Skip to content
OpenAdvisories

Archive

20 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /20 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

127 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-49034

    Cross Site Scripting (XSS) vulnerability in ProjeQtOr 11.0.2 allows a remote attacker to execute arbitrary code via a c…

  • Medium 6.3
    CVE-2022-45320

    Privilege escalation in Liferay Portal

    Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix pack 19, 7.3 before update 6, and 7.4 before update 16 allow remote authenticated users to become the owner of a wiki page by editing the wiki page.

    com.liferay.portal:release.portal.bom Maven
  • Medium 6.5
    CVE-2024-25428

    SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter.

  • Medium 4.0
    CVE-2024-25260

    elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.

    elfutils elfutils elfutils Debian Ubuntu Azure Linux
  • Medium 6.5
    CVE-2024-25197

    Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer der…

  • Medium 6.2
    CVE-2024-25366

    Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of ser…

  • Medium 6.3
    CVE-2021-29038

    Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers

    Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-th…

    com.liferay.portal:release.dxp.bom com.liferay:com.liferay.login.web com.liferay:com.liferay.users.admin.web com.liferay.portal:portal-impl Maven