CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- code-projects simple art gallerycode-projects Simple Art Gallery adminHome.php cross site scripting3.5 Low
- code-projects simple art gallerycode-projects Simple Art Gallery adminHome.php sql injection6.3 Medium
- code-projects responsive hotel sitecode-projects Responsive Hotel Site Newsletter Log messages.php sql injection6.3 Medium
- simple and nice shopping cart script project and nice shopping cart script, sourcecodester simple and nice shopping cart script +1 moreSourceCodester Simple and Nice Shopping Cart Script uploaderm.php unrestricted upload6.3 Medium
libxml2OSS-FuzzGlobal-buffer-overflow in xmlParseContentInternalNo scorep11-kitOSS-FuzzGlobal-buffer-overflow in base_C_MessageSignFinalNo scorelibxml2OSS-FuzzGlobal-buffer-overflow in htmlParseChunkNo scoreassimpOSS-FuzzUNKNOWN READ in Assimp::SMDImporter::ParseNodeInfoNo scorestb_imagecrates.ioNULL pointer derefernce in `stb_image`No score- gnu org modeorg-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers...7.8 High
- alphaware - simple e-commerce system project - simple e-commerce systemAn issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection...9.8 Critical
- tenda w20e firmwareTenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via...9.8 Critical
- tenda w20e firmwareTenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer...9.8 Critical
- evilmartians imgproxy, imgproxy imgproxy/imgproxy +1 moreCross-site Scripting (XSS) - Reflected in imgproxy/imgproxy6.5 Medium
- linux kernelIn the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not...7.8 High
- linux kernelIn the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset....7.8 High
- linux kernelIn the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names....7.8 High
- onlyoffice document serverONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges...7.8 High
- ruifang-tech rebuildRebuild list queryListOfConfig sql injection6.3 Medium
- ibosIBOS ApiController.php sql injection6.3 Medium
- max secure anti virus plusMax Secure Anti Virus Plus IoControlCode MaxProctetor64.sys 0x220019 denial of service5.5 Medium
- max secure anti virus plusMax Secure Anti Virus Plus IoControlCode MaxProc64.sys 0x220019 denial of service5.5 Medium
- max secure anti virus plusMax Secure Anti Virus Plus IoControlCode MaxCryptMon.sys 0x220020 access control4.4 Medium
- max secure anti virus plusMax Secure Anti Virus Plus IoControlCode SDActMon.sys 0x220020 access control4.4 Medium
- lespeed wisecleaner wise system monitor, wisecleaner wise system monitor +1 moreLespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C402088 access control7.8 High
- lespeed wisecleaner wise system monitor, wisecleaner wise system monitor +1 moreLespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C40A0E0 denial of service3.3 Low
- lespeed wisecleaner wise system monitor, wisecleaner wise system monitor +1 moreLespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C40A0E0 denial of service5.5 Medium
- lespeed wisecleaner wise force deleter, wisecleaner wise force deleter +1 moreLespeed WiseCleaner Wise Force Deleter IoControlCode WiseUnlock64.sys 0x220004 access control4.4 Medium
- sourcecodester young entrepreneur e-negosyo system, young entrepreneur e-negosyo system project entrepreneur e-negosyo system +1 moreSourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scripting3.5 Low
mrubyOSS-FuzzSegv on unknown address in mrb_vm_find_methodNo scorelibxml2OSS-FuzzGlobal-buffer-overflow in xmlParseQNameNo scorep11-kitOSS-FuzzGlobal-buffer-overflow in base_C_MessageEncryptInitNo score- statamic cmsxzjie cms upload unrestricted upload6.3 Medium
- teacms project teacmsXiaoBingBy TeaCMS getallarticleinfo sql injection6.3 Medium
- hkcms project hkcmsHkCms External Plugin code injection4.7 Medium
- monitoring of students cyber accounts system project of students cyber accounts system, sourcecodester monitoring of students cyber accounts system +1 moreSourceCodester Monitoring of Students Cyber Accounts System POST Parameter cross site scripting3.5 Low
- monitoring of students cyber accounts system project of students cyber accounts system, sourcecodester monitoring of students cyber accounts system +1 moreSourceCodester Monitoring of Students Cyber Accounts System POST Parameter login.php sql injection6.3 Medium
- simple music player project music player, sourcecodester simple music player +1 moreSourceCodester Simple Music Player save_music.php unrestricted upload6.3 Medium
- collection.js project collection.jsCollection.js vulnerable to Prototype Pollution7.5 High
imagemagickDebianimagemagick - regression updateNo scorexapian-coreDebianxapian-core - security updateNo score- ansible-semaphore ansible semaphoreAnsible Semaphore mishandles authentication9.8 Critical
- misp-project mispjs/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip.6.1 Medium
- misp-project mispjs/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.6.1 Medium
- squidex.io squidexSquidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.6.1 Medium
- fasterxml jackson-databindjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 High
- contiki-ngBuffer overflow in L2CAP due to misconfigured MTU8.1 High
- trendmicro txone stellarone, trend micro, inc. txone networks stellarone +1 moreTXOne StellarOne has an improper access control privilege escalation vulnerability in every...8.8 High
- miniflux project miniflux, miniflux v2 +1 moreUnauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics7.5 High
- miniflux v2, miniflux project miniflux +1 moreStored XSS in Miniflux when opening a broken image due to unescaped ServerError in proxy handler4.8 Medium
- Show moreLoading…