# CVEs published 2024-02-20

203 CVEs were published on February 20, 2024: 20 critical, 52 high. Days are UTC.

- [CVE-2023-6936](https://cve.now/CVE-2023-6936.md): Heap-buffer over-read with WOLFSSL\_CALLBACKS (CVSS 5.3, wolfSSL)
- [CVE-2024-26140](https://cve.now/CVE-2024-26140.md): com.yetanalytics/lrs has Cross-site Scripting Vulnerability in Statement Browser (CVSS 4.6, yetanalytics lrs · com.yetanalytics:lrs)
- [CVE-2024-23830](https://cve.now/CVE-2024-23830.md): MantisBT Host Header Injection vulnerability (CVSS 8.3, mantisbt · mantisbt/mantisbt)
- [CVE-2024-26136](https://cve.now/CVE-2024-26136.md): kedi ElectronCord's Discord Token is public (CVSS 7.5, kedi ElectronCord)
- [CVE-2024-25141](https://cve.now/CVE-2024-25141.md): Apache Airflow Mongo Provider: Certificate validation isn't respected even if SSL is enabled for apache-airflow-providers-mongo (CVSS 9.1, Apache Software Foundation Apache Airflow Mongo Provider ·…)
- [CVE-2024-26135](https://cve.now/CVE-2024-26135.md): MeshCentral cross-site websocket hijacking (CSWSH) vulnerability (CVSS 8.4, Ylianst MeshCentral · meshcentral)
- [CVE-2024-1058](https://cve.now/CVE-2024-1058.md): SiteOrigin Widgets Bundle \<= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, gpriday SiteOrigin Widgets Bundle)
- [CVE-2024-1043](https://cve.now/CVE-2024-1043.md): AMP for WP \<= 1.0.93.1 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb\_remove\_saved\_layout\_data (CVSS 6.5, mohammed\_kaludi AMP for WP – Accelerated Mobile Pages)
- [CVE-2024-1171](https://cve.now/CVE-2024-1171.md): Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders \<= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery (CVSS 5.4, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2024-1090](https://cve.now/CVE-2024-1090.md): ImageRecycle pdf & image compression \<= 3.1.13 - Missing Authorization to Settings Update in stopOptimizeAll (CVSS 4.3, ImageRecycle pdf & image compression)
- [CVE-2024-1172](https://cve.now/CVE-2024-1172.md): Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders \<= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion (CVSS 5.4, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2024-1218](https://cve.now/CVE-2024-1218.md): Contact Form builder with drag & drop for WordPress – Kali Forms \<= 2.3.41 - Missing Authorization (CVSS 4.3, wpchill Kali Forms — Contact Form & Drag-and-Drop Builder)
- [CVE-2024-1133](https://cve.now/CVE-2024-1133.md): Tutor LMS \<= 2.6.0 - Missing Authorization (CVSS 4.3, themeum Tutor LMS – eLearning and online course solution)
- [CVE-2024-1294](https://cve.now/CVE-2024-1294.md): Sunshine Photo Cart: Free Client Galleries for Photographers \<= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice (CVSS 5.3, sunshinephotocart Sunshine Photo Cart – Client Photo Galler…)
- [CVE-2024-0838](https://cve.now/CVE-2024-0838.md): Happy Addons for Elementor \<= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, thehappymonster Happy Addons for Elementor)
- [CVE-2024-0516](https://cve.now/CVE-2024-0516.md): Royal Elementor Addons and Templates \<= 1.3.87 - Missing Authorization via wpr\_update\_form\_action\_meta (CVSS 5.3, wproyal Royal Addons for Elementor – Addons and Templates K…)
- [CVE-2024-0604](https://cve.now/CVE-2024-0604.md): Best WordPress Gallery Plugin – FooGallery \<= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settings (CVSS 4.4, fooplugins Gallery by FooGallery)
- [CVE-2024-0821](https://cve.now/CVE-2024-0821.md): Cost of Goods Sold (COGS): Cost & Profit Calculator for WooCommerce \<= 3.2.8 - Reflected Cross-Site Scripting (CVSS 6.1, wpcodefactory Cost of Goods: Product Cost & Profit Calculat…)
- [CVE-2024-1317](https://cve.now/CVE-2024-1317.md): RSS Aggregator by Feedzy \<= 4.4.2 - Authenticated(Contributor+) SQL Injection (CVSS 8.8, themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…)
- [CVE-2024-1389](https://cve.now/CVE-2024-1389.md): Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction \<= 2.11.1 - Missing Authorization via pms\_stripe\_connect\_handle\_authorization\_return (CVSS 5.3, cozmoslabs Paid Membership Subscriptions – Effortless Membe…)
- [CVE-2024-0984](https://cve.now/CVE-2024-0984.md): ImageRecycle pdf & image compression \<= 3.1.13 - Missing Authorization to Settings Update in disableOptimization (CVSS 4.3, ImageRecycle pdf & image compression)
- [CVE-2024-1336](https://cve.now/CVE-2024-1336.md): ImageRecycle pdf & image compression \<= 3.1.13 - Cross-Site Request Forgery to Settings Update in optimizeAllOn (CVSS 4.3, ImageRecycle pdf & image compression)
- [CVE-2024-0658](https://cve.now/CVE-2024-0658.md): Insert PHP Code Snippet \<= 1.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, f1logic Insert PHP Code Snippet)
- [CVE-2024-0590](https://cve.now/CVE-2024-0590.md): Microsoft Clarity \<= 0.9.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, Microsoft Clarity)
- [CVE-2024-1445](https://cve.now/CVE-2024-1445.md): Page scroll to id \<= 1.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, malihu Page scroll to id)
- [CVE-2024-1054](https://cve.now/CVE-2024-1054.md): Booster for WooCommerce \<= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, pluggabl Booster for WooCommerce – PDF Invoices, Abandoned…)
- [CVE-2024-0702](https://cve.now/CVE-2024-0702.md): Oliver POS – A WooCommerce Point of Sale (POS) \<= 2.4.2.1 - Missing Authorization (CVSS 7.3, oliverpos Oliver POS – A WooCommerce Point of Sale)
- [CVE-2024-1335](https://cve.now/CVE-2024-1335.md): ImageRecycle pdf & image compression \<= 3.1.13 - Cross-Site Request Forgery to Settings Update in disableOptimization (CVSS 4.3, ImageRecycle pdf & image compression)
- [CVE-2024-0512](https://cve.now/CVE-2024-0512.md): Royal Elementor Addons and Templates \<= 1.3.87 - Cross-Site Request Forgery via add\_to\_wishlist (CVSS 4.3, wproyal Royal Addons for Elementor – Addons and Templates K…)
- [CVE-2024-1206](https://cve.now/CVE-2024-1206.md): WP Recipe Maker \<= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton (CVSS 8.8, brechtvds WP Recipe Maker)
- [CVE-2024-0514](https://cve.now/CVE-2024-0514.md): Royal Elementor Addons and Templates \<= 1.3.87 - Cross-Site Request Forgery via add\_to\_compare (CVSS 4.3, wproyal Royal Addons for Elementor – Addons and Templates K…)
- [CVE-2024-1276](https://cve.now/CVE-2024-1276.md): Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders \<= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2024-1288](https://cve.now/CVE-2024-1288.md): Schema & Structured Data for WP & AMP \<= 1.26 - Missing Authorization to reCaptcha Key Modification (CVSS 4.3, magazine3 Schema & Structured Data for WP & AMP)
- [CVE-2024-0656](https://cve.now/CVE-2024-0656.md): Password Protected \<= 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, saadiqbal Password Protected — Lock Entire Site, Pages, Pos…)
- [CVE-2024-1322](https://cve.now/CVE-2024-1322.md): Directorist \<= 7.8.4 - Missing Authorization to Unauthenticated Settings Change (CVSS 5.3, wpwax Directorist: AI-Powered Business Directory, Listings…)
- [CVE-2024-1070](https://cve.now/CVE-2024-1070.md): SiteOrigin Widgets Bundle \<= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, gpriday SiteOrigin Widgets Bundle)
- [CVE-2024-0515](https://cve.now/CVE-2024-0515.md): Royal Elementor Addons and Templates \<= 1.3.87 - Cross-Site Request Forgery via remove\_from\_compare (CVSS 4.3, wproyal Royal Addons for Elementor – Addons and Templates K…)
- [CVE-2024-0978](https://cve.now/CVE-2024-0978.md): My Private Site \<= 3.0.14 - Improper Access Control to Sensitive Information Exposure via REST API (CVSS 5.3, dgewirtz My Private Site)
- [CVE-2024-0621](https://cve.now/CVE-2024-0621.md): Simple Share Buttons Adder \<= 8.4.11 - Authenticated(Administrator+) Stored Cross-Site Scripting via CSS Settings (CVSS 4.4, davidoffneal Simple Share Buttons Adder)
- [CVE-2024-1089](https://cve.now/CVE-2024-1089.md): ImageRecycle pdf & image compression \<= 3.1.13 - Missing Authorization to Settings Update in optimizeAllOn (CVSS 4.3, ImageRecycle pdf & image compression)
- [CVE-2024-1586](https://cve.now/CVE-2024-1586.md): Schema & Structured Data for WP & AMP \<= 1.26 - Authenticated (Custom) Stored Cross-Site Scripting (CVSS 6.4, magazine3 Schema & Structured Data for WP & AMP)
- [CVE-2024-1496](https://cve.now/CVE-2024-1496.md): Featured Image from URL (FIFU) \<= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu\_input\_url (CVSS 6.4, marceljm Featured Image from URL)
- [CVE-2024-1217](https://cve.now/CVE-2024-1217.md): Contact Form builder with drag & drop for WordPress – Kali Forms \<= 2.3.41 - Missing Authorization to Arbitrary Plugin Deactivation (CVSS 7.6, wpchill Kali Forms — Contact Form & Drag-and-Drop Builder)
- [CVE-2024-1282](https://cve.now/CVE-2024-1282.md): Email Encoder – Protect Email Addresses and Phone Numbers \<= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, onlineoptimisation Email Encoder – Protect Email Addresses…)
- [CVE-2024-1235](https://cve.now/CVE-2024-1235.md): Elementor Addons by Livemesh \<= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Livemesh Addons by Elementor)
- [CVE-2024-1408](https://cve.now/CVE-2024-1408.md): ProfilePress \<= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via \[edit-profile-text-box\] shortcode (CVSS 6.4, properfraction Paid Membership Plugin, Ecommerce, User Regi…)
- [CVE-2024-1472](https://cve.now/CVE-2024-1472.md): WP Maintenance \<= 6.1.6 - Information Exposure (CVSS 5.3, florent73 WP Maintenance)
- [CVE-2024-1411](https://cve.now/CVE-2024-1411.md): PowerPack Addons for Elementor \<= 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Buttons Widget (CVSS 6.4, ideaboxcreations PowerPack Addons for Elementor)
- [CVE-2024-1349](https://cve.now/CVE-2024-1349.md): EmbedPress \<= 3.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, wpdevteam EmbedPress – PDF Embedder, Embed YouTube Videos,…)
- [CVE-2024-1338](https://cve.now/CVE-2024-1338.md): ImageRecycle pdf & image compression \<= 3.1.13 - Cross-Site Request Forgery to Settings Update in stopOptimizeAll (CVSS 4.3, ImageRecycle pdf & image compression)
- [CVE-2024-1277](https://cve.now/CVE-2024-1277.md): Ocean Extra \<= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, oceanwp Ocean Extra)
- [CVE-2024-1519](https://cve.now/CVE-2024-1519.md): Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress \<= 4.14.4 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.5, properfraction Paid Membership Plugin, Ecommerce, User Regi…)
- [CVE-2024-1425](https://cve.now/CVE-2024-1425.md): EmbedPress \<= 3.9.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Google Calendar Widget Link (CVSS 6.4, wpdevteam EmbedPress – PDF Embedder, Embed YouTube Videos,…)
- [CVE-2024-1570](https://cve.now/CVE-2024-1570.md): ProfilePress \<= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, properfraction Paid Membership Plugin, Ecommerce, User Regi…)
- [CVE-2024-1492](https://cve.now/CVE-2024-1492.md): WPify Woo Czech \<= 4.0.8 - Missing Authorization (CVSS 5.3, WPify Woo Czech)
- [CVE-2024-1475](https://cve.now/CVE-2024-1475.md): Coming Soon Maintenance Mode \<= 1.0.5 - Information Exposure (CVSS 5.3, awordpresslife Coming Soon Maintenance Mode)
- [CVE-2024-0506](https://cve.now/CVE-2024-0506.md): Elementor Website Builder – More than Just a Page Builder \<= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via get\_image\_alt (CVSS 6.4, elemntor Elementor Website Builder – more than just a page…)
- [CVE-2024-1044](https://cve.now/CVE-2024-1044.md): Customer Reviews for WooCommerce \<= 5.38.10 - Improper Authorization via submit\_review (CVSS 5.3, ivole Customer Reviews for WooCommerce)
- [CVE-2024-1236](https://cve.now/CVE-2024-1236.md): Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders \<= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2024-0620](https://cve.now/CVE-2024-0620.md): PPWP – Password Protect Pages \<= 1.8.9 - Protection Mechanism Bypass (CVSS 5.3, buildwps PPWP – Password Protect Pages)
- [CVE-2024-0513](https://cve.now/CVE-2024-0513.md): Royal Elementor Addons and Templates \<= 1.3.87 - Cross-Site Request Forgery via remove\_from\_wishlist (CVSS 4.3, wproyal Royal Addons for Elementor – Addons and Templates K…)
- [CVE-2024-1091](https://cve.now/CVE-2024-1091.md): ImageRecycle pdf & image compression \<= 3.1.13 - Missing Authorization to Plugin Data Removal in reinitialize (CVSS 4.3, ImageRecycle pdf & image compression)
- [CVE-2024-1340](https://cve.now/CVE-2024-1340.md): Login Lockdown – Protect Login Form \<= 2.08 - Missing Authorization (CVSS 5.4, webfactory Login Lockdown & Protection)
- [CVE-2024-1337](https://cve.now/CVE-2024-1337.md): SKT Page Builder \<= 4.1 - Missing Authorization to Authenticated(Subscriber+) Content Injection (CVSS 4.3, sonalsinha21 SKT Page Builder)
- [CVE-2023-6565](https://cve.now/CVE-2023-6565.md): InfiniteWP Client \<= 1.12.3 - Unauthenticated Sensitive Information Exposure (CVSS 5.9, revmakx InfiniteWP Client)
- [CVE-2023-6923](https://cve.now/CVE-2023-6923.md): Matomo \<= 4.15.3 - Reflected Cross-Site Scripting via idsite (CVSS 6.1, matomoteam Matomo Analytics – Powerful, Privacy-First Insig…)
- [CVE-2024-1339](https://cve.now/CVE-2024-1339.md): ImageRecycle pdf & image compression \<= 3.1.13 - Cross-Site Request Forgery to Plugin Data Removal in reinitialize (CVSS 4.3, ImageRecycle pdf & image compression)
- [CVE-2024-0379](https://cve.now/CVE-2024-0379.md): Custom Twitter Feeds – A Tweets Widget or X Feed Widget \<= 2.2.1 - Cross-Site Request Forgery to Plugin Options Update (CVSS 4.3, smub Custom Twitter Feeds – A Tweets Widget or X Feed Widget)
- [CVE-2024-0438](https://cve.now/CVE-2024-0438.md): Happy Addons for Elementor \<= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, thehappymonster Happy Addons for Elementor)
- [CVE-2024-0442](https://cve.now/CVE-2024-0442.md): Royal Elementor Addons and Templates \<= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, wproyal Royal Addons for Elementor – Addons and Templates K…)
- [CVE-2024-1128](https://cve.now/CVE-2024-1128.md): Tutor LMS \<= 2.6.0 - Authenticated(Student+) HTML Injection via Q&A (CVSS 5.4, themeum Tutor LMS – eLearning and online course solution)
- [CVE-2023-6806](https://cve.now/CVE-2023-6806.md): Starbox \<= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job Settings (CVSS 6.4, cifi Starbox – the Author Box for Humans)
- [CVE-2024-1448](https://cve.now/CVE-2024-1448.md): Sassy Social Share \<= 3.3.56 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, heateor Social Sharing Plugin – Sassy Social Share)
- [CVE-2024-1318](https://cve.now/CVE-2024-1318.md): RSS Aggregator by Feedzy \<= 4.4.2 - Missing Authorization to Arbitrary Page Creation and Publication (CVSS 6.5, themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…)
- [CVE-2024-0983](https://cve.now/CVE-2024-0983.md): ImageRecycle pdf & image compression \<= 3.1.13 - Missing Authorization to Settings Update in enableOptimization (CVSS 4.3, ImageRecycle pdf & image compression)
- [CVE-2024-1447](https://cve.now/CVE-2024-1447.md): Sydney Toolbox \<= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, smub Sydney Toolbox)
- [CVE-2024-1390](https://cve.now/CVE-2024-1390.md): Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction \<= 2.11.1 - Missing Authorization via creating\_pricing\_table\_page (CVSS 4.3, cozmoslabs Paid Membership Subscriptions – Effortless Membe…)
- [CVE-2024-0602](https://cve.now/CVE-2024-0602.md): Yet Another Related Posts Plugin (YARPP) \<= 5.30.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings (CVSS 4.4, jeffparker YARPP – Yet Another Related Posts Plugin)
- [CVE-2024-1242](https://cve.now/CVE-2024-1242.md): Premium Addons for Elementor \<= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, leap13 Premium Addons for Elementor – Powerful Elementor Te…)
- [CVE-2024-0792](https://cve.now/CVE-2024-0792.md): WP Shortcodes Plugin — Shortcodes Ultimate \<= 7.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode (CVSS 6.4, gn\_themes WP Shortcodes Plugin — Shortcodes Ultimate)
- [CVE-2024-1334](https://cve.now/CVE-2024-1334.md): ImageRecycle pdf & image compression \<= 3.1.13 - Cross-Site Request Forgery to Settings Update in enableOptimization (CVSS 4.3, ImageRecycle pdf & image compression)
- [CVE-2024-0616](https://cve.now/CVE-2024-0616.md): Passster – Password Protect Pages and Content \<= 4.2.6.2 - Missing Authorization to Sensitive Information Exposure (CVSS 5.3, wpchill Passster – Password Protect Pages and Content)
- [CVE-2023-6247](https://cve.now/CVE-2023-6247.md): The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which would result in the appl (CVSS 6.5, OpenVPN 3 Core Library)
- [CVE-2024-0407](https://cve.now/CVE-2024-0407.md): Certain HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Information Disclosure (CVSS 6.5, Certain HP Enterprise LaserJet, HP LaserJet Managed Printers)
- [CVE-2023-52439](https://cve.now/CVE-2023-52439.md): uio: Fix use-after-free in uio\_open (CVSS 7.8, Linux)
- [CVE-2023-52438](https://cve.now/CVE-2023-52438.md): binder: fix use-after-free in shinker's callback (CVSS 7.8, Linux)
- [CVE-2023-52436](https://cve.now/CVE-2023-52436.md): f2fs: explicitly null-terminate the xattr list (CVSS 7.8, Linux)
- [CVE-2024-26132](https://cve.now/CVE-2024-26132.md): Element Android can be asked to share internal files. (CVSS 4.0, element-hq element-android)
- [CVE-2023-52435](https://cve.now/CVE-2023-52435.md): net: prevent mss overflow in skb\_segment() (no CVSS, Linux)
- [CVE-2023-6881](https://cve.now/CVE-2023-6881.md): fs: fuse: buffer overflow vulnerability in the Zephyr FS (CVSS 7.3, zephyrproject-rtos Zephyr)
- [CVE-2023-37495](https://cve.now/CVE-2023-37495.md): HCL Domino is susceptible to a weak cryptography vulnerability (CVSS 5.9, HCL Software HCL Domino Server)
- [CVE-2024-26131](https://cve.now/CVE-2024-26131.md): Element Android Intent Redirection (CVSS 8.4, element-hq element-android)
- [CVE-2024-25631](https://cve.now/CVE-2024-25631.md): Unencrypted traffic between pods when using Wireguard and an external kvstore (CVSS 6.1, cilium · github.com/cilium/cilium)
- [CVE-2023-52434](https://cve.now/CVE-2023-52434.md): smb: client: fix potential OOBs in smb2\_parse\_contexts() (CVSS 8.1, Linux)
- [CVE-2024-21678](https://cve.now/CVE-2024-21678.md): This High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data Center. (CVSS 8.5, Atlassian Confluence Data Center)
- [CVE-2024-21682](https://cve.now/CVE-2024-21682.md): This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all versions). (CVSS 7.2, Atlassian Assets Discovery Data Center)
- [CVE-2024-25630](https://cve.now/CVE-2024-25630.md): Cilium has unencrypted ingress/health traffic when using Wireguard transparent encryption (CVSS 6.1, cilium · github.com/cilium/cilium)
- [CVE-2024-22250](https://cve.now/CVE-2024-22250.md): Session Hijack Vulnerability in Deprecated EAP Browser Plugin (CVSS 7.8, VMware Enhanced Authentication Plug-in)
- [CVE-2024-22245](https://cve.now/CVE-2024-22245.md): Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin (CVSS 9.6, VMware Enhanced Authentication Plug-in)
- [CVE-2024-24763](https://cve.now/CVE-2024-24763.md): JumpServer Open Redirect Vulnerability (CVSS 4.3, jumpserver)
- [CVE-2023-51447](https://cve.now/CVE-2023-51447.md): Decidim vulnerable to cross-site scripting (XSS) in the dynamic file uploads (CVSS 6.3, decidim · decidim-core)
- [CVE-2023-48220](https://cve.now/CVE-2023-48220.md): Decidim's devise\_invitable gem vulnerable to circumvention of invitation token expiry period (CVSS 5.7, decidim · decidim-admin +2)
- [CVE-2024-0794](https://cve.now/CVE-2024-0794.md): Certain LaserJet Pro, HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Buffer Overflow, Potential Remote Code Execution (CVSS 9.8, Certain LaserJet Pro, HP Enterprise LaserJet, HP LaserJet M…)
- [CVE-2024-22054](https://cve.now/CVE-2024-22054.md): A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device ma (CVSS 7.5, Ubiquiti UniFi Access Points · Ubiquiti UniFi Switches +2)
- [CVE-2023-47635](https://cve.now/CVE-2023-47635.md): Decidim vulnerable to possible CSRF attack at questionnaire templates preview (CVSS 4.5, decidim · decidim-templates)
- [CVE-2023-47634](https://cve.now/CVE-2023-47634.md): Decidim has race condition in Endorsements (CVSS 3.1, decidim)
- [CVE-2024-21723](https://cve.now/CVE-2024-21723.md): \[20240202\] - Core - Open redirect in installation application (CVSS 4.3, Joomla! Project Joomla! CMS)
- [CVE-2024-21725](https://cve.now/CVE-2024-21725.md): \[20240204\] - Core - XSS in mail address outputs (CVSS 6.1, Joomla! Project Joomla! CMS)
- [CVE-2024-21724](https://cve.now/CVE-2024-21724.md): \[20240203\] - Core - XSS in media selection fields (CVSS 6.1, Joomla! Project Joomla! CMS)
- [CVE-2024-21722](https://cve.now/CVE-2024-21722.md): \[20240201\] - Core - Insufficient session expiration in MFA management views (CVSS 6.3, Joomla! Project Joomla! CMS)
- [CVE-2024-21726](https://cve.now/CVE-2024-21726.md): \[20240205\] - Core - Inadequate content filtering within the filter code (CVSS 6.5, Joomla! Project Joomla! CMS)
- [CVE-2024-1470](https://cve.now/CVE-2024-1470.md): Elevation of Privilege attack on NetIQ Client login extension (CVSS 7.1, OpenText NetIQ Client Login Extension)
- [CVE-2024-22097](https://cve.now/CVE-2024-22097.md): A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) (CVSS 9.8, The Biosig Project libbiosig)
- [CVE-2024-23305](https://cve.now/CVE-2024-23305.md): An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master (CVSS 9.8, The Biosig Project libbiosig)
- [CVE-2024-23809](https://cve.now/CVE-2024-23809.md): A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Br (CVSS 9.8, The Biosig Project libbiosig)
- [CVE-2024-21795](https://cve.now/CVE-2024-21795.md): A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (CVSS 9.8, The Biosig Project libbiosig)
- [CVE-2024-21812](https://cve.now/CVE-2024-21812.md): An integer overflow vulnerability exists in the sopen\_FAMOS\_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0e (CVSS 9.8, The Biosig Project libbiosig)
- [CVE-2024-23313](https://cve.now/CVE-2024-23313.md): An integer underflow vulnerability exists in the sopen\_FAMOS\_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0 (CVSS 9.8, The Biosig Project libbiosig)
- [CVE-2024-23310](https://cve.now/CVE-2024-23310.md): A use-after-free vulnerability exists in the sopen\_FAMOS\_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee11 (CVSS 9.8, The Biosig Project libbiosig)
- [CVE-2024-23606](https://cve.now/CVE-2024-23606.md): An out-of-bounds write vulnerability exists in the sopen\_FAMOS\_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (a (CVSS 9.8, The Biosig Project libbiosig)
- [CVE-2024-23114](https://cve.now/CVE-2024-23114.md): Apache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository (CVSS 9.8, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2024-22369](https://cve.now/CVE-2024-22369.md): Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository (CVSS 7.8, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2023-39541](https://cve.now/CVE-2023-39541.md): A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. (CVSS 5.9, Silicon Labs Gecko Platform · Weston Embedded uC-TCP-IP)
- [CVE-2023-39540](https://cve.now/CVE-2023-39540.md): A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. (CVSS 5.9, Silicon Labs Gecko Platform · Weston Embedded uC-TCP-IP)
- [CVE-2023-38562](https://cve.now/CVE-2023-38562.md): A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. (CVSS 8.7, Weston Embedded uC-TCP-IP)
- [CVE-2023-45318](https://cve.now/CVE-2023-45318.md): A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. (CVSS 10.0, Silicon Labs Gecko Platform · Weston Embedded uC-HTTP)
- [CVE-2024-1156](https://cve.now/CVE-2024-1156.md): Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration infor (CVSS 7.8, NI SystemLink Server · NI FlexLogger)
- [CVE-2024-1155](https://cve.now/CVE-2024-1155.md): Incorrect permissions for shared NI SystemLink Elixir based services (CVSS 7.8, NI SystemLink Server · NI FlexLogger)
- [CVE-2023-50306](https://cve.now/CVE-2023-50306.md): IBM Common Licensing information disclosure (CVSS 4.0, IBM Common Licensing)
- [CVE-2024-26270](https://cve.now/CVE-2024-26270.md): The Account Settings page in Liferay Portal 7.4.3.76 through 7.4.3.99, and Liferay DXP 2023.Q3 before patch 5, and 7.4 update 76 through 92 (CVSS 6.5, Liferay Portal · Liferay DXP +2)
- [CVE-2024-1557](https://cve.now/CVE-2024-1557.md): Memory safety bugs present in Firefox 122. (CVSS 8.1, Mozilla Firefox)
- [CVE-2024-1556](https://cve.now/CVE-2024-1556.md): The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. (CVSS 6.5, Mozilla Firefox)
- [CVE-2024-1555](https://cve.now/CVE-2024-1555.md): When opening a website using the \`firefox://\` protocol handler, SameSite cookies were not properly respected. (CVSS 8.3, Mozilla Firefox)
- [CVE-2024-1554](https://cve.now/CVE-2024-1554.md): The \`fetch()\` API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers \`fetch()\` may cont (CVSS 9.8, Mozilla Firefox)
- [CVE-2024-1553](https://cve.now/CVE-2024-1553.md): Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-1552](https://cve.now/CVE-2024-1552.md): Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.\*Note:\* This issue only affects (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-1551](https://cve.now/CVE-2024-1551.md): Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. (CVSS 6.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-1550](https://cve.now/CVE-2024-1550.md): A malicious website could have used a combination of exiting fullscreen mode and \`requestPointerLock\` to cause the user's mouse to be re-pos (CVSS 6.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-1549](https://cve.now/CVE-2024-1549.md): If a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potentially resulting in us (CVSS 6.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-1548](https://cve.now/CVE-2024-1548.md): A website could have obscured the fullscreen notification by using a dropdown select input element. (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-1547](https://cve.now/CVE-2024-1547.md): Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website (with the vict (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2024-1546](https://cve.now/CVE-2024-1546.md): When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memo (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-42791](https://cve.now/CVE-2023-42791.md): A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 an (CVSS 8.6, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2024-26268](https://cve.now/CVE-2024-26268.md): User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 2 (CVSS 5.3, Liferay Portal · Liferay DXP +2)
- [CVE-2024-26267](https://cve.now/CVE-2024-26267.md): In Liferay Portal 7.2.0 through 7.4.3.25, and older unsupported versions, and Liferay DXP 7.4 before update 26, 7.3 before update 5, 7.2 bef (CVSS 5.3, Liferay Portal · Liferay DXP +2)
- [CVE-2024-26581](https://cve.now/CVE-2024-26581.md): netfilter: nft\_set\_rbtree: skip end interval element from gc (CVSS 7.8, Linux)
- [CVE-2023-52433](https://cve.now/CVE-2023-52433.md): netfilter: nft\_set\_rbtree: skip sync GC for new elements in this transaction (CVSS 7.8, Linux)
- [CVE-2024-26265](https://cve.now/CVE-2024-26265.md): The Image Uploader module in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7. (CVSS 5.0, Liferay Portal · Liferay DXP +1)
- [CVE-2024-25610](https://cve.now/CVE-2024-25610.md): In Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 before update 4, 7.2 befo (CVSS 9.0, Liferay Portal · Liferay DXP +3)
- [CVE-2024-1661](https://cve.now/CVE-2024-1661.md): Totolink X6000R shadow hard-coded credentials (CVSS 2.5, Totolink X6000R)
- [CVE-2023-7245](https://cve.now/CVE-2023-7245.md): The nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which allows a local user to (CVSS 7.8, OpenVPN Connect)
- [CVE-2024-24794](https://cve.now/CVE-2024-24794.md): A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. (CVSS 8.1, Imaging Data Commons libdicom)
- [CVE-2024-24793](https://cve.now/CVE-2024-24793.md): A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. (CVSS 8.1, Imaging Data Commons libdicom)
- [CVE-2023-51770](https://cve.now/CVE-2023-51770.md): Apache DolphinScheduler: Arbitrary File Read Vulnerability (CVSS 7.5, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2023-50270](https://cve.now/CVE-2023-50270.md): Apache DolphinScheduler: Session do not expire after password change (CVSS 6.5, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2023-49250](https://cve.now/CVE-2023-49250.md): Apache DolphinScheduler: Insecure TLS TrustManager used in HttpUtil (CVSS 7.3, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2023-49109](https://cve.now/CVE-2023-49109.md): Remote Code Execution in Apache Dolphinscheduler (CVSS 9.8, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2024-25609](https://cve.now/CVE-2024-25609.md): HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 s (CVSS 6.1, Liferay Portal · Liferay DXP +2)
- [CVE-2024-25608](https://cve.now/CVE-2024-25608.md): HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 (CVSS 6.1, Liferay Portal · Liferay DXP +2)
- [CVE-2024-25607](https://cve.now/CVE-2024-25607.md): The default password hashing algorithm (PBKDF2-HMAC-SHA1) in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Life (CVSS 8.1, Liferay Portal · Liferay DXP +3)
- [CVE-2024-1608](https://cve.now/CVE-2024-1608.md): OPPO Usercenter Credit sdk (CVSS 9.1, OPPO Usercenter Credit sdk)
- [CVE-2024-25606](https://cve.now/CVE-2024-25606.md): XXE vulnerability in Liferay Portal 7.2.0 through 7.4.3.7, and older unsupported versions, and Liferay DXP 7.4 before update 4, 7.3 before u (CVSS 8.0, Liferay Portal · Liferay DXP +3)
- [CVE-2024-25605](https://cve.now/CVE-2024-25605.md): The Journal module in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack (CVSS 5.3, Liferay Portal · Liferay DXP +2)
- [CVE-2024-25604](https://cve.now/CVE-2024-25604.md): Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack (CVSS 6.5, Liferay Portal · Liferay DXP +2)
- [CVE-2024-25150](https://cve.now/CVE-2024-25150.md): Information disclosure vulnerability in the Control Panel in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay (CVSS 4.3, Liferay Portal · Liferay DXP +2)
- [CVE-2024-25974](https://cve.now/CVE-2024-25974.md): Stored Cross-Site Scripting (XSS) within the Media Center (CVSS 5.4, Frentix OpenOlat LMS)
- [CVE-2024-25973](https://cve.now/CVE-2024-25973.md): Multiple Stored Cross-Site Scripting Vulnerabilities (CVSS 5.4, Frentix OpenOlat LMS)
- [CVE-2024-22234](https://cve.now/CVE-2024-22234.md): CVE-2024-22234: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated (CVSS 7.4, Spring Security · org.springframework.security:spring-secur…)
- [CVE-2024-25149](https://cve.now/CVE-2024-25149.md): Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and o (CVSS 5.4, Liferay Portal · Liferay DXP +2)
- [CVE-2023-44308](https://cve.now/CVE-2023-44308.md): Open redirect vulnerability in adaptive media administration page in Liferay DXP 2023.Q3 before patch 6, and 7.4 GA through update 92 allows (CVSS 6.1, Liferay DXP · com.liferay:com.liferay.adaptive.media.web)
- [CVE-2023-5190](https://cve.now/CVE-2023-5190.md): Open redirect vulnerability in the Countries Management’s edit region page in Liferay Portal 7.4.3.45 through 7.4.3.101, and Liferay DXP 202 (CVSS 6.1, Liferay Portal · Liferay DXP +2)
- [CVE-2024-1559](https://cve.now/CVE-2024-1559.md): Link Library \<= 7.6 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.5, jackdewey Link Library)
- [CVE-2024-1510](https://cve.now/CVE-2024-1510.md): WP Shortcodes Plugin — Shortcodes Ultimate \<= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su\_tooltip Shortcode (CVSS 6.4, gn\_themes WP Shortcodes Plugin — Shortcodes Ultimate)
- [CVE-2023-6764](https://cve.now/CVE-2023-6764.md): A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.3 (CVSS 8.1, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +2)
- [CVE-2023-6399](https://cve.now/CVE-2023-6399.md): A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4 (CVSS 5.7, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-6398](https://cve.now/CVE-2023-6398.md): A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 (CVSS 7.2, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +7)
- [CVE-2024-21896](https://cve.now/CVE-2024-21896.md): The permission model protects itself against path traversal attacks by calling path.resolve() on any paths given by the user. (CVSS 7.9, NodeJS Node)
- [CVE-2024-21890](https://cve.now/CVE-2024-21890.md): The Node.js Permission Model does not clarify in the documentation that wildcards should be only used as the last character of a file path. (CVSS 5.0, NodeJS Node)
- [CVE-2024-21891](https://cve.now/CVE-2024-21891.md): Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be overwitten with user-d (CVSS 7.9, NodeJS Node)
- [CVE-2024-22019](https://cve.now/CVE-2024-22019.md): A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resour (CVSS 7.5, NodeJS Node)
- [CVE-2024-21892](https://cve.now/CVE-2024-21892.md): On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the process is running with (CVSS 7.5, NodeJS Node)
- [CVE-2023-6397](https://cve.now/CVE-2023-6397.md): A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX serie (CVSS 6.5, Zyxel ATP series firmware · Zyxel USG FLEX series firmware)
- [CVE-2024-0715](https://cve.now/CVE-2024-0715.md): EL Injection Vulnerability in Hitachi Global Link Manager (CVSS 7.6, Hitachi Global Link Manager)
- [CVE-2024-1648](https://cve.now/CVE-2024-1648.md): electron-pdf 20.0.0 - Local File Read via Server Side XSS (CVSS 7.5, electron-pdf)
- [CVE-2021-29038](https://cve.now/CVE-2021-29038.md): Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older (CVSS 6.3, com.liferay.portal:portal-impl · com.liferay:com.liferay… +3)
- [CVE-2021-29050](https://cve.now/CVE-2021-29050.md): Cross-Site Request Forgery (CSRF) vulnerability in the terms of use page in Liferay Portal before 7.3.6, and Liferay DXP 7.3 before service (CVSS 8.8, com.liferay.portal:com.liferay.portal.impl · com.liferay.po…)
- [CVE-2022-45320](https://cve.now/CVE-2022-45320.md): Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix pack 19, 7.3 before update 6, and 7.4 before update 16 allow remote authentica (CVSS 6.3, com.liferay.portal:release.portal.bom)
- [CVE-2023-46967](https://cve.now/CVE-2023-46967.md): Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges v (CVSS 6.1)
- [CVE-2023-47422](https://cve.now/CVE-2023-47422.md): An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX1 (CVSS 8.8)
- [CVE-2023-49034](https://cve.now/CVE-2023-49034.md): Cross Site Scripting (XSS) vulnerability in ProjeQtOr 11.0.2 allows a remote attacker to execute arbitrary code via a crafted script to thec (CVSS 6.1)
- [CVE-2023-50923](https://cve.now/CVE-2023-50923.md): In QUIC in RFC 9000, the Latency Spin Bit specification (section 17.4) does not strictly constrain the bit value when the feature is disable (CVSS 4.3)
- [CVE-2024-22824](https://cve.now/CVE-2024-22824.md): An issue in Timo v.2.0.3 allows a remote attacker to execute arbitrary code via the filetype restrictions in the UploadController.java compo (CVSS 9.8)
- [CVE-2024-23758](https://cve.now/CVE-2024-23758.md): An issue discovered in Unisys Stealth 5.3.062.0 allows attackers to view sensitive information via the Enterprise ManagementInstaller\_msi.lo (CVSS 7.5)
- [CVE-2024-24474](https://cve.now/CVE-2024-24474.md): QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less (CVSS 8.8)
- [CVE-2024-25196](https://cve.now/CVE-2024-25196.md): Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2\_controll (CVSS 3.3)
- [CVE-2024-25197](https://cve.now/CVE-2024-25197.md): Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCu (CVSS 6.5)
- [CVE-2024-25198](https://cve.now/CVE-2024-25198.md): Inappropriate pointer order of laser\_scan\_filter\_.reset() and tf\_listener\_.reset() (amcl\_node.cpp) in Open Robotics Robotic Operating Sytste (CVSS 9.1)
- [CVE-2024-25199](https://cve.now/CVE-2024-25199.md): Inappropriate pointer order of map\_sub\_ and map\_free(map\_) (amcl\_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humb (CVSS 8.1)
- [CVE-2024-25260](https://cve.now/CVE-2024-25260.md): elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle\_verdef() function at readelf.c. (CVSS 4.0)
- [CVE-2024-25262](https://cve.now/CVE-2024-25262.md): texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. (CVSS 8.1)
- [CVE-2024-25274](https://cve.now/CVE-2024-25274.md): An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code (CVSS 9.8)
- [CVE-2024-25366](https://cve.now/CVE-2024-25366.md): Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServe (CVSS 6.2)
- [CVE-2024-25428](https://cve.now/CVE-2024-25428.md): SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter. (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-02-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.