Skip to content
OpenAdvisories

Archive

6 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /6 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 3.1
    CVE-2024-1258

    Juanpao JPShop API params.php hard-coded key

    A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file api/config/params.php of the component API. The manipulation of the argument JWT_KEY_ADMIN le…

    Juanpao JPShop
  • Low 3.5
    CVE-2024-1257

    Jspxcms find_text.do cross site scripting

    A vulnerability was found in Jspxcms 10.2.0. It has been classified as problematic. Affected is an unknown function of the file /ext/collect/find_text.do. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploi…

  • Low 3.5
    CVE-2024-1256

    Jspxcms filter_text.do cross site scripting

    A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. This issue affects some unknown processing of the file /ext/collect/filter_text.do. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit ha…

  • Low 3.3
    CVE-2024-1048

    Grub2: grub2-set-bootflag can be abused by local (pseudo-)users

    A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename o…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux
  • Low 2.8
    CVE-2024-24940

    In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives

    JetBrains IntelliJ IDEA
  • Low 3.3
    CVE-2024-24939

    In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible

    JetBrains Rider
  • Low 2.4
    CVE-2024-20828

    Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers t…

    Samsung Mobile Samsung Internet
  • Low 3.3
    CVE-2024-20810

    Implicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1 allows local attackers to …

    Samsung Mobile Samsung Mobile Devices