February 2024

11 results · Clear filters · Feed

• Critical 10.0
  CVE-2024-1212 Exploited Public exploit Scanner template EPSS 95%

  LoadMaster Pre-Authenticated OS Command Injection

  Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

  Progress Software LoadMaster
  Feb 21, 2024

  KEV Nov 18, 2024
• Critical 10.0
  CVE-2024-1709 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Authentication bypass using an alternate path or channel

  ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.

  ConnectWise ScreenConnect
  Feb 21, 2024

  KEV Feb 22, 2024
• High 8.4
  CVE-2024-1708 Exploited · Ransomware Public exploit Scanner template EPSS 95%

  Improper limitation of a pathname to a restricted directory (“path traversal”)

  ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.

  ConnectWise ScreenConnect
  Feb 21, 2024

  KEV Apr 28, 2026
• High 8.8
  CVE-2024-20953 Exploited

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is…

  Oracle Agile PLM Framework
  Feb 17, 2024

  KEV Feb 24, 2025
• Critical 9.8
  CVE-2024-23113 Exploited Public exploit EPSS 62%

  A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0…

  Fortinet FortiOS FortiProxy FortiPAM Network devices
  Feb 15, 2024

  KEV Oct 9, 2024
• High 8.1
  CVE-2024-21412 Exploited · Ransomware Public exploit EPSS 99%

  Internet Shortcut Files Security Feature Bypass Vulnerability

  Internet Shortcut Files Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 13, 2024

  KEV Feb 13, 2024
• Critical 9.8
  CVE-2024-21410 Exploited EPSS 13%

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 14 Microsoft Exchange Server 2019 Cumulative Update 13
  Feb 13, 2024

  KEV Feb 15, 2024
• Critical 9.8
  CVE-2024-21413 Exploited Public exploit EPSS 95%

  Microsoft Outlook Remote Code Execution Vulnerability

  Microsoft Outlook Remote Code Execution Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019
  Feb 13, 2024

  KEV Feb 6, 2025
• High 7.6
  CVE-2024-21351 Exploited EPSS 28%

  Windows SmartScreen Security Feature Bypass Vulnerability

  Windows SmartScreen Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2022 Windows
  Feb 13, 2024

  KEV Feb 13, 2024
• High 7.8
  CVE-2024-21338 Exploited · Ransomware Public exploit EPSS 62%

  Windows Kernel Elevation of Privilege Vulnerability

  Windows Kernel Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 13, 2024

  KEV Mar 4, 2024
• Critical 9.6
  CVE-2024-21762 Exploited · Ransomware Public exploit EPSS 85%

  A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0…

  Fortinet FortiOS FortiProxy Network devices
  Feb 9, 2024

  KEV Feb 9, 2024