Skip to content
OpenAdvisories

Archive

7 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /7 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-24563

    Vyper array negative index vulnerability

    Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, while they are defined for unsigned integers only. The typechecker doesn't throw when spotting the usage of an `int` as an index for an arra…

    vyperlang vyper vyper PyPI
  • Critical 9.6
    CVE-2024-20254

    Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • Critical 9.6
    CVE-2024-20252

    Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • Critical 9.6
    CVE-2024-25145

    Liferay Portal stored cross-site scripting (XSS) vulnerability

    Stored cross-site scripting (XSS) vulnerability in the Portal Search module's Search Result app in Liferay Portal 7.2.0 through 7.4.3.11, and older unsupported versions, and Liferay DXP 7.4 before update 8, 7.3 before update 4, 7.2 before fix pack 17, and old…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Critical 9.8
    CVE-2024-24811

    Products.SQLAlchemyDA vulnerable to unauthenticated arbitrary SQL query execution

    SQLAlchemyDA is a generic database adapter for ZSQL methods. A vulnerability found in versions prior to 2.2 allows unauthenticated execution of arbitrary SQL statements on the database to which the SQLAlchemyDA instance is connected. All users are affected. T…

    zopefoundation Products.SQLAlchemyDA products-sqlalchemyda PyPI
  • Critical 9.8
    CVE-2023-38995

    An issue in SCHUHFRIED v.8.22.00 allows remote attacker to obtain the database password via crafted curl command.

  • Critical 9.8
    CVE-2023-46914

    SQL Injection vulnerability in RM bookingcalendar module for PrestaShop versions 2.7.9 and before, allows remote attack…

  • Critical 9.8
    CVE-2024-24188

    Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c.

  • Critical 9.8
    CVE-2024-24019

    A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offse…

  • Critical 9.8
    CVE-2024-24133

    Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page.

  • Critical 9.8
    CVE-2024-24303

    SQL Injection vulnerability in HiPresta "Gift Wrapping Pro" (hiadvancedgiftwrapping) module for PrestaShop before versi…

  • Critical 9.8
    CVE-2024-24189

    Jsish v3.5.0 (commit 42c694c) was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c.

  • Critical 9.8
    CVE-2024-24186

    Jsish v3.5.0 (commit 42c694c) was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsis…