CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- discourseDiscourse's SSRF protection missing for some FastImage requests5.9 Medium
- knplabs snappySnappy vulnerable to PHAR deserialization, allowing remote code execution9.8 Critical
- ciliumCilium eBPF filters may be temporarily removed during agent restart6.5 Medium
- ciliumCilium vulnerable to potential network policy bypass when routing IPv6 traffic4.2 Medium
- ciliumcilium-agent container can access the host via `hostPath` mount4.4 Medium
- discourseDiscourse vulnerable to SSRF protection bypass possible with IPv4-mapped IPv6 addresses5.7 Medium
- rockwell automation modbus tcp server add on instructionsRockwell Automation Modbus TCP AOI Server Could Leak Sensitive Information5.3 Medium
- discourseDiscourse vulnerable to multisite DoS by spamming backups4.5 Medium
- discourseDiscourse vulnerable to Cross-site Scripting - user name displayed on post4.4 Medium
- chasil universal star rating, universal star rating project star rating +1 moreWordPress Universal Star Rating Plugin <= 2.1.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- obox launchpad – coming soon & maintenance mode plugin, launchpad - coming soon \& maintenance mode plugin +1 moreWordPress Launchpad – Coming Soon & Maintenance Mode Plugin Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
drbdopenSUSESecurity update for drbdNo scoredrbdSUSESecurity update for drbdNo score- discourseDiscourse chat messages susceptible to Cross-site Scripting through chat excerpts6.5 Medium
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System createuser.php query sql injection6.3 Medium
- automatic question paper generator system project question paper generator system, sourcecodester automatic question paper generator system +1 moreSourceCodester Automatic Question Paper Generator System GET Parameter manage_question_paper.php sql injection6.3 Medium
- rapidload power-up for autoptimize, shakee93 rapidload ai – optimize web vitals automatically +1 moreRapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery6.3 Medium
- discourseDiscourse: Presence of read restricted topics may be leaked if tagged with a tag that is visible to all users4.3 Medium
- erin garscadden gc testimonials, gc testimonials project testimonials +1 moreWordPress GC Testimonials Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)5.4 Medium
- fabian von allmen wp calendar, wp calendar project calendar +1 moreWordPress WP Calendar Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)5.4 Medium
- john west slideshow se, slideshow se project se +1 moreWordPress Slideshow SE Plugin <= 2.5.5 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
- implecode ecommerce product catalog plugin for wordpress, ecommerce product catalog +1 moreeCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- access-keys wp popup banners, wp popup banners project popup banners +1 moreWP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL Injection8.8 High
libxml2OSS-FuzzGlobal-buffer-overflow in xmlDictLookupNo scorelibxml2OSS-FuzzGlobal-buffer-overflow in htmlParseDocumentNo scorelibxml2OSS-FuzzGlobal-buffer-overflow in xmlParseContentInternalNo scoremrubyOSS-FuzzHeap-use-after-free in mrb_str_hash_mNo scorelibxml2OSS-FuzzGlobal-buffer-overflow in xmlSkipBlankCharsNo scorelibxml2OSS-FuzzGlobal-buffer-overflow in xmlParseQNameNo scorelibxml2OSS-FuzzGlobal-buffer-overflow in xmlNextCharNo scorelibrawOSS-FuzzUNKNOWN READ in LibRaw::sget4No score- tipsandtricks-hq wp express checkout, mra13 wp express checkout (accept paypal payments easily) +1 moreThe WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...4.4 Medium
oracleasmSUSESecurity update for oracleasmNo score- booking-wp-plugin bookly, ladela wordpress online booking and scheduling plugin – bookly +1 moreThe Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name...7.2 High
- oretnom23 student study center desk management systemSourceCodester Student Study Center Desk Management System Report sql injection6.3 Medium
- oretnom23 student study center desk management systemSourceCodester Student Study Center Desk Management System POST Parameter path traversal6.5 Medium
- oretnom23 student study center desk management systemSourceCodester Student Study Center Desk Management System view_student sql injection6.3 Medium
- medicine tracker system project tracker system, sourcecodester medicine tracker system +1 moreSourceCodester Medicine Tracker System improper authentication7.3 High
- utarit persolusSQLi in Utarit Persolus9.8 Critical
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System createCategories.php query sql injection6.3 Medium
- online pizza ordering system project pizza ordering system, sourcecodester online pizza ordering system +1 moreSourceCodester Online Pizza Ordering System Password Change improper authentication6.5 Medium
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System changeUsername.php sql injection6.3 Medium
- online pizza ordering system project pizza ordering system, sourcecodester online pizza ordering system +1 moreSourceCodester Online Pizza Ordering System Login Page sql injection5.6 Medium
- jeecg boot, unspecified jeecg-boot +1 morejeecg-boot qurestSql sql injection6.3 Medium
- watchdog anti-virusWatchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 access control4.4 Medium
- gpacGPAC load_text.c buffer overflow5.3 Medium
- mp4v2 project mp4v2MP4v2 mp4track.cpp GetSampleFileOffset denial of service3.3 Low
- mp4v2 project mp4v2MP4v2 mp4trackdump.cpp DumpTrack denial of service3.3 Low
- gpacGPAC av_parsers.c gf_av1_reset_state double free5.3 Medium
- gpacGPAC mpegts.c gf_m2ts_process_sdt heap-based overflow5.3 Medium
- Show moreLoading…