Archive
6 February 2024
Vulnerabilities first published on this day (UTC), newest first.
25 results · Clear filters · Feed
-
Critical 9.8
Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap c…
-
Critical 9.9
A cross-site scripting (XSS) vulnerability in all versions of the web server component of Allegro AI’s ClearML platform…
-
Critical 9.6
A cross-site request forgery (CSRF) vulnerability in all versions up to 1.14.1 of the api server component of Allegro A…
-
Critical 9.8
Lack of authentication in all versions of the fileserver component of Allegro AI’s ClearML platform allows a remote att…
-
Critical 9.8
In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible
-
Critical 9.3
Buffer copy without checking size of Input in Core
Memory corruption in Core while processing control functions.
-
Critical 9.8
Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(*) which may allow an …
-
Critical 9.8
Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) whic…
-
Critical 9.8
Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow…
-
Critical 9.8
Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunctio…
-
Critical 9.8
Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an …
-
Critical 9.8
Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunctio…
-
Critical 9.8
Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may …
-
Critical 9.8
An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthe…
-
Critical 9.8CVE-2024-24112 Scanner template
xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.
-
Critical 9.8
jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseRespo…
-
Critical 9.8CVE-2024-24398 Public exploit
Stimulsoft Dashboard.JS directory traversal vulnerability
Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the fileName parameter of the Save function.
-
Critical 9.8
jshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseR…
-
Critical 9.8
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, …
-
Critical 9.8
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offse…
-
Critical 9.8
jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.MaterialController: com.jsh.erp.utils.BaseRespon…
-
Critical 9.8
jshERP v3.3 is vulnerable to Arbitrary File Upload. The jshERP-boot/systemConfig/upload interface does not check the up…
-
Critical 9.8
A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification A…
-
Critical 9.8
D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function genacgi_main. This v…
-
Critical 9.8CVE-2024-22853 Public exploit
D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote …