Skip to content
OpenAdvisories

Archive

16 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /16 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

52 results · Feed

  • High 8.4
    CVE-2024-0014

    In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic erro…

    Google Android Android
  • Medium 6.5
    CVE-2023-45860

    Hazelcast Platform permission checking in CSV File Source connector

    In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permission checking, which could enable unauthorized clients to access data from files stored on a member'…

    com.hazelcast:hazelcast com.hazelcast:hazelcast-enterprise Maven
  • High 7.5
    CVE-2023-51931

    An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service (DoS) via a crafted payload to th…

  • Medium 6.5
    CVE-2023-49508

    YetiForceCRM Directory Traversal vulnerability

    Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component.

    yetiforce/yetiforce-crm Packagist
  • High 8.1
    CVE-2024-24377

    An issue in idocv v.14.1.3_20231228 allows a remote attacker to execute arbitrary code and obtain sensitive information…

  • High 7.2
    CVE-2024-25415 EPSS 27%

    A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to e…

  • Critical 9.8
    CVE-2024-25414

    An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code v…

  • Critical 9.8
    CVE-2024-25320

    Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /a…

  • Medium 6.3
    CVE-2024-25083

    An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1. When an low-privileged user initia…

  • Critical 9.1
    CVE-2024-25413

    A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 al…

  • High 7.3
    CVE-2024-25466 Public exploit

    React Native Document Picker Directory Traversal vulnerability

    Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component.

    react-native-document-picker npm
  • Medium 4.6
    CVE-2024-22854

    DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6.1.27 (bundle version 6…