CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- google chromeInsufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64...6.5 Medium
- google chromeInsufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64...4.3 Medium
- google chromeInsufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64...4.3 Medium
- google chromeInsufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64...4.3 Medium
- google chromeHeap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote...8.8 High
- google chromeInsufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed...4.3 Medium
- google chromeHeap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who...8.8 High
- google chromeHeap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to...8.8 High
- google chromeStack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64...6.5 Medium
- google chromeUse after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who...8.8 High
- google chromeType confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to...8.8 High
- google chromeUse after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker...8.8 High
- niteo cmp – coming soon & maintenance plugin by niteothemes, niteothemes coming soon \& maintenance +1 moreCMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information Exposure5.3 Medium
- geopython owslibXML External Entity (XXE) Injection in OWSLib8.2 High
- thm feedbacksystemInsufficient verification of authorisation when accessing subresults in thmmniii/fbs-core4.3 Medium
- directusExtract password hashes through export querying in directus4.3 Medium
- xwiki, xwiki xwiki-platform +1 moreData leak through a XAR import XXE attack in xwiki-platform-xar-model7.7 High
- xwiki, xwiki xwiki-platform +1 moreImproper Neutralization of Directives in Dynamically Evaluated Code in org.xwiki.platform:xwiki-platform-panels-ui10.0 Critical
- awesome libmemcachedDisclosure of unrelated data in libmemcached-awesome6.5 Medium
- gookit goutilGoutil vulnerable to path traversal when unzipping files8.8 High
- moxa uc-2100 series, uc-2100-w series, uc-2101-lx firmware +61 more +63 moreCVE-2023-12577.6 High
- fortinet fortios, fortiproxy +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet...5.2 Medium
- fortinet fortios, fortiproxy +1 moreA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2,...7.8 High
- fortinet fortios, fortiproxy +1 moreAn access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet...6.4 Medium
- fortinet fortianalyzer, fortimanager, fortiportal +1 more +3 moreA exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0...5.1 Medium
- fortinet fortinacA improper neutralization of input during web page generation ('cross-site scripting') in...7.1 High
- fortinet fortiosA improper limitation of a pathname to a restricted directory vulnerability ('path traversal') ...6.5 Medium
- fortinet fortirecorder, fortiweb, fortirecorder firmware +2 moreAn incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in...5.2 Medium
- fortinet fortianalyzerAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in...4.6 Medium
- fortinet fortirecorder, fortirecorder firmware +1 moreAn uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and...6.8 Medium
- fortinet fortinacA improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC...7.8 High
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection') in...7.2 High
- fortinet fortianalyzerA improper neutralization of formula elements in a CSV file vulnerability in Fortinet...4.0 Medium
- fortinet fortisoarA improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker...7.5 High
- basixonline nex-forms, webaways nex-forms – ultimate forms plugin for wordpress +1 moreNEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actions6.3 Medium
- apache http server, unbit uwsgi, debian linux +2 moreApache HTTP Server: mod_proxy_uwsgi HTTP response splitting7.5 High
- apache http serverApache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy9.8 Critical
- code-projects health center patient record management system, health center patient record management system project center patient record management system +1 moreSourceCodester Health Center Patient Record Management System birthing_print.php cross site scripting3.5 Low
- code-projects health center patient record management system, health center patient record management system project center patient record management system +1 moreSourceCodester Health Center Patient Record Management System login.php sql injection7.3 High
- veronalabs wp statistics, wp statistics – simple, privacy-friendly google analytics alternative +1 moreWP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation6.5 Medium
- boldgrid total upkeep, total upkeep – wordpress backup plugin plus restore & migrate by boldgrid +1 moreTotal Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure4.3 Medium
KernelLinuxpinctrl: single: fix potential NULL dereferenceNo scoreKernelLinuxnet: USB: Fix wrong-direction WARNING in plusb.cNo scoreKernelLinuxaio: fix mremap after fork null-derefNo scoreKernelLinuxmmc: sdio: fix possible resource leaks in some error pathsNo scoreKernelLinuxnet/usb: kalmia: Don't pass act_len in usb_bulk_msg error pathNo scoreKernelLinuxnilfs2: fix underflow in second superblock position calculationsNo scoreKernelLinuxIB/hfi1: Restore allocated resources on failed copyoutNo score- Show moreLoading…