CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- osuuu lightpictureosuuu LightPicture TokenVerify.php handle hard-coded key5.6 Medium
- codeastro online job portalSourceCodester Online Job Portal Manage Walkin Page ManageWalkin.php cross site scripting3.5 Low
- apache james, apache software foundation james server +1 moreSMTP smuggling in Apache James7.1 High
- byzoro smart s42 management platformByzoro Smart S42 Management Platform userattestation.php unrestricted upload4.7 Medium
- thales sentinel hasp ldk, thalesgroup safenet sentinel hasp, safenet sentinel ldk +2 morePrivilege Escalation in Thales SafeNet Sentinel HASP LDK7.8 High
crayoncrates.iocrayon: ObjectPool creates uninitialized memory when freeing objects7.5 HighopensslUbuntuopenssl updateNo score- frenify categorify, categorify – wordpress media library category & file manager +1 moreCategorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxRenameCategory4.3 Medium
- frenify categorify, categorify – wordpress media library category & file manager +1 moreCategorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxDeleteCategory4.3 Medium
- frenify categorify, categorify – wordpress media library category & file manager +1 moreCategorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxClearCategory4.3 Medium
- frenify categorify, categorify – wordpress media library category & file manager +1 moreCategorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxAddCategory4.3 Medium
- frenify categorify, categorify – wordpress media library category & file manager +1 moreCategorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxClearCategory4.3 Medium
- frenify categorify, categorify – wordpress media library category & file manager +1 moreCategorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxUpdateFolderPosition4.3 Medium
- frenify categorify, categorify – wordpress media library category & file manager +1 moreCategorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxRenameCategory4.3 Medium
- frenify categorify, categorify – wordpress media library category & file manager +1 moreCategorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxDeleteCategory4.3 Medium
- frenify categorify, categorify – wordpress media library category & file manager +1 moreCategorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxUpdateFolderPosition4.3 Medium
- thales safenet authentication clientPrivilege Escalation in SafeNet Authentication Client7.8 High
- thales safenet authentication clientPrivilege Escalation in SafeNet Authentication Client Installer7.8 High
- linux, linux kernel +1 moremm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()'5.5 Medium
- linux, linux kernel +1 morenet: fix use-after-free in tw_timer_handler7.8 High
- linux, linux kernel +1 morebinder: fix async_free_space accounting for empty parcels5.5 Medium
- linux, linux kernel +1 morei2c: validate user data in compat ioctl3.3 Low
- linux, linux kernel +1 moreusb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.7.8 High
- linux, linux kernel +1 moreInput: appletouch - initialize work before device registration5.5 Medium
- linux, linux kernel +1 morenet/mlx5e: Wrap the tx reporter dump callback to extract the sq5.5 Medium
- linux, linux kernel +1 moreusb: mtu3: fix list_head check warning5.5 Medium
- linux, linux kernel +1 moresctp: use call_rcu to free endpoint7.8 High
- linux, linux kernel +1 moreparisc: Clear stale IIR value on instruction access rights trap5.5 Medium
- linux, linux kernel +1 morenitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert5.5 Medium
- linux, linux kernel +1 moreALSA: hda: intel-sdw-acpi: harden detection of controller5.5 Medium
- linux, linux kernel +1 morenet/smc: fix kernel panic caused by race of smc_sock7.8 High
- linux, linux kernel +1 moreNFC: st21nfca: Fix memory leak in device probe and remove5.5 Medium
- linux, linux kernel +1 morefs/mount_setattr: always cleanup mount_kattr5.5 Medium
- linux, linux kernel +1 moreKEYS: trusted: Fix TPM reservation for seal/unseal7.8 High
- linux, linux kernel +1 morelocking/qrwlock: Fix ordering in queued_write_lock_slowpath()7.8 High
- apache james, james server +1 moreApache James server: Privilege escalation via JMX pre-authentication deserialisation9.8 Critical
- 3uu shariff wrapperShariff Wrapper < 4.6.10 - Admin+ Stored XSS6.1 Medium
- jetbackupJetBackup < 2.0.9.9 - Directory Listing Exposing Backups7.5 High
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreSpiffy Calendar < 4.9.9 - Broken Access Control5.3 Medium
- pagelayer, unknown page builder: pagelayer +1 morePageLayer < 1.8.1 - Admin+ Stored XSS4.8 Medium
- jeroensormani wp dashboard notesWPDashboardNotes < 1.0.11 - Unauthorised Deletion of Private Notes4.3 Medium
- eyecix jobsearch wp job board, unknown wp jobsearch, wpjobsearch wordpress +2 moreJobSearch WP Job Board < 2.3.4 - Authentication Bypass7.5 High
- rednao smart formsSmart Forms < 2.6.87 - Subscriber+ Arbitrary Entry Deletion6.1 Medium
- eyecix jobsearch wp job board, unknown wp jobsearch +1 moreJobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE7.5 High
- danialhatami persian fontsPersian Fonts <= 1.6 - Admin+ Stored XSS6.1 Medium
- unknown fatal error notifyFatal Error Notify < 1.5.3 - Subscriber+ Test Error Email Sending6.1 Medium
- apache ambariApache Ambari: authenticated users could perform command injection to perform RCE8.8 High
- linux, linux kernel +1 moredmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback5.5 Medium
- linux, linux kernel +1 moredmaengine: idxd: fix wq size store permission state5.5 Medium
- linux, linux kernel +1 moredmaengine: idxd: clear MSIX permission entry on shutdown5.5 Medium
- Show moreLoading…