CVEs published February 5, 2024
157 CVEs were published on February 5, 2024: 13 critical, 43 high.
- Published
- 157
- Critical
- 13
- High
- 43
- Medium
- 97
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 31
Most affected products
- Linux kernel
- 9
- aman086 Views for WPForms – Display & Edit WPForms Entries…
- 5
- brechtvds WP Recipe Maker
- 4
- josevega Display custom fields in the frontend – Post and U…
- 3
- MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- 3
- StellarWP LearnDash LMS
- 3
- thorsten phpMyFAQ · phpmyfaq/phpmyfaq
- 3
- wpdevteam Essential Addons for Elementor – Popular Elemento…
- 3
- Axis Communications AB AXIS OS
- 2
- B&R Industrial Automation Automation Runtime
- 2
Critical 13
- CVE-2024-0709The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to SQL Injection via the 'coinslist' parameter in narinder-singh Cryptocurrency Widgets – Price Ticker & Coin…
- CVE-2024-0221Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File RenamePhoto Gallery by 10Web – Mobile-Friendly Image Gallery
- CVE-2023-6989Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 18.5.9 - Unauthenticated Local File Inclusionpaultgoodchild Shield: Blocks Bots, Protects Users, and Pre…
- CVE-2024-0323FTP uses unsecure encryption mechanismsB&R Industrial Automation Automation Runtime
- CVE-2024-23108An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to Fortinet FortiSIEM
- CVE-2024-23109An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to Fortinet FortiSIEM
- CVE-2021-44363DPrint Lite < 1.9.1.5 - Unauthenticated Arbitrary File Upload3DPrint Lite
- CVE-2023-7077Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB, X464UNS, X554UNV, X555UNS, X555UNV, X754HB, X554Sharp Display Solutions P403, P463, P553, P703, P801, X554U…
- CVE-2024-20011In alac decoder, there is a possible information disclosure due to an incorrect bounds check.MediaTek MT6985, MT8127, MT8135, MT8167, MT8167S, MT8168, M…
- CVE-2023-51951SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id parameter in the ma
- CVE-2024-23049An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component.
- CVE-2024-23054An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package liste
- CVE-2024-24543Buffer Overflow vulnerability in the function setSchedWifi in Tenda AC9 v.3.0, firmware version v.15.03.06.42_multi allows a remote attacker
High 43
- CVE-2024-0964LFI in Gradiogradio-app/gradio · gradio
- CVE-2023-6846File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File UploadFile Manager Pro
- CVE-2023-6996Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Code Injectionjosevega Display custom fields in the frontend – Post and U…
- CVE-2024-0428Index Now <= 2.6.3 - Cross-Site Request Forgery via reset_formproperfraction CrawlWP SEO – Instant Search Engine Indexing…
- CVE-2023-6925Unlimited Addons for WPBakery Page Builder <= 1.0.42 - Authenticated (Editor+) Arbitrary File Uploadunitecms Unlimited Addons for WPBakery Page Builder
- CVE-2023-6933Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injectionwpengine Better Search Replace
- CVE-2024-1072Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.15.21 - Missing Authorization via seedprod_lite_new_lpageWebsite Builder by SeedProd — Theme Builder, Landing Page B…
- CVE-2023-6635EditorsKit <= 1.40.3 - Authenticated (Administrator+) Arbitrary File Uploadmunirkamal Gutenberg Block Editor Toolkit – EditorsKit
- CVE-2023-6700Cookie Information | Free GDPR Consent Solution <= 2.0.22 - Authenticated (Subscriber+) Arbitrary Options Updatecookieinformation Cookie Information | Free GDPR Consent So…
- CVE-2024-0324User Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_updatecozmoslabs User Profile Builder – Beautiful User Registrati…
- CVE-2024-0761File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenamesmndpsingh287 File Manager
- CVE-2024-0869Instant Images <= 6.1.0 - Authenticated (Author+) Arbitrary Options Updateconnekthq Instant Images – One-click Image Uploads from Uns…
- CVE-2023-50782Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659python-cryptography · Red Hat Ansible Automation Platform +4
- CVE-2023-50781M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657m2crypto · Red Hat Enterprise Linux +2
- CVE-2024-1052Boundary Vulnerable to Session Hijacking Through TLS Certificate TamperingHashiCorp Boundary · github.com/hashicorp/boundary
- CVE-2023-6874Zigbee Unauthenticated DoS via NWK Sequence number manipulationsilabs.com GSDK
- CVE-2023-52138Path traversal via crafted cpio archives in Engrampa archiversmate-desktop engrampa
- CVE-2024-24762python-multipart vulnerable to content-type header Regular expression Denial of ServiceKludex python-multipart · tiangolo fastapi +3
- CVE-2024-1225QiboSoft QiboCMS X1 Pay.php rmb_pay deserializationQiboSoft QiboCMS X1
- CVE-2023-5249Mali GPU Kernel Driver allows improper GPU memory processing operationsArm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel Driv…
- CVE-2023-5643Mali GPU Kernel Driver allows improper GPU memory processing operationsArm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel D… +1
- CVE-2024-24846WordPress Mighty Addons for Elementor Plugin <= 1.9.3 is vulnerable to Cross Site Scripting (XSS)MightyThemes Mighty Addons for Elementor
- CVE-2024-24847WordPress CalculatorPro Calculators Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)jgadbois CalculatorPro Calculators
- CVE-2024-24848WordPress PT Sign Ups Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)MJS Software PT Sign Ups – Beautiful volunteer sign ups and…
- CVE-2024-24866WordPress Biteship Plugin <= 2.2.24 is vulnerable to Cross Site Scripting (XSS)Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo
- CVE-2024-20004In Modem NL1, there is a possible system crash due to an improper input validation.MediaTek MT2735, MT6297, MT6833, MT6853, MT6855, MT6873, MT…
- CVE-2024-20015In telephony, there is a possible escalation of privilege due to a permissions bypass.MediaTek MT6739, MT6753, MT6757, MT6761, MT6762, MT6763, MT…
- CVE-2024-20003In Modem NL1, there is a possible system crash due to an improper input validation.MediaTek MT2735, MT6297, MT6833, MT6853, MT6855, MT6873, MT…
- CVE-2024-20009In alac decoder, there is a possible out of bounds write due to an incorrect error handling.MediaTek MT6580, MT6739, MT6761, MT6762, MT6765, MT6779, MT…
- CVE-2024-20007In mp3 decoder, there is a possible out of bounds write due to a race condition.MediaTek MT6580, MT6739, MT6761, MT6762, MT6765, MT6779, MT…
- CVE-2023-47355The com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed broadcast receivers for
- CVE-2024-22567File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.net.mingsoft:ms-mcms
- CVE-2024-22667Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is pa
- CVE-2024-24258freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function.
- CVE-2024-24259freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function.
- CVE-2024-24260media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_subscribe_remove function at /uac/sip-uac-sub
- CVE-2024-24262media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_uac_stop_timer function at /uac/sip-uac-trans
- CVE-2024-24263Lotos WebServer v0.1.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the response_append_status_line function at /lotos
- CVE-2024-24265gpac v2.2.1 was discovered to contain a memory leak via the dst_props variable in the gf_filter_pid_merge_properties_internal function.
- CVE-2024-24266gpac v2.2.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the dasher_configure_pid function at /src/filters/dasher.c.
- CVE-2024-24267gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_blob function.
- CVE-2024-24468Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_customblock.ph
- CVE-2024-24469Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the delete_post .php.
Medium, low and unrated 101
- CVE-2023-34042The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extracted it could be wriSpring Security · org.springframework.security:spring-secur…
- CVE-2023-6807GeneratePress Premium <= 2.3.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom MetaGeneratePress Premium
- CVE-2023-22819Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi productsWestern Digital My Cloud OS · Western Digital My Cloud H… +1
- CVE-2023-22817Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi productsWestern Digital My Cloud OS · Western Digital My Cloud H… +1
- CVE-2023-6557The Events Calendar <= 6.2.8.2 - Unauthenticated Sensitive Information Exposurestellarwp The Events Calendar
- CVE-2024-0508Orbit Fox by ThemeIsle <= 2.10.27 - Authenticated(Contributor+) Stored Cross-site Scripting via Pricing Table Elementor Widgetthemeisle Orbit Fox: Duplicate Page, Menu Icons, SVG Suppor…
- CVE-2024-0969ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST APIreputeinfosystems ARMember – Membership Plugin, Content Res…
- CVE-2024-0701UserPro <= 5.1.6 - Disabled Membership Registration BypassUserPro - Community and User Profile WordPress Plugin
- CVE-2023-6701Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fieldwpengine Advanced Custom Fields · Delicious Brains Advanced…
- CVE-2024-0373Views for WPForms <= 3.2.2 - Cross-Site Request Forgery via save_viewaman086 Views for WPForms – Display & Edit WPForms Entries…
- CVE-2024-0668Advanced Database Cleaner <= 3.1.3 - Authenticated(Administrator+) PHP Object Injection via process_bulk_actionsymptote Advanced Database Cleaner – Optimize & Clean Datab…
- CVE-2023-6963Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypassjetmonsters Getwid – Gutenberg Blocks
- CVE-2024-0366Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Referencecifi Starbox – the Author Box for Humans
- CVE-2024-0586Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritpingwpdevteam Essential Addons for Elementor – Popular Elemento…
- CVE-2023-7029WordPress Button Plugin MaxButtons <= 9.7.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcodemaxfoundry MaxButtons – Create buttons
- CVE-2023-4637WPvivid <= 0.9.94 - Missing Authorizationwpvividplugins WPvivid — Backup, Migration & Staging
- CVE-2024-0660Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scriptingstrategy11team Formidable Forms – Contact Form Plugin, Surv…
- CVE-2023-6953PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scriptingwpmanageninja Fluent PDF Generator
- CVE-2024-1208LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via APIStellarWP LearnDash LMS
- CVE-2023-6808Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcodeameliabooking Booking for Appointments and Events Calendar…
- CVE-2024-0612Content Views <= 3.6.2 - Authenticated(Administrator+) Stored Cross-Site Scripting via settingspt-guy Content Views – Post Grid & Filter, Recent Posts, Ca…
- CVE-2024-0371Views for WPForms <= 3.2.2 - Missing Authorization via create_viewaman086 Views for WPForms – Display & Edit WPForms Entries…
- CVE-2023-6884Plugin for Google Reviews <= 3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcodewidgetpack Rich Showcase for Google Reviews
- CVE-2024-0597SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settingscifi SEO Plugin by Squirrly SEO
- CVE-2024-1092RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.1 - Missing Authorizationthemeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…
- CVE-2024-0630WP RSS Aggregator <= 4.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting via RSS Feed Sourcerebelcode RSS Aggregator – RSS Import, News Feeds, Feed to…
- CVE-2024-0954Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpdevteam Essential Addons for Elementor – Popular Elemento…
- CVE-2024-1121Advanced Forms for ACF <= 1.9.3.2 - Missing Authorization to Unauthenticated Form Settings Exportphilkurth Advanced Forms for ACF
- CVE-2024-1046Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingproperfraction Paid Membership Plugin, Ecommerce, User Regi…
- CVE-2024-1075Minimal Coming Soon – Coming Soon Page <= 2.37 - Unauthenticated Maintenance Mode Bypasswebfactory Minimal Coming Soon – Coming Soon Page
- CVE-2023-6959Getwid – Gutenberg Blocks <= 2.0.4 - Missing Authorization to Recaptcha API Key Modificationjetmonsters Getwid – Gutenberg Blocks
- CVE-2024-0384WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notesbrechtvds WP Recipe Maker
- CVE-2024-0678Order Delivery Date for WP e-Commerce <= 1.2 - Unauthenticated Stored Cross-Site Scriptingtychesoftwares Order Delivery Date for WP e-Commerce
- CVE-2024-1209LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignmentsStellarWP LearnDash LMS
- CVE-2024-0961SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scriptinggpriday SiteOrigin Widgets Bundle
- CVE-2024-0509WP 404 Auto Redirect to Similar Post <= 1.0.3 - Reflected Cross-Site Scripting via requesthwk-fr WP 404 Auto Redirect to Similar Post
- CVE-2024-0834The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link_to parameter in all versions up webtechstreet Elementor Addon Elements
- CVE-2024-0790WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Cross-Site Request Forgeryrealmag777 WOLF – WordPress Posts Bulk Editor and Manager P…
- CVE-2024-1177WP Club Manager – WordPress Sports Club Plugin <= 2.2.10 - Missing Authorization to Unauthenticated Event Permalink Updatewpclubmanager WP Club Manager – WordPress Sports Club Plugin
- CVE-2024-1210LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via APIStellarWP LearnDash LMS
- CVE-2024-0835Royal Elementor Kit <= 1.0.116 - Missing Authorization to Arbitrary Transient Updatewproyal Royal Elementor Kit
- CVE-2024-0255WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_colorbrechtvds WP Recipe Maker
- CVE-2023-7014Author Box, Guest Author and Co-Authors for Your Posts – Molongui <= 4.7.4 - Information Exposure via ma_debugMolongui Authorship – Author Boxes, Guest Authors & Co-Auth…
- CVE-2024-0796Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Cross-Site Request Forgeryrealmag777 Active Products Tables for WooCommerce. Use cons…
- CVE-2024-0691FileBird <= 5.6.0 - Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Importninjateam FileBird – WordPress Media Library Folders & File…
- CVE-2024-0380WP Recipe Maker <= 9.1.0 - Directory Traversalbrechtvds WP Recipe Maker
- CVE-2024-0859Affiliates Manager <= 2.9.34 - Cross-Site Request Forgerywpinsider-1 Affiliates Manager
- CVE-2024-0585Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image URlwpdevteam Essential Addons for Elementor – Popular Elemento…
- CVE-2024-0370Views for WPForms <= 3.2.2 - Missing Authorization via save_viewaman086 Views for WPForms – Display & Edit WPForms Entries…
- CVE-2024-0374Views for WPForms <= 3.2.2 - Cross-Site Request Forgery via create_viewaman086 Views for WPForms – Display & Edit WPForms Entries…
- CVE-2023-6982Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via vg_display_datajosevega Display custom fields in the frontend – Post and U…
- CVE-2024-0823Exclusive Addons for Elementor <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scriptingtimstrifler Exclusive Addons for Elementor
- CVE-2024-0372Views for WPForms <= 3.2.2 - Missing Authorization via get_form_fieldsaman086 Views for WPForms – Display & Edit WPForms Entries…
- CVE-2023-6526Meta Box – WordPress Custom Fields Framework <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingmetabox Meta Box
- CVE-2023-698510Web AI Assistant – AI content writing assistant <= 1.0.18 - Missing Authorization to Arbitrary Plugin Installation10Web AI Assistant – AI content writing assistant
- CVE-2024-0382WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tagbrechtvds WP Recipe Maker
- CVE-2024-0659Easy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing optionssmub Easy Digital Downloads – eCommerce Payments and Subscr…
- CVE-2024-0791WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Missing Authorizationrealmag777 WOLF – WordPress Posts Bulk Editor and Manager P…
- CVE-2024-0254(Simply) Guest Author Name <= 4.34 - Authenticated (Contributor+) Stored Cross-Site Scriptingnomadcoder (Simply) Guest Author Name
- CVE-2024-0797Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Missing Authorizationrealmag777 Active Products Tables for WooCommerce. Use cons…
- CVE-2024-0699AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_urltigroumeow AI Engine – The Chatbot, AI Framework & MCP for…
- CVE-2023-6983Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta Disclosurejosevega Display custom fields in the frontend – Post and U…
- CVE-2024-0448Elementor Addons by Livemesh <= 8.3.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingLivemesh Addons by Elementor
- CVE-2024-24595Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaAllegro.AI ClearML · clearml
- CVE-2024-24559Vyper SHA3 code generation bugvyperlang vyper · vyper
- CVE-2024-24574phpMyFAQ vulnerable to stored XSS on attachments filenamethorsten phpMyFAQ · phpmyfaq/phpmyfaq
- CVE-2024-0202Cryptlib: rsa key exchange ciphersuites in tls vulnerable to marvin attackcryptlib
- CVE-2024-22208phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposesthorsten phpMyFAQ · phpmyfaq/phpmyfaq
- CVE-2023-27318Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) NetApp StorageGRID
- CVE-2024-24807Sulu is vulnerable to HTML Injection via Autocomplete Suggestionsulu · sulu/sulu
- CVE-2024-22202User Removal Page Allows Spoofing Of User Detailsthorsten phpMyFAQ · phpmyfaq/phpmyfaq
- CVE-2023-6028SDM Web interface vulnerable to XSSB&R Industrial Automation Automation Runtime
- CVE-2024-0953When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the cMozilla Firefox for iOS
- CVE-2023-7216Cpio: extraction allows symlinks which enables remote command executionRed Hat Enterprise Linux
- CVE-2024-247681Panel set-cookie is missing the Secure keyword1Panel-dev 1Panel · github.com/1Panel-dev/1Panel
- CVE-2024-24864Race condition vulnerability in Linux kernel media/dvb-core in dvbdmx_write()Linux kernel
- CVE-2024-24857Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()Linux kernel
- CVE-2024-24858Race condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interval_set()Linux kernel
- CVE-2024-24859Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()Linux kernel
- CVE-2024-24860Race condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set()Linux kernel
- CVE-2024-24861Race condition vulnerability in Linux kernel media/xc4000 xc4000_get_frequency()Linux kernel
- CVE-2024-24855Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan()Linux kernel
- CVE-2024-23196Race condition vulnerability in Linux kernel sound/hda snd_hdac_regmap_syncLinux kernel
- CVE-2024-22386Race condition vulnerability in Linux kernel drm/exynos exynos_drm_crtc_atomic_disableLinux kernel
- CVE-2024-24838WordPress Five Star Restaurant Reviews Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)Five Star Plugins Five Star Restaurant Reviews
- CVE-2024-24839WordPress Structured Content Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)Gordon Böhme, Antonio Leutsch Structured Content (JSON-LD)…
- CVE-2024-24841WordPress Add Customer for WooCommerce Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)Dan's Art Add Customer for WooCommerce
- CVE-2024-24865WordPress Scroll Triggered Box Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)Noah Kagan Scroll Triggered Box
- CVE-2024-20002In TVAPI, there is a possible out of bounds write due to a missing bounds check.MediaTek MT5583, MT5586, MT5691, MT5695, MT5696, MT9010, MT…
- CVE-2024-20001In TVAPI, there is a possible out of bounds write due to a missing bounds check.MediaTek MT5583, MT5586, MT5691, MT5695, MT5696, MT9010, MT…
- CVE-2024-20016In ged, there is a possible out of bounds write due to an integer overflow.MediaTek MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT…
- CVE-2024-20013In keyInstall, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2024-20012In keyInstall, there is a possible escalation of privilege due to type confusion.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2024-20010In keyInstall, there is a possible escalation of privilege due to type confusion.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2024-20006In da, there is a possible out of bounds write due to a missing bounds check.MediaTek MT2713, MT6781, MT6880, MT6890, MT8188T
- CVE-2024-24870WordPress Advanced iFrame Plugin <= 2023.10 is vulnerable to Cross Site Scripting (XSS)Michael Dempfle Advanced iFrame
- CVE-2023-51504WordPress Dan's Embedder for Google Calendar Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)Dan Dulaney Dan's Embedder for Google Calendar
- CVE-2023-5800Insufficient input validation in VAPIX API create_overlay.cgiAxis Communications AB AXIS OS
- CVE-2023-5677Brandon Rothel from QED Secure Solutions and Sam Hanson of Dragos have found that the VAPIX API tcptest.cgi did not have a sufficient input Axis Communications AB AXIS OS
- CVE-2024-24396Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrarstimulsoft-dashboards-js
- CVE-2024-24397Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrarstimulsoft-dashboards-js