Skip to content
OpenAdvisories

Archive

26 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /26 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.7
    CVE-2024-24564

    Vyper extract32 can ready dirty memory

    Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has for side effect to update `b`, the byte array to extract `32` bytes from, it could be that some dirt…

    vyperlang vyper vyper PyPI
  • Low 3.7
    CVE-2024-26149

    Vyper _abi_decode Memory Overflow

    Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an array in `_abi_decode`, it can cause the read position to overflow. This results in the decoding of values ou…

    vyperlang vyper vyper PyPI
  • Low —
    GHSA-p4m5-32pr-2hqr

    PyPop C extensions possible vulnerability: missing arguments and redundant null pointers

    ### Impact Code scanning revealed possible vulnerability in C extensions for PyPop: incorrect function calls (missing arguments or wrongly typed arguments) and redundant null pointers. ### Patches The problem has been patched and fixed in the latest release o…

    pypop-genomics PyPI
  • Low 2.9
    CVE-2024-22371 Public exploit

    Apache Camel issue on ExchangeCreatedEvent

    Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that exposes sensitive data. Vulnerability in Apache Camel.This issue affects Apache Camel: from 3.21.X through 3.21.3, from 3.22.X through 3.22.0, …

    Apache Software Foundation Apache Camel org.apache.camel:camel-core Maven
  • Low 3.0
    CVE-2024-1886

    Absolute path traversal attack on LG Signage

    This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.

    LG Electronics LG Signage