CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- cassandra-rscassandra-rs non-idiomatic use of iterators leads to use after free7.5 High
- apache supersetApache Superset: Improper authorization validation on dashboards and charts import4.3 Medium
- apache supersetApache Superset: Improper data authorization when creating a new dataset5.0 Medium
- apache supersetApache Superset: Improper Neutralisation of custom SQL on embedded context4.3 Medium
- apache supersetApache Superset: Improper validation of SQL statements allows for unauthorized access to data4.9 Medium
- apache supersetApache Superset: Improper error handling on alerts4.3 Medium
- billminozzi anti hacker, sminozzi disable json api, login lockdown, xmlrpc, pingback, stop user enumeration anti hacker scan +1 moreDisable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan <= 4.52 - Missing Authorization to Authenticated (Subscriber+) Table Truncation4.3 Medium
- billminozzi anti hacker, sminozzi disable json api, login lockdown, xmlrpc, pingback, stop user enumeration anti hacker scan, disable json api login lockdown xml rpc pingback stop user enumeration anit hacker scan +2 moreDisable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan <= 4.51 - Missing Authorization to Unauthenticated IP Address Whitelist6.5 Medium
- scott paterson contact form 7 – paypal & stripe add-on, scottpaterson easy paypal & stripe buy now button, wpplugin paypal \& stripe add-on +2 moreEasy PayPal & Stripe Buy Now Button <= 1.8.3 & Contact Form 7 – PayPal & Stripe Add-on <= 2.1 - Cross-Site Request Forgery to Settings Update4.3 Medium
- acurax under construction / maintenance mode from acurax, under construction \/ maintenance mode +1 moreUnder Construction / Maintenance Mode from Acurax <= 2.6 - Information Exposure5.3 Medium
- wpshopmart coming soon page & maintenance mode, coming soon page \& maintenance mode +1 moreComing Soon Page & Maintenance Mode <= 2.2.1 - Maintenance Mode Bypass5.3 Medium
- envothemes envo's templates & widgets for elementor and woocommerce, envo\'s elementor templates \& widgets for woocommerce +1 moreEnvo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Cross-Site Request Forgery via ajax_plugin_activation4.3 Medium
- samuelkwle page duplicatorPage Duplicator <= 0.1.1 - Missing Authorization to Unauthenticated Post/Page Duplication5.3 Medium
- tatvic conversios.io, conversios: google analytics (ga4), google ads, conversion and analytics tracking for multi-channels +1 moreConversios <= 7.0.7 - Authenticated (Subscriber+) SQL Injection via ee_syncProductCategory8.8 High
- justinsainton wp ecommerce, wp-ecommerce wp-e-commerce +1 moreWP eCommerce <= 3.15.1 - Missing Authorization to Unauthenticated Arbitrary Post Creation5.3 Medium
- envothemes envo's templates & widgets for elementor and woocommerce, envo\'s elementor templates \& widgets for woocommerce +1 moreEnvo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Missing Authorization via templates_ajax_request4.3 Medium
- oliverpos oliver pos – a woocommerce point of sale (pos), oliver pos +1 moreOliver POS – A WooCommerce Point of Sale (POS) <= 2.4.1.8 - Cross-Site Request Forgery6.3 Medium
- fabrick gestpay for woocommerce, easynolo ecommerce fabrick +1 moreGestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_set_default_card4.3 Medium
- declaire redirectsRedirects <= 1.2.1 - Missing Authorization via save6.5 Medium
- fabrick gestpay for woocommerce, easynolo ecommerce fabrick +1 moreGestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_delete_card4.3 Medium
- envothemes envo's templates & widgets for elementor and woocommerce, envo\'s elementor templates \& widgets for woocommerce +1 moreEnvo's Elementor Templates & Widgets for WooCommerce <= 1.4.4 - Cross-Site Request Forgery via ajax_theme_activation4.3 Medium
- matt martz & andy stratton page restrictPage Restrict <= 2.5.5 - Protection Mechanism Bypass5.3 Medium
- vickyagravat codemirror blocksCodeMirror Blocks <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- fabrick gestpay for woocommerce, easynolo ecommerce fabrick +1 moreGestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_unset_default_card4.3 Medium
- brandonwamboldt wordpress access controlWordPress Access Control <= 4.0.13 - Improper Access Control to Sensitive Information Exposure via REST API5.3 Medium
- nimeshrmr wp private content plusWP Private Content Plus <= 3.6 - Protection Mechanism Bypass5.3 Medium
- acurax under construction / maintenance mode from acurax, under construction \/ maintenance mode +1 moreUnder Construction / Maintenance Mode from Acurax <= 2.6 - Authenticated (Subscriber+) Sensitive Information Exposure4.3 Medium
- justinsainton wp ecommerceWP eCommerce <= 3.15.1 - Unauthenticated SQL Injection9.8 Critical
- dell ecs, elastic cloud storage +1 moreDell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions...6.8 Medium
- linux, linux kernel +1 morecrypto: sun8i-ss - Fix memory leak of pad5.5 Medium
- linux, linux kernel +1 morecrypto: sa2ul - Fix memory leak of rxd5.5 Medium
- linux, linux kernel +1 morespi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware()5.5 Medium
- linux, linux kernel +1 morememory: renesas-rpc-if: fix possible NULL pointer dereference of resource5.5 Medium
- linux, linux kernel +1 moreDrivers: hv: vmbus: Use after free in __vmbus_open()8.4 High
- linux, linux kernel +1 morespi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op7.8 High
- linux, linux kernel +1 morespi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Fix off by one in hdmi_14_process_transaction()7.8 High
- linux, linux kernel +1 morescsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb()5.5 Medium
- linux, linux kernel +1 moresched/fair: Fix shift-out-of-bounds in load_balance()7.7 High
- linux, linux kernel +1 moremedia: venus: core: Fix some resource leaks in the error path of 'venus_probe()'5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Free local data after use5.5 Medium
- linux, linux kernel +1 morenvmet-tcp: fix incorrect locking in state_change sk callback7.5 High
- linux, linux kernel +1 moreio_uring: fix overflows checks in provide buffers7.8 High
- linux, linux kernel +1 moreataflop: potential out of bounds in do_format()7.1 High
- linux, linux kernel +1 moreBluetooth: avoid deadlock between hci_dev->lock and socket lock5.5 Medium
- linux, linux kernel +1 moreASoC: q6afe-clocks: fix reprobing of the driver5.5 Medium
- linux, linux kernel +1 moreudp: skip L4 aggregation for UDP tunnel packets9.8 Critical
- linux, linux kernel +1 moreiommu/vt-d: Remove WO permissions on second-level paging entries8.8 High
- linux, linux kernel +1 morepowerpc/64s: Fix pte update for kernel memory on radix4.4 Medium
- linux, linux kernel +1 moremt76: mt7615: fix tx skb dma unmap5.5 Medium
- Show moreLoading…