CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- plugin waitingThe Waiting: One-click Countdowns WordPress Plugin, version <= 0.6.2, is affected by an...8.8 High
- vox2mesh project vox2meshvox2mesh 1.0 has stack-overflow in main.cpp, this is stack-overflow caused by incorrect use of...5.5 Medium
- tshirtecommerce custom product designerAn issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for...9.8 Critical
- tshirtecommerce custom product designerAn issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for...9.8 Critical
- jc21 nginx proxy managerAn issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a...9.8 Critical
- netgate pfsense plus, pfsense +1 moreImproper restriction of excessive authentication attempts in the SSHGuard component of Netgate...9.8 Critical
- lightcms project lightcmsLightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the...9.8 Critical
- mirotalk p2pA cross-site scripting (XSS) vulnerability in MiroTalk P2P before commit f535b35 allows attackers...6.1 Medium
- evolucare ecs imaging** UNSUPPORTED WHEN ASSIGNED ** EVOLUCARE ECSIMAGING (aka ECS Imaging) < 6.21.5 is vulnerable to...6.1 Medium
- adobe illustratorAdobe Illustrator (Beta) has a UAF vulnerability when parsing SVG files Arbitrary code execution7.8 High
- adobe creative cloud, creative cloud (desktop component) +1 moreAdobe Creative Cloud AdobeExtensionService.exe local privilege escalation vulnerability8.6 High
- adobe illustratorAdobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe illustratorAdobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe illustratorAdobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe illustratorAdobe Illustrator Improper Input Validation Remote Code Execution Vulnerability7.8 High
- adobe experience manager, experience manager cloud service +1 moreAEM Weak Cryptography for Passwords Security feature bypass5.3 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- pimcore, pimcore pimcore/pimcore +1 moreSQL Injection in pimcore/pimcore6.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreA flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid...7.8 High
- megaeis dbd\+An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows...4.3 Medium
- getgophish gophishGophish vulnerable to Cross-site Scripting via crafted landing page6.1 Medium
- getgophish gophishGophish vulnerable to Denial of Service via crafted payload involving autofocus7.5 High
- rockwell automation thinmanager thinserver, rockwellautomation thinmanager +1 moreRockwell Automation ThinManager ThinServer Path Traversal Download7.5 High
- rockwell automation thinmanager thinserver, rockwellautomation thinmanager +1 moreRockwell Automation ThinManager ThinServer Path Traversal Upload9.8 Critical
- parity frontierFrontier's modexp precompile is slow for even modulus7.5 High
- getsentry sentry-python, sentry software development kit +1 moreSentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`7.6 High
- cilium cilium-cli`cilium-cli` disables etcd authorization for clustermesh clusters4.8 Medium
- visam vbase, vbase automation base +1 moreCVE-2022-462865.5 Medium
- visam vbase, vbase automation base +1 moreCVE-2022-454685.5 Medium
- visam vbase, vbase automation base +1 moreCVE-2022-451215.5 Medium
- visam vbase, vbase automation base +1 moreCVE-2022-416965.5 Medium
- visam vbase, vbase automation base +1 moreCVE-2022-435125.5 Medium
- visam vbase, vbase automation base +1 moreCVE-2022-463005.5 Medium
- google chrome, fedoraproject fedora +1 moreOut of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker...8.8 High
- Show moreLoading…