CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- readtomyshoe project readtomyshoeReadtoMyShoe, a web app that lets users upload articles and listen to them later, generates an error message containing sensitive information prior to commit 8533b01. If an error occurs when adding an…7.4 High
- my-blog project my-blogCross Site Scripting vulnerability found in My-Blog allows attackers to cause a denial of service...6.1 Medium
- tenda w15e firmwareTenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow...7.5 High
- tenda w15e firmwareTenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow...7.5 High
- tenda w15e firmwareTenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow...9.8 Critical
- tenda w15e firmwareTenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter...7.5 High
- tenda w15e firmwareTenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow...9.8 Critical
- moosikay project moosikayE-Commerce System v1.0 ws discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- wondershare dr.foneWondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst....7.8 High
- samsung exynos 1280 firmware, exynos 2200 firmware, exynos auto t5123 firmware +2 more +4 moreAn issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280,...7.6 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 2200 firmware +6 more +8 moreAn issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850,...7.6 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 2200 firmware +6 more +8 moreAn issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850,...7.6 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 2200 firmware +6 more +8 moreAn issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850,...7.6 High
- hap-wi roxy-wiRoxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a directory traversal vulnerability that allows the inclusion of server-side file…7.5 High
- dlink dir-820l firmwareA stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of...7.5 High
- dlink dir-820l firmwareOS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate...9.8 Critical
- prestashop dpd francePrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php.9.8 Critical
- dlink dir-867 firmwareOS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to...9.8 Critical
- mcafee total protectionMcAfee Total Protection prior to 16.0.51 allows attackers to trick a victim into uninstalling the...5.5 Medium
- mcafee total protectionMcAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL...5.5 Medium
- mcafee total protectionMcAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to...5.5 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreCode Injection in alextselegidis/easyappointments6.0 Medium
- bumsys project bumsys, unilogies unilogies/bumsys +1 moreImproper Restriction of Rendered UI Layers or Frames in unilogies/bumsys8.4 High
- bumsys project bumsys, unilogies unilogies/bumsys +1 moreSQL Injection in unilogies/bumsys7.2 High
- linux, linux kernel, canonical ubuntu linux +2 moreThe Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function...4.7 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible for a user to view Workerpools without...4.3 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible for a user to view Tagsets without being...4.3 Medium
- pev project pevA Buffer Overflow vulnerabilityexists in Pev 0.81 via the pe_exports function from exports.c.....9.8 Critical
- icepay rest-api-net, rest api +1 moreICEPAY REST-API-NET Checksum Validation RestClient.cs RestClient integrity check4.8 Medium
croaringOSS-FuzzHeap-buffer-overflow in array_container_to_uint32_arrayNo scoreclamavOSS-FuzzUNKNOWN READ in fp_cmp_magNo scoreconst-cstrcrates.ioconst-cstr is UnmaintainedNo score- sourcecodester employee payslip generator with sending mail, employee payslip generator system project payslip generator system +1 moreSourceCodester Employee Payslip Generator with Sending Mail New User Creation sql injection4.7 Medium
- gadget works online ordering system project works online ordering system, sourcecodester gadget works online ordering system +1 moreSourceCodester Gadget Works Online Ordering System Add New User cross site scripting2.4 Low
- gadget works online ordering system project works online ordering system, sourcecodester gadget works online ordering system +1 moreSourceCodester Gadget Works Online Ordering System POST Parameter login.php sql injection6.3 Medium
- simple bakery shop management system project bakery shop management system, sourcecodester simple bakery shop management system +1 moreSourceCodester Simple Bakery Shop Management System Admin Login sql injection7.3 High
- ibexa ez platform, kernel, commerce +4 more +6 moreTiming attack in eZ Platform Ibexa3.7 Low
- ibexa ez platform, digital experience platform, ez platform kernel +2 moreCompany admin role gives excessive privileges in eZ Platform Ibexa7.2 High
- dd32 debug bar plugin, wordpress debug bar +1 moredd32 Debug Bar Plugin class-debug-bar-queries.php render cross site scripting3.5 Low
- design and implementation of covid-19 directory on vaccination system project and implementation of covid-19 directory on vaccination system, sourcecodester design and implementation of covid-19 directory on vaccination system +1 moreSourceCodester Design and Implementation of Covid-19 Directory on Vaccination System register.php cross site scripting3.5 Low
- design and implementation of covid-19 directory on vaccination system project and implementation of covid-19 directory on vaccination system, sourcecodester design and implementation of covid-19 directory on vaccination system +1 moreSourceCodester Design and Implementation of Covid-19 Directory on Vaccination System verification.php cross site scripting3.5 Low
- design and implementation of covid-19 directory on vaccination system project and implementation of covid-19 directory on vaccination system, sourcecodester design and implementation of covid-19 directory on vaccination system +1 moreSourceCodester Design and Implementation of Covid-19 Directory on Vaccination System login.php sql injection5.6 Medium
libxml2OSS-FuzzGlobal-buffer-overflow in xmlCurrentCharNo score- computer parts sales and inventory system project parts sales and inventory system, sourcecodester computer parts sales and inventory system +1 moreSourceCodester Computer Parts Sales and Inventory System cust_transac.php sql injection6.3 Medium
- liferea project liferealiferea Feed Enrichment update.c update_job_run os command injection6.3 Medium
- hsycmsHsycms Add Category Module cate.php cross site scripting3.5 Low
- vim, vim vim/vim +1 moreNULL Pointer Dereference in vim/vim8.4 High
- hashicorp vault, vault enterprise +1 moreVault Fails to Verify if the AppRole SecretID Belongs to Role During a Destroy Operation4.4 Medium
- hapifhir hl7 fhir coreHL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-240577.5 High
- flarum, flarum framework +1 morePath Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files in flarum6.6 Medium
- Show moreLoading…