Skip to content
OpenAdvisories

Archive

21 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /21 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

145 results · Feed

  • Critical 9.8
    CVE-2023-51828

    A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauth…

  • Critical 9.8
    CVE-2023-37177

    SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute …

  • Medium 4.4
    CVE-2023-49100

    Trusted Firmware-A (TF-A) before 2.10 has a potential read out-of-bounds in the SDEI service. The input parameter passe…

    arm-trusted-firmware arm-trusted-firmware arm-trusted-firmware Debian Ubuntu Alpine
  • Medium 5.4
    CVE-2022-45179

    An issue was discovered in LIVEBOX Collaboration vDesk through v031. A basic XSS vulnerability exists under the /api/v1…

  • Medium 5.9
    CVE-2022-45169

    An issue was discovered in LIVEBOX Collaboration vDesk through v031. A URL Redirection to an Untrusted Site (Open Redir…

  • High 7.5
    CVE-2022-45177

    An issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response Discrepancy can occur under…

  • High 7.5
    CVE-2024-24476

    A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_reso…

    wireshark Azure Linux
  • High 7.5
    CVE-2024-24478

    An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_…

    wireshark Azure Linux
  • High 7.5
    CVE-2024-24479

    A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str…

    wireshark Azure Linux
  • Critical 9.8
    CVE-2024-25249

    An issue in He3 App for macOS version 2.0.17, allows remote attackers to execute arbitrary code via the RunAsNode and e…

  • High 7.5
    CVE-2024-25891

    ChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET paramet…

  • Medium 6.1
    CVE-2024-25898

    A XSS vulnerability was found in the ChurchCRM v.5.5.0 functionality, edit your event, where malicious JS or HTML code …

  • Critical 9.8
    CVE-2024-25897 Public exploit

    ChurchCRM 5.5.0 FRCatalog.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET parameter.

  • High 7.5
    CVE-2024-25461

    Directory Traversal vulnerability in Terrasoft, Creatio Terrasoft CRM v.7.18.4.1532 allows a remote attacker to obtain …

  • Medium 4.9
    CVE-2024-25288

    SLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php.

  • Medium 6.1
    CVE-2024-25895

    A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 5.5.0 allows remote attackers to inject arbitrary web…

  • Critical 9.1
    CVE-2024-25893

    ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET para…

  • Critical 9.8
    CVE-2024-25894

    ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the EventCount POST parameter.

  • High 8.1
    CVE-2024-25892

    ChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection (Time-based) via the familyId GET parameter.

  • Medium 6.1
    CVE-2024-25381 Public exploit

    There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content.

  • Medium 5.3
    CVE-2024-25896

    ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the EID POST parameter.

  • High 7.5
    CVE-2024-22778

    HackMD CodiMD <2.5.2 is vulnerable to Denial of Service.

  • Medium 6.3
    CVE-2024-22220

    An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINA…

  • Medium 5.7
    CVE-2024-26311

    Archer Platform 6.x before 6.14 P2 HF1 (6.14.0.2.1) contains a reflected XSS vulnerability. A remote authenticated mali…

  • Medium 4.3
    CVE-2024-26310

    Archer Platform 6.8 before 6.14 P2 (6.14.0.2) contains an improper access control vulnerability. A remote authenticated…