Skip to content
OpenAdvisories

Archive

26 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /26 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.8
    CVE-2019-25162 Public exploit

    i2c: Fix a potential use after free

    In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure only after we are done using it. This patch just moves the put_device() down a bit to avoid the use after free. [wsa: added comment…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • None 0.0
    CVE-2024-27088 Public exploit

    es5-ext Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`

    es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into `function#copy` or `function#toStringTokens` may cause the script to stall. The vulnerability is patched in v0.10.63.

    medikoo es5-ext es5-ext node-es5-ext Debian Ubuntu npm
  • Low 2.9
    CVE-2024-22371 Public exploit

    Apache Camel issue on ExchangeCreatedEvent

    Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that exposes sensitive data. Vulnerability in Apache Camel.This issue affects Apache Camel: from 3.21.X through 3.21.3, from 3.22.X through 3.22.0, …

    Apache Software Foundation Apache Camel org.apache.camel:camel-core Maven
  • Critical 9.8
    CVE-2024-24401 Public exploit EPSS 46%

    SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted pay…

  • Critical 9.8
    CVE-2024-24402 Public exploit

    An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/…

  • Medium 6.5
    CVE-2024-25082 Public exploit

    Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.

    fontforge fontforge fontforge-doc Debian Ubuntu Wolfi
  • Medium 4.2
    CVE-2024-25081 Public exploit

    Splinefont in FontForge through 20230101 allows command injection via crafted filenames.

    fontforge fontforge fontforge-doc Debian Ubuntu Wolfi