CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- m-files new web, server +1 moreInsecure way of passing a download key6.5 Medium
- zerocoin libzerocoinZerocoin libzerocoin Proof CoinSpend.cpp CoinSpend data authenticity4.6 Medium
- xjd2020 fastcmsfastcms ZIP File TemplateController.java path traversal4.7 Medium
- imageinfo project imageinfoxiaozhuai imageinfo imageinfo.hpp buffer overflow4.8 Medium
- wisecleaner wise folder hiderWiseCleaner Wise Folder Hider IoControlCode WiseFs64.sys 0x222410 denial of service3.3 Low
- fabulatech webcam for remote desktopFabulaTech Webcam for Remote Desktop IoControlCode ftwebcam.sys 0x222018 denial of service3.3 Low
- fabulatech webcam for remote desktopFabulaTech Webcam for Remote Desktop Global Variable ftwebcam.sys denial of service3.3 Low
- fabulatech webcam for remote desktopFabulaTech Webcam for Remote Desktop IOCTL ftwebcam.sys 0x222018 null pointer dereference3.3 Low
- inscada project inscadaImproper Error Handling in inSCADA9.8 Critical
- shopex ecshopECshop New Product unrestricted upload4.7 Medium
- shopex ecshopECshop Backup Database database.php unrestricted upload4.7 Medium
- blogengine blogengine.netStored cross-site scripting in BlogEngine.NET version 3.3.8.05.3 Medium
- mark user as spammer project user as spammerMark User as Spammer Plugin plugin.php user_row_actions cross site scripting2.6 Low
- blogengine blogengine.netStored cross-site scripting in BlogEngine.NET version 3.3.8.08.5 High
- blogengine blogengine.netStored cross-site scripting in BlogEngine.NET version 3.3.8.08.5 High
- qtranslate slug project slugQtranslate Slug Plugin class-qtranslate-slug.php add_slug_meta_box cross site scripting3.5 Low
- nestjs nest@nestjs/core vulnerable to Information Exposure via StreamableFile pipe3.7 Low
- ebay sketchsvgSketchSVG Arbitrary Code Injection vulnerability6.9 Medium
- node-static project node-static, \@nubosoftware\/node-static project \@nubosoftware\/node-static +1 morenode-static and @nubosoftware/node-static vulnerable to Directory Traversal7.5 High
- dot-lens project dot-lensdot-lens vulnerable to Prototype Pollution7.5 High
- bywater solutions bywater-koha-xsltByWater Solutions bywater-koha-xslt systempreferences.pl StringSearch sql injection4.7 Medium
- learnetic icplayericplayer tts-utils.js cross site scripting3.5 Low
- learnetic icplayericplayer presenter.js AddonText_Selection_create cross site scripting3.5 Low
- rami pretixInsufficient Session Expiration in pretix7.5 High
- onekeyadminAn arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3...9.8 Critical
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus...7.5 High
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center...6.5 Medium
- prismlauncher prism launcherAn issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file.7.8 High
- jeecgjeecg-boot contains SQL Injection vulnerability8.8 High
- funadminRemote code execution in Funadmin9.8 Critical
- prestashop xen forumIn the module "Xen Forum" (xenforum) for PrestaShop, an authenticated user can perform SQL...8.8 High
- sigb pmbPMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the...6.1 Medium
- sigb pmbPMB v7.4.6 was discovered to contain a remote code execution (RCE) vulnerability via the...9.8 Critical
- sigb pmbPMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css...6.1 Medium
- sigb pmbAn arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows...9.8 Critical
- sigb pmbPMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the...6.1 Medium
- agilebio electronic lab notebookAgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion...8.8 High
- phpipam, phpipam phpipam/phpipam +1 moreCross-site Scripting (XSS) - Stored in phpipam/phpipam5.9 Medium
- phpipam, phpipam phpipam/phpipam +1 moreSQL Injection in phpipam/phpipam7.2 High
- uvdesk community-skeleton, uvdesk/community-skeleton +1 moreCross-site Scripting (XSS) - Stored in uvdesk/community-skeleton4.3 Medium
- wireshark, debian linux +1 moreISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows...6.3 Medium
- qemu, debian linux +1 moreQemu: lsi53c895a: dma reentrancy issue leads to stack overflow5.3 Medium
- okta advanced server accessOkta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command...8.8 High
- joinmastodon mastodonThe undo_mark_statuses_as_sensitive method in app/services/approve_appeal_service.rb in Mastodon...4.3 Medium
- arm avalon gpu kernel driver, bifrost gpu kernel driver, midgard gpu kernel driver +1 more +3 moreAn issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make...8.8 High
- kiowareKioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank...5.4 Medium
- qlik qlikviewQlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in...5.4 Medium
- openstack glance, redhat openstack +1 moreOpenStack Glance Inclusion of Functionality from Untrusted Control Sphere vulnerability2.8 Low
- ceph, redhat ceph storage +1 moreA flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit...6.5 Medium
- openstack neutron, the openstack project openstack-neutron, redhat openstack platform +2 moreopenstack-neutron uncontrolled resource consumption flaw6.5 Medium
- Show moreLoading…