CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- google android, mediatek, inc. mt6580, mt6735, mt6739, mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6885, mt6893, mt6895, mt6983, mt8167, mt8168, mt8666, mt8675 +1 moreIn usb, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6739, mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6885, mt6893, mt6895, mt6983, mt8167, mt8168, mt8666, mt8675 +1 moreIn usb, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8167, mt8167s, mt8168, mt8175, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8797 +1 moreIn thermal, there is a possible memory corruption due to an uncaught exception. This could lead...6.7 Medium
- google android, mediatek, inc. mt6879, mt6895, mt6983, mt8167, mt8168 +1 moreIn pqframework, there is a possible out of bounds write due to a missing bounds check. This could...6.7 Medium
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6883, mt6885, mt6889, mt6893, mt8666, mt8667, mt8675, mt8765, mt8766, mt8768, mt8785, mt8789, mt8791, mt8797 +1 moreIn msdc, there is a possible out of bounds write due to an incorrect bounds check. This could...6.7 Medium
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8781, mt8791, mt8791t, mt8797 +1 moreIn adsp, there is a possible double free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6789, mt6833, mt6853, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6983, mt8781, mt8791, mt8791t, mt8797 +1 moreIn vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead...6.7 Medium
- vim, vim vim/vim, fedoraproject fedora +2 moreNULL Pointer Dereference in vim/vim6.6 Medium
- answer, answerdev answerdev/answer +1 moreCross-site Scripting (XSS) - Stored in answerdev/answer3.5 Low
- answer, answerdev answerdev/answer +1 moreCross-site Scripting (XSS) - Stored in answerdev/answer9.3 Critical
- answer, answerdev answerdev/answer +1 moreCross-site Scripting (XSS) - Stored in answerdev/answer6.0 Medium
- answer, answerdev answerdev/answer +1 moreCross-site Scripting (XSS) - Stored in answerdev/answer8.0 High
- answer, answerdev answerdev/answer +1 moreCross-site Scripting (XSS) - Stored in answerdev/answer8.8 High
- answer, answerdev answerdev/answer +1 moreCross-site Scripting (XSS) - Stored in answerdev/answer8.0 High
- answer, answerdev answerdev/answer +1 moreCross-site Scripting (XSS) - Reflected in answerdev/answer6.0 Medium
- answer, answerdev answerdev/answer +1 moreCross-site Scripting (XSS) - Stored in answerdev/answer7.6 High
- answer, answerdev answerdev/answer +1 moreCross-site Scripting (XSS) - Stored in answerdev/answer3.4 Low
- linux kernelA use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the...5.5 Medium
- github enterprise serverInformation disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository names4.3 Medium
- hgzojer vocable trainer, vocable trainer project trainer +1 morehgzojer Vocable Trainer VocableTrainerProvider.java path traversal5.3 Medium
- email registration project registrationEmail Registration email_registration.module email_registration_user sql injection6.3 Medium
- woo-popup project woo-popupwoo-popup Plugin class-woo-popup-admin.php cross site scripting3.5 Low
- azure setup-kubectl, microsoft azure setup kubectl +1 moreAzure/setup-kubectl: Escalation of privilege vulnerability for v3 and lower3.9 Low
- atampy25 quickentity-editor-next, quickentity editor project editor +1 moreHTML tags in entity names in the tree view are not sanitised in quickentity-editor-next8.2 High
- moby buildkitCredentials inlined to Git URLs could end up in provenance attestation in BuildKit6.5 Medium
- discourse discourse-yearly-review, yearly review +1 moreYearly Review Plugin leaking anonymised users data in discourse-yearly-review3.1 Low
- freshrssSensitive information exposure in the logs of greader API in FreshRSS4.0 Medium
- devolutions serverImproper access control in the secure messages feature in Devolutions Server 2022.3.12 and below...6.5 Medium
- directusHTML Injection in Password Reset email to custom Reset URL in directus8.0 High
- devolutions remote desktop manager powershell module, remote desktop manager +1 moreImproper removal of sensitive data in the entry edit feature of Hub Business submodule in...6.5 Medium
- diyhi bbs, ehuacui-bbs project ehuacui-bbs +1 moreehuacui bbs cross site scripting3.5 Low
- nuxsmin syspassnuxsmin sysPass URL cross site scripting3.5 Low
- fastlyFastly Plugin api.php post cross site scripting2.4 Low
- meddata meddatapacsSQLi in MedDataPACS9.8 Critical
- unknown wpaudio mp3 player, wpaudio mp3 player project mp3 player +1 moreWPaudio MP3 Player <= 4.0.2 - Contributor+ Stored XSS5.4 Medium
- unknown i2 pros & cons, i2 pros \& cons project pros \& cons +1 morei2 Pros & Cons <= 1.3.1 - Contributor+ Stored XSS5.4 Medium
- eaglevisionit evision responsive column layout shortcodeseVision Responsive Column Layout Shortcodes <= 2.3 - Contributor+ Stored XSS5.4 Medium
- robin cornett scriptless social sharingScriptless Social Sharing < 3.2.2 - Contributor+ Stored XSS5.4 Medium
- najeebmedia woocommerce checkout field managerWooCommerce Checkout Field Manager < 18.0 - Unauthenticated Arbitrary File Upload9.8 Critical
- advanced recent posts project recent posts, unknown advanced recent posts +1 moreAdvanced Recent Posts <= 0.6.14 - Contributor+ Stored XSS5.4 Medium
- unknown product gtin (ean, upc, isbn) for woocommerce, product gtin \(ean\, upc\, isbn\) for woocommerce project gtin \(ean\, upc\, isbn\) for woocommerce +1 moreProduct GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Contributor+ Stored XSS5.4 Medium
- synved wordpress shortcodesSynved Shortcodes <= 1.6.36 - Contributor+ Stored XSS5.4 Medium
- resumebuilder resume builderResume Builder <= 3.1.1 - Subscriber+ Stored XSS5.4 Medium
- nicdark cost calculatorCost Calculator <= 1.8 - Contributor+ Stored XSS5.4 Medium
- gopostmatic replyableReplyable < 2.2.10 - Subscriber+ PHP Object Injection8.8 High
- unknown wpcodeWPCode < 2.0.7 - Contributor+ WPCode Library Auth Key Update/Deletion4.3 Medium
- dfactory download attachmentsDownload Attachments < 1.3 - Contributor+ Stored XSS5.4 Medium
mrubyOSS-FuzzUNKNOWN READ in mrb_vm_find_methodNo score- saysis starcitiesXSS in Saysis' Starcities6.1 Medium
- m-files new web, server +1 moreXSS vulnerability in M-Files Web5.0 Medium
- Show moreLoading…