Skip to content
OpenAdvisories

Archive

22 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /22 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 10.0
    GHSA-97m3-52wr-xvv2

    Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE

    ### Summary A lack of sanitization/check in the font path returned by php-svg-lib, in the case of a inline CSS font defined, that will be used by Cpdf to open a font will be passed to a `file_exists` call, which is sufficient to trigger metadata unserializing…

    phenx/php-svg-lib Packagist
  • Critical 9.8
    CVE-2024-26592

    ksmbd: fix UAF issue in ksmbd_tcp_new_connection()

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF issue in ksmbd_tcp_new_connection() The race is between the handling of a new TCP connection and its disconnection. It leads to UAF on `struct tcp_transport` in ksmbd_tcp_new_c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2023-51389

    HertzBeat SnakeYAML Deser RCE

    Hertzbeat is a real-time monitoring system. At the interface of `/define/yml`, SnakeYAML is used as a parser to parse yml content, but no security configuration is used, resulting in a YAML deserialization vulnerability. Version 1.4.1 fixes this vulnerability.

    dromara hertzbeat
  • Critical 9.8
    CVE-2023-51388

    HertzBeat AviatorScript Inject RCE

    Hertzbeat is a real-time monitoring system. In `CalculateAlarm.java`, `AviatorEvaluator` is used to directly execute the expression function, and no security policy is configured, resulting in AviatorScript (which can execute any static method by default) scr…

    dromara hertzbeat
  • Critical 9.8
    CVE-2023-51653

    Hertzbeat JMX JNDI RCE

    Hertzbeat is a real-time monitoring system. In the implementation of `JmxCollectImpl.java`, `JMXConnectorFactory.connect` is vulnerable to JNDI injection. The corresponding interface is `/api/monitor/detect`. If there is a URL field, the address will be used …

    dromara hertzbeat
  • Critical 9.1
    CVE-2024-22393 Public exploit

    Apache Answer: Pixel Flood Attack by uploading the large pixel file

    Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Pixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by upl…

    Apache Software Foundation Apache Answer github.com/apache/incubator-answer Go
  • Critical 9.8
    CVE-2024-25850 EPSS 19%

    Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameter

  • Critical 9.8
    CVE-2024-25802

    SKINsoft S-Museum 7.02.3 allows Unrestricted File Upload via the Add Media function. Unlike in CVE-2024-25801, the atta…