Skip to content
OpenAdvisories

Archive

11 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /11 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.5
    CVE-2024-1151

    Kernel: stack overflow problem in open vswitch kernel module leading to dos

    A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and ca…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • Medium 6.5
    CVE-2024-21875

    DoS attack when broadcasting billboard messages

    Allocation of Resources Without Limits or Throttling vulnerability in Badge leading to a denial of service attack.Team Hacker Hotel Badge 2024 on risc-v (billboard modules) allows Flooding.This issue affects Hacker Hotel Badge 2024: from 0.1.0 through 0.1.3.

    Badge.team Hacker Hotel Badge 2024
  • Medium 5.0
    CVE-2024-1432

    DeepFaceLab main.py apply_xseg deserialization

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22 and classified as problematic. This issue affects the function apply_xseg of the file main.py. The manipulation leads to deserialization. The attack …

  • Medium 4.3
    CVE-2024-1431

    Netgear R7000 Web Management Interface debuginfo.htm information disclosure

    A vulnerability was found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this issue is some unknown functionality of the file /debuginfo.htm of the component Web Management Interface. The manipulation leads to information disc…

    NETGEAR R7000 Network devices
  • Medium 4.3
    CVE-2024-1430

    Netgear R7000 Web Management Interface currentsetting.htm information disclosure

    A vulnerability has been found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /currentsetting.htm of the component Web Management Interface. The manipulation leads to …

    NETGEAR R7000 Network devices
  • Medium 6.5
    CVE-2024-23724 Public exploit

    Ghost has possible Cross-site Scripting issue

    Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG profile picture that contains JavaScript code to interact with the API on localhost TCP port 3001. NOTE: The discoverer rep…

    ghost npm
  • Medium 6.1
    CVE-2024-25715

    Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirect_uri.

    glewlwyd glewlwyd Debian Ubuntu
  • Medium 6.1
    CVE-2024-25712

    http-swagger before 1.2.6 allows XSS via PUT requests, because a file that has been uploaded (via httpSwagger.WrapHandl…