Skip to content
OpenAdvisories

Archive

10 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /10 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.0
    CVE-2023-50957

    IBM Storage Defender - Resiliency Service privilege escalation

    IBM Storage Defender - Resiliency Service 2.0 could allow a privileged user to perform unauthorized actions after obtaining encrypted data from clear text key storage. IBM X-Force ID: 275783.

    IBM Storage Defender - Resiliency Service
  • High 7.1
    CVE-2023-51488

    WordPress Crowdsignal Dashboard – Polls, Surveys & more Plugin <= 3.0.11 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic, Inc. Crowdsignal Dashboard – Polls, Surveys & more allows Reflected XSS.This issue affects Crowdsignal Dashboard – Polls, Surveys & more: from n/…

    Automattic Crowdsignal Dashboard – Polls, Surveys & more
  • High 8.8
    CVE-2024-0594

    Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection

    The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to union-based SQL Injection via the 'q' parameter of the wpas_get_users action in all versions up to, and including, 6.1.7 due to insufficient escaping on the user s…

    Awesome Support Awesome Support – WordPress HelpDesk & Support Plugin Web / CMS
  • High 7.5
    CVE-2024-21490 Public exploit

    angular vulnerable to super-linear runtime due to backtracking

    This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-craf…

    angular.js angular.js angular org.webjars.bower:angular Debian Ubuntu npm Maven