CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- totolink a7100ru firmwareTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection...9.8 Critical
- opengoofy hippo4jHippo4j privilege escalation issue8.8 High
- tenda g103 firmwareCommand Injection vulnerability found in Tenda G103 v.1.0.05 allows an attacker to obtain...7.5 High
- tp-link tl-mr3020 firmwareA command injection issue was found in TP-Link MR3020 v.1_150921 that allows a remote attacker to...9.8 Critical
- 360 d901 firmwareStack Overflow vulnerability found in 360 D901 allows a remote attacker to cause a Distributed...7.5 High
- joommasters jms blogPrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability.9.8 Critical
- adobe coldfusionAdobe ColdFusion Directory Traversal Arbitrary file system read Vulnerability4.9 Medium
- adobe coldfusionAdobe ColdFusion Improper Access Control Arbitrary code execution8.6 High
- adobe coldfusionAdobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution9.8 Critical
- malwarebytesIn Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the...7.8 High
- notrinos notrinoserpNotrinosERP vulnerable to SQL Injection8.8 High
- oretnom23 simple customer relationship management systemSimple Customer Relationship Management System v1.0 was discovered to contain a SQL injection...9.8 Critical
- softmaker flexipdfA stack overfow in SoftMaker Software GmbH FlexiPDF v3.0.3.0 allows attackers to execute...7.8 High
- isdecisions userlockIS Decisions UserLock MFA 11.01 is vulnerable to authentication bypass using scheduled task.7.2 High
- vmware spring frameworkSpring Framework vulnerable to denial of service via specially crafted SpEL expression6.5 Medium
- vmware spring vault, spring cloud config, spring cloud vault +2 moreSpring Vault vulnerable to insertion of sensitive information into a log file5.5 Medium
- cisco sd-wan vmanage, sd-wan +1 moreCisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability6.5 Medium
- cisco business 150ax firmware, business 151axm firmware, catalyst 9105ax firmware +29 more +31 moreCisco Access Point Software Association Request Denial of Service Vulnerability7.4 High
- cisco adaptive security appliance, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability5.3 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability6.8 Medium
- cisco aironet access point software, ios xe, wireless lan controller software +2 moreCisco Access Point Software Command Injection Vulnerability4.6 Medium
- cisco ios xe, ios xe rommon software +1 moreCisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability6.1 Medium
- cisco adaptive security appliance software, ios, ios xe +1 more +3 moreCisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability6.8 Medium
- cisco ios, ios xe +1 moreCisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability8.6 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability8.6 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability7.4 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Web UI Path Traversal Vulnerability6.5 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerabi…7.8 High
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Information Disclosure Vulnerability4.3 Medium
- cisco aironet access point software, ios xe, wireless lan controller software +2 moreCisco Access Point Software Denial of Service Vulnerability6.5 Medium
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Privilege Escalation Vulnerability8.0 High
- cisco ios xe sd-wan, ios xe software +1 moreCisco IOS XE SD-WAN Software Command Injection Vulnerability7.8 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Privilege Escalation Vulnerability4.4 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability8.6 High
- radare radare2, radareorg radareorg/radare2 +1 moreDenial of Service in radareorg/radare27.5 High
- qemu, qemu rdma, fedoraproject fedora +2 moreQemu: pvrdma: out-of-bounds read in pvrdma_ring_next_elem_read()6.0 Medium
- fedoraproject fedora, linux kernel, redhat enterprise linux +2 moreA flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might...3.3 Low
- moodleMoodle: course participation report shows roles the user should not see4.3 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreDuplicate Advisory: ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS5.5 Medium
- linux kernelA use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers...7.8 High
- linux kernelA use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a...5.5 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that...9.1 Critical
- red hat tripleo-ansible, redhat openstack, openstack tripleo ansible +1 more +3 moretripleo-ansible may disclose important configuration details from an OpenStack deployment5.5 Medium
- red hat tripleo-ansible, redhat openstack, openstack tripleo ansible +1 more +3 moretripleo-ansible may disclose important configuration details from an OpenStack deployment5.5 Medium
- xunruicmsXunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows...7.2 High
- totolink cp900 firmwareTOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection...9.8 Critical
- totolink cp900 firmwareTOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection...9.8 Critical
- totolink cp900 firmwareTOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection...9.8 Critical
- totolink cp900 firmwareA vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,9.8 Critical
- totolink cp900 firmwareTOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login.9.8 Critical
- Show moreLoading…