CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'ucss_connect'4.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'attach_rule'4.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'clear_uucss_logs'4.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'ajax_deactivate'4.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'uucss_update_rule'4.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'clear_page_cache'4.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'queue_posts'4.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'uucss_update_rule'4.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'attach_rule'4.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'ucss_connect'4.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'ajax_deactivate'4.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'clear_uucss_logs'4.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'queue_posts'4.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'clear_page_cache'4.3 Medium
- 115cmsGuizhou 115cms index unrestricted upload4.7 Medium
- lmxcmslmxcms BookAction.class.php reply sql injection6.3 Medium
- lmxcmslmxcms AcquisiAction.class.php update sql injection6.3 Medium
- apache log4jApache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender7.5 High
harfbuzzOSS-FuzzGlobal-buffer-overflow in OT::gvar::accelerator_t::apply_deltas_to_pointsNo scorelibavcOSS-FuzzUNKNOWN READ in isvce_cabac_flushNo scorecycloneddsOSS-FuzzHeap-use-after-free in ddsi_type_unref_impl_lockedNo score- saysis starcitiesFiles or Directories Accessible to External Parties in Saysis Starcities7.5 High
- saysis starcitiesSQLi in Saysis Starcities9.8 Critical
- openatom openharmonyThe bundle management subsystem has a improper input validation when installing a HAP package.6.2 Medium
- openatom openharmonyCommunication Wi-Fi subsystem has a null pointer reference vulnerability when receving external data.5.5 Medium
- openatom openharmonyThe kernel subsystem function check_permission_for_set_tokenid has an UAF vulnerability.7.8 High
- openatom openharmonyThe kernel subsystem hmdfs has a arbitrary memory accessing vulnerability.6.5 Medium
- openatom openharmonyThe ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.4.0 Medium
- friendly island pizza website and ordering system project island pizza website and ordering system, sourcecodester friendly island pizza website and ordering system +1 moreSourceCodester Friendly Island Pizza Website and Ordering System GET Parameter large.php sql injection6.3 Medium
- online graduate tracer system project graduate tracer system, sourcecodester online graduate tracer system +1 moreSourceCodester Online Graduate Tracer System prof.php sql injection6.3 Medium
- online graduate tracer system project graduate tracer system, sourcecodester online graduate tracer system +1 moreSourceCodester Online Graduate Tracer System search_it.php sql injection6.3 Medium
- online graduate tracer system project graduate tracer system, sourcecodester online graduate tracer system +1 moreSourceCodester Online Graduate Tracer System adminlog.php sql injection6.3 Medium
- alpata licensed warehousing automation systemSQL Injection found in ALPATA's Licensed Warehousing Automation System9.8 Critical
- hcl software verseHCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability8.3 High
- mobile vikings django ajax utilitiesMobile Vikings Django AJAX Utilities Backslash pagination.js Pagination cross site scripting3.5 Low
- getadmiral ad blocking detectorAd Blocking Detector Plugin ad-blocking-detector.php information disclosure4.3 Medium
- a-forms project a-forms, mmdeveloper a forms plugin +1 moreMMDeveloper A Forms Plugin a-forms.php cross site scripting3.5 Low
- netgear rax30 firmwareNETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a...9.8 Critical
- netgear rax30 firmwareNETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in...9.8 Critical
- netgear rax30 firmwareNETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that...8.8 High
- netgear rax30 firmwareNETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that allows...6.8 Medium
- veeam backup & replication, backup \& replication +1 moreVulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the...7.5 High
- haloAn arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary...4.8 Medium
- jellyfinJellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the...7.5 High
- webassembly wabtWebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt:...5.5 Medium
- webassemblyWebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt:...7.8 High
- webassemblyWebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType.5.5 Medium
- webassemblyWebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt:...5.5 Medium
- radare radare2radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p...5.5 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 2200 firmware +6 more +8 moreAn issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850,...7.6 High
- Show moreLoading…