CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- medicine tracker system project tracker system, sourcecodester medicine tracker system +1 moreSourceCodester Medicine Tracker System cross site scripting3.5 Low
- watchdog anti-virusWatchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 denial of service5.5 Medium
- filseclab twister antivirusFilseclab Twister Antivirus IoControlCode fildds.sys 0x80112053 denial of service3.3 Low
- filseclab twister antivirusFilseclab Twister Antivirus IoControlCode fildds.sys 0x8011206B denial of service7.5 High
- filseclab twister antivirusFilseclab Twister Antivirus IoControlCode fildds.sys 0x80112053 denial of service6.5 Medium
- meizhou qingyunke qykcmsMeizhou Qingyunke QYKCMS Update api.php unrestricted upload4.7 Medium
- automatic question paper generator system project question paper generator system, sourcecodester automatic question paper generator system +1 moreSourceCodester Automatic Question Paper Generator System GET Parameter view_course.php sql injection6.3 Medium
- automatic question paper generator system project question paper generator system, sourcecodester automatic question paper generator system +1 moreSourceCodester Automatic Question Paper Generator System GET Parameter manage_user.php sql injection6.3 Medium
- medicine tracker system project tracker system, sourcecodester medicine tracker system +1 moreSourceCodester Medicine Tracker System GET Parameter view_details.php sql injection6.3 Medium
- dell emc unisphere for powermax, emc unisphere for powermax virtual appliance, powermax os +1 more +3 moreDell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual...7.4 High
soxDebiansox - regression updateNo score- openbsd openssh, netapp brocade fabric operating system, hci bootstrap os +6 more +8 moressh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop...9.8 Critical
- netgate pfsenseA command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0...8.8 High
- centralite pearl firmwareA vulnerability in Centralite Pearl Thermostat 0x04075010 allows attackers to cause a Denial of...7.5 High
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreAuthorization Bypass Through User-Controlled Key in nilsteampassnet/teampass6.3 Medium
- jettisonInfinite recursion in Jettison leads to denial of service when creating a crafted JSONArray5.9 Medium
- snowflake streamlitStreamlit Cross-site Scripting vulnerability5.9 Medium
- discoursePresence of restricted personal Discourse messages may be leaked if tagged with a tag3.5 Low
- eip stack group openerAn out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request...10.0 Critical
- eip stack group openerAn out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request...10.0 Critical
- eip stack group openerA use-of-uninitialized-pointer vulnerability exists in the Forward Open...7.5 High
- ge ifix, ge digital proficy ifix +1 moreGE Digital Proficy Code Injection7.8 High
twitter-bootstrap-railsRubyGemsReflective Cross-site Scripting Vulnerability in twitter-bootstrap-railsNo scorepimcore/pimcorePackagistReflected XSS in Application Logger module4.8 Medium- aveva plant scada, telemetry server +1 moreCVE-2023-12569.8 Critical
pimcore/pimcorePackagistCross-site Scripting (XSS) - stored in Print DocumentsNo score- omron cj1m sysmac cj-series, cj1m sysmac cp-series, cj1m sysmac cs-series +128 more +130 moreOmron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM...9.1 Critical
- linux kernelA flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0...5.5 Medium
- play-with-docker, play-with-docker play with docker +1 morePlay With Docker vulnerable to Authorization Bypass Through User-Controlled Key6.5 Medium
- pimcorePimcore has improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model7.9 High
- pimcorePimcore vulnerable to Cross-site Scripting in UrlSlug Data type6.1 Medium
- dablelv go-huge-utilGo-huge-util vulnerable to path traversal when unzipping files8.8 High
- fit2cloud jumpserver, koko +1 moreJumpServer Koko vulnerable to Command Injection for Kubernetes Connection5.7 Medium
- flatpakFlatpak metadata with ANSI control codes can cause misleading terminal output5.0 Medium
- flatpakTIOCLINUX can send commands outside sandbox if running on a virtual console10.0 Critical
- silverstripe graphql, silverstripe-graphql +1 moresilverstripe/graphql Denial of Service vulnerability7.5 High
- incsub forminatorWordPress Forminator plugin <= 1.14.11 - Stored Cross-Site Scripting (XSS) vulnerability7.1 High
mrubyOSS-FuzzUNKNOWN READ in mrb_exc_get_idNo scoreflacOSS-FuzzHeap-buffer-overflow in FLAC__bitwriter_write_rice_signed_blockNo scorelibxsltOSS-FuzzHeap-double-free in xsltCompileStepPatternNo scoremrubyOSS-FuzzUNKNOWN READ in mrb_obj_iv_getNo scoredrbdSUSESecurity update for drbdNo scoredrbdSUSESecurity update for drbdNo score- gadget works online ordering system project works online ordering system, sourcecodester gadget works online ordering system +1 moreSourceCodester Gadget Works Online Ordering System Products unrestricted upload4.7 Medium
- abb infinity dc power plant, h5692448 g104 firmware, h5692448 g224l firmware +6 more +8 moreEasily guessable session ID's in NE843 Pulsar Plus Controller6.3 Medium
- oretnom23 online food ordering systemSourceCodester Online Food Ordering System POST Request access control7.3 High
- ibm aspera faspexIBM Aspera Faspex improper access controls7.5 High
- mra13 wordpress simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 moreThe WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure...5.3 Medium
- dell c4130 firmware, c4140 firmware, c6320 firmware +78 more +80 moreDell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer...7.5 High
- dell c4130 firmware, c4140 firmware, c6320 firmware +78 more +80 moreDell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer...7.5 High
- Show moreLoading…