CVEs published February 29, 2024
144 CVEs were published on February 29, 2024: 11 critical, 37 high.
- Published
- 144
- Critical
- 11
- High
- 37
- Medium
- 64
- Low
- 3
- Unrated
- 29
- Now in CISA KEV
- 0
- Fix available
- 36
Most affected products
- Linux
- 53
- Mattermost · github.com/mattermost/mattermost/server/v8 +3
- 5
- Mattermost · github.com/mattermost/mattermost-server +3
- 4
- Google Chrome
- 2
- IBM Security Guardium Key Lifecycle Manager
- 2
- jhpyle docassemble · docassemble-webapp
- 2
- ZhiCms
- 2
- activeim Marketing Optimizer
- 1
- Adobe Acrobat Reader
- 1
- akirk Friends
- 1
Critical 11
- CVE-2024-0864RCE in LaragonLeo Khoa Laragon
- CVE-2024-1981The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via the 'table_prefix' parameter in version 0.9wpvividplugins Migration, Backup, Staging – WPvivid
- CVE-2023-52480ksmbd: fix race condition between session lookup and expireLinux
- CVE-2023-6090WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File UploadMollie Payments for WooCommerce
- CVE-2023-51801SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted p
- CVE-2024-24525An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to execute arbitrary code via the infoid paramet
- CVE-2024-25180An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf endpoint.
- CVE-2024-25239SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted POS
- CVE-2024-25291Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin.
- CVE-2024-25292Cross-site scripting (XSS) vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payloa
- CVE-2024-26548An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the uplo
High 37
- CVE-2024-27294dp-golang Go installation could be owned by wrong userdanielparks puppet-golang
- CVE-2021-47068net/nfc: fix use-after-free llcp_sock_bind/connectLinux
- CVE-2021-47066async_xor: increase src_offs when dropping destination pageLinux
- CVE-2021-47061KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCULinux
- CVE-2021-47060KVM: Stop looking for coalesced MMIO zones if the bus is destroyedLinux
- CVE-2021-47055mtd: require write permissions for locking and badblock ioctlsLinux
- CVE-2024-27292Docassemble unauthorized access through URL manipulationjhpyle docassemble · docassemble-base +1
- CVE-2024-2014Panabit Panalog sprog_upstatus.php sql injectionPanabit Panalog
- CVE-2024-1595Delta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path ElementDelta Electronics CNCSoft-B v1.0.0.4 DOPSoft
- CVE-2023-6132AVEVA Edge products Uncontrolled Search Path ElementAVEVA Edge
- CVE-2024-20765ZDI-CAN-22674: Adobe Acrobat Reader DC PDF File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2024-26620s390/vfio-ap: always filter entire AP matrixLinux
- CVE-2024-26617fs/proc/task_mmu: move mmu notification mechanism inside mm lockLinux
- CVE-2024-26614tcp: make sure init the accept_queue's spinlocks onceLinux
- CVE-2024-26611xsk: fix usage of multi-buffer BPF helpers for ZC XDPLinux
- CVE-2024-26610wifi: iwlwifi: fix a memory corruptionLinux
- CVE-2024-26608ksmbd: fix global oob in ksmbd_nl_policyLinux
- CVE-2023-52497erofs: fix lz4 inplace decompressionLinux
- CVE-2023-52491media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_runLinux
- CVE-2023-52486drm: Don't unref the same fb many times by mistake due to deadlock handlingLinux
- CVE-2024-25093WordPress GD Rating System Plugin <= 3.5 is vulnerable to Cross Site Scripting (XSS)Milan Petrovic GD Rating System
- CVE-2023-52483mctp: perform route lookups under a RCU read-side lockLinux
- CVE-2023-52479ksmbd: fix uaf in smb20_oplock_break_ackLinux
- CVE-2023-52478HID: logitech-hidpp: Fix kernel crash on receiver USB disconnectLinux
- CVE-2023-50905WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)Melapress WP Activity Log
- CVE-2024-21752WordPress Ajax Search Lite Plugin <= 4.11.4 is vulnerable to Cross Site Scripting (XSS)Ernest Marcinko Ajax Search Lite
- CVE-2024-1437WordPress Adsmonetizer Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)José Fernandez Adsmonetizer
- CVE-2023-1841Honeywell MPA2 Web Application XSS vulnerabilityHoneywell MPA2 Access Panel
- CVE-2024-1468Avada | Website Builder For WordPress & WooCommerce <= 7.11.4 - Authenticated (Contributor+) Arbitrary File UploadThemeFusion Avada | Website Builder For WordPress & WooComm…
- CVE-2023-25921IBM Security Guardium Key Lifecycle Manager file uploadIBM Security Guardium Key Lifecycle Manager
- CVE-2024-1939Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted Google Chrome
- CVE-2024-1938Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafteGoogle Chrome
- CVE-2024-22871An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a denial of service (DoS) via the clojure.core$partial$fn__59org.clojure:clojure
- CVE-2024-24520An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languages place.
- CVE-2024-27655D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SOAPACTION parameter.
- CVE-2024-27656D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter.
- CVE-2024-27657D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the User-Agent parameter.
Medium, low and unrated 96
- CVE-2024-2045Session 1.17.5 - LFR via chat attachmentSession
- CVE-2024-0403Recipes 1.5.10 - Blind SSRFRecipes
- CVE-2024-2021Netentsec NS-ASG Application Security Gateway list_localuser.php sql injectionNetentsec NS-ASG Application Security Gateway
- CVE-2021-47067soc/tegra: regulators: Fix locking up when voltage-spread is out of rangeLinux
- CVE-2021-47065rtw88: Fix array overrun in rtw_get_tx_power_params()Linux
- CVE-2021-47064mt76: fix potential DMA mapping leakLinux
- CVE-2021-47063drm: bridge/panel: Cleanup connector on bridge detachLinux
- CVE-2021-47062KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUsLinux
- CVE-2021-47059crypto: sun8i-ss - fix result memory leak on error pathLinux
- CVE-2021-47058regmap: set debugfs_name to NULL after it is freedLinux
- CVE-2021-47057crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to mapLinux
- CVE-2021-47056crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_initLinux
- CVE-2021-47054bus: qcom: Put child node before returnLinux
- CVE-2021-47020soundwire: stream: fix memory leak in stream config error pathLinux
- CVE-2021-47016m68k: mvme147,mvme16x: Don't wipe PCC timer config bitsLinux
- CVE-2021-46959spi: Fix use-after-free with devm_spi_alloc_*Linux
- CVE-2024-27291Docassemble open redirectjhpyle docassemble · docassemble-webapp
- CVE-2024-27290Docassemble HTML and javascript injectionjhpyle docassemble · docassemble-webapp
- CVE-2024-2016ZhiCms setcontroller.php index code injectionZhiCms
- CVE-2024-2015ZhiCms mcontroller.php getindexdata sql injectionZhiCms
- CVE-2024-26196Microsoft Edge for Android (Chromium-based) Information Disclosure VulnerabilityMicrosoft Edge for Android
- CVE-2024-0068Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.ThisHYPR Workforce Access
- CVE-2024-2009Nway Pro Argument index.php ajax_login_submit_form information exposureNway Pro
- CVE-2024-2007OpenBMB XAgent Privileged Mode sandboxOpenBMB XAgent
- CVE-2024-1908Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed Privilege EscalationGitHub Enterprise Server
- CVE-2024-27094OpenZeppelin Contracts base64 encoding may read from potentially dirty memoryopenzeppelin-contracts · @openzeppelin/contracts +1
- CVE-2024-26619riscv: Fix module loading free orderLinux
- CVE-2024-26618arm64/sme: Always exit sme_alloc() early with existing storageLinux
- CVE-2024-26616btrfs: scrub: avoid use-after-free when chunk length is not 64K alignedLinux
- CVE-2024-26615net/smc: fix illegal rmb_desc access in SMC-D connection dumpLinux
- CVE-2024-26612netfs, fscache: Prevent Oops in fscache_put_cache()Linux
- CVE-2023-52498PM: sleep: Fix possible deadlocks in core system-wide PM codeLinux
- CVE-2023-52495soc: qcom: pmic_glink_altmode: fix port sanity checkLinux
- CVE-2023-52494bus: mhi: host: Add alignment check for event ring read pointerLinux
- CVE-2023-52493bus: mhi: host: Drop chan lock before queuing buffersLinux
- CVE-2023-52492dmaengine: fix NULL pointer in channel unregistration functionLinux
- CVE-2023-52490mm: migrate: fix getting incorrect page mapping during page migrationLinux
- CVE-2023-52489mm/sparsemem: fix race in accessing memory_section->usageLinux
- CVE-2023-52488serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFOLinux
- CVE-2023-52487net/mlx5e: Fix peer flow lists handlingLinux
- CVE-2024-24818EspoCRM weakness in "Forgot password"espocrm
- CVE-2023-52485drm/amd/display: Wake DMCUB before sending a commandLinux
- CVE-2024-2001Cross-Site Scripting vulnerability in Cockpit CMSCockpit CMS · cockpit-hq/cockpit
- CVE-2024-26607drm/bridge: sii902x: Fix probing race issueLinux
- CVE-2024-27906Apache Airflow: Dag Code and Import Error Permissions IgnoredApache Software Foundation Apache Airflow · apache-airflow
- CVE-2024-1953Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, 9.3.0, and 9.4.x before 9.4.2 fail to limit the number of role names requested fMattermost · github.com/mattermost/mattermost-server +3
- CVE-2024-1952Mattermost version 8.1.x before 8.1.9 fails to sanitize data associated with permalinks when a plugin updates an ephemeral post, allowing anMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2024-1949A race condition in Mattermost versions 8.1.x before 8.1.9, and 9.4.x before 9.4.2 allows an authenticated attacker to gain unauthorized accMattermost · github.com/mattermost/mattermost-server +3
- CVE-2024-1942Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, and 9.3.0 fail to sanitize the metadata on posts containing permalinks under speMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2024-1619Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server.Kaspersky Security for Linux Mail Server
- CVE-2024-1888Existing server guests invited to the team by members without "invite_guest" permissionMattermost · github.com/mattermost/mattermost-server +3
- CVE-2024-24988Excessive resource consumption when sending long emoji names in user custom statusMattermost · github.com/mattermost/mattermost-server +3
- CVE-2024-1887Public channel post content accessible without membership when compliance export is enabledMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2024-23488Files of archived channels accessible with the “Allow users to view archived channels” option disabledMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2024-23493 Team associated AD/LDAP Groups Leaked due to missing authorizationMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2024-1978Friends <= 2.8.5 - Authenticated (Admin+) Blind Server-Side Request Forgeryakirk Friends
- CVE-2024-1982WPvivid Backup and Migration <= 0.9.68 - Missing Authorizationwpvividplugins WPvivid — Backup, Migration & Staging
- CVE-2024-25594WordPress MyWaze Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)Savvy Wordpress Development MyWaze
- CVE-2024-25098WordPress PB oEmbed HTML5 Audio Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)Pascal Bajorat PB oEmbed HTML5 Audio – with Cache Support
- CVE-2024-25094WordPress PJ News Ticker Plugin <= 1.9.5 is vulnerable to Cross Site Scripting (XSS)Paul Jura & Nicolas Montigny PJ News Ticker
- CVE-2023-52484iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_rangeLinux
- CVE-2023-52482x86/srso: Add SRSO mitigation for Hygon processorsLinux
- CVE-2023-52481arm64: errata: Add Cortex-A520 speculative unprivileged load workaroundLinux
- CVE-2023-52477usb: hub: Guard against accesses to uninitialized BOS descriptorsLinux
- CVE-2023-52476perf/x86/lbr: Filter vsyscall addressesLinux
- CVE-2023-52475Input: powermate - fix use-after-free in powermate_config_completeLinux
- CVE-2024-23501WordPress Ebook Store Plugin <= 5.788 is vulnerable to Cross Site Scripting (XSS)Shopfiles Ebook Store
- CVE-2024-1976Marketing Optimizer <= 20200925 - Cross-Site Request Forgery to Stored Cross-Site Scriptingactiveim Marketing Optimizer
- CVE-2024-1977The Restaurant Solutions – Checklist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Checklist points in version 1foucciano Restaurant Solutions – Checklist
- CVE-2023-47874WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access ControlPerfmatters
- CVE-2024-1434WordPress Media Alt Renamer Plugin 0.0.1 is vulnerable to Cross Site Scripting (XSS)Jordy Meow Media Alt Renamer
- CVE-2024-1435WordPress Tainacan plugin <= 0.20.6 - Sensitive Data Exposure via Log File vulnerabilityTainacan
- CVE-2023-51531WordPress Thrive Automator Plugin <= 1.17 is vulnerable to Cross Site Request Forgery (CSRF)Thrive Themes Thrive Automator
- CVE-2023-51530WordPress GS Logo Slider Plugin <= 3.5.1 is vulnerable to Cross Site Request Forgery (CSRF)GS Plugins Logo Slider – Logo Showcase, Logo Carousel, Logo…
- CVE-2023-51529WordPress HT Mega Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)HasThemes HT Mega – Absolute Addons For Elementor
- CVE-2023-51528WordPress GPT3 AI Content Writer Plugin <= 1.8.12 is vulnerable to Cross Site Request Forgery (CSRF)Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4
- CVE-2023-51696WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)СleanTalk - Anti-Spam Protection Spam protection, Anti-Spam…
- CVE-2024-1341Advanced iFrame <= 2024.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingmdempfle Advanced iFrame
- CVE-2021-39090IBM Cloud Pak for Security information disclosureIBM Cloud Pak for Security
- CVE-2024-0689Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scriptingmgibbs189 Custom Field Suite
- CVE-2023-38367IBM Cloud Pak for Automation authentication bypassIBM Cloud Pak for Automation
- CVE-2023-27545IBM Watson CloudPak for Data Data Stores information disclosureIBM Watson CloudPak for Data Data Stores
- CVE-2023-25926IBM Security Guardium Key Lifecycle Manager XML external entity injectionIBM Security Guardium Key Lifecycle Manager
- CVE-2023-38372IBM Watson IoT Platform information disclosureIBM Watson IoT Platform
- CVE-2023-51800Cross Site Scripting (XSS) vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a cra
- CVE-2023-51802Cross Site Scripting (XSS) vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code vi
- CVE-2024-24028Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar para
- CVE-2024-24110SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the compon
- CVE-2024-24246Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/
- CVE-2024-25167Cross Site Scripting vulnerability in eblog v1.0 allows a remote attacker to execute arbitrary code via a crafted script to the argument des
- CVE-2024-25811An access control issue in Dreamer CMS v4.0.1 allows attackers to download backup files and leak sensitive information.
- CVE-2024-27658D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8().
- CVE-2024-27659D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30().
- CVE-2024-27660D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_41C488().
- CVE-2024-27661D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8().
- CVE-2024-27662D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4().