Skip to content
OpenAdvisories

Archive

6 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /6 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

156 results · Feed

  • Low 3.3
    CVE-2024-20810

    Implicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1 allows local attackers to …

    Samsung Mobile Samsung Mobile Devices
  • Critical 9.8
    CVE-2024-0244

    Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(*) which may allow an …

    Canon Satera MF750C Series Color imageCLASS MF750C Series Color imageCLASS X MF1333C
  • Critical 9.8
    CVE-2023-6234

    Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) whic…

    Canon Satera MF750C Series Satera LBP670C Series Color imageCLASS MF750C Series
  • Critical 9.8
    CVE-2023-6233

    Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow…

    Canon Satera MF750C Series Satera LBP670C Series Color imageCLASS MF750C Series
  • Critical 9.8
    CVE-2023-6232

    Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunctio…

    Canon Satera MF750C Series Satera LBP670C Series Color imageCLASS MF750C Series
  • Critical 9.8
    CVE-2023-6231

    Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an …

    Canon Satera MF750C Series Satera LBP670C Series Color imageCLASS MF750C Series
  • Critical 9.8
    CVE-2023-6230

    Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunctio…

    Canon Satera MF750C Series Satera LBP670C Series Color imageCLASS MF750C Series
  • Critical 9.8
    CVE-2023-6229

    Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may …

    Canon Satera MF750C Series Satera LBP670C Series Color imageCLASS MF750C Series
  • High 8.8
    CVE-2023-46360

    Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier is vulnerable to Execution with Unnecessary Privileges.

  • Critical 9.8
    CVE-2023-46359 Scanner template EPSS 88%

    An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthe…

  • Medium 6.5
    CVE-2023-52239

    The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport.

  • Medium 6.5
    CVE-2023-47022

    Insecure Direct Object Reference in NCR Terminal Handler v.1.5.1 allows an unprivileged user to edit the audit logs for…

  • High 7.8
    CVE-2023-47354

    An issue in the PowerOffWidgetReceiver function of Super Reboot (Root) Recovery v1.0.3 allows attackers to arbitrarily …

  • High 8.8
    CVE-2023-47353

    An issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO v1.0.11 allows attackers to force th…

  • High 7.8
    CVE-2023-47889 Public exploit

    The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported bro…

  • High 7.5
    CVE-2024-24680

    Django denial-of-service attack in the intcomma template filter

    An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.

    python-django django python-django py3-django Debian Ubuntu Wolfi PyPI
  • Critical 9.8
    CVE-2024-24112 Scanner template

    xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.

  • Critical 9.8
    CVE-2024-24004

    jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseRespo…

  • Critical 9.8
    CVE-2024-24398 Public exploit

    Stimulsoft Dashboard.JS directory traversal vulnerability

    Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the fileName parameter of the Save function.

    stimulsoft-dashboards-js npm
  • Critical 9.8
    CVE-2024-24001

    jshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseR…

  • Critical 9.8
    CVE-2024-24013

    A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, …

  • Medium 4.2
    CVE-2024-24255

    A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allow…

  • Critical 9.8
    CVE-2024-24015

    A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offse…

  • Critical 9.8
    CVE-2024-24002

    jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.MaterialController: com.jsh.erp.utils.BaseRespon…

  • Medium 6.1
    CVE-2024-24291

    An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a …

  • Critical 9.8
    CVE-2024-24000

    jshERP v3.3 is vulnerable to Arbitrary File Upload. The jshERP-boot/systemConfig/upload interface does not check the up…

  • Medium 4.2
    CVE-2024-24254

    PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Cond…

  • Critical 9.8
    CVE-2024-25140

    A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification A…

  • Medium 5.5
    CVE-2024-22365

    linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo…

    pam pam pam linux-pam Debian Ubuntu Azure Linux Alpine
  • High 8.2
    CVE-2024-22520

    An issue discovered in Dronetag Drone Scanner 1.5.2 allows attackers to impersonate other drones via transmission of cr…

  • Critical 9.8
    CVE-2024-22852

    D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function genacgi_main. This v…

  • Critical 9.8
    CVE-2024-22853 Public exploit

    D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote …

  • High 8.1
    CVE-2024-22773

    Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in …

  • High 8.8
    CVE-2024-22514 Public exploit

    An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted…

  • High 8.8
    CVE-2024-22515 Public exploit

    Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files …

  • High 8.2
    CVE-2024-22519

    An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted d…