# CVEs published 2024-02-06

156 CVEs were published on February 6, 2024: 25 critical, 55 high. Days are UTC.

- [CVE-2024-0971](https://cve.now/CVE-2024-0971.md): A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content. (CVSS 6.5, Tenable Nessus)
- [CVE-2024-0955](https://cve.now/CVE-2024-0955.md): Stored XSS vulnerability (CVSS 4.8, Tenable Nessus)
- [CVE-2024-1264](https://cve.now/CVE-2024-1264.md): Juanpao JPShop UploadsController.php actionUpdate unrestricted upload (CVSS 6.3, Juanpao JPShop)
- [CVE-2024-1283](https://cve.now/CVE-2024-1283.md): Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a (CVSS 8.8, Google Chrome)
- [CVE-2024-1284](https://cve.now/CVE-2024-1284.md): Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a craft (CVSS 9.8, Google Chrome)
- [CVE-2024-22388](https://cve.now/CVE-2024-22388.md): Insecure Default Initialization of Resource in HID Global (CVSS 5.9, HID Global iCLASS SE CP1000 Encoder · HID Global iCLASS… +6)
- [CVE-2024-1263](https://cve.now/CVE-2024-1263.md): Juanpao JPShop API PosterController.php actionUpdate unrestricted upload (CVSS 6.3, Juanpao JPShop)
- [CVE-2024-1262](https://cve.now/CVE-2024-1262.md): Juanpao JPShop API MaterialController.php actionUpdate unrestricted upload (CVSS 6.3, Juanpao JPShop)
- [CVE-2024-1261](https://cve.now/CVE-2024-1261.md): Juanpao JPShop API ComboController.php actionIndex unrestricted upload (CVSS 6.3, Juanpao JPShop)
- [CVE-2023-40143](https://cve.now/CVE-2023-40143.md): Westermo Lynx (CVSS 5.4, Westermo Lynx)
- [CVE-2023-45735](https://cve.now/CVE-2023-45735.md): Westermo Lynx Code Injection (CVSS 8.0, Westermo Lynx)
- [CVE-2023-45222](https://cve.now/CVE-2023-45222.md): Westermo Lynx Cross-site Scripting (CVSS 5.4, Westermo Lynx)
- [CVE-2023-45213](https://cve.now/CVE-2023-45213.md): Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains (CVSS 6.6, Westermo Lynx)
- [CVE-2024-24577](https://cve.now/CVE-2024-24577.md): libgit2 is vulnerable to arbitrary code execution due to heap corruption in \`git\_index\_add\` (CVSS 8.6, libgit2)
- [CVE-2023-42765](https://cve.now/CVE-2023-42765.md): Westermo Lynx Cross-site Scripting (CVSS 5.4, Westermo Lynx)
- [CVE-2024-1260](https://cve.now/CVE-2024-1260.md): Juanpao JPShop API ComboController.php actionIndex unrestricted upload (CVSS 6.3, Juanpao JPShop)
- [CVE-2024-24575](https://cve.now/CVE-2024-24575.md): libgit2 is vulnerable to a denial of service attack in \`git\_revparse\_single\` (CVSS 7.5, libgit2)
- [CVE-2023-40544](https://cve.now/CVE-2023-40544.md): Westermo Lynx Cleartext Transmission of Sensitive Information (CVSS 5.7, Westermo Lynx)
- [CVE-2023-45227](https://cve.now/CVE-2023-45227.md): Westermo Lynx Cross-site Scripting (CVSS 5.4, Westermo Lynx)
- [CVE-2023-38579](https://cve.now/CVE-2023-38579.md): Westermo Lynx 206-F2G Cross-Site Request Forgery (CVSS 8.0, Westermo Lynx)
- [CVE-2024-1259](https://cve.now/CVE-2024-1259.md): Juanpao JPShop API AppController.php unrestricted upload (CVSS 6.3, Juanpao JPShop)
- [CVE-2024-1258](https://cve.now/CVE-2024-1258.md): Juanpao JPShop API params.php hard-coded key (CVSS 3.1, Juanpao JPShop)
- [CVE-2024-1257](https://cve.now/CVE-2024-1257.md): Jspxcms find\_text.do cross site scripting (CVSS 3.5, Jspxcms)
- [CVE-2024-22241](https://cve.now/CVE-2024-22241.md): Aria Operations for Networks contains a cross site scripting vulnerability. (CVSS 4.3, VMware Aria Operations for Networks)
- [CVE-2024-22240](https://cve.now/CVE-2024-22240.md): Aria Operations for Networks contains a local file read vulnerability. (CVSS 4.9, VMware Aria Operations for Networks)
- [CVE-2024-22239](https://cve.now/CVE-2024-22239.md): Aria Operations for Networks contains a local privilege escalation vulnerability. (CVSS 5.3, VMware Aria Operations for Networks)
- [CVE-2024-22238](https://cve.now/CVE-2024-22238.md): Aria Operations for Networks contains a cross site scripting vulnerability. (CVSS 6.4, VMware Aria Operations for Networks)
- [CVE-2024-22237](https://cve.now/CVE-2024-22237.md): Aria Operations for Networks contains a local privilege escalation vulnerability. (CVSS 7.8, VMware Aria Operations for Networks)
- [CVE-2024-1256](https://cve.now/CVE-2024-1256.md): Jspxcms filter\_text.do cross site scripting (CVSS 3.5, Jspxcms)
- [CVE-2024-1255](https://cve.now/CVE-2024-1255.md): sepidz SepidzDigitalMenu Waiters information disclosure (CVSS 5.3, SepidzDigitalMenu)
- [CVE-2024-1254](https://cve.now/CVE-2024-1254.md): Byzoro Smart S20 Management Platform sysmanageajax.php sql injection (CVSS 4.7, Byzoro Smart S20 Management Platform)
- [CVE-2024-1048](https://cve.now/CVE-2024-1048.md): Grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVSS 3.3, grub2 · Red Hat Enterprise Linux)
- [CVE-2023-40545](https://cve.now/CVE-2023-40545.md): PingFederate OAuth client\_secret\_jwt Authentication Bypass (CVSS 8.8, Ping Identity PingFederate)
- [CVE-2024-1253](https://cve.now/CVE-2024-1253.md): Byzoro Smart S40 Management Platform Import web.php unrestricted upload (CVSS 4.7, Byzoro Smart S40 Management Platform)
- [CVE-2024-1252](https://cve.now/CVE-2024-1252.md): Tongda OA 2017 delete.php sql injection (CVSS 5.5, Tongda OA)
- [CVE-2023-43482](https://cve.now/CVE-2023-43482.md): A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 (CVSS 7.2, Tp-Link ER7206 Omada Gigabit VPN Router)
- [CVE-2023-36498](https://cve.now/CVE-2023-36498.md): A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3 (CVSS 7.2, Tp-Link ER7206 Omada Gigabit VPN Router)
- [CVE-2023-47209](https://cve.now/CVE-2023-47209.md): A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1. (CVSS 7.2, Tp-Link ER7206 Omada Gigabit VPN Router)
- [CVE-2023-47167](https://cve.now/CVE-2023-47167.md): A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3. (CVSS 7.2, Tp-Link ER7206 Omada Gigabit VPN Router)
- [CVE-2023-42664](https://cve.now/CVE-2023-42664.md): A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit V (CVSS 7.2, Tp-Link ER7206 Omada Gigabit VPN Router)
- [CVE-2023-46683](https://cve.now/CVE-2023-46683.md): A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada Gigab (CVSS 7.2, Tp-Link ER7206 Omada Gigabit VPN Router)
- [CVE-2023-47617](https://cve.now/CVE-2023-47617.md): A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Route (CVSS 7.2, Tp-Link ER7206 Omada Gigabit VPN Router)
- [CVE-2023-47618](https://cve.now/CVE-2023-47618.md): A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1 (CVSS 7.2, Tp-Link ER7206 Omada Gigabit VPN Router)
- [CVE-2024-22331](https://cve.now/CVE-2024-22331.md): IBM UrbanCode Deploy information disclosure (CVSS 6.2, IBM UrbanCode Deploy · IBM DevOps Deploy)
- [CVE-2023-46183](https://cve.now/CVE-2023-46183.md): IBM PowerVM Hypervisor information disclosure (CVSS 5.3, IBM PowerVM Hypervisor)
- [CVE-2023-35188](https://cve.now/CVE-2023-35188.md): SQL Injection Remote Code Execution Vulnerability (CVSS 8.0, SolarWinds Platform)
- [CVE-2024-1251](https://cve.now/CVE-2024-1251.md): Tongda OA 2017 delete.php sql injection (CVSS 5.5, Tongda OA)
- [CVE-2023-50395](https://cve.now/CVE-2023-50395.md): SQL Injection Remote Code Execution Vulnerability (CVSS 8.0, SolarWinds Platform)
- [CVE-2024-23344](https://cve.now/CVE-2024-23344.md): Tuleap's content of artifacts might be readable by unauthorized users (CVSS 5.3, Enalean tuleap)
- [CVE-2024-24594](https://cve.now/CVE-2024-24594.md): A cross-site scripting (XSS) vulnerability in all versions of the web server component of Allegro AI’s ClearML platform allows a remote atta (CVSS 9.9, Allegro.AI ClearML)
- [CVE-2024-24593](https://cve.now/CVE-2024-24593.md): A cross-site request forgery (CSRF) vulnerability in all versions up to 1.14.1 of the api server component of Allegro AI’s ClearML platform (CVSS 9.6, Allegro.AI ClearML)
- [CVE-2024-24592](https://cve.now/CVE-2024-24592.md): Lack of authentication in all versions of the fileserver component of Allegro AI’s ClearML platform allows a remote attacker to arbitrarily (CVSS 9.8, Allegro.AI ClearML)
- [CVE-2024-24591](https://cve.now/CVE-2024-24591.md): A path traversal vulnerability in versions 1.4.0 to 1.14.1 of the client SDK of Allegro AI’s ClearML platform enables a maliciously uploaded (CVSS 8.0, Allegro.AI ClearML · clearml)
- [CVE-2024-24590](https://cve.now/CVE-2024-24590.md): Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a mali (CVSS 8.0, Allegro.AI ClearML · clearml)
- [CVE-2024-0911](https://cve.now/CVE-2024-0911.md): Indent: heap-based buffer overflow in set\_buf\_break() (CVSS 5.5, indent)
- [CVE-2024-0690](https://cve.now/CVE-2024-0690.md): Ansible-core: possible information leak in tasks that ignore ansible\_no\_log configuration (CVSS 5.0, ansible · Red Hat Ansible Automation Platform 2.4 for RH… +2)
- [CVE-2024-23673](https://cve.now/CVE-2024-23673.md): Apache Sling Servlets Resolver: Malicious code execution via path traversal (CVSS 8.5, Apache Software Foundation Apache Sling Servlets Resolver ·…)
- [CVE-2024-24943](https://cve.now/CVE-2024-24943.md): In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image (CVSS 5.3, JetBrains Toolbox App)
- [CVE-2024-23917](https://cve.now/CVE-2024-23917.md): In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible (CVSS 9.8, JetBrains TeamCity)
- [CVE-2024-24942](https://cve.now/CVE-2024-24942.md): In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives (CVSS 5.3, JetBrains TeamCity)
- [CVE-2024-24941](https://cve.now/CVE-2024-24941.md): In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL (CVSS 6.1, JetBrains IntelliJ IDEA)
- [CVE-2024-24940](https://cve.now/CVE-2024-24940.md): In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives (CVSS 2.8, JetBrains IntelliJ IDEA)
- [CVE-2024-24939](https://cve.now/CVE-2024-24939.md): In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible (CVSS 3.3, JetBrains Rider)
- [CVE-2024-24938](https://cve.now/CVE-2024-24938.md): In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation (CVSS 5.3, JetBrains TeamCity)
- [CVE-2024-24937](https://cve.now/CVE-2024-24937.md): In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible (CVSS 4.6, JetBrains TeamCity)
- [CVE-2024-24936](https://cve.now/CVE-2024-24936.md): In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed (CVSS 4.3, JetBrains TeamCity)
- [CVE-2023-4503](https://cve.now/CVE-2023-4503.md): Eap-galleon: custom provisioning creates unsecured http-invoker (CVSS 6.8, Red Hat EAP · Red Hat JBoss Enterprise Application Platf… +2)
- [CVE-2024-0684](https://cve.now/CVE-2024-0684.md): Coreutils: heap overflow in split --line-bytes with very long lines (CVSS 5.5, coreutils)
- [CVE-2023-32479](https://cve.now/CVE-2023-32479.md): Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege es (CVSS 6.7, Dell Encryption · Dell Endpoint Security Suite Enterprise +1)
- [CVE-2023-32454](https://cve.now/CVE-2023-32454.md): DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. (CVSS 6.3, Dell DUP Framework)
- [CVE-2023-32474](https://cve.now/CVE-2023-32474.md): Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount point. (CVSS 6.6, Dell Display Manager)
- [CVE-2023-32451](https://cve.now/CVE-2023-32451.md): Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute malicious code during inst (CVSS 7.3, Dell Display Manager)
- [CVE-2023-28063](https://cve.now/CVE-2023-28063.md): Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. (CVSS 6.7, Dell CPG BIOS)
- [CVE-2023-28049](https://cve.now/CVE-2023-28049.md): Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. (CVSS 4.7, Dell Command Monitor)
- [CVE-2023-25543](https://cve.now/CVE-2023-25543.md): Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. (CVSS 7.8, Dell Power Manager)
- [CVE-2023-43536](https://cve.now/CVE-2023-43536.md): Buffer Over-read in WLAN Firmware (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-43535](https://cve.now/CVE-2023-43535.md): Improper Validation of Array Index in Display (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-43534](https://cve.now/CVE-2023-43534.md): Use of Out-of-range Pointer Offset in WLAN HOST (CVSS 8.6, Qualcomm Snapdragon)
- [CVE-2023-43533](https://cve.now/CVE-2023-43533.md): Buffer Over-read in WLAN Firmware (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-43532](https://cve.now/CVE-2023-43532.md): Untrusted Pointer Dereference in Display (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-43523](https://cve.now/CVE-2023-43523.md): Reachable Assertion in WLAN Firmware (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-43522](https://cve.now/CVE-2023-43522.md): NULL Pointer Dereference in WLAN Firmware (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-43520](https://cve.now/CVE-2023-43520.md): Stack-based Buffer Overflow in WLAN HOST (CVSS 8.6, Qualcomm Snapdragon)
- [CVE-2023-43519](https://cve.now/CVE-2023-43519.md): Buffer Copy without Checking Size of Input (\`Classic Buffer Overflow\`) in Video (CVSS 7.3, Qualcomm Snapdragon)
- [CVE-2023-43518](https://cve.now/CVE-2023-43518.md): Untrusted Pointer Dereference in Video (CVSS 7.3, Qualcomm Snapdragon)
- [CVE-2023-43517](https://cve.now/CVE-2023-43517.md): Improper Access Control in Automotive Multimedia (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-43516](https://cve.now/CVE-2023-43516.md): Use of out-of-range pointer offset in Video (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-43513](https://cve.now/CVE-2023-43513.md): Use of Out-of-range Pointer Offset in PCIe (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-33077](https://cve.now/CVE-2023-33077.md): Buffer Copy Without Checking Size of Input in HLOS (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-33076](https://cve.now/CVE-2023-33076.md): Configuration Issue in Core (CVSS 5.9, Qualcomm Snapdragon)
- [CVE-2023-33072](https://cve.now/CVE-2023-33072.md): Buffer copy without checking size of Input in Core (CVSS 9.3, Qualcomm Snapdragon)
- [CVE-2023-33069](https://cve.now/CVE-2023-33069.md): Buffer Copy Without Checking Size of Input in Audio (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-33068](https://cve.now/CVE-2023-33068.md): Buffer Copy Without Checking Size of Input in Audio (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-33067](https://cve.now/CVE-2023-33067.md): Use of Out-of-range Pointer Offset in Audio (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-33065](https://cve.now/CVE-2023-33065.md): Buffer Over-read in Audio (CVSS 6.1, Qualcomm Snapdragon)
- [CVE-2023-33064](https://cve.now/CVE-2023-33064.md): Buffer Over-read in Audio (CVSS 5.5, Qualcomm Snapdragon)
- [CVE-2023-33060](https://cve.now/CVE-2023-33060.md): Buffer Over-read in Core (CVSS 7.1, Qualcomm Snapdragon)
- [CVE-2023-33058](https://cve.now/CVE-2023-33058.md): Buffer Copy Without Checking Size of Input in Modem (CVSS 8.2, Qualcomm Snapdragon)
- [CVE-2023-33057](https://cve.now/CVE-2023-33057.md): Improper Input Validation in Multi-Mode Call Processor (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-33049](https://cve.now/CVE-2023-33049.md): Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-33046](https://cve.now/CVE-2023-33046.md): Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2024-23304](https://cve.now/CVE-2024-23304.md): Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by performin (CVSS 7.5, Cybozu KUNAI for Android)
- [CVE-2024-24808](https://cve.now/CVE-2024-24808.md): pyLoad open redirect vulnerability due to improper validation of the is\_safe\_url function (CVSS 4.7, pyload · pyload-ng)
- [CVE-2024-20828](https://cve.now/CVE-2024-20828.md): Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downlo (CVSS 2.4, Samsung Mobile Samsung Internet)
- [CVE-2024-20827](https://cve.now/CVE-2024-20827.md): Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access the picture using ph (CVSS 4.6, Samsung Mobile Gallery)
- [CVE-2024-20826](https://cve.now/CVE-2024-20826.md): Implicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local attackers to access sensitive information vi (CVSS 5.5, Samsung Mobile UPHelper)
- [CVE-2024-20825](https://cve.now/CVE-2024-20825.md): Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive informat (CVSS 5.5, Samsung Mobile Galaxy Store)
- [CVE-2024-20824](https://cve.now/CVE-2024-20824.md): Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive (CVSS 5.5, Samsung Mobile Galaxy Store)
- [CVE-2024-20823](https://cve.now/CVE-2024-20823.md): Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensiti (CVSS 5.5, Samsung Mobile Galaxy Store)
- [CVE-2024-20822](https://cve.now/CVE-2024-20822.md): Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensit (CVSS 5.5, Samsung Mobile Galaxy Store)
- [CVE-2024-20820](https://cve.now/CVE-2024-20820.md): Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read. (CVSS 4.4, Samsung Mobile Devices)
- [CVE-2024-20819](https://cve.now/CVE-2024-20819.md): Out-of-bounds Write vulnerabilities in svc1td\_vld\_plh\_ap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger b (CVSS 6.6, Samsung Mobile Devices)
- [CVE-2024-20818](https://cve.now/CVE-2024-20818.md): Out-of-bounds Write vulnerabilities in svc1td\_vld\_elh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buff (CVSS 6.6, Samsung Mobile Devices)
- [CVE-2024-20817](https://cve.now/CVE-2024-20817.md): Out-of-bounds Write vulnerabilities in svc1td\_vld\_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buff (CVSS 6.6, Samsung Mobile Devices)
- [CVE-2024-20816](https://cve.now/CVE-2024-20816.md): Improper authentication vulnerability in onCharacteristicWriteRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attack (CVSS 8.0, Samsung Mobile Devices)
- [CVE-2024-20815](https://cve.now/CVE-2024-20815.md): Improper authentication vulnerability in onCharacteristicReadRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attacke (CVSS 8.0, Samsung Mobile Devices)
- [CVE-2024-20814](https://cve.now/CVE-2024-20814.md): Out-of-bounds Read in padmd\_vld\_ac\_prog\_refine of libpadm.so prior to SMR Feb-2024 Release 1 allows local attackers access unauthorized info (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2024-20813](https://cve.now/CVE-2024-20813.md): Out-of-bounds Write in padmd\_vld\_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code. (CVSS 8.4, Samsung Mobile Devices)
- [CVE-2024-20812](https://cve.now/CVE-2024-20812.md): Out-of-bounds Write in padmd\_vld\_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code. (CVSS 8.4, Samsung Mobile Devices)
- [CVE-2024-20811](https://cve.now/CVE-2024-20811.md): Improper caller verification in GameOptimizer prior to SMR Feb-2024 Release 1 allows local attackers to configure GameOptimizer. (CVSS 5.1, Samsung Mobile Devices)
- [CVE-2024-20810](https://cve.now/CVE-2024-20810.md): Implicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1 allows local attackers to get sensitive informa (CVSS 3.3, Samsung Mobile Devices)
- [CVE-2024-0244](https://cve.now/CVE-2024-0244.md): Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on the netwo (CVSS 9.8, Canon Satera MF750C Series · Canon Color imageCLASS MF75… +3)
- [CVE-2023-6234](https://cve.now/CVE-2023-6234.md): Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(\*) which may allow an attack (CVSS 9.8, Canon Satera LBP670C Series · Canon Satera MF750C Series +8)
- [CVE-2023-6233](https://cve.now/CVE-2023-6233.md): Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on the n (CVSS 9.8, Canon Satera LBP670C Series · Canon Satera MF750C Series +8)
- [CVE-2023-6232](https://cve.now/CVE-2023-6232.md): Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser (CVSS 9.8, Canon Satera LBP670C Series · Canon Satera MF750C Series +8)
- [CVE-2023-6231](https://cve.now/CVE-2023-6231.md): Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on the netwo (CVSS 9.8, Canon Satera LBP670C Series · Canon Satera MF750C Series +8)
- [CVE-2023-6230](https://cve.now/CVE-2023-6230.md): Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser (CVSS 9.8, Canon Satera LBP670C Series · Canon Satera MF750C Series +8)
- [CVE-2023-6229](https://cve.now/CVE-2023-6229.md): Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on (CVSS 9.8, Canon Satera LBP670C Series · Canon Satera MF750C Series +8)
- [CVE-2023-46359](https://cve.now/CVE-2023-46359.md): An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attac (CVSS 9.8)
- [CVE-2023-46360](https://cve.now/CVE-2023-46360.md): Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier is vulnerable to Execution with Unnecessary Privileges. (CVSS 8.8)
- [CVE-2023-47022](https://cve.now/CVE-2023-47022.md): Insecure Direct Object Reference in NCR Terminal Handler v.1.5.1 allows an unprivileged user to edit the audit logs for any user and can lea (CVSS 6.5)
- [CVE-2023-47353](https://cve.now/CVE-2023-47353.md): An issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO v1.0.11 allows attackers to force the download of arbitra (CVSS 8.8)
- [CVE-2023-47354](https://cve.now/CVE-2023-47354.md): An issue in the PowerOffWidgetReceiver function of Super Reboot (Root) Recovery v1.0.3 allows attackers to arbitrarily reset or power off th (CVSS 7.8)
- [CVE-2023-47889](https://cve.now/CVE-2023-47889.md): The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. (CVSS 7.8)
- [CVE-2023-52239](https://cve.now/CVE-2023-52239.md): The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport. (CVSS 6.5)
- [CVE-2024-22365](https://cve.now/CVE-2024-22365.md): linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat c (CVSS 5.5)
- [CVE-2024-22514](https://cve.now/CVE-2024-22514.md): An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file. (CVSS 8.8)
- [CVE-2024-22515](https://cve.now/CVE-2024-22515.md): Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio (CVSS 8.8)
- [CVE-2024-22519](https://cve.now/CVE-2024-22519.md): An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted data packets. (CVSS 8.2)
- [CVE-2024-22520](https://cve.now/CVE-2024-22520.md): An issue discovered in Dronetag Drone Scanner 1.5.2 allows attackers to impersonate other drones via transmission of crafted data packets. (CVSS 8.2)
- [CVE-2024-22773](https://cve.now/CVE-2024-22773.md): Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in Cookie resulting in L (CVSS 8.1)
- [CVE-2024-22852](https://cve.now/CVE-2024-22852.md): D-Link Go-RT-AC750 GORTAC750\_A1\_FW\_v101b03 contains a stack-based buffer overflow via the function genacgi\_main. (CVSS 9.8)
- [CVE-2024-22853](https://cve.now/CVE-2024-22853.md): D-LINK Go-RT-AC750 GORTAC750\_A1\_FW\_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain r (CVSS 9.8)
- [CVE-2024-24000](https://cve.now/CVE-2024-24000.md): jshERP v3.3 is vulnerable to Arbitrary File Upload. (CVSS 9.8)
- [CVE-2024-24001](https://cve.now/CVE-2024-24001.md): jshERP v3.3 is vulnerable to SQL Injection. (CVSS 9.8)
- [CVE-2024-24002](https://cve.now/CVE-2024-24002.md): jshERP v3.3 is vulnerable to SQL Injection. (CVSS 9.8)
- [CVE-2024-24004](https://cve.now/CVE-2024-24004.md): jshERP v3.3 is vulnerable to SQL Injection. (CVSS 9.8)
- [CVE-2024-24013](https://cve.now/CVE-2024-24013.md): A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. (CVSS 9.8)
- [CVE-2024-24015](https://cve.now/CVE-2024-24015.md): A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. (CVSS 9.8)
- [CVE-2024-24112](https://cve.now/CVE-2024-24112.md): xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter. (CVSS 9.8)
- [CVE-2024-24254](https://cve.now/CVE-2024-24254.md): PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability i (CVSS 4.2)
- [CVE-2024-24255](https://cve.now/CVE-2024-24255.md): A Race Condition discovered in geofence.cpp and mission\_feasibility\_checker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send d (CVSS 4.2)
- [CVE-2024-24291](https://cve.now/CVE-2024-24291.md): An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL. (CVSS 6.1)
- [CVE-2024-24398](https://cve.now/CVE-2024-24398.md): Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary (CVSS 9.8, stimulsoft-dashboards-js)
- [CVE-2024-24680](https://cve.now/CVE-2024-24680.md): An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. (CVSS 7.5, django)
- [CVE-2024-25140](https://cve.now/CVE-2024-25140.md): A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification Authorities with Enhan (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-02-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.