Skip to content
OpenAdvisories

Archive

22 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /22 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

105 results · Feed

  • High 8.0
    CVE-2024-25851

    Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter i…

  • Medium 4.6
    CVE-2024-25801

    SKINsoft S-Museum 7.02.3 allows XSS via the filename of an uploaded file. Unlike in CVE-2024-25802, the attack payload …

  • Critical 9.8
    CVE-2024-25802

    SKINsoft S-Museum 7.02.3 allows Unrestricted File Upload via the Add Media function. Unlike in CVE-2024-25801, the atta…

  • High 8.8
    CVE-2024-25753

    Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote …

  • Medium 6.1
    CVE-2024-25369

    A reflected Cross-Site Scripting (XSS) vulnerability in FUEL CMS 1.5.2allows attackers to run arbitrary code via crafte…

  • High 8.0
    CVE-2024-25756

    A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remot…

  • High 7.0
    CVE-2024-25423 Public exploit

    An issue in MAXON CINEMA 4D R2024.2.0 allows a local attacker to execute arbitrary code via a crafted c4d_base.xdl64 fi…

  • Medium 6.1
    CVE-2024-25875

    Enhavo Cross-site Scripting vulnerability

    A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Undertitle text field.

    enhavo/enhavo-app Packagist
  • High 8.8
    CVE-2024-25748

    A Stack Based Buffer Overflow vulnerability in tenda AC9 AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a r…

  • Medium 6.1
    CVE-2024-25876

    Enhavo Cross-site Scripting vulnerability

    A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field.

    enhavo/enhavo-app Packagist
  • Medium 4.9
    CVE-2024-25828

    cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/template_admin.php.

  • Medium 5.4
    CVE-2024-25873

    Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author text field under the Blockquote …

  • Medium 4.7
    CVE-2024-22547

    WayOS IBR-7150 <17.06.23 is vulnerable to Cross Site Scripting (XSS).

  • High 7.1
    CVE-2024-26482

    An HTML injection vulnerability exists in the Edit Content Layout module of Kirby CMS v4.1.0. NOTE: the vendor disputes…

  • Medium 4.3
    CVE-2024-26349

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_tr…

  • Medium 6.1
    CVE-2024-26351

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_pl…

  • Medium 5.4
    CVE-2024-26490

    A cross-site scripting (XSS) vulnerability in the Addon JD Simple module of flusity-CMS v2.33 allows attackers to execu…

  • High 8.8
    CVE-2024-26350

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_co…

  • Medium 6.1
    CVE-2024-26491

    A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Media Gallery with description' module of flusity-C…

  • Medium 6.1
    CVE-2024-26489

    A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Social block links' module of flusity-CMS v2.33 all…

  • High 8.8
    CVE-2024-26483

    Kirby vulnerable to unrestricted file upload of user avatar images

    An arbitrary file upload vulnerability in the Profile Image module of Kirby CMS v4.1.0 allows attackers to execute arbitrary code via a crafted PDF file.

    getkirby/cms Packagist
  • Medium 6.1
    CVE-2024-26484

    A stored cross-site scripting (XSS) vulnerability in the Edit Content Layout module of Kirby CMS v4.1.0 allows attacker…

  • High 8.8
    CVE-2024-26352

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_place…

  • Medium 6.1
    CVE-2024-26445

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_pl…

  • Medium 4.7
    CVE-2024-26481

    Kirby vulnerable to self cross-site scripting (self-XSS) in the URL field

    Kirby CMS v4.1.0 was discovered to contain a reflected self-XSS vulnerability via the URL parameter.

    getkirby/cms Packagist