CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- totolink cp900 firmwareTOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the...9.8 Critical
- inex ixp managerCross Site Scripting vulnerabilty found in IXPManager v.5.6.0 allows attackers to excute...6.1 Medium
- cszcms csz cmsFile upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute...8.8 High
- ibm websphere application serverIBM WebSphere Application Server cross-site scripting5.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM privilege escalation6.7 Medium
- ckeditor, ckeditor ckeditor4, fedoraproject fedora +2 moreckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process4.7 Medium
- pimcorePimcore vulnerable to improper quoting of filters in Custom Reports6.2 Medium
- minioMinIO is vulnerable to privilege escalation on Linux/MacOS8.8 High
- minioMinio Privilege Escalation on Windows via Path separator manipulation8.8 High
- minioMinio Information Disclosure in Cluster Deployment7.5 High
- crewjam samlcrewjam/saml vulnerable to Denial Of Service Via Deflate Decompression Bomb7.5 High
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server and Enterprise Server missing brute force protection on password confirmation modal4.2 Medium
- opennms horizon, meridian +1 moreForm Can Be Manipulated with Cross-Site Request Forgery (CSRF)8.1 High
- devolutions gatewayUncontrolled resource consumption in the logging feature in Devolutions Gateway 2023.1.1 and...7.5 High
- openssl, siemens bfcclient, simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreExcessive Resource Usage Verifying X.509 Policy Constraints7.5 High
- datagearDataGear Graph Dataset cross site scripting3.5 Low
- datagearDataGear pagingQueryData sql injection6.3 Medium
- syoyo tinydngsyoyo tinydng tiny_dng_loader.h __interceptor_memcpy heap-based overflow3.3 Low
- e-commerce system project system, sourcecodester e-commerce system +1 moreSourceCodester E-Commerce System cross site scripting3.5 Low
- oretnom23 student study center desk management systemSourceCodester Student Study Center Desk Management System GET Parameter index.php cross site scripting3.5 Low
- oretnom23 student study center desk management systemSourceCodester Student Study Center Desk Management System assign.php cross site scripting3.5 Low
- medical certificate generator app project certificate generator app, sourcecodester medical certificate generator app +1 moreSourceCodester Medical Certificate Generator App action.php sql injection6.3 Medium
- linux kernelUAF in Linux kernel's tcindex (traffic control index filter) implementation7.8 High
libxml2OSS-FuzzGlobal-buffer-overflow in htmlParseDocumentNo scorelibxml2OSS-FuzzGlobal-buffer-overflow in xmlParseEntityDeclNo scorelibxml2OSS-FuzzGlobal-buffer-overflow in xmlStrndupNo score- feifeicmsFeiFeiCMS Extension Tool slide_add.html cross site scripting3.5 Low
- devolutions remote desktop managerInformation disclosure in the user creation feature of a MSSQL data source in Devolutions Remote...6.5 Medium
- air cargo management system project cargo management system, sourcecodester air cargo management system +1 moreSourceCodester Air Cargo Management System GET Parameter update_status.php sql injection6.3 Medium
- oretnom23 student study center desk management systemSourceCodester Student Study Center Desk Management System assign.php sql injection6.3 Medium
- datagearDataGear Plugin cross site scripting2.0 Low
- code-projects simple online hotel reservation systemcode-projects Simple Online Hotel Reservation System add_room.php unrestricted upload6.3 Medium
ntrucrates.iontru-rs has unsound FFI: Wrong API usage causes write past allocated areaNo score- tinytiff project tinytiffTinyTIFF File tinytiffreader.c buffer overflow2.8 Low
- sourcecodester storage unit rental management system, storage unit rental management system project unit rental management system +1 moreSourceCodester Storage Unit Rental Management System unrestricted upload4.7 Medium
- simple and beautiful shopping cart system project and beautiful shopping cart system, sourcecodester simple and beautiful shopping cart system +1 moreSimple and Beautiful Shopping Cart System uploadera.php unrestricted upload6.3 Medium
- e-commerce system project system, sourcecodester e-commerce system +1 moreSourceCodester E-Commerce System Username access control6.3 Medium
- judging management system project management system, sourcecodester judging management system +1 moreSourceCodester Judging Management System summary_results.php sql injection6.3 Medium
- mattermostFull name revealed via /plugins/focalboard/api/v2/users3.5 Low
- apache tomcatApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Medium
oracleasmopenSUSESecurity update for oracleasmNo score- rockwell automation thinmanager thinserver, rockwellautomation thinmanager +1 moreRockwell Automation ThinManager ThinServer Heap-Based Buffer Overflow7.5 High
- leadgenerated lead generatedThe Lead Generated WordPress Plugin, version <= 1.23, was affected by an unauthenticated insecure...9.8 Critical
- pluginus inpost galleryThe InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site...5.4 Medium
- technocrackers bulk price update for woocommerceThe Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflected cross...5.4 Medium
- pluginus wordpress meta data and taxonomies filterThe Meta Data and Taxonomies Filter WordPress plugin, in versions < 1.3.1, is affected by a...5.4 Medium
- formidablepro2pdf formidable pro2pdfThe Formidable PRO2PDF WordPress Plugin, version < 3.11, is affected by an authenticated SQL...8.8 High
- codemenschen gift vouchersThe Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an...9.8 Critical
- accesspressthemes wp popup bannersThe WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL...8.8 High
- e-dynamics events made easyThe Events Made Easy WordPress Plugin, version <= 2.3.14 is affected by an authenticated SQL...8.8 High
- Show moreLoading…