CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- linux, linux kernel +1 moreusb: typec: ucsi: Retrieve all the PDOs instead of just the first 47.1 High
- linux, linux kernel +1 moreiio: core: fix ioctl handlers removal5.5 Medium
- linux, linux kernel +1 moreKVM: nVMX: Always make an attempt to map eVMCS after migration7.8 High
- linux, linux kernel +1 moreKVM: VMX: Disable preemption when probing user return MSRs7.8 High
- linux, linux kernel +1 moredrm/i915: Fix crash in auto_retire5.5 Medium
- linux, linux kernel +1 moremedia: aspeed: fix clock handling logic7.8 High
- linux, linux kernel +1 moremedia: [next] staging: media: atomisp: fix memory leak of object flash5.5 Medium
- linux, linux kernel +1 moremedia: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs()7.8 High
- linux, linux kernel +1 morei2c: cadence: fix reference leak when pm_runtime_get_sync fails5.5 Medium
- linux, linux kernel +1 morei2c: img-scb: fix reference leak when pm_runtime_get_sync fails5.5 Medium
- linux, linux kernel +1 morei2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails5.5 Medium
- linux, linux kernel +1 morei2c: imx: fix reference leak when pm_runtime_get_sync fails5.5 Medium
- linux, linux kernel +1 morei2c: sprd: fix reference leak when pm_runtime_get_sync fails4.7 Medium
- linux, linux kernel +1 morei2c: stm32f7: fix reference leak when pm_runtime_get_sync fails5.5 Medium
- linux, linux kernel +1 morei2c: xiic: fix reference leak when pm_runtime_get_sync fails5.5 Medium
- wpmoose yukiYuki <= 1.3.14 - Cross-Site Request Forgery to Theme Setting Reset4.3 Medium
- s-sols seraphinite acceleratorSeraphinite Accelerator <= 2.20.52 - Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheck6.4 Medium
- wpmoose yukiYuki <= 1.3.13 - Missing Authorization to Authenticated (Subscriber+) Theme Setting Reset4.3 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePrivileged User using traversal to read system files9.6 Critical
- lexmark 6500e, c746, c748 +65 more +67 moreAn input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.9.1 Critical
- lexmark various, 6500e, c746 +65 more +67 moreA vulnerability has been identified in the PostScript interpreter in various Lexmark devices.9.0 Critical
- lexmark various, 6500e, c746 +65 more +67 moreA vulnerability has been identified in the PostScript interpreter in various Lexmark devices.9.0 Critical
- lexmark various, 6500e, c746 +65 more +67 moreA vulnerability has been identified in the PostScript interpreter in various Lexmark devices.9.0 Critical
wasmedgeOSS-FuzzContainer-overflow in WasmEdge::LLVM::Compiler::compileNo score- ibm infosphere information serverIBM InfoSphere Information Server cross-site scripting6.1 Medium
javaparserOSS-FuzzSecurity exception in com.github.javaparser.GeneratedJavaParser.ExpressionNo score- freescout, freescout-helpdesk freescout-helpdesk/freescout +1 moreUnrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout6.1 Medium
- frroutingospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to...6.5 Medium
- webasyst, webasyst webasyst-framework +1 moreWebasyst 2.9.9 has a Cross-Site Scripting (XSS) vulnerability, Attackers can create blogs...5.4 Medium
- livehelperchat, livehelperchat live helper chat +1 morelivehelperchat Server-Side Template Injection9.8 Critical
- mindstellar osclassOsclass 5.1.2 is vulnerable to SQL Injection.7.2 High
- dagg uverifAn issue in uverif v.2.0 allows a remote attacker to obtain sensitive information.5.3 Medium
- mpdf project mpdf, open-emr openemr +1 moreAn issue in open-emr before v.7.0.2 allows a remote attacker to escalate privileges via a crafted...3.5 Low
- piwigoCross Site Scripting vulnerability in Piwigo before v.14.2.0 allows a remote attacker to escalate...5.4 Medium
- asus ac68u, 4g-ac68u firmware +1 moreA Null pointer dereference in usr/sbin/httpd in ASUS AC68U 3.0.0.4.384.82230 allows remote...7.5 High
- codeastro membership management systemAn Unrestricted File Upload vulnerability in CodeAstro Membership Management System in PHP v.1.0...8.8 High
- codeastro membership management systemA Cross Site Scripting (XSS) vulnerability in CodeAstro Membership Management System in PHP v.1.0...6.1 Medium
- codeastro membership management systemA SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a...9.1 Critical
- codeastro membership management systemA SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a...8.8 High
- blestaA path traversal vulnerability in the /path/to/uploads/ directory of Blesta before v5.9.2 allows...7.1 High
- f-logic datacube3F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an...9.8 Critical
- f-logic datacube3F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an...8.8 High
- f-logic datacube3F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability...5.4 Medium
- f-logic datacube3, datacube3 firmware +1 moreF-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory...9.8 Critical
- md1health md1patientA cross-site scripting (XSS) vulnerability in Md1health Md1patient v2.0.0 allows attackers to...6.1 Medium
- sem-cms semcmsSQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code...9.8 Critical
- phpgurukul zoo management systemSQL Injection vulnerability in /zms/admin/changeimage.php in PHPGurukul Zoo Management System 1.0...3.8 Low
- phpgurukul zoo management systemSQL Injection vulnerability in /zms/admin/edit-ticket.php in PHPGurukul Zoo Management System 1.0...9.8 Critical
- phpgurukul user registration \& login and user management system, user registration and login and user management system +1 moreCross Site Scripting vulnerability in Phpgurukul User Registration & Login and User Management...6.1 Medium
- jupo mezzanineMezzanine allows attackers to bypass access controls via manipulating the Host header9.1 Critical
- Show moreLoading…