CVEs published February 13, 2024
182 CVEs were published on February 13, 2024: 19 critical, 98 high. 5 are now in CISA KEV.
- Published
- 182
- Critical
- 19
- High
- 98
- Medium
- 59
- Low
- 6
- Unrated
- 0
- Now in CISA KEV
- 5
- Fix available
- 121
Most affected products
- Microsoft Windows
- 41
- Siemens Tecnomatix Plant Simulation
- 10
- GitHub Enterprise Server
- 9
- Microsoft Dynamics 365 (on-premises)
- 6
- Siemens Simcenter Femap
- 6
- ISC BIND
- 5
- typo3 · typo3/cms-core
- 4
- boldthemes Bold Page Builder
- 3
- Siemens SINEC NMS
- 3
- Zoom Video Communications Zoom Clients
- 3
Critical 19
- CVE-2024-1378Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleGitHub Enterprise Server
- CVE-2024-1374Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleGitHub Enterprise Server
- CVE-2024-1372Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleGitHub Enterprise Server
- CVE-2024-1369Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleGitHub Enterprise Server
- CVE-2024-1359Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleGitHub Enterprise Server
- CVE-2024-1355Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleGitHub Enterprise Server
- CVE-2024-21410Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2024-21403Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege VulnerabilityMicrosoft Azure Kubernetes Service
- CVE-2024-21376Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution VulnerabilityMicrosoft Azure Kubernetes Service
- CVE-2024-21364Microsoft Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery
- CVE-2024-21413Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2024-21401Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege VulnerabilityMicrosoft Entra
- CVE-2024-23816A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3), Location IntelligenSiemens Location Intelligence Perpetual Large · Siemens… +6
- CVE-2024-22131Code Injection vulnerability in SAP ABA (Application Basis)SAP_SE SAP ABA
- CVE-2022-48623The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive informa
- CVE-2023-42374An issue in mystenlabs Sui Blockchain before v.1.6.3 allow a remote attacker to execute arbitrary code and cause a denial of service via a c
- CVE-2023-50808Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI.
- CVE-2024-22923SQL injection vulnerability in adv radius v.2.2.5 allows a local attacker to execute arbitrary code via a crafted script.
- CVE-2024-24142Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.
High 98
- CVE-2024-24697Zoom Clients - Untrusted Search PathZoom Video Communications Zoom Clients
- CVE-2024-1485Registry-support: decompress can delete files outside scope via relative pathsregistry-support · Red Hat OpenShift Developer Tools and… +2
- CVE-2024-25121Improper Access Control Persisting File Abstraction Layer Entities via Data Handler in TYPO3typo3 · typo3/cms-core
- CVE-2023-20587Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code 3rd Gen AMD EPYC™ Processors · 4th Gen AMD EPYC™ Process… +3
- CVE-2021-46757Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel AMD Ryzen™ Embedded
- CVE-2024-25122 Cross-site Scripting sidekiq-unique-jobs UI server vulnerabilitymhenrixon sidekiq-unique-jobs · sidekiq-unique-jobs
- CVE-2024-1354Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleGitHub Enterprise Server
- CVE-2024-24814Denial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidcmod_auth_openidc
- CVE-2024-21412Internet Shortcut Files Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-21406Windows Printing Service Spoofing VulnerabilityMicrosoft Windows
- CVE-2024-21405Microsoft Message Queuing (MSMQ) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21395Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2024-21391Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21384Microsoft Office OneNote Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2024-21380Microsoft Dynamics Business Central/NAV Information Disclosure VulnerabilityMicrosoft Dynamics 365 Business Central 2022 Release Wave ·…
- CVE-2024-21378Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2024-21370Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21368Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21367Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21365Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21363Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21359Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21355Microsoft Message Queuing (MSMQ) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21353Microsoft WDAC ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows Server 2022, 23H2 Edition
- CVE-2024-21348Internet Connection Sharing (ICS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-21347Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21346Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21345Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows Server 2022, 23H2 Edition
- CVE-2024-21342Windows DNS Client Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-21328Dynamics 365 Sales Spoofing VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2024-21315Microsoft Defender for Endpoint Protection Elevation of Privilege VulnerabilityMicrosoft Defender for Endpoint for Windows
- CVE-2024-20673Microsoft Office Remote Code Execution VulnerabilityMicrosoft Excel · Microsoft Office +5
- CVE-2024-21420Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21404.NET Denial of Service VulnerabilityMicrosoft .NET · Microsoft Visual Studio
- CVE-2024-21402Microsoft Outlook Elevation of Privilege VulnerabilityMicrosoft 365 Apps for Enterprise
- CVE-2024-21396Dynamics 365 Sales Spoofing VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2024-21394Dynamics 365 Field Service Spoofing VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2024-21393Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2024-21389Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2024-21386.NET Denial of Service VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio +12
- CVE-2024-21379Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2024-21375Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21372Windows OLE Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21371Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21369Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21366Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21361Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21360Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21358Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21357Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21354Microsoft Message Queuing (MSMQ) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21352Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21351Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-21350Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21349Microsoft ActiveX Data Objects Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21338Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21329Azure Connected Machine Agent Elevation of Privilege VulnerabilityMicrosoft Azure Connected Machine Agent
- CVE-2024-21327Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting VulnerabilityMicrosoft Dynamics 365 Customer Engagement
- CVE-2024-20667Azure DevOps Server Remote Code Execution VulnerabilityMicrosoft Azure DevOps Server
- CVE-2024-23440Vba32 Antivirus v3.36.0 - Arbitrary Memory ReadVirusBlokAda Vba32 Antivirus
- CVE-2024-23439Vba32 Antivirus v3.36.0 - Arbitrary Memory ReadVirusBlokAda Vba32 Antivirus
- CVE-2024-1163Path traversal vulnerability in mapshapermbloch/mapshaper · mapshaper
- CVE-2023-6516Specific recursive query patterns may lead to an out-of-memory conditionISC BIND
- CVE-2023-5679Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolutionISC BIND
- CVE-2023-5517Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabledISC BIND
- CVE-2023-4408Parsing large DNS messages may cause excessive CPU loadISC BIND
- CVE-2024-24781Hima: Uncontrolled Resource Consumption in multiple productsHIMA F30 03X YY · HIMA F35 03X YY +7
- CVE-2024-24925A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000).Siemens Simcenter Femap
- CVE-2024-24924A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000).Siemens Simcenter Femap
- CVE-2024-24923A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000), Simcenter Femap (All versions < V2306.0001).Siemens Simcenter Femap
- CVE-2024-24922A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000).Siemens Simcenter Femap
- CVE-2024-24921A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000).Siemens Simcenter Femap
- CVE-2024-24920A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000).Siemens Simcenter Femap
- CVE-2024-23813A vulnerability has been identified in Polarion ALM (All versions < V2404.0).Siemens Polarion ALM
- CVE-2024-23812A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1).Siemens SINEC NMS
- CVE-2024-23811A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1).Siemens SINEC NMS
- CVE-2024-23810A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1).Siemens SINEC NMS
- CVE-2024-23804A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2024-23803A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < VSiemens Tecnomatix Plant Simulation
- CVE-2024-23802A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2024-23798A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2024-23797A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2024-23796A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2024-23795A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2024-22042A vulnerability has been identified in Unicam FX (All versions).Siemens Unicam FX
- CVE-2023-51440A vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All versions), SIMATIC CP 343-1 Lean (6GK7343-1CX10-0XE0) (AllSiemens SIMATIC CP 343-1 · Siemens SIPLUS NET CP 343-1
- CVE-2023-50236A vulnerability has been identified in Polarion ALM (All versions < V2404.0).Siemens Polarion ALM
- CVE-2023-49125A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.263), Parasolid V35.1 (All versions < V35.1.252), Parasolid V36Siemens Parasolid · Siemens Solid Edge SE2023 +1
- CVE-2024-22445 Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability.Dell PowerProtect Data Manager
- CVE-2024-22454 Dell PowerProtect Data Manager, version 19.15 and prior versions, contain a weak password recovery mechanism for forgotten passwords.Dell PowerProtect Data Manager
- CVE-2024-22024An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) andIvanti ICS · Ivant ICS +1
- CVE-2024-25642Improper Certificate Validation in SAP Cloud ConnectorSAP_SE SAP Cloud Connector
- CVE-2024-24743XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures)SAP_SE SAP NetWeaver AS Java
- CVE-2024-22132Code Injection vulnerability in SAP IDES SystemsSAP_SE SAP IDES Systems
- CVE-2024-22130Cross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UISAP_SE SAP CRM WebClient UI
- CVE-2023-38960Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain privileges and execute
- CVE-2023-52431The Plack::Middleware::XSRFBlock package before 0.0.19 for Perl allows attackers to bypass a CSRF protection mechanism via an empty form val
- CVE-2024-25407SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request.
Medium, low and unrated 65
- CVE-2024-24699Zoom Clients - Business Logic ErrorZoom Video Communications Zoom Clients
- CVE-2024-24698Zoom Clients - Improper AuthenticationZoom Video Communications Zoom Clients
- CVE-2024-24696Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input ValidationZoom Video Communications Zoom Desktop Client for Windows,…
- CVE-2024-24695 Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input ValidationZoom Video Communications Zoom Desktop Client for Windows,…
- CVE-2024-25118Information Disclosure of Hashed Passwords in TYPO3 Backend Formstypo3 · typo3/cms-core
- CVE-2024-25119Information Disclosure of Encryption Key in TYPO3 Install Tooltypo3 · typo3/cms-core
- CVE-2024-25120Improper Access Control of Resources Referenced by t3:// URI Scheme in TYPO3typo3 · typo3/cms-core
- CVE-2023-6152A user changing their email after signing up and verifying it can change it without verification in profile settings.Grafana · github.com/grafana/grafana
- CVE-2023-20579Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ G… +11
- CVE-2023-31347Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when S3rd Gen AMD EPYC™ Processors · 4th Gen AMD EPYC™ Processors
- CVE-2023-31346Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.3rd Gen AMD EPYC™ Processors · 4th Gen AMD EPYC™ Processors
- CVE-2024-1082Path traversal vulnerability in GitHub Enterprise Server that allowed arbitrary file read with a specially crafted GitHub Pages artifact uploadGitHub Enterprise Server
- CVE-2024-1084Cross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise Server allows a malicious website that reqGitHub Enterprise Server
- CVE-2024-24751Broken Access Control in Backend Module in sf_event_mgtderhansen sf_event_mgt · derhansen/sf_event_mgt
- CVE-2024-21397Microsoft Azure File Sync Elevation of Privilege VulnerabilityMicrosoft Azure File Sync
- CVE-2024-21377Windows DNS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-21374Microsoft Teams for Android Information Disclosure VulnerabilityMicrosoft Teams for Android
- CVE-2024-21362Windows Kernel Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2024-21356Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-21344Windows Network Address Translation (NAT) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-21343Windows Network Address Translation (NAT) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-21341Windows Kernel Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21339Windows USB Generic Parent Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-20684Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-20695Skype for Business Information Disclosure VulnerabilityMicrosoft Skype for Business Server 2019 CU7
- CVE-2024-21304Trusted Compute Base Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-20679Azure Stack Hub Spoofing VulnerabilityMicrosoft Azure Stack Hub
- CVE-2024-21381Microsoft Azure Active Directory B2C Spoofing VulnerabilityMicrosoft Entra
- CVE-2024-21340Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-20570Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bAMD Alveo™ Card · AMD Kintex™ UltraScale™ FPGA +4
- CVE-2024-1140Twister Antivirus v8.17 - Out-of-bounds ReadFilseclab Twister Antivirus
- CVE-2024-1096Twister Antivirus v8.17 - Denial of ServiceFilseclab Twister Antivirus
- CVE-2023-5680Cleaning an ECS-enabled cache may cause excessive CPU loadISC BIND
- CVE-2024-24782HIMA: Origin Validation Error in multiple productsHIMA F30 03X YY · HIMA F35 03X YY +6
- CVE-2024-1309Resource Consumption Identified in NTP before 4.2.4p8 and 4.2.5Honeywell Niagara Framework
- CVE-2023-6072 A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to crafTrellix Central Management
- CVE-2024-1159Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Contentboldthemes Bold Page Builder
- CVE-2024-1157Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URLboldthemes Bold Page Builder
- CVE-2024-1160Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Linkboldthemes Bold Page Builder
- CVE-2024-23801A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < VSiemens Tecnomatix Plant Simulation
- CVE-2024-23800A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < VSiemens Tecnomatix Plant Simulation
- CVE-2024-23799A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < VSiemens Tecnomatix Plant Simulation
- CVE-2024-22043A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.251), Parasolid V35.1 (All versions < V35.1.170).Siemens Parasolid
- CVE-2023-48364A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMSiemens OpenPCS 7 · Siemens SIMATIC BATCH +4
- CVE-2023-48363A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMSiemens OpenPCS 7 · Siemens SIMATIC BATCH +4
- CVE-2023-6815Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versionMitsubishi Electric MELSEC iQ-R Series Safety CPU R08SFC… +6
- CVE-2024-25914WordPress SMTP Mail Plugin <= 1.3.20 is vulnerable to Cross Site Request Forgery (CSRF)Photoboxone SMTP Mail
- CVE-2024-21491Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures osvix
- CVE-2024-24741Missing Authorization check in SAP Master Data Governance MaterialSAP_SE SAP Master Data Governance Material
- CVE-2024-22129Cross-Site Scripting (XSS) vulnerability in SAP CompanionSAP_SE SAP Companion
- CVE-2024-25643Missing authorization check in SAP Fiori app (My Overtime Requests)SAP_SE SAP Fiori app
- CVE-2023-50358QTS, QuTS hero, QuTScloudQNAP Systems QTS · QNAP Systems QuTS hero +1
- CVE-2023-47218QTS, QuTS hero, QuTScloudQNAP Systems QTS · QNAP Systems QuTS hero +1
- CVE-2024-24742Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)SAP_SE SAP CRM
- CVE-2024-24740Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (SAP Kernel)SAP_SE SAP NetWeaver Application Server ABAP
- CVE-2024-24739Missing authorization check in SAP BAM (Bank Account Management)SAP_SE SAP BAM
- CVE-2024-22128Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Business Client for HTMLSAP_SE SAP NetWeaver Business Client for HTML
- CVE-2024-22126Cross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application)SAP_SE SAP NetWeaver AS Java
- CVE-2023-26562In Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed account (with 2FA and generated passwords) can send e-mail messages when configured f
- CVE-2023-45206An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0.
- CVE-2023-45207An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0.
- CVE-2023-48432An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0.
- CVE-2023-49339Ellucian Banner 9.17 allows Insecure Direct Object Reference (IDOR) via a modified bannerId to the /StudentSelfService/ssb/studentCard/retri
- CVE-2023-52059A cross-site scripting (XSS) vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payloa
- CVE-2023-52060A Cross-Site Request Forgery (CSRF) in Gestsup v3.2.46 allows attackers to arbitrarily edit user profile information via a crafted request.