Skip to content
OpenAdvisories

Archive

27 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /27 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

55 results · Clear filters · Feed

  • Medium 5.5
    CVE-2021-46920

    dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback

    In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback Current code blindly writes over the SWERR and the OVERFLOW bits. Write back the bits actually read instead so the driver av…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.4
    CVE-2024-1687

    Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution

    The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to unauthorized execution of shortcodes due to a missing capability check on the get_text_editor_content() function in all versions up to, and including, 1.…

    villatheme Thank You Page Customizer for WooCommerce – Increase Your Sales Web / CMS
  • Medium 4.3
    CVE-2024-1686

    Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Data Export

    The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to missing authorization e in all versions up to, and including, 1.1.2 via the apply_layout function due to a missing capability check. This makes it possib…

    villatheme Thank You Page Customizer for WooCommerce – Increase Your Sales Web / CMS
  • Medium 6.4
    CVE-2024-1323

    Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post Type Grid Widget Title in all versions up to, and including, 2.10.30 due to insufficient input sanitization and output escaping on user supplied…

    themeisle Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More Web / CMS
  • Medium 5.3
    CVE-2023-7033

    Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU…

    Mitsubishi Electric CC-Link IE TSN Remote I/O module NZ2GN2S1-16TE CC-Link IE TSN Remote I/O module NZ2GN2B1-32T CC-Link IE TSN Remote I/O module NZ2GN2B1-16T ICS / OT
  • Medium 5.3
    CVE-2024-24720

    An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information…

  • Medium 5.4
    CVE-2024-24099

    Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update.

  • Medium 6.1
    CVE-2024-25166

    Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfi…

  • Medium 5.9
    CVE-2024-25841

    In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop < 4.1.26, a guest (authenticated cus…

  • Medium 6.1
    CVE-2024-25399

    Subrion CMS vulnerable to Cross Site Scripting

    Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting (XSS) via adminer.php.

    intelliants/subrion Packagist
  • Medium 6.1
    CVE-2024-22543

    An issue was discovered in Linksys Router E1700 1.0.04 (build 3), allows authenticated attackers to escalate privileges…

  • Medium 6.1
    CVE-2024-26542

    Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14. and fixed in v.9.0.2, 8.0.3, 7.15.7, 7.14.8 allows attack…

  • Medium 6.1
    CVE-2024-26473

    A reflected cross-site scripting (XSS) vulnerability in SocialMediaWebsite v1.0.1 allows attackers to inject malicious …

  • Medium 5.4
    CVE-2024-26471

    A reflected cross-site scripting (XSS) vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious Java…

  • Medium 6.1
    CVE-2024-26472

    KLiK SocialMediaWebsite version 1.0.1 from msaad1999 has a reflected cross-site scripting (XSS) vulnerability which may…