CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- online student management system project student management systemOnline Student Management System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- online pizza ordering system project pizza ordering systemA cross-site scripting (XSS) vulnerability in /php-opos/signup.php of Online Pizza Ordering...6.1 Medium
- online pizza ordering system project pizza ordering systemA cross-site scripting (XSS) vulnerability in /admin/navbar.php of Online Pizza Ordering System 1...6.1 Medium
- online pizza ordering system project pizza ordering systemOnline Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- online pizza ordering system project pizza ordering systemA cross-site scripting (XSS) vulnerability in /php-opos/login.php of Online Pizza Ordering System...6.1 Medium
- online pizza ordering system project pizza ordering systemOnline Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- mayurik best pos management systemA cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1...6.1 Medium
- mayurik best pos management systemBest POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- mayurik best pos management systemBest POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- mayurik best pos management systemBest POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- mayurik best pos management systemBest POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- onekeyadminonekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the...9.1 Critical
- onekeyadminonekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the...7.5 High
- google chromeInsufficient data validation in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote...6.5 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability4.6 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability8.6 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore4.8 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions...2.7 Low
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8,...4.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8,...5.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8,...5.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8,...8.7 High
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.7.8,...5.0 Medium
- gitlabAn issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8...5.7 Medium
- gitlab dast, dynamic application security testing analyzer +1 moreAn issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47...5.0 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8,...6.4 Medium
- gitlab dast, dynamic application security testing analyzer +1 moreMissing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows...7.7 High
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8,...5.4 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8...4.3 Medium
- dronecode px4 drone autopilot, yuneec mantis q firmware +1 moreAn issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to...7.5 High
- hewlett packard enterprise (hpe) hpe superdome flex servers; hpe superdome flex 280 servers, hpe superdome flex 280 server firmware, superdome flex server firmware +2 moreA potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex...2.3 Low
- go standard library crypto/internal/nistec, golang go +1 moreIncorrect calculation on P256 curves in crypto/internal/nistec5.3 Medium
- xcat project xcat, xcat2 xcat-core +1 moreInsufficient authorization validation between zones when xCAT zones are enabled8.1 High
- github enterprise serverPath traversal in GitHub Enterprise Server leading to remote code execution4.9 Medium
- ibosIBOS index.php cross site scripting3.5 Low
- kylinsoft kylin-system-updaterkylin-system-updater Update InstallSnap command injection7.8 High
- sul1ss shop project shopSUL1SS_shop Order.php sql injection4.7 Medium
- phone shop sales managements system project shop sales managements system, sourcecodester phone shop sales managements system +1 moreSourceCodester Phone Shop Sales Managements System CAPTCHA index.php cross site scripting3.5 Low
drupal/gutenbergPackagistThis module provides a new UI experience for node editing - Gutenberg editor. This vulnerability can cause DoS by using reusable blocks improperly. This vulnerability is mitigated by the fact an attac…No score- rack, debian linux +1 moreRack has possible DoS Vulnerability in Multipart MIME parsing7.5 High
- jenkins update-center2Cross site scripting vulnerability in update-center29.6 Critical
- jenkinsInformation disclosure through error stack traces related to agents5.3 Medium
- jenkinsIncorrect Authorization in Jenkins Core4.4 Medium
- jenkinsIncorrect Permission Preservation in Jenkins Core4.3 Medium
- jenkinsDenial of service in Jenkins Core7.5 High
- jenkinsDenial of service in Jenkins Core7.5 High
- jenkinsIncorrect Authorization in Jenkins Core7.0 High
- jenkinsCross-site Scripting vulnerability in Jenkins9.6 Critical
- dell cpg bios, inspiron 14 plus 7420 firmware, inspiron 14 plus 7620 firmware +73 more +75 moreDell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker...4.6 Medium
- cisco enterprise nfv infrastructure softwareA vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, local attacker to provide an unauthentic upgrade file for…7.8 High
- Show moreLoading…