# CVEs published 2024-02-03

19 CVEs were published on February 3, 2024: 0 critical, 7 high. Days are UTC.

- [CVE-2024-1215](https://cve.now/CVE-2024-1215.md): SourceCodester CRUD without Page Reload fetch\_data.php cross site scripting (CVSS 3.5, SourceCodester CRUD without Page Reload)
- [CVE-2024-0853](https://cve.now/CVE-2024-0853.md): OCSP verification bypass with TLS session reuse (CVSS 5.3, curl)
- [CVE-2024-1064](https://cve.now/CVE-2024-1064.md): Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4 (CVSS 7.5, Arcadia Technology Crafty Controller)
- [CVE-2024-0909](https://cve.now/CVE-2024-0909.md): Anonymous Restricted Content \<= 1.6.2 - Protection Mechanism Bypass (CVSS 5.3, cayenne Anonymous Restricted Content)
- [CVE-2024-0895](https://cve.now/CVE-2024-0895.md): PDF Flipbook, 3D Flipbook – DearFlip \<= 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4, dearhive Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF emb…)
- [CVE-2024-23550](https://cve.now/CVE-2024-23550.md): HCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosure (CVSS 6.2, HCL Software Launch / DevOps Deploy)
- [CVE-2023-37528](https://cve.now/CVE-2023-37528.md): A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform (CVSS 6.5, HCL Software BigFix Platform)
- [CVE-2024-1200](https://cve.now/CVE-2024-1200.md): Jspxcms information disclosure (CVSS 5.3, Jspxcms)
- [CVE-2023-31006](https://cve.now/CVE-2023-31006.md): IBM Security Access Manager Container denial of service (CVSS 6.5, IBM Security Verify Access Appliance · IBM Security Verify…)
- [CVE-2023-31004](https://cve.now/CVE-2023-31004.md): IBM Security Access Manager Container gain access (CVSS 8.3, IBM Security Verify Access Appliance · IBM Security Verify…)
- [CVE-2023-32329](https://cve.now/CVE-2023-32329.md): IBM Security Access Manager Container improper file validation (CVSS 6.2, IBM Security Verify Access Appliance · IBM Security Verify…)
- [CVE-2023-32327](https://cve.now/CVE-2023-32327.md): IBM Security Access Manager Container XML external entity injection (CVSS 7.1, IBM Security Verify Access Appliance · IBM Security Verify…)
- [CVE-2023-43016](https://cve.now/CVE-2023-43016.md): IBM Security Access Manager Container unauthorized access (CVSS 7.3, IBM Security Verify Access Appliance · IBM Security Verify…)
- [CVE-2023-30999](https://cve.now/CVE-2023-30999.md): IBM Security Access Manager denial of service (CVSS 7.5, IBM Security Verify Access Appliance · IBM Security Verify…)
- [CVE-2023-31005](https://cve.now/CVE-2023-31005.md): IBM Security Access Manager Container privilege escalation (CVSS 6.2, IBM Security Verify Access Appliance · IBM Security Verify…)
- [CVE-2024-1199](https://cve.now/CVE-2024-1199.md): CodeAstro Employee Task Management System attendance-info.php denial of service (CVSS 5.4, CodeAstro Employee Task Management System)
- [CVE-2023-43183](https://cve.now/CVE-2023-43183.md): Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to arbitrarily change t (CVSS 8.8)
- [CVE-2023-44031](https://cve.now/CVE-2023-44031.md): Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive (CVSS 7.5)
- [CVE-2023-49950](https://cve.now/CVE-2023-49950.md): The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being displayed when using a cust (CVSS 5.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-02-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.