Skip to content
OpenAdvisories

Archive

February 2024

Vulnerabilities first published in this month (UTC), newest first.

← January 2024 2024 / February March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

133 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-51504 Public exploit

    WordPress Dan's Embedder for Google Calendar Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Dulaney Dan's Embedder for Google Calendar allows Stored XSS.This issue affects Dan's Embedder for Google Calendar: from n/a through 1.2.

    Dan Dulaney Dan's Embedder for Google Calendar
  • High 7.5
    CVE-2023-47355 Public exploit

    The com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed bro…

  • Medium 5.4
    CVE-2024-24397 Public exploit

    Stimulsoft Dashboard.JS Cross Site Scripting vulnerability

    Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the ReportName field.

    stimulsoft-dashboards-js npm
  • Medium 6.1
    CVE-2024-24396 Public exploit

    Stimulsoft Dashboard.JS Cross Site Scripting vulnerability

    Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the search bar component.

    stimulsoft-dashboards-js npm
  • Medium 5.4
    CVE-2023-49950 Public exploit

    The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being displa…

  • High 8.0
    CVE-2023-47564 Public exploit

    Qsync Central

    An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerabi…

    QNAP Systems Qsync Central
  • High 8.8
    CVE-2024-24760 Public exploit

    Mailcow Docker Container Exposure to Local Network

    mailcow is a dockerized email package, with multiple containers linked in one bridged network. A security vulnerability has been identified in mailcow affecting versions < 2024-01c. This vulnerability potentially allows attackers on the same subnet to connect…

    mailcow mailcow-dockerized
  • High 7.5
    CVE-2023-6387 Public exploit

    Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow

    A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a denial of service or remote code execution

    silabs.com GSDK
  • Medium 5.4
    CVE-2023-46344 Public exploit

    A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an at…

  • Critical 9.8
    CVE-2024-23746 Public exploit

    Miro Desktop 0.8.18 on macOS allows local Electron code injection via a complex series of steps that might be usable in…

  • High 8.8
    CVE-2024-22899 Public exploit

    Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via…

  • Medium 6.1
    CVE-2024-24945 Public exploit

    A stored cross-site scripting (XSS) vulnerability in Travel Journal Using PHP and MySQL with Source Code v1.0 allows at…

  • High 8.8
    CVE-2024-22939 Public exploit

    Cross Site Request Forgery vulnerability in FlyCms v.1.0 allows a remote attacker to execute arbitrary code via the sys…