CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- sprymedia datatablesCross Site Scripting (XSS) vulnerability in the DataTables plug-in 1.9.2 for jQuery allows...6.1 Medium
- moodleMoodle has a Hidden Functionality vulnerability5.3 Medium
- moodleMoodle Improper Input Validation vulnerability5.3 Medium
- moodleMoodle vulnerable to Stored Cross-site Scripting4.8 Medium
- moodleMoodle has Incorrect Default Permissions5.3 Medium
- moodleMoodle Cross-site Scripting vulnerability5.4 Medium
- moodleMoodle Cross-site Scripting vulnerability5.4 Medium
- moodleMoodle has Incorrect Default Permissions5.3 Medium
- moodleMoodle vulnerable to Server-Side Request Forgery7.5 High
- moodleMoodle vulnerable to Uncontrolled Resource Consumption7.5 High
- moodleMoodle Session Fixation vulnerability9.8 Critical
- moodleMoodle SQL Injection vulnerability9.8 Critical
- moodleMoodle SQL Injection vulnerability9.8 Critical
- vicidialCross Site Scripting vulnerability found in VICIdial v2.14-610c and v.2.10-415c allows attackers...6.1 Medium
- inboundnow landing-pagesLanding Pages Plugin cross site scripting3.5 Low
- maxfoundry maxbuttonsMaxButtons Plugin maxbuttons-button.php maxbuttons_strip_px cross site scripting3.5 Low
- markjaquith subscribe to commentsSubscribe to Comments Plugin subscribe-to-comments.php cross site scripting3.5 Low
- ualberta neosdiscoveryualbertalib NEOSDiscovery _refworks.html.erb reverse tabnabbing5.5 Medium
- json-logic-js project json-logic-jsjson-logic-js logic.js command injection5.5 Medium
- flame.js project flame.jsflame.js cross site scripting3.5 Low
- code-projects health center patient record management system, health center patient record management system project center patient record management system +1 moreSourceCodester Health Center Patient Record Management System hematology_print.php cross site scripting3.5 Low
- computer parts sales and inventory system project parts sales and inventory system, sourcecodester computer parts sales and inventory system +1 moreSourceCodester Computer Parts Sales and Inventory System Add Supplier cross site scripting3.5 Low
- ayttm project ayttmayttm proxy.c http_connect format string5.0 Medium
- flashgames project flashgamesiGamingModules flashgames game.php sql injection6.3 Medium
- ajaxlife project ajaxlifecfire24 ajaxlife cross site scripting3.5 Low
- lsoft listservThe REPORT (after z but before a) parameter in wa.exe in L-Soft LISTSERV 16.5 before 17 allows an...6.1 Medium
- debian debmanydebmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands (because of...7.8 High
- ghostGhost 5.35.0 allows authorization bypass: contributors can view draft posts of other users, which...5.7 Medium
- ec-cube, ec-cube co.,ltd. 4 series +1 moreCross-site scripting vulnerability in Authentication Key Settings of EC-CUBE 4.0.0 to 4.0.6-p2,...5.4 Medium
- ec-cube, ec-cube co.,ltd. 4 series +1 moreCross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4...5.4 Medium
- ec-cube, ec-cube co.,ltd. 4 series, ec-cube 3 series, and ec-cube 2 series +1 moreCross-site scripting vulnerability in Contents Management of EC-CUBE 4 series (EC-CUBE 4.0.0 to 4...5.4 Medium
- web2pyOpen redirect in web2py6.1 Medium
- jtekt kostac plc programming software, jtekt electronics corporation kostac plc programming software (former name: koyo plc programming software) +1 moreUse-after-free vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC...7.8 High
- jtekt kostac plc programming software, jtekt electronics corporation kostac plc programming software (former name: koyo plc programming software) +1 moreOut-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC...7.8 High
- jtekt kostac plc programming software, jtekt electronics corporation kostac plc programming software (former name: koyo plc programming software) +1 moreOut-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC...7.8 High
- dos-osaka rakuraku pc cloud agent, ss1, dos co., ltd. ss1 and rakuraku pc cloud +2 moreUse of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC...9.8 Critical
- dos-osaka rakuraku pc cloud agent, ss1, dos co., ltd. ss1 and rakuraku pc cloud +2 morePath traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1...9.8 Critical
- dos-osaka rakuraku pc cloud agent, ss1, dos co., ltd. ss1 and rakuraku pc cloud +2 moreImproper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud...7.5 High
- easyimages2.0 project easyimages2.0, icret icret/easyimages2.0 +1 moreCross-site Scripting (XSS) - Stored in icret/easyimages2.05.4 Medium
- wallabag, wallabag wallabag/wallabag +1 moreImproper Authorization in wallabag/wallabag7.3 High
- codepeople cp-polls plugin, polls cp +1 morecodepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injection4.7 Medium
- media downloader project downloaderMedia Downloader Plugin getfile.php dl_file_resumable cross site scripting3.5 Low
- artesãos seotools, seotool project seotool +1 moreArtesãos SEOTools TwitterCards.php eachValue redirect5.5 Medium
- artesãos seotools, seotool project seotool +1 moreArtesãos SEOTools SEOMeta.php setTitle redirect5.5 Medium
malignedcrates.ioMaligned causes incorrect deallocationNo score- linux kernel, openatom openeuler kernel +1 moreREMAP cmd of SVM driver can be used to remap read only memory as read-write, then cause read only...7.5 High
- artesãos seotools, seotool project seotool +1 moreArtesãos SEOTools OpenGraph.php makeTag redirect5.5 Medium
- goauthentik authentikInsufficient user check in FlowTokens by Email stage9.1 Critical
- discourseDiscourse tags with no visibility are leaking into og:article:tag5.3 Medium
- vim, vim vim/vim, debian linux +2 more +4 moreIncorrect Calculation of Buffer Size in vim/vim7.3 High
- Show moreLoading…