CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- firmanet technology customer relation manager, firmanet software and technology customer relation manager +1 moreXSS in Firmanet Software and Technology Customer Relation Manager6.1 Medium
- firmanet customer relation managerXSS in Firmanet Software and Technology Customer Relation Manager6.1 Medium
- pi websolution css js manager, async javascript, defer render blocking css supports woocommerce, piwebsolution css js manager\, async javascript\, defer render blocking css supports woocommerce +1 moreWordPress CSS JS Manager Plugin <= 2.4.49 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- supsystic slider, slider by supsystic +1 moreWordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- dannie herdyawan dh – anti adblocker, dh - anti adblocker project - anti adblocker +1 moreWordPress DH – Anti AdBlocker Plugin <= 36 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wp csv to database project csv to database, tips and tricks hq, josh401 wp csv to database – insert csv file content into wordpress database +1 moreWordPress WP CSV to Database Plugin <= 2.6 is vulnerable to Cross Site Request Forgery (CSRF)3.1 Low
- paul c. schroeder ip vault – wp firewall, ip vault - wp firewall project vault - wp firewall +1 moreWordPress IP Vault – WP Firewall Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- codecabin wp go maps, wp go maps (formerly wp google maps), wpgmaps wp go maps (formerly wp google maps) +2 moreWordPress WP Google Maps Plugin <= 9.0.15 is vulnerable to Path Traversal4.9 Medium
- sap authenticator, authenticator for android +1 moreInformation Disclosure vulnerability in SAP Authenticator for Android6.1 Medium
- sap solution manager and abap managed systems, solution manager +1 moreArbitrary Code Execution in SAP Solution Manager and ABAP managed systems (ST-PI)8.8 High
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreDirectory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform8.7 High
- sap netweaver as for abap and abap platform (saprsbro program), netweaver application server abap +1 moreDirectory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform9.6 Critical
- sap host agent (saposcol), host agent +1 moreMemory Corruption vulnerability in SAP Host Agent (SAPOSCOL)7.2 High
- sap businessobjects business intelligence platform (web services), businessobjects business intelligence +1 moreSensitive Information Disclosure in the SAP BusinessObjects Business Intelligence platform5.0 Medium
- sap businessobjects business intelligence, businessobjects business intelligence platform (web services) +1 moreServer Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform6.5 Medium
- sap businessobjects business intelligence platform (web services), businessobjects business intelligence platform +1 moreServer Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform6.5 Medium
- sap netweaver application server for abap and abap platform, netweaver application server abap +1 moreDenial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform6.5 Medium
- sap netweaver application server for abap and abap platform, netweaver application server abap +1 moreDirectory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform9.6 Critical
- sap netweaver as java (object analyzing service), netweaver application server for java +1 moreImproper Access Control in SAP NetWeaver AS Java (Object Analyzing Service)5.3 Medium
- sap netweaver (sap enterprise portal), netweaver enterprise portal +1 moreXML External Entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal)6.8 Medium
- sap netweaver application server for java, netweaver as for java +1 moreImproper Access Control in SAP NetWeaver AS Java (Cache Management Service)5.3 Medium
- opentext content serverCross-Site Scripting (XSS) vulnerability in SAP Content Server6.1 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreDenial of Service (DoS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform6.5 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreServer Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform7.4 High
- sap business objects business intelligence platform, business objects (adaptive job server) +1 moreOS Command Execution vulnerability in SAP Business Objects Business Intelligence Platform (Adaptive Job Server)9.0 Critical
- sap business objects business intelligence platform (cmc), business objects business intelligence platform +1 moreCode Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC)9.9 Critical
- sap abap platform, abap platform +1 moreSQL Injection vulnerability in SAP ABAP Platform6.8 Medium
- sap netweaver application server java, netweaver as java for classload service +1 moreImproper Access Control in SAP NetWeaver AS Java (Classload Service)5.3 Medium
- sap netweaver as for java, netweaver application server for java +1 moreImproper Access Control in SAP NetWeaver AS for Java9.9 Critical
- sap netweaverCross-Site Scripting (XSS) vulnerability in SAP NetWeaver6.1 Medium
- apsystems energy communication unit firmwareOS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in...9.8 Critical
- opendoas project opendoasOpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing...8.8 High
- kdab hotspotKDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege...7.0 High
- teluu pjsip, pjsip pjproject +1 moreasterisk - security update7.5 High
- phpgurukul bp monitoring management systemBP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- oretnom23 online food ordering systemA Cross-Site Request Forgery (CSRF) in Online Food Ordering System v1.0 allows attackers to...6.5 Medium
- totaljs openplatformA stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows...5.4 Medium
- totaljs openplatformA stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows...5.4 Medium
- propius machineselectorA Hard Coded Admin Credentials issue in the Web-UI Admin Panel in Propius MachineSelector 6.6.0...9.8 Critical
- sitecore experience manager, experience platform +1 moreAn issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted...7.2 High
- prestashop advanced reviewsPrestaShop ws_productreviews < 3.6.2 is vulnerable to SQL Injection.8.8 High
- opennetworking onosONOS vulnerable to reflected cross-site scripting6.1 Medium
- libelfin project libelfinLibelfin v0.3 was discovered to contain an integer overflow in the load function at elf...6.5 Medium
- netgear rax30 firmwareNetgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass...9.8 Critical
- foxcpp maddyFull authentication bypass if SASL authorization username is specified9.1 Critical
- panindex project panindexPanindex uses hard coded cyptographic key9.8 Critical
- akuvox e11, e11 firmware +1 moreCVE-2023-03459.8 Critical
- akuvox e11, e11 firmware +1 moreCVE-2023-03467.5 High
- akuvox e11, e11 firmware +1 moreCVE-2023-03477.5 High
- akuvox e11, e11 firmware +1 moreCVE-2023-03487.5 High
- Show moreLoading…