CVEs published February 24, 2024
20 CVEs were published on February 24, 2024: 0 critical, 3 high.
- Published
- 20
- Critical
- 0
- High
- 3
- Medium
- 9
- Low
- 3
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Linux
- 6
- IBM Cognos Analytics
- 5
- eteubert Archivist – Custom Archive Templates
- 1
- fastecdsa
- 1
- langchain-ai/langchain · langchain +1
- 1
- sanitize-html · org.webjars.npm:sanitize-html
- 1
- SourceCodester Employee Management System
- 1
- SuperFaktura WooCommerce
- 1
- themefusecom Brizy – Page Builder
- 1
- unitecms Addon Library
- 1
High 3
- CVE-2024-26601ext4: regenerate buddy after block freeing failed if under fc replayLinux
- CVE-2024-1710Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Uploadunitecms Addon Library
- CVE-2024-21502Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemath_mul function fastecdsa
Medium, low and unrated 17
- CVE-2024-1871SourceCodester Employee Management System Project Assignment Report assignp.php cross site scriptingSourceCodester Employee Management System
- CVE-2024-0243Server-side Request Forgery In Recursive URL Loaderlangchain-ai/langchain · langchain +1
- CVE-2023-43051IBM Cognos Analytics cross-site scriptingIBM Cognos Analytics
- CVE-2022-34357IBM Cognos Analytics Mobile Server denial of serviceIBM Cognos Analytics
- CVE-2023-30996IBM Cognos Analytics cross-origin resource sharingIBM Cognos Analytics
- CVE-2023-32344IBM Cognos Analytics cross-site request forgeryIBM Cognos Analytics
- CVE-2023-38359IBM Cognos Analytics cross-site scriptingIBM Cognos Analytics
- CVE-2024-26605PCI/ASPM: Fix deadlock when enabling ASPMLinux
- CVE-2024-26604Revert "kobject: Remove redundant checks for whether ktype is NULL"Linux
- CVE-2024-26603x86/fpu: Stop relying on userspace for info to fault in xsave bufferLinux
- CVE-2024-26602sched/membarrier: reduce the ability to hammer on sys_membarrierLinux
- CVE-2024-26600phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRPLinux
- CVE-2024-1165Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversalthemefusecom Brizy – Page Builder
- CVE-2024-1758SuperFaktura WooCommerce <= 1.40.3 - Authenticated (Subscriber+) Blind Server-Side Request ForgerySuperFaktura WooCommerce
- CVE-2023-5775BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Passwordwp_media BackWPup – WordPress Backup & Restore Plugin
- CVE-2024-21501Versions of the package sanitize-html before 2.12.1 are vulnerable to Information Exposure when used on the backend and with the style attrisanitize-html · org.webjars.npm:sanitize-html
- CVE-2024-1810Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scriptingeteubert Archivist – Custom Archive Templates