CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- google chrome, fedoraproject fedora +1 moreUse after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote...8.8 High
- chromium, google chrome, fedoraproject fedora +2 moreUse after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote...9.8 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker...8.8 High
- silabs.com wi-sun linux border router, silabs wireless smart ubiquitous network linux border router firmware +1 moreMissing MAC layer security in Wi-SUN Linux Border Router8.2 High
- silabs.com wi-sun sdk, silabs wi-sun software development kit +1 moreMissing MAC layer security in Wi-SUN SDK8.2 High
- hewlett packard enterprise (hpe) aruba cx 10000 switch series, aruba cx 9300 switch series, aruba cx 8400 switch series, aruba cx 8360 switch series, aruba cx 8325 switch series, aruba cx 8320 switch series, aruba cx 6400 switch series, aruba cx 6300 switch series, aruba cx 6200f switch series, hpe arubaos-cx +1 moreAuthenticated Remote Code Execution in Aruba CX Switches7.2 High
- mgt-commerce cloudpanelMGT-COMMERCE CloudPanel Shared Certificate8.1 High
- wechat sdk python project sdk python, zwczou wechat sdk python +1 morezwczou WeChat SDK Python to_xml xml external entity reference6.3 Medium
- netgear orbi router rbr750, rbs750 firmware +1 moreA command execution vulnerability exists in the hidden telnet service functionality of Netgear...7.2 High
- netgear orbi router rbr750, rbs750 firmware +1 moreA command execution vulnerability exists in the access control functionality of Netgear Orbi...9.1 Critical
- netgear orbi router rbr750, rbs750 firmware +1 moreA cleartext transmission vulnerability exists in the Remote Management functionality of Netgear...6.5 Medium
- netgear orbi satellite rbs750, rbs750 firmware +1 moreA command execution vulnerability exists in the ubus backend communications functionality of...7.2 High
oracleasmSUSESecurity update for oracleasmNo score- rapid7 insightcloudsec, insightappsec +1 moreRapid7 InsightCloudSec resource.db() method access8.8 High
- rapid7 insightcloudsec, insightappsec +1 moreRapid7 InsightCloudSec box object access8.1 High
- rapid7 insightcloudsec, insightappsec +1 moreRapid7 InsightCloudSec getattr() method access8.8 High
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager SQL injection6.5 Medium
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager information disclosure6.2 Medium
- jenkins project absint a³ plugin, jenkins absint a3 +1 moreJenkins AbsInt a³ Plugin XML External Entity Reference vulnerability7.1 High
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager denial of service2.7 Low
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager information disclosure4.3 Medium
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager information disclosure4.3 Medium
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager improper authorization5.4 Medium
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager information disclosure2.7 Low
- ibm aspera faspexIBM Aspera Faspex information disclosure6.5 Medium
- ibm aspera faspexIBM Aspera Faspex XML external entity injection9.9 Critical
- ibm aspera faspexIBM Aspera Faspex information disclosure7.5 High
dpdkSUSE,dpdk-thunderxSUSE +1 moreSecurity update for dpdkNo scoreoracleasmSUSESecurity update for oracleasmNo scoredrbdSUSESecurity update for drbdNo scoreoracleasmSUSESecurity update for oracleasmNo scoreoracleasmSUSESecurity update for oracleasmNo score- pacsraporXSS in Pacsrapor6.1 Medium
oracleasmSUSESecurity update for oracleasmNo score- pacsraporSQLi in Pacsrapor9.8 Critical
- cloudflare cloudflaredLocal Privilege Escalation Vulnerability in cloudflared's Installer7.5 High
- mapicoin project mapicoinYdalb mapicoin stats.php cross site scripting3.5 Low
dpdkSUSE,dpdk-thunderxSUSE +1 moreSecurity update for dpdkNo score- vadi digikentIDOR in Digikent8.8 High
dpdkopenSUSESecurity update for dpdkNo score- galleryape gallery images apeWordPress Photo Gallery – Image Gallery by Ape Plugin <= 2.2.8 is vulnerable to Cross Site Scripting (XSS)5.4 Medium
- tcbarrett wp glossary, wp glossary project glossary +1 moreWordPress Glossary Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)5.4 Medium
- galaxy weblinks gallery with thumbnail sliderWordPress Gallery with thumbnail slider Plugin <= 6.0 is vulnerable to Cross Site Scripting (XSS)5.4 Medium
- generalbytes crypto application serverGeneral Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM...9.1 Critical
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a...7.8 High
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server...6.5 Medium
- schneider electric igss data server(igssdataserver.exe), schneider-electric custom reports, igss dashboard +3 more +5 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server...8.8 High
- Show moreLoading…