Skip to content
OpenAdvisories

Archive

21 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /21 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-1212 Exploited Public exploit Scanner template EPSS 95%

    LoadMaster Pre-Authenticated OS Command Injection

    Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

    Progress Software LoadMaster
    KEV Nov 18, 2024
  • Critical 9.4
    CVE-2024-23346 Public exploit

    pymatgen arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string

    Pymatgen (Python Materials Genomics) is an open-source Python library for materials analysis. A critical security vulnerability exists in the `JonesFaithfulTransformation.from_transformation_str()` method within the `pymatgen` library prior to version 2024.2.…

    materialsproject pymatgen pymatgen pymatgen Debian Ubuntu PyPI
  • Critical 10.0
    CVE-2024-1709 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Authentication bypass using an alternate path or channel

    ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.

    ConnectWise ScreenConnect
    KEV Feb 22, 2024
  • High 8.4
    CVE-2024-1708 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    Improper limitation of a pathname to a restricted directory (“path traversal”)

    ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.

    ConnectWise ScreenConnect
    KEV Apr 28, 2026
  • Critical 9.8
    CVE-2023-52440 Public exploit EPSS 22%

    ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() If authblob->SessionKey.Length is bigger than session key size(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes. cif…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.7
    CVE-2023-42860 Public exploit

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Montere…

    Apple macOS macOS
  • Critical 9.8
    CVE-2024-25897 Public exploit

    ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter.

  • Medium 6.1
    CVE-2024-25381 Public exploit

    There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content.