CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- linux, linux kernel +1 morescsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()7.8 High
- linux, linux kernel +1 moremmc: uniphier-sd: Fix a resource leak in the remove function5.5 Medium
- linux, linux kernel +1 moreirqchip/gic-v3: Do not enable irqs when handling spurious interrups5.5 Medium
- linux, linux kernel +1 morecifs: Return correct error code from smb2_get_enc_key7.5 High
- linux, linux kernel +1 morebtrfs: fix race between transaction aborts and fsyncs leading to use-after-free7.8 High
- linux, linux kernel +1 moreriscv/kprobe: fix kernel panic when invoking sys_read traced by kprobe5.5 Medium
- linux, linux kernel +1 morevirtiofs: fix memory leak in virtio_fs_probe()5.5 Medium
- linux, linux kernel +1 moreopenvswitch: fix stack OOB read while fragmenting IPv4 packets8.2 High
- linux, linux kernel +1 morenet/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets7.1 High
- linux, linux kernel +1 moreACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure6.7 Medium
- linux, linux kernel +1 moreNFS: fs_context: validate UDP retrans to prevent shift out-of-bounds7.1 High
- linux, linux kernel +1 moretpm: efi: Use local variable for calculating final log size5.5 Medium
- linux, linux kernel +1 moremd/raid1: properly indicate failure when ending a failed write request7.8 High
- linux, linux kernel +1 moresfc: farch: fix TX queue lookup in TX flush done handling5.5 Medium
- linux, linux kernel +1 moresfc: farch: fix TX queue lookup in TX event handling7.5 High
- linux, linux kernel +1 moresfc: adjust efx->xdp_tx_queue_count with the real number of initialized queues5.5 Medium
- linux, linux kernel +1 moreext4: always panic when errors=panic is specified5.5 Medium
- linux, linux kernel +1 moremedia: staging/intel-ipu3: Fix memory leak in imu_fmt5.5 Medium
- linux, linux kernel +1 moremedia: staging/intel-ipu3: Fix set_fmt error handling7.8 High
- linux, linux kernel +1 moreio_uring: fix shared sqpoll cancellation hangs5.5 Medium
- linux, linux kernel +1 moreusb: dwc3: core: Do core softreset when switch mode5.5 Medium
- linux, linux kernel +1 moretools/power turbostat: Fix offset overflow issue in index converting5.5 Medium
- linux, linux kernel +1 moretracing: Restructure trace_clock_global() to never block5.5 Medium
- linux, linux kernel +1 moredm rq: fix double free of blk_mq_tag_set in dev remove after table load fails7.8 High
- linux, linux kernel +1 moremedia: dvbdev: Fix memory leak in dvb_media_device_free()5.5 Medium
- linux, linux kernel +1 morethermal/drivers/cpufreq_cooling: Fix slab OOB issue5.5 Medium
- redhat keycloak, red hat build of keycloak, single sign-on 7 +2 moreKeycloak-core: dos via account lockout3.7 Low
- vmware fusion, workstation +1 moreOut-of-bounds read vulnerability5.9 Medium
- sourcecodester web-based student clearance systemSourceCodester Web-Based Student Clearance System Edit User Profile Page edit-admin.php sql injection4.7 Medium
- sourcecodester web-based student clearance system, webbased student clearance system +1 moreSourceCodester Web-Based Student Clearance System login.php sql injection6.3 Medium
- mayurik free and open source inventory management systemSourceCodester Free and Open Source Inventory Management System search_sales_report.php sql injection6.3 Medium
- ctcms project ctcmsCtcms Upsys.php unrestricted upload5.0 Medium
- acronis cyber protect 16, cyber protect +1 moreStored cross-site scripting (XSS) vulnerability in unit name. The following products are affected...6.1 Medium
- acronis cyber protect 16, cyber protect +1 moreSelf cross-site scripting (XSS) vulnerability in storage nodes search field. The following...1.9 Low
- apache ambariApache Ambari: authenticated users could perform XXE to read arbitrary files on the server6.5 Medium
- acronis cyber protect 16, cyber protect +1 moreSensitive information disclosure due to excessive collection of system information. The following...3.3 Low
- acronis cyber protect 16, cyber protect +1 moreStored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage....3.1 Low
- acronis cyber protect 16, cyber protect +1 moreSensitive information disclosure due to insecure folder permissions. The following products are...5.5 Medium
- codeastro membership management systemCodeAstro Membership Management System get_membership_amount.php sql injection6.3 Medium
- apache james mime4jApache James Mime4J: Mime4J DOM header injection5.3 Medium
- oretnom23 simple student attendance systemSourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injection6.3 Medium
- railsPossible Sensitive Session Information Leak in Active Storage5.3 Medium
- progress openedgeAuthentication Bypass in OpenEdge Authentication Gateway and AdminServer10.0 Critical
- railsRails Possible XSS Vulnerability in Action Controller6.1 Medium
- codeastro online job portalSourceCodester Online Job Portal Manage Job Page ManageJob.php cross site scripting3.5 Low
- railsRails possible ReDoS vulnerability in Accept header parsing in Action Dispatch7.5 High
- osuuu lightpictureosuuu LightPicture Setup.php unrestricted upload4.7 Medium
- apache auroraApache Aurora: padding oracle can allow construction an authentication cookie9.1 Critical
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreDownload and export of file via default user role7.1 High
- teamviewer remote, remote full client, remote host +2 moreIncomplete protection of personal password settings7.3 High
- Show moreLoading…