CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- adsplugin adsmonetizerWordPress Adsmonetizer Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- jordy meow media alt renamerWordPress Media Alt Renamer Plugin 0.0.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- honeywell mpa2 access panel, mpa2 firmware +1 moreHoneywell MPA2 Web Application XSS vulnerability8.1 High
- tainacanWordPress Tainacan plugin <= 0.20.6 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- thrive themes automator, thrivethemes thrive automator +1 moreWordPress Thrive Automator Plugin <= 1.17 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- gs plugins logo slider – logo showcase, logo carousel, logo gallery and client logo presentation, gsplugins logo slider +1 moreWordPress GS Logo Slider Plugin <= 3.5.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- devitemsllc ht mega – absolute addons for elementor, hasthemes ht mega +1 moreWordPress HT Mega Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- senol sahin ai power: complete ai pack – powered by gpt-4, aipower +1 moreWordPress GPT3 AI Content Writer Plugin <= 1.8.12 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- cleantalk anti-spam, spam protection, anti-spam, firewall by cleantalk +1 moreWordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- mdempfle advanced iframeAdvanced iFrame <= 2024.1 - Authenticated (Contributor+) Stored Cross-Site Scripting4.9 Medium
- avada website builder, theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +2 moreAvada | Website Builder For WordPress & WooCommerce <= 7.11.4 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- ibm cloud pak for securityIBM Cloud Pak for Security information disclosure5.9 Medium
- custom field suite project field suite, mgibbs189 custom field suite +1 moreCustom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- ibm cloud pak for automation, cloud pak for business automation +1 moreIBM Cloud Pak for Automation authentication bypass6.5 Medium
- ibm watson cloudpak for data data stores, cloud pak for data +1 moreIBM Watson CloudPak for Data Data Stores information disclosure4.0 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager file upload8.5 High
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager XML external entity injection5.5 Medium
- ibm watson iot platformIBM Watson IoT Platform information disclosure5.9 Medium
spirv-toolsOSS-FuzzUNKNOWN READ in spvtools::val::ValidateAccessChainNo scoregpacOSS-FuzzHeap-buffer-overflow in gf_gz_decompress_payload_exNo score- dlink dir-823 firmware, dir-823g firmware +1 moreD-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4()...6.5 Medium
- dlink dir-823 firmware, dir-823g firmware +1 moreD-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8()....6.5 Medium
- dlink dir-823g firmwareD-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_41C488()...6.5 Medium
- dlink dir-823 firmware, dir-823g firmware +1 moreD-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30()....6.5 Medium
- dlink dir-823 firmware, dir-823g firmware +1 moreD-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8()....6.5 Medium
- dlink dir-823 firmware, dir-823g firmware +1 moreD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the User-Agent...8.8 High
- dlink dir-823 firmware, dir-823g firmware +1 moreD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter....8.8 High
- dlink dir-823 firmware, dir-823g firmware +1 moreD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SOAPACTION...8.8 High
- vivotek network camera, camera firmware +1 moreAn issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute...9.8 Critical
- dreamer cms project cms, iteachyou dreamer cms +1 moreAn access control issue in Dreamer CMS v4.0.1 allows attackers to download backup files and leak...6.5 Medium
- martinbarker rendertuneCross-site scripting (XSS) vulnerability in RenderTune v1.1.4 allows attackers to execute...9.6 Critical
- deskfilerDeskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin.9.8 Critical
- sourcecodester employee management systemSQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to...9.8 Critical
- pdfmake project pdfmakeAn issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted...9.8 Critical
- biantaibao eblogCross Site Scripting vulnerability in eblog v1.0 allows a remote attacker to execute arbitrary...6.1 Medium
- epoint epointwebbuilderAn issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to...9.8 Critical
- lepton-cms leptoncmsAn issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade...7.8 High
- qpdf project qpdf, fedoraproject fedora +1 moreHeap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via...5.5 Medium
- crmeb javaSQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL...6.5 Medium
- likeshopServer Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to...5.9 Medium
- clojure, fedoraproject fedora +1 moreReading specially crafted serializable objects from an untrusted source may cause an infinite loop and denial of service7.5 High
- oretnom23 simple student attendance systemCross Site Scripting (XSS) vulnerability in the Simple Student Attendance System v.1.0 allows a...6.1 Medium
- oretnom23 simple student attendance system, simple atudent attendance system atudent attendance system +1 moreSQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote...9.8 Critical
- sourcecodester school fees management system, school fees management system project fees management system1.0 +1 moreCross Site Scripting (XSS) vulnerability in School Fees Management System v.1.0 allows a remote...5.4 Medium
- elecom co.,ltd. wmc-x1800gst-b, elecom wmc-x1800gst-b firmware, wrc-1167gs2-b firmware +20 more +22 moreOS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent...6.8 Medium
- elecom wmc-x1800gst-b, wsc-x1800gs-b, wmc-x1800gst-b firmware +19 more +21 moreCross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers allows a remote...4.3 Medium
- elecom co.,ltd. wmc-x1800gst-b, elecom wmc-x1800gst-b firmware, wrc-1167gs2-b firmware +17 more +19 moreELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious...4.8 Medium
- rack, debian linux +1 moreRack ReDos in content type parsing (2nd degree polynomial)5.3 Medium
- rack, debian linux +1 morePossible DoS Vulnerability with Range Header in Rack5.8 Medium
- rack, debian linux +1 morePossible Denial of Service Vulnerability in Rack Header Parsing5.3 Medium
- Show moreLoading…