CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- hitachi vantara pentaho data integration & analytics, hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration \& analytics +2 moreHitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive Information5.3 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager command injection8.5 High
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager file upload4.3 Medium
- codeastro online job portalSourceCodester Online Job Portal EditProfile.php cross site scripting3.5 Low
- projectworlds online shopping systemSurya2Developer Online Shopping System POST Parameter login.php sql injection7.3 High
- oretnom23 online learning system, sourcecodester online learning system v2 +1 moreSourceCodester Online Learning System V2 index.php cross site scripting4.3 Medium
- lsegal yard, debian linux, fedoraproject fedora +2 moreYARD's default template vulnerable to Cross-site Scripting in generated frames.html5.4 Medium
- cusrev customer reviews for woocommerceWordPress Customer Reviews for WooCommerce Plugin <= 5.38.1 is vulnerable to Broken Access Control4.3 Medium
- ecwid ecommerce shopping cart, lightspeedhq ecwid ecommerce shopping cart +1 moreWordPress Ecwid Shopping Cart Plugin <= 6.12.4 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- drupal symfony mailer liteDrupal Symfony Mailer Lite - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-0148.8 High
- drupal private content, private content project content +1 morePrivate content - Moderately critical - Access bypass - SA-CONTRIB-2024-0125.5 Medium
- bytesforall atahualpaWordPress Atahualpa Theme <= 3.7.24 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- coffee project coffeeCoffee - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-0114.8 Medium
github.com/cometbft/cometbftGoASA-2024-004: Default configuration param for Evidence may limit window of validityNo score- pinterest querybookQuerybook Stored Cross-Site Scripting allows Privilege Elevation6.1 Medium
- 3ds edrawings, solidworks +1 moreMultiple vulnerabilities exist in file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 20247.8 High
- scott paterson easy paypal & stripe buy now button, wpplugin easy paypal \& stripe buy now button +1 moreWordPress Easy PayPal Buy Now Button Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- duplicator – wordpress migration & backup pluginWordPress Duplicator Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)6.5 Medium
- mailerlite, mailerlite – woocommerce integration +1 moreWordPress MailerLite – WooCommerce integration Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- redhat 3scale, red hat 3scale api management platform 2 +1 moreApicast: use_3scale_oidc_issuer_endpoint of token introspection policy isn't compatible with rh-sso 7.5 or later versions6.3 Medium
- advanced flamingo flamingo, bluecoral advanced flamingo +1 moreWordPress Advanced Flamingo plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- atakan au 1 click disable all, atakanau click disable all +1 moreWordPress 1 click disable all Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- m&s consulting email before downloadWordPress Email Before Download Plugin <= 6.9.7 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- cisco nx-os software, nx-os, firepower extensible operating system (fxos) +4 more +6 moreA vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and...6.6 Medium
- cisco nx-os, nx-os software +1 moreA vulnerability in the access control list (ACL) programming for port channel subinterfaces of...5.8 Medium
- native grid llc a no-code page builder for beautiful performance-based content, tiny setka workflow +1 moreWordPress Setka Editor Plugin <= 2.1.20 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- cisco unified computing system (managed), imm management package, ucs 6454 +1 more +3 moreA vulnerability in system resource management in Cisco UCS 6400 and 6500 Series Fabric...5.3 Medium
- cisco nx-os software, nx-os +1 moreA vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an...8.6 High
- cisco nx-os software, nx-os +1 moreA vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS...8.6 High
- apache ofbizApache OFBiz: Path traversal or file inclusion5.3 Medium
- apache ofbizApache OFBiz: Path traversal allowing authentication bypass.9.1 Critical
- dpgaspar flask-appbuilderFlask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)4.3 Medium
- dpgaspar flask-appbuilderFlask-AppBuilder incorrect authentication when using auth type OpenID9.1 Critical
- sgi performance co-pilot, red hat enterprise linux 6, enterprise linux 7 +3 more +5 morePcp: unsafe use of directories allows pcp to root privilege escalation6.0 Medium
- matt martz & andy stratton page restrictWordPress Page Restrict Plugin <= 2.5.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- octa code accessibilityWordPress Accessibility Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- apache software foundation xerces c++, apache xerces-c, xerces-c\+\+ +2 moreApache Xerces C++: Use-after-free on external DTD scan9.8 Critical
- w3speedsterWordPress W3SPEEDSTER Plugin <= 7.19 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- nuggethon custom order statuses for woocommerce, custom order status manager for woocommerce +1 moreWordPress Custom Order Statuses for WooCommerce Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- heurekaWordPress Heureka Plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- manish kumar agarwal change table prefixWordPress Change Table Prefix plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreWordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to SQL Injection8.5 High
- miniorange malware scannerWordPress Malware Scanner Plugin <= 4.7.2 is vulnerable to SQL Injection7.6 High
- skymoonlabs movetoWordPress MoveTo Plugin <= 6.2 is vulnerable to SQL Injection9.8 Critical
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate, mythemeshop wp shortcode +2 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_qrcode Shortcode6.4 Medium
- jmash postmash, joel starnes postmash – custom post order +1 moreWordPress postMash – custom post order Plugin <= 1.2.0 is vulnerable to SQL Injection9.3 Critical
- haivision aviwest manager, aviwest streamhub, maanager +1 more +3 moreServer-Side Request Forgery Vulnerability in Haivision Products6.5 Medium
- progress sitefinityPotential Cross-Site Scripting (XSS) in the page editing area8.0 High
- progress sitefinityIncorrect access control in the Sitefinity backend8.8 High
whoamicrates.iowhoami stack buffer overflow on several Unix platforms8.2 High- Show moreLoading…