CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- strangerstudios paid memberships proPaid Memberships Pro < 2.9.12 - Subscriber+ SQL Injection8.8 High
- react webcam project webcam, unknown react webcam +1 moreReact Webcam <= 1.2.0 - Contributor+ Stored XSS5.4 Medium
- accesspressthemes smart logo showcase lite, unknown responsive clients logo gallery plugin for wordpress +1 moreSmart Logo Showcase Lite <= 1.1.9 - Contributor+ Stored XSS5.4 Medium
- joomunited wp meta seoWP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect6.1 Medium
- dash10 oauth server, unknown wp oauth server (oauth authentication) +1 moreWP OAuth Server < 4.2.5 - Arbitrary Post Deletion via CSRF4.3 Medium
dpdkSUSE,dpdk-thunderxSUSE +1 moreSecurity update for dpdkNo score- checkmkEmail HTML Injection6.8 Medium
- courtbouillon cairosvgCairoSVG improperly processes SVG files loaded from external resources9.9 Critical
- pimcorePimcore has Cross-site Scripting vulnerability in DataObject tooltip field6.1 Medium
- michaelrsweet pdfioPDFio vulnerable to Denial Of Service when opening a corrupt PDF file6.2 Medium
- gentoo sokoSoko SQL Injection vulnerability9.1 Critical
- charleskorn kamlkaml has potential denial of service while parsing input with anchors and aliases7.5 High
- hp integrated lights-out 4, integrated lights-out 5, integrated lights-out 6 +1 more +3 morePotential Cross-Site scripting vulnerability in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4).8.3 High
- apache sling resource mergerApache Sling Resource Merger: Requests to certain paths managed by the Apache Sling Resource Merger can lead to DoS7.5 High
- izmir katip celebi university ubys, university information management system project information management system +1 moreXSS in UBYS5.4 Medium
- map multi marker project multi marker, mickael austoni map multi marker +1 moreWordPress Map Multi Marker Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- dcooperman magicformWordPress MagicForm Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- manuel masia | pixedelic.com camera slideshowWordPress Camera slideshow Plugin <= 1.4.0.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- altanic no api amazon affiliateWordPress No API Amazon Affiliate Plugin <= 4.2.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- nicolas lemoine wp better emails, wp better emails project better emails +1 moreWordPress WP Better Emails Plugin <= 0.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- admin log project log, david gwyer admin log +1 moreWordPress Admin Log Plugin <= 1.50 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- esstat17 page loading effects, page loading effects project loading effects +1 moreWordPress Page Loading Effects Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- rafael dery superior faq, superior faq project faq +1 moreWordPress Superior FAQ Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- aarvanshinfotech online exam software : eexamhall, online exam software \ eexamhall project +1 moreWordPress Online Exam Software : eExamhall Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- nsthemes advanced social pixelWordPress Advanced Social Pixel Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- matteo candura wp htpasswd, wp htpasswd project htpasswd +1 moreWordPress WP htpasswd Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- mighty digital noozWordPress Nooz Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wp-master.ir feed changer & remover, wp-master feed changer \& remover +1 moreWordPress Feed Changer Plugin <= 0.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
drbdSUSESecurity update for drbdNo score- e-commerce system project system, sourcecodester e-commerce system +1 moreSourceCodester E-Commerce System Category Name controller.php cross site scripting3.5 Low
- plustime service area postcode checkerWordPress Service Area Postcode Checker Plugin <= 2.0.8 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- e-commerce system project system, sourcecodester e-commerce system +1 moreSourceCodester E-Commerce System login.php sql injection5.6 Medium
- e-commerce system project system, sourcecodester e-commerce system +1 moreSourceCodester E-Commerce System setDiscount.php sql injection5.0 Medium
- sourcecodester alphaware simple e-commerce system, alphaware - simple e-commerce system project - simple e-commerce system +1 moreSourceCodester Alphaware Simple E-Commerce System sql injection5.6 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreCode execution through ACL creation7.4 High
- otrs, otrs ag ((otrs)) community edition +1 morePossible XSS in Ticket Actions6.1 Medium
- sourcecodester alphaware simple e-commerce system, alphaware - simple e-commerce system project - simple e-commerce system +1 moreSourceCodester Alphaware Simple E-Commerce System admin_index.php sql injection5.6 Medium
- sourcecodester alphaware simple e-commerce system, alphaware - simple e-commerce system project - simple e-commerce system +1 moreSourceCodester Alphaware Simple E-Commerce System edit_customer.php sql injection5.6 Medium
- haxx libcurl, broadcom brocade fabric operating system firmware, netapp active iq unified manager +9 more +11 moreA double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ...5.9 Medium
- atm consulting dolibarr module quicksupplierpriceATM Consulting dolibarr_module_quicksupplierprice interface.php upatePrice sql injection6.3 Medium
- irc twitter announcer bot project twitter announcer bot, zarthus irc twitter announcer bot +1 moreZarthus IRC Twitter Announcer Bot twitter_announcer.rb get_tweets command injection5.0 Medium
soxDebiansox - regression updateNo score- haxx libcurl, broadcom brocade fabric operating system firmware, debian linux +11 more +13 moreAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 Medium
- haxx curl, broadcom brocade fabric operating system firmware, fedoraproject fedora +9 more +11 moreA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 High
- haxx curl, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - DOM in pimcore/pimcore4.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore5.2 Medium
- rockoaRockOA acloudCosAction.php.SQL runAction unrestricted upload6.3 Medium
- Show moreLoading…