Archive
February 2024
Vulnerabilities first published in this month (UTC), newest first.
898 results · Clear filters · Feed
-
High 8.1
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue.
-
High 7.5
Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by a…
-
High 7.8
close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.
-
High 8.0
ipm: signed to unsigned conversion problem in esp32_ipm_send
Signed to unsigned conversion esp32_ipm_send
-
High 8.0
Unchecked user input length in the Zephyr Settings Shell
Unchecked length coming from user input in settings shell
-
High 7.5
Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affec…
-
High 7.4
Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerabilit…
-
High 7.5
Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect ser…
-
High 7.5
Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may aff…
-
High 7.5
Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerabi…
-
High 7.5
Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may aff…
-
High 7.7
Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may …
-
High 7.5
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability…
-
High 7.7
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability…
-
High 7.5
Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect …
-
High 7.5
The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulner…
-
High 7.5
Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.
-
High 7.5
Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulne…
-
High 7.5
Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confid…
-
High 7.1
IBM Spectrum Scale security bypass
IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.7.0 could allow a local attacker to initiate connections from a container outside the current namespace. IBM X-Force ID: 237811.
-
High 7.5
IBM Spectrum Scale security bypass
IBM Storage Scale Container Native Storage Access 5.1.2.1 -through 5.1.7.0 could allow an attacker to initiate connections to containers from external networks. IBM X-Force ID: 237812.
-
High 7.3
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: I…
-
High 8.8CVE-2024-20953 Exploited
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is…
KEV Feb 24, 2025 -
High 7.5
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…
-
High 8.6
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…
-
High 7.5
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Log Manag…
-
High 7.5
Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected a…
-
High 7.0
Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services a…
-
High 7.5
An issue in TOTOLINK X5000R V.9.1.0u.6369_B20230113 allows a remote attacker to cause a denial of service via the host_…
-
High 7.2
Code injection in REDAXO
An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php.
-
High 8.3
Teltonika TRB1-series devices with firmware before TRB1_R_00.07.05.2 allow attackers to exploit a firmware vulnerabilit…
-
High 7.6
Insufficient Session Expiration in alf.io
Alf.io is a free and open source event attendance management system. In versions prior to 2.0-M4-2402 users can access the admin area even after being invalidated/deleted. This issue has been addressed in version 2.0-M4-2402. All users are advised to upgrade.…
-
High 7.4CVE-2024-0023 Public exploit
In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds c…
-
High 8.4
In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer over…
-
High 7.0
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to e…
-
High 8.3
GitHub Security Lab (GHSL) Vulnerability Report, scrypted: `GHSL-2023-218`, `GHSL-2023-219`
# GitHub Security Lab (GHSL) Vulnerability Report, scrypted: `GHSL-2023-218`, `GHSL-2023-219` The [GitHub Security Lab](https://securitylab.github.com) team has identified potential security vulnerabilities in [scrypted](https://github.com/koush/scrypted). We…
-
High 8.4
In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This …
-
High 7.8CVE-2024-0015 Public exploit
In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to…
-
High 8.3
SQL Injection
Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature.
-
High 7.2
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticate…