Skip to content
OpenAdvisories

Archive

21 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /21 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

145 results · Feed

  • Low 2.4
    CVE-2023-50955

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777.

    IBM InfoSphere Information Server
  • Medium 5.4
    CVE-2023-33843

    IBM InfoSphere Information Server cross-site scripting

    IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trus…

    IBM InfoSphere Information Server
  • Critical 9.0
    CVE-2023-47795

    Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting

    Stored cross-site scripting (XSS) vulnerability in the Document and Media widget in Liferay Portal 7.4.3.18 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 18 through 92 allows remote authenticated users to inject arbitrary web scrip…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • High 8.4
    CVE-2023-7235

    The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation d…

    OpenVPN OpenVPN openvpn Wolfi
  • Medium 4.3
    CVE-2024-24798

    WordPress Debug Plugin <= 1.10 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10.

    SoniNow Team Debug
  • Medium 4.3
    CVE-2024-24802

    WordPress JTRT Responsive Tables Plugin <= 4.1.9 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in John Tendik JTRT Responsive Tables.This issue affects JTRT Responsive Tables: from n/a through 4.1.9.

    John Tendik JTRT Responsive Tables
  • Critical 9.1
    CVE-2023-52441

    ksmbd: fix out of bounds in init_smb2_rsp_hdr()

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds in init_smb2_rsp_hdr() If client send smb2 negotiate request and then send smb1 negotiate request, init_smb2_rsp_hdr is called for smb1 negotiate request since need_n…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.1
    CVE-2023-52442 EPSS 30%

    ksmbd: validate session id and tree id in compound request

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in compound request `smb2_get_msg()` in smb2_get_ksmbd_tcon() and smb2_check_user_session() will always return the first request smb2 header in a compou…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2023-52440 Public exploit EPSS 22%

    ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() If authblob->SessionKey.Length is bigger than session key size(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes. cif…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.3
    CVE-2024-24837

    Cross-Site Request Forgery (CSRF) vulnerability in FG PrestaShop, FG Drupal and FG Joomla WordPress plugins

    Cross-Site Request Forgery (CSRF) vulnerability in Frédéric GILLES FG PrestaShop to WooCommerce, Frédéric GILLES FG Drupal to WordPress, Frédéric GILLES FG Joomla to WordPress.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.44.3; FG Drupal…

    Frédéric GILLES FG Drupal to WordPress FG PrestaShop to WooCommerce FG Joomla to WordPress Web / CMS
  • High 7.1
    CVE-2024-24843

    WordPress PowerPack Pro for Elementor Plugin < 2.10.8 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in PowerPack Addons for Elementor PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a before 2.10.8.

    PowerPack Addons for Elementor PowerPack Pro for Elementor
  • Medium 4.3
    CVE-2024-24849

    WordPress Quicksand Post Filter jQuery Plugin Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Mark Stockton Quicksand Post Filter jQuery Plugin.This issue affects Quicksand Post Filter jQuery Plugin: from n/a through 3.1.1.

    Mark Stockton Quicksand Post Filter jQuery Plugin
  • Medium 4.3
    CVE-2024-24872

    WordPress Themify Builder Plugin <= 7.0.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Themify Themify Builder.This issue affects Themify Builder: from n/a through 7.0.5.

    Themify Themify Builder
  • Medium 4.3
    CVE-2024-24876

    WordPress Admin Menu Editor Plugin <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Janis Elsts Admin Menu Editor.This issue affects Admin Menu Editor: from n/a through 1.12.

    Janis Elsts Admin Menu Editor
  • Medium 4.3
    CVE-2024-25904

    WordPress TinyMCE Professional Formats and Styles Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in David Stockl TinyMCE and TinyMCE Advanced Professsional Formats and Styles.This issue affects TinyMCE and TinyMCE Advanced Professsional Formats and Styles: from n/a through 1.1.2.

    David Stockl TinyMCE and TinyMCE Advanced Professsional Formats and Styles
  • Medium 5.3
    CVE-2024-0593 Scanner template

    Simple Job Board <= 2.10.8 - Missing Authorization to Unauthenticated Information Disclosure

    The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the fetch_quick_job() function in all versions up to, and including, 2.10.8. This makes it possible for unauthenticated attac…

    PressTigers Simple Job Board Web / CMS
  • Medium 6.4
    CVE-2024-1081

    3D FlipBook – PDF Flipbook WordPress <= 1.15.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Bookmarks

    The 3D FlipBook – PDF Flipbook WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bookmark feature in all versions up to, and including, 1.15.3 due to insufficient input sanitization and output escaping. This makes it…

    iberezansky 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery Web / CMS
  • Medium 5.4
    CVE-2024-25905

    WordPress Multi Step Form Plugin <= 1.7.18 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form.This issue affects Multi Step Form: from n/a through 1.7.18.

    Mondula Multi Step Form
  • High 7.8
    CVE-2023-42848

    The issue was addressed with improved bounds checks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1,…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 7.8
    CVE-2023-42873

    The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.1, tvOS 17.1, macOS Montere…

    Apple macOS iOS and iPadOS tvOS macOS iOS
  • Medium 5.5
    CVE-2023-42853

    A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macO…

    Apple macOS macOS
  • Low 2.7
    CVE-2023-42823

    The issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, macOS M…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 5.5
    CVE-2023-42835

    A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to …

    Apple macOS macOS
  • Medium 5.5
    CVE-2023-42858

    The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ve…

    Apple macOS macOS
  • Medium 5.5
    CVE-2023-42878

    A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 10.1…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 6.2
    CVE-2023-42839

    This issue was addressed with improved state management. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 1…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 7.5
    CVE-2023-42946

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17.1, watchOS 10…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 4.6
    CVE-2023-42855

    This issue was addressed with improved state management. This issue is fixed in iOS 17.1 and iPadOS 17.1. An attacker w…

    Apple iOS and iPadOS iOS
  • Medium 4.3
    CVE-2023-42951

    The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.1 and iPadOS 17.1. A user may b…

    Apple iOS and iPadOS iOS
  • High 7.5
    CVE-2023-42843

    An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 an…

    Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  • High 8.2
    CVE-2023-42838

    An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Ventura 13.6.3, macOS Sono…

    Apple macOS macOS
  • High 7.7
    CVE-2023-42859

    The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ve…

    Apple macOS macOS
  • Medium 6.2
    CVE-2023-42834

    A privacy issue was addressed with improved handling of files. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, …

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 7.7
    CVE-2023-42860 Public exploit

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Montere…

    Apple macOS macOS
  • Medium 4.4
    CVE-2023-42952

    The issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, ma…

    Apple macOS iOS and iPadOS macOS iOS
  • Medium 4.3
    CVE-2023-42840

    The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ve…

    Apple macOS macOS
  • High 8.4
    CVE-2023-42928

    The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.1 and iPadOS 17.1. An app may be abl…

    Apple iOS and iPadOS iOS
  • Medium 5.5
    CVE-2023-42953

    A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS S…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Critical 9.1
    CVE-2023-42945

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1. An app may ga…

    Apple macOS macOS
  • High 7.7
    CVE-2023-42877

    The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ve…

    Apple macOS macOS