CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- flatpress, flatpressblog flatpressblog/flatpress +1 moreCross-site Scripting (XSS) - Stored in flatpressblog/flatpress6.5 Medium
- flatpress, flatpressblog flatpressblog/flatpress +1 moreCross-site Scripting (XSS) - Stored in flatpressblog/flatpress6.5 Medium
- flatpress, flatpressblog flatpressblog/flatpress +1 moreCross-site Scripting (XSS) - Generic in flatpressblog/flatpress5.4 Medium
- linux kernelA flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was...7.8 High
- flatpress, flatpressblog flatpressblog/flatpress +1 moreCross-site Scripting (XSS) - Stored in flatpressblog/flatpress6.5 Medium
- flatpress, flatpressblog flatpressblog/flatpress +1 moreCross-site Scripting (XSS) - Reflected in flatpressblog/flatpress5.3 Medium
- sonicwall sonicosSonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an...8.8 High
- linux kernelA flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The...7.8 High
- sonicwall sonicosA Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated...7.5 High
- accruent maintenance connectionAccruent LLC Maintenance Connection 2021 (all) & 2022.2 was discovered to contain a SQL injection...9.8 Critical
- netapp storagegridStorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0.8 are susceptible to a...7.5 High
- ibm financial transaction managerIBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7...4.3 Medium
- ibm financial transaction managerIBM Financial Transaction Manager security bypass4.3 Medium
- ibm financial transaction managerIBM Financial Transaction Manager path traversal4.3 Medium
- grafanaStored XSS in Grafana Text plugin6.4 Medium
- ibm mq, mq appliance +1 moreIBM MQ denial of service6.5 Medium
- kitabisa teler-wafteler-waf contains detection rule bypass via entities payload6.5 Medium
- computer parts sales and inventory system project parts sales and inventory system, sourcecodester computer parts sales and inventory system +1 moreSourceCodester Computer Parts Sales and Inventory System customer.php cross site scripting3.5 Low
- computer parts sales and inventory system project parts sales and inventory system, sourcecodester computer parts sales and inventory system +1 moreSourceCodester Computer Parts Sales and Inventory System processlogin sql injection6.3 Medium
- baicells eg7035-m11, eg7035-m11 firmware +1 moreUnauthenticated Command Injection EG7035-M11 Series9.3 Critical
- kitabisa teler-wafteler-waf subject to bypass of common web attack threat rule with HTML entities payload6.5 Medium
- canonical jujuJuju controller - Arbitrary file reading vulnerability4.9 Medium
- medtronic interstim x clinician, micro clinician, insterstim applications +2 moreMedtronic Micro Clinician & InterStim X Clinician App Password Reset Issue6.4 Medium
- netflix lemurInsecure Random Generation in Netflix Lemur7.5 High
- diygod rsshubRSSHub is vulnerable to cross-site scripting (XSS) via unvalidated URL parameters5.4 Medium
- keycloak, redhat openshift container platform, single sign-on +2 moreHTML Injection in Keycloak Admin REST API5.4 Medium
- redhat keycloak, red hat single sign-on 7, single sign-on 7.6 for rhel 7 +3 more +5 moreKeycloak: reflected xss attack8.1 High
drupal/group_forumPackagistThis module enables you to associate Forums as Group 1.x content and use Group access permissions. Previous versions of the module incorrectly set node access on creation, and did not correctly restri…No score- google youtube android player api sdk, youtube android player api +1 moreRemote code execution in YouTube Android Player API SDK5.1 Medium
- redhat keycloak, red hat single sign-on 7, single sign-on 7.6 for rhel 7 +3 more +5 moreKeycloak: xss on impersonation under specific circumstances6.4 Medium
- redisRedis string pattern matching can be abused to achieve Denial of Service5.5 Medium
- grafana, grafana enterprise +1 moreGrafana vulnerable to Cross-site Scripting7.3 High
- grafana, grafana enterprise +1 moreGrafana vulnerable to Cross-site Scripting7.3 High
drupal/better_social_sharing_buttonsPackagistThis module enables you to add social sharing buttons to a site. The module doesn't sufficiently sanitize the weight and ratio values entered in the module or block configuration. This vulnerability i…No score- dell networker, nve, emc networker +1 moreDell NetWorker versions 19.5 and earlier contain 'Apache Tomcat' version disclosure vulnerability...7.5 High
- wp overnight pdf invoices & packing slips for woocommerce, wpovernight woocommerce pdf invoices\& packing slips +1 moreWordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- dell networker, nve, emc networker +1 moreDell NetWorker versions 19.5 and earlier contain 'RabbitMQ' version disclosure vulnerability. A...7.5 High
- villatheme cart all in one for woocommerceWordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- lauri karisola / wp trio conditional shipping for woocommerceWordPress Conditional Payments for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- hastech shoplentor, hasthemes woolentor - woocommerce elementor addons \+ builder +1 moreWordPress WooLentor Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- conversios all-in-one google analytics, pixels and product feed manager for woocommerce, conversios +1 moreWordPress Conversios.io Plugin <= 5.2.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- mercado pago payments for woocommerce, mercadopago mercado pago payments for woocommerce +1 moreWordPress Mercado Pago payments for WooCommerce Plugin <= 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- robogallery robo gallery, robosoft photo gallery, images, slider in rbs image gallery +1 moreWordPress Robo Gallery Plugin <= 3.2.9 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- standalonetech terawallet, terawallet – for woocommerce +1 moreWordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- imagely nextgen gallery, wordpress gallery plugin – nextgen gallery +1 moreWordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- uzay baskul weighbridge automation softwareSQLi in Uzay Baskul's Weighbridge Automation Software9.8 Critical
- a3rev contact us page – contact people, contact us page - contact people +1 moreWordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- fullworks quick event managerWordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- wow-company bubble menu – circle floating menu, bubble menu +1 moreWordPress Bubble Menu – circle floating menu Plugin <= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- eskom e-belediyeImproper Input Validation on e-Belediye9.8 Critical
- Show moreLoading…