Skip to content
OpenAdvisories

Archive

19 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /19 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-1644

    Suite CRM v7.14.2 - RCE via Local File Inclusion

    Suite CRM version 7.14.2 allows including local php files. This is possible because the application is vulnerable to LFI.

    Suite CRM Suite CRM
  • Critical 10.0
    CVE-2024-1651 Public exploit EPSS 34%

    Torrentpier 2.4.1 - RCE

    Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to insecure deserialization.

    torrentpier torrentpier torrentpier/torrentpier Packagist
  • Critical 9.0
    CVE-2023-6260

    Web UI OS Command Injection in Brivo ACS100, ACS300

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Brivo ACS100, ACS300 allows OS Command Injection, Bypassing Physical Security.This issue affects ACS100 (Network Adjacent Access), ACS300 (Physical Acc…

    Brivo ACS100, ACS300
  • Critical 9.7
    CVE-2023-50257 Public exploit

    Disconnect Vulnerability in RTPS Packets Used by SROS2

    eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data (`p[UD]`) and `guid` values used to disconnect between…

    eProsima Fast-DDS fastdds fastdds Debian Ubuntu
  • Critical 10.0
    CVE-2024-1597

    pgjdbc SQL Injection via line comment generation

    pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There mu…

    pgjdbc pgjdbc trino trino-plugin-opensearch Debian Ubuntu Alpine Wolfi Maven
  • Critical 9.1
    CVE-2024-24722

    An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an at…