Skip to content
OpenAdvisories

Archive

11 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /11 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2023-52428

    Denial of Service in Connect2id Nimbus JOSE+JWT

    In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

    druid thingsboard-tb-node thingsboard-tb-mqtt-transport tez Wolfi Maven
  • High 8.8
    CVE-2024-25418

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_me…

  • High 7.1
    CVE-2024-25711

    diffoscope Path Traversal vulnerability

    diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted.

    diffoscope diffoscope diffoscope diffoscope Debian Ubuntu Alpine PyPI
  • High 7.5
    CVE-2024-25728

    ExpressVPN before 12.73.0 on Windows, when split tunneling is used, sends DNS requests according to the Windows configu…

  • High 8.8
    CVE-2024-25417

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_trans…

  • High 8.6
    CVE-2024-25713

    yyjson has a Double Free vulnerability

    yyjson through 0.8.0 has a double free, leading to remote code execution in some cases, because the pool_free function lacks loop checks. (pool_free is part of the pool series allocator, along with pool_malloc and pool_realloc.)

    github.com/ibireme/yyjson SwiftURL
  • High 8.8
    CVE-2024-25419

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_me…