CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- jupo mezzanineMezzanine allows attackers to bypass access control mechanisms9.8 Critical
- axiosys bento4Bento4 v1.5.1-628 contains a Memory leak on AP4_Movie::AP4_Movie, parsing tracks and added into...6.5 Medium
- libmingA memory leak issue discovered in parseSWF_TEXTRECORD in libming v0.4.8 allows attackers to cause...6.5 Medium
- libmingA memory leak issue discovered in parseSWF_GLYPHENTRY in libming v0.4.8 allows attackers to cause...6.5 Medium
- libmingA memory leak issue discovered in parseSWF_FREECHARACTER in libming v0.4.8 allows attackers to...7.5 High
- libmingA memory leak issue discovered in parseSWF_FILLSTYLEARRAY in libming v0.4.8 allows attackers to...6.5 Medium
- libmingA memory leak issue discovered in parseSWF_DEFINEBUTTON in libming v0.4.8 allows attackers to...6.5 Medium
- couchbase serverCouchbase Server before 7.2.4 has a private key leak in goxdcr.log.7.5 High
- projectworlds visitor management system, visitor management system in php +1 moreSQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a...8.1 High
- webtreesWebtrees Path Traversal vulnerability4.9 Medium
- xnview nconvertBuffer Overflow vulnerability in XNSoft NConvert 7.163 (for Windows x86) allows attackers to...6.5 Medium
- google chrome, v8, fedoraproject fedora +2 moreType Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreType Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to...8.8 High
- ruoyiRuoYi v4.7.8 was discovered to contain a cross-site scripting (XSS) vulnerability via the...4.7 Medium
- dedecmsDedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery (CSRF) in the file manager.8.8 High
- couchbase serverAn issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with...8.6 High
- couchbase serverAn issue was discovered in Couchbase Server before 7.2.4. ns_server admin credentials are leaked...5.3 Medium
- couchbase serverAn issue was discovered in Couchbase Server before 7.2.4. An attacker can bypass SQL++ N1QL cURL...5.4 Medium
- couchbase serverAn issue was discovered in Couchbase Server before 7.2.4. SQL++ cURL calls to /diag/eval are not...9.8 Critical
- couchbase serverAn issue was discovered in Couchbase Server before 7.2.4. cURL calls to /diag/eval are not...9.8 Critical
- couchbase serverCouchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin...7.5 High
- couchbase serverAn issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of...4.3 Medium
- couchbase serverAn issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of...6.5 Medium
- couchbase serverAn issue was discovered in Couchbase Server through 7.1.4 before 7.1.5 and before 7.2.1. There...6.3 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA vulnerability in the web-based management interface of ClearPass Policy Manager could allow a...4.8 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA vulnerability in the web-based management interface of ClearPass Policy Manager could allow a...6.5 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated...6.6 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA vulnerability in the web-based management interface of ClearPass Policy Manager could allow an...6.6 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote...7.2 High
github.com/cosmos/cosmos-sdkGoASA-2024-005: Potential slashing evasion during re-delegationNo score- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote...7.2 High
- hazelcastMissing permission checks on Hazelcast client protocol7.6 High
openmage/magento-ltsPackagistMagento LTS vulnerable to stored XSS in admin file form5.4 Medium- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreImproper validation of document removal parameter8.1 High
github.com/edgelesssys/marblerunGoTransparent TLS may not be applied to Marbles with certain manifest configurations9.1 Critical- azure azure-uamqp-c, microsoft azure uamqp +1 moreAzure IoT Platform Device SDK Double Free Vulnerability9.8 Critical
- linux, linux kernel +1 morebpf: Fix masking negation logic upon negative dst register7.1 High
- linux, linux kernel +1 morenet: qrtr: Avoid potential use after free in MHI send7.8 High
- linux, linux kernel +1 moreovl: fix leaked dentry5.5 Medium
- linux, linux kernel +1 moreperf/core: Fix unconditional security_locked_down() call3.3 Low
- linux, linux kernel +1 morebus: mhi: pci_generic: Remove WQ_MEM_RECLAIM flag from state workqueue5.5 Medium
- linux, linux kernel +1 morebus: mhi: core: Fix invalid error returning in mhi_queue7.8 High
- linux, linux kernel +1 mores390/zcrypt: fix zcard and zqueue hot-unplug memleak5.5 Medium
- linux, linux kernel +1 morevhost-vdpa: fix vm_flags for virtqueue doorbell mapping7.8 High
- linux, linux kernel +1 moreACPI: custom_method: fix potential use-after-free issue7.8 High
- linux, linux kernel +1 moremtd: physmap: physmap-bt1-rom: Fix unintentional stack access7.1 High
- linux, linux kernel +1 morescsi: qla2xxx: Reserve extra IRQ vectors5.5 Medium
- Show moreLoading…