Skip to content
OpenAdvisories

Archive

9 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /9 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 2.0
    CVE-2024-1247 Public exploit

    Concrete CMS version 9 before 9.2.5 vulnerable to stored XSS via the Role Name field

    Concrete CMS version 9 before 9.2.5 is vulnerable to  stored XSS via the Role Name field since there is insufficient validation of administrator provided data for that field. A rogue administrator could inject malicious code into the Role Name field which mig…

    Concrete CMS Concrete CMS concrete5/concrete5 Packagist
  • High 8.8
    CVE-2023-50386 Public exploit EPSS 84%

    Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

    Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.…

    Apache Software Foundation Apache Solr org.apache.solr:solr-core lucene-solr Debian Maven
  • Critical 9.6
    CVE-2024-21762 Exploited · Ransomware Public exploit EPSS 85%

    A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0…

    Fortinet FortiOS FortiProxy Network devices
    KEV Feb 9, 2024
  • Medium 5.1
    CVE-2024-22318 Public exploit

    IBM i Access Client Solutions information disclosure

    IBM i Access Client Solutions (ACS) 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.4 is vulnerable to NT LAN Manager (NTLM) hash disclosure by an attacker modifying UNC capable paths within ACS configuration files to point to a hostile server. If NTLM is enabl…

    IBM i Access Client Solutions
  • High 7.8
    CVE-2024-23749 Public exploit

    KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insuffi…

  • High 7.8
    CVE-2024-25004 Public exploit

    KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the username, occurs due to insu…

  • High 7.8
    CVE-2024-25003 Public exploit

    KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the hostname, occurs due to insu…