Skip to content
OpenAdvisories

Archive

20 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /20 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-0590 Public exploit

    Microsoft Clarity <= 0.9.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    The Microsoft Clarity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.3. This is due to missing nonce validation on the edit_clarity_project_id() function. This makes it possible for unauthenticated a…

    Microsoft Microsoft Clarity Web / CMS
  • Medium 4.3
    CVE-2024-0379 Public exploit

    Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.1 - Cross-Site Request Forgery to Plugin Options Update

    The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the ctf_auto_save_tokens function…

    smub Custom Twitter Feeds – A Tweets Widget or X Feed Widget Web / CMS
  • High 7.8
    CVE-2024-22369 Public exploit

    Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository

    Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0. Users are recommended to upgrade to version 4.…

    Apache Software Foundation Apache Camel org.apache.camel:camel-sql Maven
  • High 8.6
    CVE-2023-42791 Public exploit

    A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.…

    Fortinet FortiManager FortiAnalyzer Network devices
  • High 7.8
    CVE-2024-26581 Public exploit

    netfilter: nft_set_rbtree: skip end interval element from gc

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval el…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2023-51770 Public exploit

    Apache DolphinScheduler: Arbitrary File Read Vulnerability

    Arbitrary File Read Vulnerability in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.

    Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven
  • Critical 9.8
    CVE-2023-49109 Public exploit

    Remote Code Execution in Apache Dolphinscheduler

    Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.

    Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven