Skip to content
OpenAdvisories

Archive

24 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /24 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-43051

    IBM Cognos Analytics cross-site scripting

    IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with…

    IBM Cognos Analytics
  • Medium 6.5
    CVE-2022-34357

    IBM Cognos Analytics Mobile Server denial of service

    IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting. By making unlimited http requests, it is possible for a single user to exhaust server resources over a period of t…

    IBM Cognos Analytics
  • Medium 5.3
    CVE-2023-30996

    IBM Cognos Analytics cross-origin resource sharing

    IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins. IBM X-Force ID: 254290.

    IBM Cognos Analytics
  • Medium 4.3
    CVE-2023-32344

    IBM Cognos Analytics cross-site request forgery

    IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path. IBM X-Force ID: 255898.

    IBM Cognos Analytics
  • Medium 6.1
    CVE-2023-38359

    IBM Cognos Analytics cross-site scripting

    IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with…

    IBM Cognos Analytics
  • Medium 4.3
    CVE-2024-1165

    Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal

    The Brizy – Page Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.39 via the 'id'. This makes it possible for authenticated attackers, with contributor-level access and above, to upload files to arbit…

    themefusecom Brizy – Page Builder Web / CMS
  • Medium 5.4
    CVE-2024-1758

    SuperFaktura WooCommerce <= 1.40.3 - Authenticated (Subscriber+) Blind Server-Side Request Forgery

    The SuperFaktura WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.40.3 via the wc_sf_url_check function. This makes it possible for authenticated attackers, with subscriber-level access and …

    superfaktura SuperFaktura WooCommerce Web / CMS
  • Medium 5.3
    CVE-2024-21501

    sanitize-html Information Exposure vulnerability

    Versions of the package sanitize-html before 2.12.1 are vulnerable to Information Exposure when used on the backend and with the style attribute allowed, allowing enumeration of files in the system (including project dependencies). An attacker could exploit t…

    jupyter-base-notebook py3.13-jupyterlab py3.10-jupyterlab py3.12-jupyterlab Debian Ubuntu Wolfi npm
  • Medium 6.1
    CVE-2024-1810

    Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting

    The Archivist – Custom Archive Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘shortcode_attributes' parameter in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This…

    eteubert Archivist – Custom Archive Templates Web / CMS