Skip to content
OpenAdvisories

Archive

4 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /4 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • High 7.7
    CVE-2021-4435

    Yarn: untrusted search path

    An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways.

    Fedora Fedora Extra Packages for Enterprise Linux node-yarnpkg Linux Debian Ubuntu Wolfi npm
  • Medium 4.3
    CVE-2018-25098

    blockmason credit-protocol UCAC CreditProtocol.sol executeUcacTx denial of service

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in blockmason credit-protocol. It has been declared as problematic. Affected by this vulnerability is the function executeUcacTx of the file contracts/CreditProtocol.sol of the component UCAC Handler. …

    blockmason credit-protocol
  • Medium 6.5
    CVE-2023-6240

    Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation

    A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  • Medium 5.5
    CVE-2019-25159

    mpedraza2020 Intranet del Monterroso cargos.php sql injection

    A vulnerability was found in mpedraza2020 Intranet del Monterroso up to 4.50.0. It has been classified as critical. This affects an unknown part of the file config/cargos.php. The manipulation of the argument dni_profe leads to sql injection. Upgrading to ver…

    mpedraza2020 Intranet del Monterroso
  • Low 3.7
    CVE-2015-10129

    planet-freo auth.inc.php comparison

    A vulnerability was found in planet-freo up to 20150116 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/inc/auth.inc.php. The manipulation of the argument auth leads to incorrect comparison. The attack may…

  • Medium 5.3
    CVE-2023-33851

    IBM PowerVM Hypervisor information disclosure

    IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1020.00 through FW1020.40, and FW1030.00 through FW1030.30 could reveal sensitive partition data to a system administrator. IBM X-Force ID: 257135.

    IBM PowerVM Hypervisor
  • Medium 5.4
    CVE-2023-50947

    IBM Business Automation Workflow cross-site scripting

    IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials dis…

    IBM Business Automation Workflow
  • Critical 9.8
    CVE-2020-36773

    Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwr…

    ghostscript Debian
  • Medium 5.5
    CVE-2023-52426

    libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.

    insighttoolkit4 expat swish-e vtk Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2023-52425

    libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in t…

    insighttoolkit4 expat swish-e matanza Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2024-25062

    An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD…

    qt6-qtwebengine libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  • Critical 9.8
    CVE-2024-25089

    Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRP…

  • Medium 6.5
    CVE-2021-46903

    An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04…

  • High 7.2
    CVE-2021-46902

    An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04…