CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- d-link dir-820 router, dlink dir-820l firmware, dir820la1 firmware +2 moreOS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate...9.8 Critical
- jcgcn.com jhr-n916r firmwareCommand execution vulnerability was discovered in JHR-N916R router firmware version<=21.11.1.1483.9.8 Critical
- ofcms project ofcmsAn issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd...8.8 High
- vxsearch vx searchVX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which...7.8 High
- lancombg sa-wr915nd firmwareSA-WR915ND router firmware v17.35.1 was discovered to be vulnerable to code execution.9.8 Critical
- zoom meetings, zoom video communications inc client for meetings for it admin windows installers +1 moreLocal Privilege Escalation in Zoom for Windows Installers7.2 High
- zoom, zoom video communications inc (for android, ios, linux, macos, and windows) clients before version 5.13.5 +1 moreDenial of Service in Zoom Clients6.5 Medium
- zoom, zoom video communications inc (for android, ios, linux, macos, and windows) clients before version 5.13.5 +1 moreDenial of Service in Zoom Clients6.5 Medium
- zoom rooms, zoom, zoom video communications inc for windows +3 more +5 moreInformation Disclosure in Zoom for Windows Clients6.8 Medium
- samsung bixbytouch, samsung mobile bixby touch +1 moreImproper access control vulnerability in BixbyTouch prior to version 3.2.02.5 in China models...5.5 Medium
- samsung calendarImproper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3...4.0 Medium
- samsung myfilesImproper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in...4.0 Medium
- samsung quick share, samsung mobile quick share agent +1 moreThe sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18...4.2 Medium
- samsung android, samsung mobile devices +1 moreImproper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset...4.4 Medium
- samsung android, samsung mobile devices +1 moreUse after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to...5.0 Medium
- samsung android, samsung mobile devices +1 moreImproper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar...6.2 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows...4.1 Medium
- samsung android, samsung mobile devices +1 morePath traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows...9.0 Critical
- samsung exynos firmware, samsung mobile devices +1 moreImproper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows...5.9 Medium
- samsung android, samsung mobile devices +1 moreImproper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical...2.4 Low
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows...6.0 Medium
- samsung android, samsung mobile devices +1 moreImproper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to...3.3 Low
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows...4.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcore4.0 Medium
- linux kernelA remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The...7.5 High
- octopus serverIn affected versions of Octopus Deploy it is possible for a user to introduce code via offline...8.8 High
- uwamp project uwampAn issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a...7.8 High
- smartconrtactgames project smartconrtactgamesAn issue found in DepositGame v.1.0 allows an attacker to gain sensitive information via the...9.1 Critical
- markdown edit project editCross Site Scripting vulnerability found in Markdown Edit allows a remote attacker to execute...9.6 Critical
- mattermost, mattermost server +1 moreReflected XSS in OAuth flow completion endpoints3.5 Low
- opensipsOpenSIPS has vulnerability in the ds_is_in_list() function5.9 Medium
- opensipsOpenSIPS has vulnerability in the Digest Authentication Parser5.9 Medium
- opensipsOpenSIPS has vulnerability in the Content-Length Parser7.5 High
- opensipsOpenSIPS has memory leak in cJSON lib4.5 Medium
- opensipsOpenSIPS has vulnerability in the building the local negative replies7.5 High
- rack, debian linux +1 morePossible Denial of Service Vulnerability in Rack's header parsing5.3 Medium
- rails activesupportPossible XSS Security Vulnerability in SafeBuffer#bytesplice5.3 Medium
- opensipsOpenSIPS has vulnerability in the codec_delete_XX() functions7.5 High
- opensipsOpenSIPS has vulnerability in the codec_delete_XX() functions7.5 High
- opensipsOpenSIPS has vulnerability in the parse_to_param() function7.5 High
- kubevirtOn a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs8.2 High
- opensipsOpenSIPS has vulnerability in the parse_via() function7.5 High
- opensipsOpenSIPS has vulnerability in the parse_uri() function7.5 High
- opensipsOpenSIPS has vulnerability in the codec_delete_XX() functions7.5 High
- ibm robotic process automation, robotic process automation as a service +1 moreIBM Robotic Process Automation session fixation3.9 Low
- ibm robotic process automation, robotic process automation as a service, robotic process automation for cloud pak +2 moreIBM Robotic Process Automation security bypass4.3 Medium
- ibm robotic process automation, robotic process automation as a service, robotic process automation for cloud pak +2 moreIBM Robotic Process Automation information disclosure4.2 Medium
- ibm financial transaction managerIBM Financial Transaction Manager information disclosure4.0 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator information disclosure4.3 Medium
- Show moreLoading…