CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- akuvox e11, e11 firmware +1 moreCVE-2023-03497.5 High
- akuvox e11, e11 firmware +1 moreCVE-2023-03506.5 Medium
- akuvox e11, e11 firmware +1 moreCVE-2023-03518.8 High
- github-slug-action project github-slug-actiongithub-slug-action vulnerable to arbitrary code execution8.8 High
- akuvox e11, e11 firmware +1 moreCVE-2023-03529.1 Critical
- akuvox e11, e11 firmware +1 moreCVE-2023-03537.2 High
- akuvox e11, e11 firmware +1 moreCVE-2023-03549.1 Critical
- ghost sqlite3, ghost foundation node-sqlite3 +1 moresqlite vulnerable to code execution due to Object coercion8.1 High
- akuvok e11, akuvox e11 firmware +1 moreCVE-2023-03556.5 Medium
- hap-wi roxy-wiRoxy-WI has Path Traversal vulnerability7.5 High
- friendly island pizza website and ordering system project island pizza website and ordering system, sourcecodester friendly island pizza website and ordering system +1 moreSourceCodester Friendly Island Pizza Website and Ordering System POST Parameter paypalsuccess.php sql injection6.3 Medium
- codeigniter shieldCodeIgniter Shield Password Shucking Vulnerability7.5 High
- step tools v18sp1 ifcmesh library, steptools ifcmesh library +1 moreStep Tools Third-Party2.2 Low
- prestashopPrestaShop has possible CSRF token fixation5.0 Medium
- client logo carousel project logo carousel, unknown client logo carousel +1 moreClient Logo Carousel <= 3.0.0 - Contributor+ Stored XSS5.4 Medium
- connekthq ajax load more, unknown wordpress infinite scroll +1 moreWordPress Infinite Scroll - Ajax Load More < 5.6.0.3 - Contributor+ Stored XSS5.4 Medium
- unknown fluentsmtpFluentSMTP < 2.2.3 - Stored XSS via Email Logs5.4 Medium
- unknown namaste! lms, kibokolabs namaste\! lms +1 moreNamaste! LMS < 2.6 - Admin+ Stored XSS4.8 Medium
- themelocation widgets for woocommerce products on elementorWoo Products Widgets For Elementor < 1.0.8 - Contributor+ Stored XSS via Shortcode5.4 Medium
- campaign url builder project url builder, unknown campaign url builder +1 moreCampaign URL Builder < 1.8.2 - Contributor+ Stored XSS5.4 Medium
- saas.group juicer, unknown embed, curate & aggregate social media feeds into your website using juicer +1 moreJuicer < 1.11 - Contributor+ Stored XSS5.4 Medium
- 10web map builder for google maps, unknown 10web map builder for google maps +1 more10WebMapBuilder < 1.0.73 - Unauthenticated SQLi9.8 Critical
- oceanwp ocean extraOcean Extra < 2.1.3 - Subscriber+ Arbitrary Post Content Disclosure6.5 Medium
- optinmonster, unknown popup builder by optinmonster +1 morePopup Builder by OptinMonster < 2.12.2 - Subscriber+ Arbitrary Post Content Disclosure6.5 Medium
- pushlabs video backgroundVideo Background < 2.7.5 - Contributor+ Stored XSS via Shortcode5.4 Medium
- cm-wp auto featured image, themeisle auto featured image (auto post thumbnail) +1 moreAuto Featured Image < 3.9.16 - Author+ Arbitrary File Upload8.8 High
- codeermeneer companion sitemap generatorCompanion Sitemap Generator <= 4.5.1.1 - Contributor+ Stored XSS5.4 Medium
- flamescorpion auto affiliate linksWordPress Auto Affiliate Links Plugin <= 6.3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- a2 hosting optimized wp, a2hosting a2 optimized +1 moreWordPress A2 Optimized WP Plugin <= 3.0.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- pixelyoursite, pixelyoursite – your smart pixel (tag) manager +1 moreWordPress PixelYourSite – Your smart PIXEL (TAG) Manager Plugin <= 9.3.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- metagauss registrationmagicWordPress RegistrationMagic Plugin <= 5.1.9.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- veronalabs wp statisticsWordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection9.9 Critical
- trellix intelligent sandbox, mcafee advanced threat defense +1 moreA command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier,...6.4 Medium
- ithemes backupbuddyWordPress BackupBuddy Plugin 8.5.8.0-8.7.4.1 is vulnerable to Directory Traversal7.5 High
harfbuzzOSS-FuzzInvalid-free in hb_free_implNo score- solidres, solidres – hotel booking plugin for wordpress +1 moreSolidres <= 0.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- webhostings wh testimonialsWH Testimonials <= 3.0.0 - Unauthenticated Stored Cross-Site Scripting7.2 High
- docker desktopDocker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers7.1 High
- docker desktopDocker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:…6.1 Medium
- joe dolson my tickets, my tickets project tickets +1 moreWordPress My Tickets Plugin <= 1.9.10 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- voidcoders void contact form 7 widget for elementor page builderWordPress Void Contact Form 7 Widget For Elementor Page Builder Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- json-smartStack exhaustion in json-smart leads to denial of service when parsing malformed JSON7.5 High
- tg soft vir.it explorer, tgsoft viragtlt.sys +1 moreTG Soft Vir.IT eXplorer IoControlCode VIRAGTLT.sys 0x82730088 denial of service5.0 Medium
- xhcms project xhcmsXHCMS POST Parameter login.php sql injection7.3 High
- sourcecodester yoga class registration system, yoga class registration system project class registration system +1 moreSourceCodester Yoga Class Registration System manage_category.php query sql injection6.3 Medium
- b. braun space battery pack sp with wi-fi, bbraun battery-pack sp with wifi firmware +1 moreAuthenticated eval injection in B. Braun Space Battery pack SP with Wi-Fi4.9 Medium
- online pizza ordering system project pizza ordering system, sourcecodester online pizza ordering system +1 moreSourceCodester Online Pizza Ordering System ajax.php sql injection7.3 High
- online pizza ordering system project pizza ordering system, sourcecodester online pizza ordering system +1 moreSourceCodester Online Pizza Ordering System GET Parameter category.php sql injection6.3 Medium
- computer parts sales and inventory system project parts sales and inventory system, sourcecodester computer parts sales and inventory system +1 moreSourceCodester Computer Parts Sales and Inventory System Add User Account cross site scripting3.5 Low
- webpack.js webpackCross-realm object access in Webpack 59.8 Critical
- Show moreLoading…