CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- linux, linux kernel +1 moresoc: qcom: pmic_glink_altmode: fix port sanity check7.8 High
- linux, linux kernel +1 morebus: mhi: host: Add alignment check for event ring read pointer7.8 High
- linux, linux kernel +1 morebus: mhi: host: Drop chan lock before queuing buffers5.5 Medium
- debian linux, linux kernel +1 moredmaengine: fix NULL pointer in channel unregistration function4.4 Medium
- linux, linux kernel +1 moremedia: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run7.8 High
- linux, linux kernel +1 moremm: migrate: fix getting incorrect page mapping during page migration5.5 Medium
- debian linux, linux kernel +1 moremm/sparsemem: fix race in accessing memory_section->usage4.7 Medium
- linux, linux kernel +1 moreserial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO5.5 Medium
- linux, linux kernel +1 morenet/mlx5e: Fix peer flow lists handling5.5 Medium
- linux, linux kernel +1 moredrm: Don't unref the same fb many times by mistake due to deadlock handling7.8 High
- espocrmEspoCRM weakness in "Forgot password"5.9 Medium
- linux, linux kernel +1 moredrm/amd/display: Wake DMCUB before sending a command5.5 Medium
- agentejo cockpit, cockpit cms +1 moreCross-Site Scripting vulnerability in Cockpit CMS5.5 Medium
- laragonRCE in Laragon9.8 Critical
- linux, linux kernel +1 moredrm/bridge: sii902x: Fix probing race issue4.7 Medium
- apache airflowApache Airflow: Dag Code and Import Error Permissions Ignored5.9 Medium
- mattermost, mattermost server +1 moreMattermost fails to limit the number of role names4.3 Medium
- mattermost, mattermost server +1 moreMattermost incorrectly allows access individual posts3.1 Low
- mattermost, mattermost server +1 moreMattermost race condition2.6 Low
- mattermost, mattermost server +1 moreMattermost allows attackers access to posts in channels they are not a member of4.3 Medium
- kaspersky security, security for linux mail server 8 +1 moreKaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The...6.1 Medium
- mattermost, mattermost server +1 moreExisting server guests invited to the team by members without "invite_guest" permission4.3 Medium
- mattermost, mattermost server +1 moreExcessive resource consumption when sending long emoji names in user custom status4.3 Medium
- mattermost, mattermost server +1 morePublic channel post content accessible without membership when compliance export is enabled4.3 Medium
- mattermost, mattermost server +1 moreFiles of archived channels accessible with the “Allow users to view archived channels” option disabled3.1 Low
- mattermost, mattermost server +1 moreTeam associated AD/LDAP Groups Leaked due to missing authorization4.3 Medium
- wpvividplugins migration, backup, staging – wpvivid, wpvivid migration\, backup\, staging +1 moreThe Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via...9.8 Critical
- akirk friendsFriends <= 2.8.5 - Authenticated (Admin+) Blind Server-Side Request Forgery5.5 Medium
- wpvivid migration\, backup\, staging, wpvividplugins wpvivid — backup, migration & staging +1 moreWPvivid Backup and Migration <= 0.9.68 - Missing Authorization6.5 Medium
- savvy mywazeWordPress MyWaze Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- bajorat-media pb oembed html5 audio, pascal bajorat pb oembed html5 audio – with cache support +1 moreWordPress PB oEmbed HTML5 Audio Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- paul jura & nicolas montigny pj news tickerWordPress PJ News Ticker Plugin <= 1.9.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- dev4press gd rating systemWordPress GD Rating System Plugin <= 3.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- linux, linux kernel +1 moreiommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range5.5 Medium
- linux, linux kernel +1 moremctp: perform route lookups under a RCU read-side lock7.8 High
- debian linux, linux kernel +1 morex86/srso: Add SRSO mitigation for Hygon processors7.8 High
- linux, linux kernel +1 morearm64: errata: Add Cortex-A520 speculative unprivileged load workaround4.7 Medium
- linux, linux kernel +1 moreksmbd: fix race condition between session lookup and expire9.8 Critical
- linux, linux kernel +1 moreksmbd: fix uaf in smb20_oplock_break_ack8.8 High
- linux, linux kernel +1 moreHID: logitech-hidpp: Fix kernel crash on receiver USB disconnect8.8 High
- linux, linux kernel +1 moreusb: hub: Guard against accesses to uninitialized BOS descriptors5.5 Medium
- linux, linux kernel +1 moreperf/x86/lbr: Filter vsyscall addresses5.5 Medium
- linux, linux kernel +1 moreInput: powermate - fix use-after-free in powermate_config_complete7.8 High
- shopfiles ebook storeWordPress Ebook Store Plugin <= 5.788 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- melapress wp activity logWordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- activeim marketing optimizerMarketing Optimizer <= 20200925 - Cross-Site Request Forgery to Stored Cross-Site Scripting4.3 Medium
- foucciano restaurant solutions – checklist, josephlopreste restaurant solutions - checklist +1 moreThe Restaurant Solutions – Checklist plugin for WordPress is vulnerable to Stored Cross-Site...4.4 Medium
- perfmattersWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access Control5.4 Medium
- mollie payments for woocommerceWordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload9.1 Critical
- ernest marcinko ajax search lite, wp-dreams ajax search +1 moreWordPress Ajax Search Lite Plugin <= 4.11.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- Show moreLoading…