Skip to content
OpenAdvisories

Archive

6 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /6 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.2
    CVE-2023-43482 Public exploit

    A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router…

    TP-Link Systems ER7206 Omada Gigabit VPN Router Network devices
  • High 8.0
    CVE-2024-24590 Public exploit

    Allegro AI ClearML vulnerable to deserialization of untrusted data

    Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.

    Allegro.AI ClearML clearml PyPI
  • High 8.5
    CVE-2024-23673 Public exploit

    Apache Sling Servlets Resolver: Malicious code execution via path traversal

    Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exac…

    Apache Software Foundation Apache Sling Servlets Resolver org.apache.sling:org.apache.sling.servlets.resolver Maven
  • Medium 5.5
    CVE-2024-0684 Public exploit

    Coreutils: heap overflow in split --line-bytes with very long lines

    A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.

    coreutils coreutils coreutils Debian Azure Linux Alpine
  • High 7.8
    CVE-2023-47889 Public exploit

    The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported bro…

  • Critical 9.8
    CVE-2024-24398 Public exploit

    Stimulsoft Dashboard.JS directory traversal vulnerability

    Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the fileName parameter of the Save function.

    stimulsoft-dashboards-js npm
  • Critical 9.8
    CVE-2024-22853 Public exploit

    D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote …

  • High 8.8
    CVE-2024-22514 Public exploit

    An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted…

  • High 8.8
    CVE-2024-22515 Public exploit

    Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files …