# CVEs published 2024-02-14

170 CVEs were published on February 14, 2024: 15 critical, 47 high. Days are UTC.

- [CVE-2024-25620](https://cve.now/CVE-2024-25620.md): Dependency management path traversal in helm (CVSS 6.4, helm · helm.sh/helm/v3)
- [CVE-2022-48220](https://cve.now/CVE-2022-48220.md): Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusio (CVSS 6.4, Certain HP Desktop PC products)
- [CVE-2022-48219](https://cve.now/CVE-2022-48219.md): Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusio (CVSS 6.4, Certain HP Desktop PC products)
- [CVE-2023-6138](https://cve.now/CVE-2023-6138.md): A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of pr (CVSS 7.9, Certain HP Workstation PCs)
- [CVE-2023-49721](https://cve.now/CVE-2023-49721.md): An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. (CVSS 6.7, Canonical LXD)
- [CVE-2023-48733](https://cve.now/CVE-2023-48733.md): An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. (CVSS 6.7, Canonical Ubuntu EDK II)
- [CVE-2024-1471](https://cve.now/CVE-2024-1471.md): HTML Injection Vulnerability (CVSS 5.9, Tenable Security Center)
- [CVE-2024-1367](https://cve.now/CVE-2024-1367.md): Command Injection Vulnerability in Tenable Security Center (CVSS 7.2, Tenable Security Center)
- [CVE-2024-25617](https://cve.now/CVE-2024-25617.md): Denial of Service in HTTP Header parser in squid proxy (CVSS 5.3, squid-cache squid)
- [CVE-2024-25619](https://cve.now/CVE-2024-25619.md): Destroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodon (CVSS 3.1, mastodon)
- [CVE-2024-25618](https://cve.now/CVE-2024-25618.md): External OpenID Connect Account Takeover by E-Mail Change in mastodon (CVSS 4.2, mastodon)
- [CVE-2024-1482](https://cve.now/CVE-2024-1482.md): Improper Authorization in GitHub Enterprise Server allowed unauthorized workflow execution (CVSS 7.1, GitHub Enterprise Server)
- [CVE-2023-50926](https://cve.now/CVE-2023-50926.md): Unvalidated DIO prefix info length in RPL-Lite in Contiki-NG (CVSS 7.5, contiki-ng)
- [CVE-2023-50927](https://cve.now/CVE-2023-50927.md): Insufficient boundary checks for DIO and DAO messages in RPL-Lite in Contiki-NG (CVSS 8.6, contiki-ng)
- [CVE-2023-48229](https://cve.now/CVE-2023-48229.md): Out-of-bounds write in the radio driver for Contiki-NG nRF platforms (CVSS 7.0, contiki-ng)
- [CVE-2024-0011](https://cve.now/CVE-2024-0011.md): PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication (CVSS 4.3, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2024-0010](https://cve.now/CVE-2024-0010.md): PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal (CVSS 4.3, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2024-0009](https://cve.now/CVE-2024-0009.md): PAN-OS: Improper IP Address Verification in GlobalProtect Gateway (CVSS 6.3, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2024-0008](https://cve.now/CVE-2024-0008.md): PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface (CVSS 6.6, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2024-0007](https://cve.now/CVE-2024-0007.md): PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface (CVSS 6.8, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2024-0568](https://cve.now/CVE-2024-0568.md): CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of device configuration over NFC communicatio (CVSS 8.8, Schneider Electric Harmony Control Relay RMNF22TB30 · Schne…)
- [CVE-2023-27975](https://cve.now/CVE-2023-27975.md): CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure (CVSS 7.1, Schneider Electric EcoStruxure Control Expert · Schneider E…)
- [CVE-2023-6408](https://cve.now/CVE-2023-6408.md): CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a d (CVSS 8.1, Schneider Electric Modicon M340 CPU · Schneider Electric… +2)
- [CVE-2023-6409](https://cve.now/CVE-2023-6409.md): CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with applicati (CVSS 7.7, Schneider Electric EcoStruxure Control Expert · Schneider E…)
- [CVE-2024-23982](https://cve.now/CVE-2024-23982.md): BIG-IP PEM vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2024-24990](https://cve.now/CVE-2024-24990.md): NGINX HTTP/3 QUIC vulnerability (CVSS 7.5, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2024-24989](https://cve.now/CVE-2024-24989.md): NGINX HTTP/3 QUIC vulnerability (CVSS 7.5, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2024-21763](https://cve.now/CVE-2024-21763.md): BIG-IP AFM vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2024-23805](https://cve.now/CVE-2024-23805.md): F5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2024-21789](https://cve.now/CVE-2024-21789.md): BIG-IP ASM and Advanced WAF vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2024-23308](https://cve.now/CVE-2024-23308.md): BIG-IP Advanced WAF and ASM vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2024-23603](https://cve.now/CVE-2024-23603.md): BIG-IP Advanced WAF and ASM Configuration utility vulnerability (CVSS 3.8, F5 BIG-IP)
- [CVE-2024-24775](https://cve.now/CVE-2024-24775.md): BIG-IP TMM vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2024-23306](https://cve.now/CVE-2024-23306.md): BIG-IP Next CNF & SPK vulnerability (CVSS 7.1, F5 BIG-IP Next SPK · F5 BIG-IP Next CNF)
- [CVE-2024-23314](https://cve.now/CVE-2024-23314.md): BIG-IP HTTP/2 vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2024-22093](https://cve.now/CVE-2024-22093.md): Appliance mode iControl REST vulnerability (CVSS 8.7, F5 BIG-IP)
- [CVE-2024-23979](https://cve.now/CVE-2024-23979.md): BIG-IP SSL Client Certificate LDAP and CRLDP Authentication profiles vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2024-24966](https://cve.now/CVE-2024-24966.md): F5OS vulnerability (CVSS 6.2, F5OS - Appliance · F5OS - Chassis)
- [CVE-2024-21849](https://cve.now/CVE-2024-21849.md): BIG-IP Websockets vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2024-21771](https://cve.now/CVE-2024-21771.md): F5 AFM Signature Matching Vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2024-21782](https://cve.now/CVE-2024-21782.md): BIG-IP and BIG-IQ secure copy vulnerability (CVSS 6.7, F5 BIG-IP · F5 BIG-IQ)
- [CVE-2024-23607](https://cve.now/CVE-2024-23607.md): F5OS QKView utility vulnerability (CVSS 5.5, F5OS - Appliance · F5OS - Chassis)
- [CVE-2024-23976](https://cve.now/CVE-2024-23976.md): BIG-IP Appliance mode iAppsLX vulnerability (CVSS 6.0, F5 BIG-IP)
- [CVE-2024-22389](https://cve.now/CVE-2024-22389.md): BIG-IP iControl REST API Vulnerability (CVSS 7.2, F5 BIG-IP)
- [CVE-2023-5122](https://cve.now/CVE-2023-5122.md): SSRF in CSV Datasource Plugin (CVSS 5.0, grafana-csv-datasource)
- [CVE-2023-5123](https://cve.now/CVE-2023-5123.md): Improper Path Sanitization in JSON Datasource Plugin (CVSS 8.0, grafana-json-datasource)
- [CVE-2023-46186](https://cve.now/CVE-2023-46186.md): IBM Jazz for Service Management information disclosure (CVSS 5.3, IBM Jazz for Service Management)
- [CVE-2023-42776](https://cve.now/CVE-2023-42776.md): Improper input validation in some Intel(R) SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to poten (CVSS 3.8, Intel(R) SGX DCAP software for Windows)
- [CVE-2023-40156](https://cve.now/CVE-2023-40156.md): Uncontrolled search path element in some Intel(R) SSU software before version 3.0.0.2 may allow an authenticated user to potentially enable (CVSS 6.7, Intel(R) SSU software)
- [CVE-2023-41091](https://cve.now/CVE-2023-41091.md): Uncontrolled search path for some Intel(R) MPI Library Software before version 2021.11 may allow an authenticated user to potentially enable (CVSS 6.7, Intel(R) MPI Library Software)
- [CVE-2023-39932](https://cve.now/CVE-2023-39932.md): Uncontrolled search path in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow a privillaged user to potentially enabl (CVSS 6.7, Intel(R) SUR for Gameplay Software)
- [CVE-2023-40154](https://cve.now/CVE-2023-40154.md): Incorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow privillaged user to potentially en (CVSS 6.7, Intel(R) SUR for Gameplay Software)
- [CVE-2023-29153](https://cve.now/CVE-2023-29153.md): Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS\_E5\_06.01.04.002.0 may allow a privileged user to potenti (CVSS 4.9, Intel(R) SPS firmware)
- [CVE-2023-41252](https://cve.now/CVE-2023-41252.md): Out-of-bounds read in some Intel(R) QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to poten (CVSS 6.5, Intel(R) QAT software drivers for Windows)
- [CVE-2023-39941](https://cve.now/CVE-2023-39941.md): Improper access control in some Intel(R) SUR software before version 2.4.10587 may allow an unauthenticated user to potentially enable denia (CVSS 7.1, Intel(R) SUR software)
- [CVE-2023-38566](https://cve.now/CVE-2023-38566.md): Uncontrolled search path in some Intel(R) ISPC software before version 1.21.0 may allow an authenticated user to potentially enable escalati (CVSS 6.7, Intel(R) ISPC software)
- [CVE-2023-33870](https://cve.now/CVE-2023-33870.md): Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may allow an authenticated user to potentially en (CVSS 6.7, Intel(R) Ethernet tools and driver install software)
- [CVE-2023-39432](https://cve.now/CVE-2023-39432.md): Improper access control element in some Intel(R) Ethernet tools and driver install software, before versions 28.2, may allow an authenticate (CVSS 6.7, Intel(R) Ethernet tools and driver install software,)
- [CVE-2023-36493](https://cve.now/CVE-2023-36493.md): Uncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an authenticated user to potentially enable esc (CVSS 6.7, Intel(R) SDK for OpenCL(TM) Applications software)
- [CVE-2023-29162](https://cve.now/CVE-2023-29162.md): Improper buffer restrictions the Intel(R) C++ Compiler Classic before version 2021.8 for Intel(R) oneAPI Toolkits before version 2022.3.1 ma (CVSS 6.0, Intel(R) C++ Compiler Classic)
- [CVE-2023-35121](https://cve.now/CVE-2023-35121.md): Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version (CVSS 7.8, Intel(R) oneAPI DPC++/C++ Compiler software)
- [CVE-2023-35060](https://cve.now/CVE-2023-35060.md): Uncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow an authenticated user to pote (CVSS 6.7, Intel(R) Battery Life Diagnostic Tool software)
- [CVE-2023-40161](https://cve.now/CVE-2023-40161.md): Improper access control in some Intel Unite(R) Client software before version 4.2.35041 may allow an authenticated user to potentially enabl (CVSS 6.6, Intel Unite(R) Client software)
- [CVE-2023-28745](https://cve.now/CVE-2023-28745.md): Uncontrolled search path in Intel(R) QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enab (CVSS 6.7, Intel(R) QSFP+ Configuration Utility software)
- [CVE-2023-24591](https://cve.now/CVE-2023-24591.md): Uncontrolled search path in some Intel(R) Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potenti (CVSS 6.7, Intel(R) Binary Configuration Tool software)
- [CVE-2023-25073](https://cve.now/CVE-2023-25073.md): Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of (CVSS 5.5, Intel(R) DSA software)
- [CVE-2023-35062](https://cve.now/CVE-2023-35062.md): Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation of (CVSS 6.3, Intel(R) DSA software)
- [CVE-2023-39425](https://cve.now/CVE-2023-39425.md): Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable escalatio (CVSS 8.8, Intel(R) DSA software)
- [CVE-2023-41090](https://cve.now/CVE-2023-41090.md): Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege vi (CVSS 1.8, Intel(R) MAS software)
- [CVE-2023-36490](https://cve.now/CVE-2023-36490.md): Improper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially enable denial of ser (CVSS 5.0, Intel(R) MAS software)
- [CVE-2023-35769](https://cve.now/CVE-2023-35769.md): Uncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an authenticated user to potentially enable escala (CVSS 6.7, Intel(R) CIP software)
- [CVE-2023-38135](https://cve.now/CVE-2023-38135.md): Improper authorization in some Intel(R) PM software may allow a privileged user to potentially enable escalation of privilege via local acce (CVSS 6.7, Intel(R) PM software)
- [CVE-2023-28715](https://cve.now/CVE-2023-28715.md): Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated us (CVSS 5.0, Intel(R) oneAPI Toolkit and component software installers)
- [CVE-2023-32618](https://cve.now/CVE-2023-32618.md): Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated u (CVSS 6.7, Intel(R) oneAPI Toolkit and component software installers)
- [CVE-2023-38561](https://cve.now/CVE-2023-38561.md): Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalat (CVSS 5.5, Intel(R) XTU software)
- [CVE-2023-28407](https://cve.now/CVE-2023-28407.md): Uncontrolled search path in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escala (CVSS 6.7, Intel(R) XTU software)
- [CVE-2023-32647](https://cve.now/CVE-2023-32647.md): Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalat (CVSS 6.8, Intel(R) XTU software)
- [CVE-2023-34351](https://cve.now/CVE-2023-34351.md): Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of servi (CVSS 7.5, Intel(R) PCM software)
- [CVE-2023-35003](https://cve.now/CVE-2023-35003.md): Path transversal in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation o (CVSS 6.7, Intel(R) VROC software)
- [CVE-2023-34315](https://cve.now/CVE-2023-34315.md): Incorrect default permissions in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable (CVSS 6.7, Intel(R) VROC software)
- [CVE-2023-32646](https://cve.now/CVE-2023-32646.md): Uncontrolled search path element in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially ena (CVSS 6.7, Intel(R) VROC software)
- [CVE-2023-31271](https://cve.now/CVE-2023-31271.md): Improper access control in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escal (CVSS 6.7, Intel(R) VROC software)
- [CVE-2023-27517](https://cve.now/CVE-2023-27517.md): Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an a (CVSS 6.6, Intel(R) Optane(TM) PMem software)
- [CVE-2023-22311](https://cve.now/CVE-2023-22311.md): Improper access control in some Intel(R) Optane(TM) PMem 100 Series Management Software before version 01.00.00.3547 may allow an authentica (CVSS 6.7, Intel(R) Optane(TM) PMem 100 Series Management Software)
- [CVE-2023-26586](https://cve.now/CVE-2023-26586.md): Uncaught exception for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticat (CVSS 4.3, Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…)
- [CVE-2023-32644](https://cve.now/CVE-2023-32644.md): Protection mechanism failure for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an una (CVSS 4.3, Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…)
- [CVE-2023-32651](https://cve.now/CVE-2023-32651.md): Improper validation of specified type of input for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.24 (CVSS 4.3, Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…)
- [CVE-2023-35061](https://cve.now/CVE-2023-35061.md): Improper initialization for the Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthent (CVSS 2.3, Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…)
- [CVE-2023-34983](https://cve.now/CVE-2023-34983.md): Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauth (CVSS 4.3, Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…)
- [CVE-2023-32642](https://cve.now/CVE-2023-32642.md): Insufficient adherence to expected conventions for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.24 (CVSS 4.3, Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…)
- [CVE-2023-25951](https://cve.now/CVE-2023-25951.md): Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow a privile (CVSS 6.0, Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…)
- [CVE-2023-28720](https://cve.now/CVE-2023-28720.md): Improper initialization for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthen (CVSS 6.1, Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…)
- [CVE-2023-28374](https://cve.now/CVE-2023-28374.md): Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauth (CVSS 6.1, Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…)
- [CVE-2023-33875](https://cve.now/CVE-2023-33875.md): Improper access control for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthen (CVSS 7.1, Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…)
- [CVE-2023-25174](https://cve.now/CVE-2023-25174.md): Improper access control in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potential (CVSS 6.7, Intel(R) Chipset Driver Software)
- [CVE-2023-28739](https://cve.now/CVE-2023-28739.md): Incorrect default permissions in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to pot (CVSS 6.7, Intel(R) Chipset Driver Software)
- [CVE-2023-25945](https://cve.now/CVE-2023-25945.md): Protection mechanism failure in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable esca (CVSS 6.7, Intel(R) OFU software)
- [CVE-2023-31189](https://cve.now/CVE-2023-31189.md): Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable e (CVSS 5.2, Intel(R) Server Product OpenBMC firmware)
- [CVE-2023-32280](https://cve.now/CVE-2023-32280.md): Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated (CVSS 5.3, Intel(R) Server Product OpenBMC firmware)
- [CVE-2023-41231](https://cve.now/CVE-2023-41231.md): Incorrect default permissions in some ACAT software maintained by Intel(R) before version 2.0.0 may allow an authenticated user to potential (CVSS 6.7, ACAT software maintained by Intel)
- [CVE-2023-30767](https://cve.now/CVE-2023-30767.md): Improper buffer restrictions in Intel(R) Optimization for TensorFlow before version 2.13.0 may allow an authenticated user to potentially en (CVSS 5.5, TensorFlow)
- [CVE-2023-28396](https://cve.now/CVE-2023-28396.md): Improper access control in firmware for some Intel(R) Thunderbol(TM) Controllers versions before 41 may allow a privileged user to enable de (CVSS 6.1, Intel(R) Thunderbol(TM) Controllers versions)
- [CVE-2023-26591](https://cve.now/CVE-2023-26591.md): Unchecked return value in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to poten (CVSS 2.0, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-26596](https://cve.now/CVE-2023-26596.md): Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potent (CVSS 2.5, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-27303](https://cve.now/CVE-2023-27303.md): Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potent (CVSS 3.8, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-26592](https://cve.now/CVE-2023-26592.md): Deserialization of untrusted data in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user (CVSS 3.8, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-27300](https://cve.now/CVE-2023-27300.md): Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to p (CVSS 3.8, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-27307](https://cve.now/CVE-2023-27307.md): Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to p (CVSS 3.8, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-27301](https://cve.now/CVE-2023-27301.md): Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potent (CVSS 4.2, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-24463](https://cve.now/CVE-2023-24463.md): Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to po (CVSS 4.3, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-27308](https://cve.now/CVE-2023-27308.md): Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to poten (CVSS 4.6, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-26585](https://cve.now/CVE-2023-26585.md): Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potent (CVSS 5.0, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-25769](https://cve.now/CVE-2023-25769.md): Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user (CVSS 5.5, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-22848](https://cve.now/CVE-2023-22848.md): Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potent (CVSS 5.5, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-24589](https://cve.now/CVE-2023-24589.md): Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to poten (CVSS 6.1, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-24481](https://cve.now/CVE-2023-24481.md): Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potent (CVSS 6.3, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-22390](https://cve.now/CVE-2023-22390.md): Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to p (CVSS 6.5, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-24542](https://cve.now/CVE-2023-24542.md): Unquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user t (CVSS 6.7, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-25779](https://cve.now/CVE-2023-25779.md): Uncontrolled search path element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user (CVSS 6.7, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-22342](https://cve.now/CVE-2023-22342.md): Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to pote (CVSS 7.7, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-25777](https://cve.now/CVE-2023-25777.md): Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potent (CVSS 7.9, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-22293](https://cve.now/CVE-2023-22293.md): Improper access control in the Intel(R) Thunderbolt(TM) DCH drivers for Windows may allow an authenticated user to potentially enable escala (CVSS 8.2, Intel(R) Thunderbolt(TM) DCH drivers for Windows)
- [CVE-2023-6441](https://cve.now/CVE-2023-6441.md): SQLi in UNI-PA's University Information System (CVSS 9.8, UNI-PA University Marketing & Computer Internet Trade Unive…)
- [CVE-2024-23952](https://cve.now/CVE-2024-23952.md): Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb (version range fix for CVE-2023-46104) (CVSS 6.5, Apache Software Foundation Apache Superset)
- [CVE-2024-23789](https://cve.now/CVE-2024-23789.md): Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacke (CVSS 9.8, SHARP Energy Management Controller with Cloud Services)
- [CVE-2024-23788](https://cve.now/CVE-2024-23788.md): Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allo (CVSS 9.1, SHARP Energy Management Controller with Cloud Services)
- [CVE-2024-23787](https://cve.now/CVE-2024-23787.md): Path traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network- (CVSS 7.5, SHARP Energy Management Controller with Cloud Services)
- [CVE-2024-23786](https://cve.now/CVE-2024-23786.md): Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a ne (CVSS 9.3, SHARP Energy Management Controller with Cloud Services)
- [CVE-2024-23785](https://cve.now/CVE-2024-23785.md): Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allow (CVSS 6.1, SHARP Energy Management Controller with Cloud Services)
- [CVE-2024-23784](https://cve.now/CVE-2024-23784.md): Improper access control vulnerability exists in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier, (CVSS 6.5, SHARP Energy Management Controller with Cloud Services)
- [CVE-2024-23783](https://cve.now/CVE-2024-23783.md): Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a (CVSS 8.8, SHARP Energy Management Controller with Cloud Services)
- [CVE-2023-44294](https://cve.now/CVE-2023-44294.md): In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern h (CVSS 5.4, Dell Secure Connect Gateway-Application · Dell Secure Conne…)
- [CVE-2023-44293](https://cve.now/CVE-2023-44293.md): In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern h (CVSS 5.4, Dell Secure Connect Gateway-Application · Dell Secure Conne…)
- [CVE-2023-44283](https://cve.now/CVE-2023-44283.md): In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security conc (CVSS 7.8, Dell SupportAssist for Home PCs · Dell SupportAssist for Bu…)
- [CVE-2023-39249](https://cve.now/CVE-2023-39249.md): Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated no (CVSS 6.3, Dell SupportAssist Client Consumer)
- [CVE-2023-25535](https://cve.now/CVE-2023-25535.md): Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability (CVSS 7.2, Dell SupportAssist Client Consumer)
- [CVE-2024-22455](https://cve.now/CVE-2024-22455.md): Dell Mobility - E-Lab Navigator, version(s) 3.1.9, 3.2.0, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability. (CVSS 4.4, Dell Mobility - E-Lab Navigator)
- [CVE-2024-25125](https://cve.now/CVE-2024-25125.md): Absolute path traversal vulnerability in digdag server (CVSS 5.3, treasure-data digdag · io.digdag:digdag-server)
- [CVE-2024-24691](https://cve.now/CVE-2024-24691.md): Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation (CVSS 9.6, Zoom Video Communications Zoom Desktop Client for Windows,…)
- [CVE-2024-24690](https://cve.now/CVE-2024-24690.md): Zoom Clients - Improper Input Validation (CVSS 5.4, Zoom Video Communications Zoom Clients)
- [CVE-2023-48985](https://cve.now/CVE-2023-48985.md): Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker (CVSS 6.1)
- [CVE-2023-48986](https://cve.now/CVE-2023-48986.md): Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker (CVSS 6.1)
- [CVE-2023-48987](https://cve.now/CVE-2023-48987.md): Blind SQL Injection vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to exe (CVSS 7.5)
- [CVE-2023-50387](https://cve.now/CVE-2023-50387.md): Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of ser (CVSS 7.5)
- [CVE-2023-50868](https://cve.now/CVE-2023-50868.md): The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a den (CVSS 7.5)
- [CVE-2024-24300](https://cve.now/CVE-2024-24300.md): 4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control. (CVSS 9.8)
- [CVE-2024-24301](https://cve.now/CVE-2024-24301.md): Command Injection vulnerability discovered in 4ipnet EAP-767 device v3.42.00 within the web interface of the device allows attackers with va (CVSS 8.8)
- [CVE-2024-25165](https://cve.now/CVE-2024-25165.md): A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex. (CVSS 8.8)
- [CVE-2024-25207](https://cve.now/CVE-2024-25207.md): Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Resident function (CVSS 5.4)
- [CVE-2024-25208](https://cve.now/CVE-2024-25208.md): Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Resident function (CVSS 5.4)
- [CVE-2024-25209](https://cve.now/CVE-2024-25209.md): Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident parameter at /endpoint/de (CVSS 9.8)
- [CVE-2024-25210](https://cve.now/CVE-2024-25210.md): Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/delete\_expense.ph (CVSS 9.8)
- [CVE-2024-25211](https://cve.now/CVE-2024-25211.md): Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endpoint/delete\_category. (CVSS 9.8)
- [CVE-2024-25212](https://cve.now/CVE-2024-25212.md): Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php. (CVSS 7.2)
- [CVE-2024-25213](https://cve.now/CVE-2024-25213.md): Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php. (CVSS 7.2)
- [CVE-2024-25214](https://cve.now/CVE-2024-25214.md): An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Pas (CVSS 9.8)
- [CVE-2024-25215](https://cve.now/CVE-2024-25215.md): Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php. (CVSS 9.8)
- [CVE-2024-25216](https://cve.now/CVE-2024-25216.md): Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php. (CVSS 9.8)
- [CVE-2024-25217](https://cve.now/CVE-2024-25217.md): Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/view\_ (CVSS 8.8)
- [CVE-2024-25218](https://cve.now/CVE-2024-25218.md): A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted (CVSS 4.6)
- [CVE-2024-25219](https://cve.now/CVE-2024-25219.md): A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted (CVSS 6.1)
- [CVE-2024-25220](https://cve.now/CVE-2024-25220.md): Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php. (CVSS 9.8)
- [CVE-2024-25221](https://cve.now/CVE-2024-25221.md): A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted (CVSS 6.1)
- [CVE-2024-25222](https://cve.now/CVE-2024-25222.md): Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php. (CVSS 9.8)
- [CVE-2024-25223](https://cve.now/CVE-2024-25223.md): Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.ph (CVSS 9.8)
- [CVE-2024-25224](https://cve.now/CVE-2024-25224.md): A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a cr (CVSS 5.4)
- [CVE-2024-25225](https://cve.now/CVE-2024-25225.md): A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a cr (CVSS 6.1)
- [CVE-2024-25226](https://cve.now/CVE-2024-25226.md): A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a cr (CVSS 6.1)
- [CVE-2024-25300](https://cve.now/CVE-2024-25300.md): A cross-site scripting (XSS) vulnerability in Redaxo v5.15.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload (CVSS 4.6)
- [CVE-2024-25301](https://cve.now/CVE-2024-25301.md): Redaxo v5.15.1 was discovered to contain a remote code execution (RCE) vulnerability via the component /pages/templates.php. (CVSS 7.2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-02-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.