CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- mailcow mailcow-dockerized, mailcow\ +1 moremailcow is vulnerable to shell command injection via xoauth2 authentication in imapsync7.3 High
github.com/fkie-cad/yapscanGoYapscan Denial of Service vulnerability in report server7.5 High- ibm observability with instanaIBM Observability with Instana missing authentication9.1 Critical
- craftcms cms, craft cms +1 moreCraft CMS stored cross-site scripting vulnerability6.1 Medium
- directusDirectus vulnerable to Server-Side Request Forgery On File Import5.0 Medium
- bob watu quizWatu Quiz <= 3.3.9 - Reflected Cross-Site Scripting6.1 Medium
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 moreOpenZeppelin Contracts contains Incorrect Calculation6.5 Medium
ghostscriptOSS-FuzzHeap-buffer-overflow in pdf14_preserve_backdropNo scoreharfbuzzOSS-FuzzHeap-buffer-overflow in OT::Layout::Common::Coverage::get_populationNo score- bytecodealliance wasmtime, cranelift-codegen +1 morewasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_643.1 Low
- crmeb, zhong bang crmeb java +1 moreZhong Bang CRMEB Java list sql injection5.5 Medium
- gitpodAn issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site...8.2 High
- asos information technologies book cites, asosegitim bookcites +1 moreMultiple XSS in ASOS Information Technologies' Book Cites6.1 Medium
- kylinsoft kylin-activation, kylinos kylin os +1 moreKylinSoft kylin-activation File Import improper authorization8.4 High
- asos information technologies sobiadMultiple XSS in ASOS Information Technologies' Sobiad6.1 Medium
- draytek vigor 2960, vigor 2960 firmware +1 moreDrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversal6.5 Medium
- draytek vigor 2960, vigor 2960 firmware +1 moreDrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection7.2 High
- mitsubishi electric corporation melsec iq-f series fx5-enet, melsec iq-f series fx5-enet/ip, melsec iq-f series fx5s-30mr/es +146 more +148 moreInformation Disclosure Vulnerability in MELSEC Series7.5 High
spipDebianspip - regression updateNo score- shadowsocks shadowsocksx-ngShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of...9.8 Critical
- openbsdIn OpenBSD 7.2, a TCP packet with destination port 0 that matches a pf divert-to rule can crash...7.5 High
- live2d cubism editorCubism Core in Live2D Cubism Editor 4.2.03 allows out-of-bounds write via a crafted Section...7.8 High
- debian linux, linuxfoundation runc, redhat enterprise linux +1 more +3 moreOpencontainers runc Incorrect Authorization vulnerability7.0 High
- phpseclibphpseclib Infinite Loop vulnerability7.5 High
- yf-exam project yf-examCleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code...9.8 Critical
- systemd project systemd, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moresystemd before 247 does not adequately block local privilege escalation for some Sudo...7.8 High
- barracuda t100b firmware, t193a firmware, t200c firmware +4 more +6 moreOn Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891,...7.2 High
- yf-exam project yf-examCleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed...7.5 High
- yf-exam project yf-examCleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix...7.5 High
- judging management system project management systemJudging Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- judging management system project management systemJudging Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- judging management system project management systemJudging Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- draytek vigor1000b firmware, vigor130 firmware, vigor165 firmware +88 more +90 moreCertain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script...6.1 Medium
- cisco webex teamsCisco Webex App for Web Cross-Site Scripting Vulnerability6.1 Medium
- cisco finesse, unified contact center enterprise +1 moreCisco Finesse Reverse Proxy VPN-less Access to Finesse Desktop Denial of Service Vulnerability5.3 Medium
- cisco ip phones with multiplatform firmware, ip phone 6825 firmware, ip phone 6841 firmware +19 more +21 moreCisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities9.8 Critical
- cisco ip phones with multiplatform firmware, ip phone 6825 firmware, ip phone 6841 firmware +15 more +17 moreCisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities9.8 Critical
- cisco prime infrastructure, evolved programmable network manager +1 moreCisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco unified intelligence center, packaged contact center enterprise, unified contact center enterprise +1 more +3 moreCisco Unified Intelligence Center Vulnerabilities6.5 Medium
- cisco unified intelligence center, packaged contact center enterprise, unified contact center enterprise +1 more +3 moreCisco Unified Intelligence Center Vulnerabilities6.5 Medium
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreHeap-based Buffer Overflow in vim/vim7.3 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreUse of Platform-Dependent Third Party Components in cockpit-hq/cockpit4.0 Medium
- anji-plus aj-reportReport v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.9.8 Critical
- starsoftcomm coocarestarsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary...7.8 High
- zbt we1626 firmwareAn issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows...9.8 Critical
- zbt we1626 firmwareAn Insecure Permissions vulnerability in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06...7.5 High
- zbt we1626 firmwareAn issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows...9.8 Critical
- corednscoreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints6.1 Medium
- corednscoreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints4.4 Medium
- samourai-wallet-android project samourai-wallet-androidAn issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0...5.5 Medium
- Show moreLoading…