CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in...7.8 High
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server...8.8 High
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server...6.5 Medium
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that...7.8 High
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server...6.5 Medium
- extplorerInsecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a...8.8 High
- prestashop eo tagsThe eo_tags package before 1.4.19 for PrestaShop allows SQL injection via a crafted _ga cookie.9.8 Critical
- prestashop eo tagsThe eo_tags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or...9.8 Critical
- xuxueli xxl-jobXuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter7.5 High
- mcafee total protectionMcAfee Total Protection prior to 16.0.50 may allow an adversary (with full administrative access)...6.7 Medium
- paradox ipr512 firmwareAn issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service...7.5 High
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreSQL Injection in nilsteampassnet/teampass7.5 High
- answer, answerdev answerdev/answer +1 moreInsufficient Session Expiration in answerdev/answer6.8 Medium
- answer, answerdev answerdev/answer +1 moreBusiness Logic Errors in answerdev/answer8.1 High
- answer, answerdev answerdev/answer +1 moreBusiness Logic Errors in answerdev/answer6.0 Medium
- answer, answerdev answerdev/answer +1 moreObservable Response Discrepancy in answerdev/answer5.3 Medium
- answer, answerdev answerdev/answer +1 moreImproper Restriction of Excessive Authentication Attempts in answerdev/answer5.3 Medium
- answer, answerdev answerdev/answer +1 moreObservable Timing Discrepancy in answerdev/answer5.3 Medium
- answer, answerdev answerdev/answer +1 moreAuthentication Bypass by Capture-replay in answerdev/answer5.3 Medium
- answer, answerdev answerdev/answer +1 moreCross-site Scripting (XSS) - Stored in answerdev/answer7.6 High
- answer, answerdev answerdev/answer +1 moreCross-site Scripting (XSS) - Stored in answerdev/answer8.3 High
- corebos, tsolucio tsolucio/corebos +1 moreCross-site Scripting (XSS) - Generic in tsolucio/corebos8.3 High
- megafeis bofei dbd\+An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android...9.8 Critical
- megafeis bofei dbd\+An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker...8.1 High
- megafeis bofei dbd\+An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker...7.5 High
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...6.5 Medium
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...8.6 High
- xen, debian linux, fedoraproject fedora +2 morex86 shadow plus log-dirty mode use-after-free In environments where host assisted address...7.8 High
- fedoraproject fedora, xen +1 morex86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original...5.5 Medium
- 404like project 404like404like Plugin 404Like.php checkPage sql injection7.3 High
- wellintech kinghistorianAn integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of...8.1 High
- wellintech kinghistorianAn information disclosure vulnerability exists in the User authentication functionality of...7.5 High
- redisSpecially crafted MSETNX command can lead to denial-of-service5.5 Medium
- galaxyproject galaxyGalaxy vulnerable to unauthorized modification of pages/visualizations due to insufficient permission check9.1 Critical
- rapid7 insightvm, nexpose +1 moreRapid7 Nexpose Uncontrolled URL Redirect4.3 Medium
- getshortcodes shortcodes ultimate, unknown wordpress shortcodes plugin — shortcodes ultimate +1 moreShortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosure6.5 Medium
- custom content shortcode project content shortcode, unknown custom content shortcode +1 moreCustom Content Shortcode <= 4.0.2 - Contributor+ LFI8.8 High
- joomunited wp meta seoWP Meta SEO < 4.5.3 - Subscriber+ SQLi8.8 High
- custom content shortcode project content shortcode, unknown custom content shortcode +1 moreCustom Content Shortcode <= 4.0.2 - Contributor+ Stored XSS5.4 Medium
- dash10 oauth server, unknown wp oauth server (oauth authentication) +1 moreWP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion4.3 Medium
- unknown wpb advanced faqWPB Advanced FAQ <= 1.0.6 - Contributor+ Stored XSS5.4 Medium
- hidekazu ishikawa vk all in one expansion unitVK All in One Expansion Unit < 9.87.1.0 - Reflected XSS6.1 Medium
- getresponse, unknown getresponse for wordpress +1 moreGetResponse for WordPress <= 5.5.31 - Contributor+ Stored XSS5.4 Medium
- metagauss profilegridProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password Reset8.8 High
- getshortcodes shortcodes ultimate, unknown wordpress shortcodes plugin — shortcodes ultimate +1 moreShortcodes Ultimate < 5.12.8 - Subscriber+ Arbitrary Post Access6.5 Medium
- unknown woocommerce multiple customer addresses & shipping, woocommerce multiple customer addresses \& shipping project multiple customer addresses \& shipping +1 moreWooCommerce Multiple Customer Addresses & Shipping < 21.7 - Arbitrary Address Creation/Deletion/Access/Update via IDOR8.8 High
- real.kit project real.kitreal.Kit < 5.1.1 - Contributor+ Stored XSS5.4 Medium
- unknown slimstat analyticsSlimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection8.8 High
- saan world clock, unknown saan world clock +1 moreSaan World Clock <= 1.8 - Contributor+ Stored XSS5.4 Medium
- gotowpGoToWP <= 5.1.1 - Contributor+ Stored XSS5.4 Medium
- Show moreLoading…