CVEs published February 17, 2024
66 CVEs were published on February 17, 2024: 2 critical, 12 high. 1 is now in CISA KEV.
- Published
- 66
- Critical
- 2
- High
- 12
- Medium
- 47
- Low
- 5
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 5
Most affected products
- Oracle MySQL Server
- 12
- github.com/greenpau/caddy-security
- 9
- IBM QRadar Suite Software · IBM Cloud Pak for Security
- 4
- Oracle Installed Base
- 4
- Oracle Java SE JDK and JRE
- 4
- Oracle WebLogic Server
- 3
- IBM Storage Scale Container Native Storage Access
- 2
- Oracle Application Object Library
- 2
- Oracle Audit Vault and Database Firewall
- 2
- Oracle Customer Interaction History
- 2
Critical 2
- CVE-2024-0610Piraeus Bank WooCommerce Payment Gateway <= 1.6.5.1 - Unauthenticated SQL Injectionenartia Piraeus Bank WooCommerce Payment Gateway
- CVE-2024-1512MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injectionstylemix MasterStudy LMS WordPress Plugin – for Online Cour…
High 12
- CVE-2022-41737IBM Spectrum Scale security bypassIBM Storage Scale Container Native Storage Access
- CVE-2022-41738IBM Spectrum Scale security bypassIBM Storage Scale Container Native Storage Access
- CVE-2024-20956Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation).Oracle Agile Product Lifecycle Management for Process
- CVE-2024-20953Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export).Oracle Agile PLM Framework
- CVE-2024-20931Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2024-20927Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2024-20917Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Log Management).Oracle Enterprise Manager Base Platform
- CVE-2024-20909Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall).Oracle Audit Vault and Database Firewall
- CVE-2023-31728Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6
- CVE-2024-22727Teltonika TRB1-series devices with firmware before TRB1_R_00.07.05.2 allow attackers to exploit a firmware vulnerability via Ethernet LAN or
- CVE-2024-25298An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.moredaxo/source
- CVE-2024-25468An issue in TOTOLINK X5000R V.9.1.0u.6369_B20230113 allows a remote attacker to cause a denial of service via the host_time parameter of the
Medium, low and unrated 52
- CVE-2022-42443Trusteer for mobile file uploadIBM Trusteer iOS SDK · IBM Trusteer Android SDK
- CVE-2023-50951IBM QRadar Suite information disclosureIBM QRadar Suite Software · IBM Cloud Pak for Security
- CVE-2024-22337IBM QRadar Suite information disclosureIBM QRadar Suite Software · IBM Cloud Pak for Security
- CVE-2024-22336IBM QRadar Suite information disclosureIBM QRadar Suite Software · IBM Cloud Pak for Security
- CVE-2024-22335IBM QRadar Suite information disclosureIBM QRadar Suite Software · IBM Cloud Pak for Security
- CVE-2024-21493All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfilegithub.com/greenpau/caddy-security
- CVE-2024-21495Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to using an insecure randgithub.com/greenpau/caddy-security
- CVE-2024-21494All versions of the package github.com/greenpau/caddy-security are vulnerable to Authentication Bypass by Spoofing via the X-Forwarded-For hgithub.com/greenpau/caddy-security
- CVE-2024-21500All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Excessive Authentication Attempts vgithub.com/greenpau/caddy-security
- CVE-2024-21499All versions of the package github.com/greenpau/caddy-security are vulnerable to HTTP Header Injection via the X-Forwarded-Proto header due github.com/greenpau/caddy-security
- CVE-2024-21498All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (SSRF) via X-Forwarded-Host heagithub.com/greenpau/caddy-security
- CVE-2024-21497Versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirect_url parameter.github.com/greenpau/caddy-security
- CVE-2024-21492All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user sessiogithub.com/greenpau/caddy-security
- CVE-2024-21496All versions of the package github.com/greenpau/caddy-security are vulnerable to Cross-site Scripting (XSS) via the Referer header, due to igithub.com/greenpau/caddy-security
- CVE-2024-20986Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2024-20984Vulnerability in the MySQL Server product of Oracle MySQL (component: Server : Security : Firewall).Oracle MySQL Server
- CVE-2024-20982Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-20980Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).Oracle BI Publisher
- CVE-2024-20978Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-20976Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-20974Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-20972Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-20970Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-20968Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options).Oracle MySQL Server
- CVE-2024-20966Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-20964Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2024-20962Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-20960Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: RAPID).Oracle MySQL Server
- CVE-2024-20958Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order).Oracle Installed Base
- CVE-2024-20951Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).Oracle Customer Interaction History
- CVE-2024-20949Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).Oracle Customer Interaction History
- CVE-2024-20947Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).Oracle Common Applications
- CVE-2024-20945Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: SecuritOracle Java SE JDK and JRE
- CVE-2024-20943Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Knowledge Management
- CVE-2024-20941Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: HTML UI).Oracle Installed Base
- CVE-2024-20939Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Admin Console).Oracle CRM Technical Foundation
- CVE-2024-20937Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2024-20935Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order).Oracle Installed Base
- CVE-2024-20933Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order).Oracle Installed Base
- CVE-2024-20929Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).Oracle Application Object Library
- CVE-2024-20925Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).Oracle Java SE JDK and JRE · org.openjfx:javafx-media
- CVE-2024-20923Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).Oracle Java SE JDK and JRE
- CVE-2024-20921Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: HotspotOracle Java SE JDK and JRE
- CVE-2024-20919Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: HotspotOracle Java SE JDK and JRE
- CVE-2024-20915Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Login - SSO).Oracle Application Object Library
- CVE-2024-20913Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2024-20911Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall).Oracle Audit Vault and Database Firewall
- CVE-2024-20907Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download).Oracle Web Applications Desktop Integrator
- CVE-2024-20905Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2024-20903Vulnerability in the Java VM component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2023-21833Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Object Store).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2024-25297Cross Site Scripting (XSS) vulnerability in Bludit CMS version 3.15, allows remote attackers to execute arbitrary code and obtain sensitive