CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- funadminFunadmin vulnerable to SQL injection9.8 Critical
- rocket.chatAn improper access control vulnerability exists prior to v6 that could allow an attacker to break...7.5 High
- avantfaxA File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file...8.8 High
- avantfaxAn Information Disclosure vulnerability exists in AvantFAX 3.3.7. Backups of the AvantFAX sent...4.9 Medium
- avantfaxA Stored Cross-Site Scripting (XSS) vulnerability exists in AvantFAX 3.3.7. An authenticated low...5.4 Medium
- enhancesoft osticket, osticket osticket/osticket +1 moreCross-site Scripting (XSS) - Stored in osticket/osticket7.1 High
- enhancesoft osticket, osticket osticket/osticket +1 moreCross-site Scripting (XSS) - Stored in osticket/osticket4.8 Medium
- enhancesoft osticket, osticket osticket/osticket +1 moreCross-site Scripting (XSS) - Generic in osticket/osticket5.4 Medium
- enhancesoft osticket, osticket osticket/osticket +1 moreCross-site Scripting (XSS) - Reflected in osticket/osticket5.4 Medium
- enhancesoft osticket, osticket osticket/osticket +1 moreCross-site Scripting (XSS) - Stored in osticket/osticket4.5 Medium
- enhancesoft osticket, osticket osticket/osticket +1 moreCross-site Scripting (XSS) - Reflected in osticket/osticket5.4 Medium
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreUnrestricted Upload of File with Dangerous Type in cockpit-hq/cockpit7.2 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcore5.2 Medium
- froxlor, froxlor froxlor/froxlor +1 moreAuthentication Bypass by Primary Weakness in froxlor/froxlor9.8 Critical
- netgear rax30 firmwareNETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery...8.8 High
- gigamon gigavue-fm, gigavue-os +1 moreXSS Vulnerability in GigaVue-FM6.3 Medium
- siri-informatica wi400A cross-site scripting (XSS) vulnerability in the check_login function of SIPE s.r.l WI400...6.1 Medium
- ivanti avalancheAn improper authentication vulnerability exists in Avalanche version 6.3.x and below allows...7.5 High
- stoqey gnuplotstoqey/gnuplot is vulnerable to command injection9.8 Critical
- ucms project ucmsUCMS System File Management Module fileedit.php unrestricted upload6.3 Medium
- sourcecodester file tracker manager system, file tracker manager system project tracker management system +1 moreSourceCodester File Tracker Manager System borrow1.php cross site scripting3.5 Low
- friendly island pizza website and ordering system project island pizza website and ordering system, sourcecodester friendly island pizza website and ordering system +1 moreSourceCodester Friendly Island Pizza Website and Ordering System GET Parameter deleteorder.php sql injection6.3 Medium
- covid 19 testing management system project 19 testing management system, sourcecodester covid 19 testing management system +1 moreSourceCodester COVID 19 Testing Management System POST Parameter patient-report.php sql injection6.3 Medium
- horner automation cscape envision rvCVE-2023-06217.8 High
- horner automation cscape envision rvCVE-2023-06237.8 High
- horner automation cscape envision rvCVE-2023-06227.8 High
- nextauth.js next-authMissing proper state, nonce and PKCE checks for OAuth authentication in next-auth8.1 High
- crossplaneUnchecked fieldpath index in Composition's patches can lead to arbitrary memory allocation in crossplane6.2 Medium
github.com/edgelesssys/constellationGo,github.com/edgelesssys/constellation/v2Go +1 moreConstellation allows Emergency shell access during initramfs boot phaseNo score- crossplane crossplane-runtimefieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime5.9 Medium
- metersphereArbitrary File Read Vulnerability in metersphere7.1 High
- metersphereImproper access control to download file in metersphere8.6 High
- 3ds enovia live collaborationENOVIA Live Collaboration V6R2013xE is affected by an XML External Entity injection (XXE) vulnerability6.8 Medium
- 3ds enovia live collaborationENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability9.0 Critical
- hashicorp consul, consul enterprise +1 moreConsul Server Panic when Ingress and API Gateways Configured with Peering4.9 Medium
- fortinet fortideceptorA improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet...3.5 Low
- fortinet fortiauthenticatorA improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet...3.5 Low
- fortinet fortimailA improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet...3.5 Low
- sourcecodester file tracker manager system, file tracker manager system project tracker management system +1 moreSourceCodester File Tracker Manager System POST Parameter login.php sql injection7.3 High
- online graduate tracer system project graduate tracer system, sourcecodester online graduate tracer system +1 moreSourceCodester Online Graduate Tracer System admin_cs.php mysqli_query sql injection5.0 Medium
- sales tracker management system project tracker management system, sourcecodester sales tracker management system +1 moreSourceCodester Sales Tracker Management System Master.php delete_client sql injection6.3 Medium
- sales tracker management system project tracker management system, sourcecodester sales tracker management system +1 moreSourceCodester Sales Tracker Management System manage_client.php sql injection6.3 Medium
- sales tracker management system project tracker management system, sourcecodester sales tracker management system +1 moreSourceCodester Sales Tracker Management System view_client.php sql injection6.3 Medium
- akinsoft wolvoxSQLi in Wolvox9.8 Critical
- node-bluetooth-serial-port project node-bluetooth-serial-portnode-bluetooth-serial-port is vulnerable to Buffer Overflow via the findSerialPortChannel7.3 High
- node-bluetooth project node-bluetoothnode-bluetooth is vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation7.3 High
wireless-regdbDebianwireless-regdb - security updateNo score- gnu emacsemacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections...7.8 High
- gnu emacsemacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections...7.8 High
- online student management system project student management systemOnline Student Management System v1.0 was discovered to contain multiple SQL injection...9.8 Critical
- Show moreLoading…