Archive

13 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /13 March 2024 →

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

Medium 6.0

CVE-2023-31346 Public exploit

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

AMD 3rd Gen AMD EPYC™ Processors 4th Gen AMD EPYC™ Processors linux-firmware Ubuntu

Feb 13, 2024
High 8.1

CVE-2024-21412 Exploited · Ransomware Public exploit EPSS 99%

Internet Shortcut Files Security Feature Bypass Vulnerability

Internet Shortcut Files Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 13, 2024
KEV Feb 13, 2024
High 8.8

CVE-2024-21378 Public exploit EPSS 11%

Microsoft Outlook Remote Code Execution Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Feb 13, 2024
High 8.8

CVE-2024-21345 Public exploit EPSS 20%

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) Windows

Feb 13, 2024
Critical 9.8

CVE-2024-21413 Exploited Public exploit EPSS 95%

Microsoft Outlook Remote Code Execution Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Feb 13, 2024
KEV Feb 6, 2025
High 7.8

CVE-2024-21338 Exploited · Ransomware Public exploit EPSS 62%

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 13, 2024
KEV Mar 4, 2024
High 8.3

CVE-2024-22024 Public exploit Scanner template EPSS 95%

An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy S…

ivanti Ivant ICS IPS Network devices

Feb 13, 2024
Medium 5.8

CVE-2023-47218 Public exploit Scanner template EPSS 90%

QTS, QuTS hero, QuTScloud

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: Q…

QNAP Systems QTS QuTS hero QuTScloud

Feb 13, 2024
Medium 6.5

CVE-2023-49339 Public exploit

Ellucian Banner 9.17 allows Insecure Direct Object Reference (IDOR) via a modified bannerId to the /StudentSelfService/…

Feb 13, 2024
Critical 9.8

CVE-2024-24142 Public exploit

Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.

Feb 13, 2024