CVEs published February 4, 2024
14 CVEs were published on February 4, 2024: 2 critical, 4 high.
- Published
- 14
- Critical
- 2
- High
- 4
- Medium
- 7
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- blockmason credit-protocol
- 1
- IBM Business Automation Workflow
- 1
- IBM PowerVM Hypervisor
- 1
- java · java-min +1
- 1
- mpedraza2020 Intranet del Monterroso
- 1
- planet-freo
- 1
- Red Hat Enterprise Linux
- 1
- yarn · Fedora
- 1
Critical 2
- CVE-2020-36773Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single
- CVE-2024-25089Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRPC named pipes.
High 4
- CVE-2021-4435Yarn: untrusted search pathyarn · Fedora
- CVE-2021-46902An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303.
- CVE-2023-52425libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large to
- CVE-2024-25062An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5.java · java-min +1
Medium, low and unrated 8
- CVE-2018-25098blockmason credit-protocol UCAC CreditProtocol.sol executeUcacTx denial of serviceblockmason credit-protocol
- CVE-2023-6240Kernel: marvin vulnerability side-channel leakage in the rsa decryption operationRed Hat Enterprise Linux
- CVE-2019-25159mpedraza2020 Intranet del Monterroso cargos.php sql injectionmpedraza2020 Intranet del Monterroso
- CVE-2015-10129planet-freo auth.inc.php comparisonplanet-freo
- CVE-2023-33851IBM PowerVM Hypervisor information disclosureIBM PowerVM Hypervisor
- CVE-2023-50947IBM Business Automation Workflow cross-site scriptingIBM Business Automation Workflow
- CVE-2021-46903An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303.
- CVE-2023-52426libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.