium
- mintplexlabs anythingllm, mintplex-labs mintplex-labs/anything-llm +1 moreCollection of internally resolving IPs7.7 High
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- mitsubishi electric corporation cc-link ie tsn - anywireaslink bridge module nz2aw1gnal, cc-link ie tsn - cc-link ie field network bridge module nz2gn-gfb, cc-link ie tsn analog-digital converter module nz2gn2b-60ad4 +224 more +226 moreInsufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation...5.3 Medium
igraphOSS-FuzzGlobal-buffer-overflow in igraph_dl_yylexNo score- athemeAtheme 7.2.12 contains a memory leak vulnerability in /atheme/src/crypto-benchmark/main.c.7.5 High
- liblas, fedoraproject fedora +1 morelibLAS 1.8.1 contains a memory leak vulnerability in /libLAS/apps/ts2las.cpp.7.5 High
- gl-i x1200, gl-inet 0300, a1300 +50 more +52 moreAn issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via...7.5 High
- bonitasoft bonita webCross Site Scripting vulnerability in Bonitasoft, S.A v.7.14. and fixed in v.9.0.2, 8.0.3, 7.15.7...6.1 Medium
- msaad1999 klik socialmediawebsiteA reflected cross-site scripting (XSS) vulnerability in SocialMediaWebsite v1.0.1 allows...6.1 Medium
- msaad1999 klik socialmediawebsiteA reflected cross-site scripting (XSS) vulnerability in SocialMediaWebsite v1.0.1 allows...6.1 Medium
- ibarn project ibarn, msaad1999 klik socialmediawebsite +1 moreA reflected cross-site scripting (XSS) vulnerability in zhimengzhe iBarn v1.5 allows attackers to...5.4 Medium
- fullstackhero webapi boilerplate, .net 9 starter kit +1 moreFullStackHero's WebAPI Boilerplate host header injection vulnerability8.1 High
- myprestamodules simpleimportproduct, product catalog \(csv\, excel\) import +1 moreIn the module "Product Catalog (CSV, Excel) Import" (simpleimportproduct) <= 6.7.0 from...9.1 Critical
- communitydeveloper import\/update bulk product from any csv\/excel file pro, prestashop import\/update bulk product +1 moreIn the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up to...9.8 Critical
- common-services so flexibiliteIn the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop < 4.1.26, a...5.9 Medium
- prestaworld account manager, prestasalesmanager +1 moreIn the module "Account Manager | Sales Representative & Dealers | CRM" (prestasalesmanager) up to...7.5 High
- zenmlZenML Server Remote Privilege Escalation Vulnerability8.8 High
- intelliants subrionWithdrawn Advisory: Subrion CMS vulnerable to SQL Injection9.8 Critical
- intelliants subrion cmsSubrion CMS vulnerable to Cross Site Scripting6.1 Medium
- bulkstream srelayIn Srelay (the SOCKS proxy and Relay) v.0.4.8p3, a specially crafted network payload can trigger...7.5 High
- xiaocheng-keji 71cmsCross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary...6.1 Medium
- innovaphone pbxAn issue was discovered on Innovaphone PBX before 14r1 devices. It provides different responses...5.3 Medium
- linlinjava litemallSQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain...7.2 High
- carmelo computer book storeCode-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID.8.3 High
- code-projects scholars tracking systemCode-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status...5.4 Medium
- carmelo computer book storeCode-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN.7.8 High
- code-projects simple stock systemCode-projects Simple Stock System 1.0 is vulnerable to SQL Injection.9.8 Critical
- likeshopSQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL...7.2 High
- lopalopa dynamic lab management systemSQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote...8.6 High
- linksys e1700 firmwareAn issue was discovered in Linksys Router E1700 version 1.0.04 (build 3), allows authenticated...8.0 High
- linksys e1700 firmwareAn issue was discovered in Linksys Router E1700 1.0.04 (build 3), allows authenticated attackers...6.1 Medium
- code-projects student enrollmentAn arbitrary file upload vulnerability in the Update/Edit Student's Profile Picture function of...9.8 Critical
- lfprojects minderMinder trusts client-provided mapping from repo name to upstream ID4.6 Medium
- vyperlang vyperVyper extract32 can ready dirty memory3.7 Low
- vyperlang vyperVyper _abi_decode Memory Overflow3.7 Low
@nfid/embednpm@nfid/embed has compromised private key due to @dfinity/auth-client producing insecure session keys9.1 Criticalcom.linecorp.centraldogma:centraldogma-server-auth-samlMavenSAML authentication bypass due to missing validation on unsigned SAML messages9.1 Critical- Show moreLoading…