CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
hunspellOSS-FuzzHeap-use-after-free in HashMgr::add_wordNo score- pttemkart pttem kartSQLi in Ulkem Company's PtteM Kart9.8 Critical
- apache dubboApache Dubbo Deserialization Vulnerability Gadgets Bypass5.0 Medium
- proofpoint enterprise protectionProofpoint Enterprise Protection webservices unauthenticated RCE9.8 Critical
- proofpoint enterprise protectionProofpoint Enterprise Protection webutils authenticated RCE8.8 High
- bitwarden** DISPUTED ** Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain...7.5 High
- home-assistant core, supervisor, home-assistant +2 moreCVE-2023-27482 in supervisor - Patched by Root10.0 Critical
- feiqu-opensource project feiqu-opensourcefeiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java....8.8 High
- onekeyadminonekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the...7.5 High
- onekeyadminonekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability...5.4 Medium
- onekeyadminonekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability...5.4 Medium
- variscite matrix-guiSQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute...9.8 Critical
- ubikasec waap gateway, waap cloud +1 moreIn UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication...9.8 Critical
- totolink a7100ru firmwareTOTOlink A7100RU V7.4cu.2313_B20191024 router has a command injection vulnerability.9.8 Critical
- funadminSQL Injection in Funadmin9.8 Critical
- funadminSQL Injection in Funadmin9.8 Critical
- funadminSQL Injection in Funadmin9.8 Critical
- phpipamphpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via...6.1 Medium
- poly trio 8800 firmwareAn arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute...5.4 Medium
- smartbear zephyr enterpriseThere exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15...7.5 High
- smartbear zephyr enterpriseThere exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0...8.1 High
- smartbear zephyr enterpriseSmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files,...7.5 High
- smartbear zephyr enterpriseSmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation...9.8 Critical
- builderio builderio/qwik, qwik +1 moreCode Injection in builderio/qwik10.0 Critical
- btcpayserver, btcpayserver btcpayserver/btcpayserver +1 moreCross-site Scripting in btcpayserver/btcpayserver5.1 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreUse of Hard-coded Credentials in alextselegidis/easyappointments6.5 Medium
- linux kernelA use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a...7.8 High
- arm avalon gpu kernel driver, valhall gpu kernel driver +1 moreAn issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make...8.8 High
- gitlab, gitlab dynamic application security testing analyzer +1 moreAn issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0...5.0 Medium
- gitlabA issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8,...5.4 Medium
- wyomind help deskDirectory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before...9.8 Critical
- wyomind help deskAn issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows...9.8 Critical
- wyomind help deskCross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before...9.0 Critical
- bitwarden** DISPUTED ** Bitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME...7.5 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreA security agent link following vulnerability in Trend Micro Apex One could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired...6.7 Medium
- trend micro apex one, trend micro, inc. micro apex one +1 moreA security agent link following vulnerability in the Trend Micro Apex One agent could allow a...7.8 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreA link following vulnerability in the scanning function of Trend Micro Apex One agent could allow...7.8 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn improper access control vulnerability in the Trend Micro Apex One agent could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer...9.8 Critical
- google chromeInappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a...4.3 Medium
- google chromeType confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who...6.3 Medium
- google chromeInappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64...4.3 Medium
- google chromeInsufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64...4.3 Medium
- google chromeInsufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64...4.3 Medium
- google chromeInappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64...4.3 Medium
- google chromeInappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563...4.3 Medium
- google chromeInappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64...4.3 Medium
- google chromeInsufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64...4.3 Medium
- google chromeUse after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote...8.8 High
- Show moreLoading…