CVEs published February 3, 2024
19 CVEs were published on February 3, 2024: 0 critical, 7 high.
- Published
- 19
- Critical
- 0
- High
- 7
- Medium
- 11
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- IBM Security Verify Access Appliance · IBM Security Verify…
- 7
- Arcadia Technology Crafty Controller
- 1
- cayenne Anonymous Restricted Content
- 1
- CodeAstro Employee Task Management System
- 1
- curl
- 1
- dearhive Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF emb…
- 1
- HCL Software BigFix Platform
- 1
- HCL Software Launch / DevOps Deploy
- 1
- Jspxcms
- 1
- SourceCodester CRUD without Page Reload
- 1
High 7
- CVE-2024-1064Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4Arcadia Technology Crafty Controller
- CVE-2023-31004IBM Security Access Manager Container gain accessIBM Security Verify Access Appliance · IBM Security Verify…
- CVE-2023-32327IBM Security Access Manager Container XML external entity injectionIBM Security Verify Access Appliance · IBM Security Verify…
- CVE-2023-43016IBM Security Access Manager Container unauthorized accessIBM Security Verify Access Appliance · IBM Security Verify…
- CVE-2023-30999IBM Security Access Manager denial of serviceIBM Security Verify Access Appliance · IBM Security Verify…
- CVE-2023-43183Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to arbitrarily change t
- CVE-2023-44031Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive
Medium, low and unrated 12
- CVE-2024-1215SourceCodester CRUD without Page Reload fetch_data.php cross site scriptingSourceCodester CRUD without Page Reload
- CVE-2024-0853OCSP verification bypass with TLS session reusecurl
- CVE-2024-0909Anonymous Restricted Content <= 1.6.2 - Protection Mechanism Bypasscayenne Anonymous Restricted Content
- CVE-2024-0895PDF Flipbook, 3D Flipbook – DearFlip <= 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scriptingdearhive Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF emb…
- CVE-2024-23550HCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosureHCL Software Launch / DevOps Deploy
- CVE-2023-37528A cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformHCL Software BigFix Platform
- CVE-2024-1200Jspxcms information disclosureJspxcms
- CVE-2023-31006IBM Security Access Manager Container denial of serviceIBM Security Verify Access Appliance · IBM Security Verify…
- CVE-2023-32329IBM Security Access Manager Container improper file validationIBM Security Verify Access Appliance · IBM Security Verify…
- CVE-2023-31005IBM Security Access Manager Container privilege escalationIBM Security Verify Access Appliance · IBM Security Verify…
- CVE-2024-1199CodeAstro Employee Task Management System attendance-info.php denial of serviceCodeAstro Employee Task Management System
- CVE-2023-49950The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being displayed when using a cust