CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- ibm manage applicationIBM Manage Application security bypass5.4 Medium
- ibm spectrum scaleIBM Spectrum Scale information disclosure5.7 Medium
drupal/responsive_media_imagePackagistThe security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please re…No score- hap-wi roxy-wiRoxy-WI vulnerable to Limited Path Traversal in name parameter7.5 High
- ibm mq certified containerIBM MQ Certified Container improper access controls7.5 High
drupal/media_responsive_thumbnailPackagistThe Media Responsive Thumbnail module allows media reference fields to be rendered as a responsive image. This module does not properly check entity access prior to rendering media. This may result in…No score- ibm app connect enterprise certified containerIBM App Connect Enterprise Certified Container6.1 Medium
drupal/corePackagistDrupal core provides a page that outputs the markup from phpinfo() to assist with diagnosing PHP configuration. If an attacker was able to achieve an XSS exploit against a privileged user, they may be…No scoredrupal/corePackagistThe language module provides a Language switcher block which can be placed to provide links to quickly switch between different languages. The URL of unpublished translations may be disclosed. When us…No scoredrupal/corePackagistThe Media module does not properly check entity access in some circumstances. This may result in users seeing thumbnails of media items they do not have access to, including for private files. This re…No score- hewlett packard enterprise (hpe) hpe flexfabric 5700 switch series, hpe flexfabric 5700 40xg 2qsfp\+ firmware, flexfabric 5700 48g 4xg 2qsfp\+ firmware +2 morePotential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series....5.3 Medium
- friendly island pizza website and ordering system project island pizza website and ordering system, sourcecodester friendly island pizza website and ordering system +1 moreSourceCodester Friendly Island Pizza Website and Ordering System POST Parameter cashconfirm.php cross site scripting3.5 Low
- code-projects simple art gallerySimple Art Gallery adminHome.php sql injection6.3 Medium
- friendly island pizza website and ordering system project island pizza website and ordering system, sourcecodester friendly island pizza website and ordering system +1 moreSourceCodester Friendly Island Pizza Website and Ordering System POST Parameter addmem.php sql injection6.3 Medium
- afs analytics analytics, afsanalytics afs analytics +1 moreWordPress AFS Analytics Plugin <= 4.18 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
- code-projects simple art gallerySimple Art Gallery adminHome.php sliderPicSubmit unrestricted upload6.3 Medium
- jetbackup, jetbackup – wp backup, migrate & restore +1 moreWordPress Backup Guard Plugin <= 1.6.9.0 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
- ajax search project search, ernest marcinko ajax search lite +1 moreWordPress Ajax Search Lite Plugin <= 4.10.3 is vulnerable to Sensitive Data Exposure4.3 Medium
- richplugins plugin for google reviewsWordPress Plugin for Google Reviews Plugin <= 2.2.3 is vulnerable to SQL Injection9.1 Critical
mrubyOSS-FuzzSegv on unknown address in mrb_bint_subNo scoremosquittoOSS-FuzzHeap-buffer-overflow in mosquitto__strdupNo score- talent software unisXSS in Talent Software UNIS6.1 Medium
- joe dolson my calendar, my calendar project calendar +1 moreWordPress My Calendar Plugin <= 3.3.24.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- rextheme wp vr – 360 panorama and virtual tour builder for wordpress, wp vr +1 moreWordPress WP VR – 360 Panorama and Virtual Tour Builder For WordPress Plugin <= 8.2.7 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- plainware locatoraid, locatoraid store locator +1 moreWordPress Locatoraid Store Locator Plugin <= 3.9.11 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- cozmoslabs client portal, cozmoslabs, madalin ungureanu, antohe cristian client portal – private user pages and login +1 moreWordPress Client Portal – Private user pages and login Plugin <= 1.1.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- apache airflowInformation disclosure in Apache Airflow5.3 Medium
- oretnom23 student study center desk management systemSourceCodester Student Study Center Desk Management System manage_user.php sql injection4.7 Medium
- debian linux, linux kernel, netapp h300s +4 more +6 moredo_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call,...7.0 High
- array networks ag/vxag arrayos, arraynetworks arrayos ag +1 moreArray Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An...9.8 Critical
- arraynetworks array osA command injection vulnerability was discovered in Array Networks APV products. A remote...7.2 High
- thekelleys dnsmasqAn issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was...7.5 High
- stellariumIn Stellarium through 1.2, attackers can write to files that are typically unintended, such as...9.8 Critical
- netgear rax30 firmwareAny request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a “Content...7.5 High
- netgear rax30 firmwareWhen uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden ...8.8 High
- linux, linux kernel, redhat enterprise linux +2 moreA NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb...5.5 Medium
- jpegoptim project jpegoptimjpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c.7.8 High
- perfree perfreeblogAn arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1...9.8 Critical
- tenda ax3 firmwareTenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip...9.8 Critical
- tenda ax3 firmwareTenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at...9.8 Critical
- jizhicmsAn arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms...7.2 High
- jizhicmsA Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to...6.5 Medium
- struktur libde265Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function...8.8 High
- struktur libde265Libde265 v1.0.11 was discovered to contain a segmentation violation via the function...6.5 Medium
- s-mall-ssm project s-mall-ssmCross site scripting (XSS) vulnerability in xenv S-mall-ssm thru commit...4.8 Medium
- arm aarch64cryptolibThe armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-in-the-middle attack. This occurs because…3.7 Low
- swig-templates project swig-templates, swig project swig +1 moreArbitrary local file read vulnerability during template rendering7.5 High
- swig-templates project swig-templates, swig project swig +1 moreAn issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to...9.8 Critical
- dlink dir-820l firmwareA heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of...6.5 Medium
- gfi kerio connectAn issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack...8.8 High
- Show moreLoading…