CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- jenkins remote-jobs-view, jenkins project remote-jobs-view-plugin plugin +1 moreJenkins remote-jobs-view-plugin vulnerable to XML external entity attacks6.5 Medium
- jenkins phabricator differential, jenkins project phabricator differential plugin +1 moreJenkins Phabricator Differential Plugin vulnerable to XML external entity (XXE) attacks8.2 High
- jenkins performance publisher, jenkins project performance publisher plugin +1 moreJenkins Performance Publisher Plugin vulnerable to XML external entity (XXE) attacks8.2 High
- jenkins visual studio code metrics, jenkins project visual studio code metrics plugin +1 moreJenkins Visual Studio Code Metrics Plugin vulnerable to XML external entity (XXE) attacks8.2 High
- jenkins crap4j, jenkins project crap4j plugin +1 moreJenkins Crap4J Plugin vulnerable to XML external entity (XXE) attacks7.5 High
- jenkins mashup portlets, jenkins project mashup portlets plugin +1 moreJenkins Mashup Portlets Plugin vulnerable to stored cross-site scripting5.4 Medium
- jenkins cppcheck, jenkins project cppcheck plugin +1 moreJenkins Cppcheck Plugin vulnerable to stored cross-site scripting (XSS)5.4 Medium
- jenkins convert to pipeline, jenkins project convert to pipeline plugin +1 moreJenkins Convert To Pipeline Plugin vulnerable to command injection9.8 Critical
- jenkins convert to pipeline, jenkins project convert to pipeline plugin +1 moreJenkins Convert To Pipeline Plugin vulnerable to cross-site request forgery8.8 High
- jenkins octoperf load testing, jenkins project octoperf load testing plugin plugin +1 moreJenkins OctoPerf Load Testing Plugin missing permission check allows for unauthorized server connections4.3 Medium
- jenkins octoperf load testing, jenkins project octoperf load testing plugin plugin +1 moreJenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery8.8 High
- jenkins octoperf load testing, jenkins project octoperf load testing plugin plugin +1 moreJenkins OctoPerf Load Testing Plugin missing permission check allows for ID enumeration4.3 Medium
- jenkins octoperf load testing, jenkins project octoperf load testing plugin plugin +1 moreJenkins OctoPerf Load Testing Plugin vulnerable to credential capture6.5 Medium
- jenkins octoperf load testing, jenkins project octoperf load testing plugin plugin +1 moreJenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery4.3 Medium
- jenkins pipeline aggregator view, jenkins project pipeline aggregator view plugin +1 moreJenkins Pipeline Aggregator View Plugin vulnerable to Cross-site Scripting5.4 Medium
- jenkins jacoco, jenkins project jacoco plugin +1 moreJenkins JaCoCo Plugin vulnerable to Stored Cross-site Scripting5.4 Medium
- jenkins role-based authorization strategy, jenkins project role-based authorization strategy plugin +1 moreJenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabled9.8 Critical
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +21 more +23 moreCODESYS: Exposure of Resource to Wrong Sphere in CODESYS V38.8 High
- codesys control for beaglebone, control for empc-a/imx6, control for iot2000 +22 more +24 moreCodesys Runtime Improper Limitation of a Pathname8.8 High
- 201206030 novel-plusnovel-plus list sql injection4.7 Medium
- 201206030 novel-plusnovel-plus list MenuService sql injection7.3 High
- automatic question paper generator system project question paper generator system, sourcecodester automatic question paper generator system +1 moreSourceCodester Automatic Question Paper Generator System cross site scripting3.5 Low
- automatic question paper generator system project question paper generator system, sourcecodester automatic question paper generator system +1 moreSourceCodester Automatic Question Paper Generator System GET Parameter view_class.php sql injection6.3 Medium
- automatic question paper generator system project question paper generator system, sourcecodester automatic question paper generator system +1 moreSourceCodester Automatic Question Paper Generator System sql injection6.3 Medium
grub2SUSESecurity update for grub2No scoregrub2SUSESecurity update for grub2No scoregrub2SUSESecurity update for grub2No scoregrub2SUSESecurity update for grub2No score- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System currency.php exec sql injection6.3 Medium
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System approve_delete.php exec sql injection6.3 Medium
- grafana, grafana enterprise +1 moreStored XSS in Graphite FunctionDescription tooltip6.2 Medium
- as koc energy web report systemXSS in As Koc Web Report System6.1 Medium
- as koc energy web report systemSQLi in As Koc Web Report System9.8 Critical
- varta element backup firmware, element s1 firmware, element s2 firmware +12 more +14 moreVARTA: Multiple devices prone to hard-coded credentials9.8 Critical
- coder code-servercode-server vulnerable to Missing Origin Validation in WebSockets8.2 High
- linux kernelAn issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex...6.7 Medium
- veritas netbackupAn issue was discovered in Veritas NetBackup before 10.0. A vulnerability in the way NetBackup...7.8 High
- veritas netbackupAn issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to...7.1 High
- omicronenergy stationguard, stationscout +1 moreIncorrect authorization in OMICRON StationGuard 1.10 through 2.20 and StationScout 1.30 through 2...9.8 Critical
- omicronenergy stationguard, stationscout +1 moreThe update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited...9.8 Critical
- couchbase serverIn Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without...5.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle: teacher can access names of users they do not have permission to access4.3 Medium
- moodleMoodle: csrf risk in resetting all templates of a database activity8.8 High
- moodleMoodle: users' name enumeration possible via idor on learning plans page4.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle: pix helper potential mustache code injection risk9.8 Critical
- moodleMoodle: algebra filter xss when filter is misconfigured6.1 Medium
- moodleMoodle: xss risk when outputting database activity filter data6.1 Medium
- moodleMoodle: authenticated arbitrary file read through malformed backup file6.5 Medium
- moodleMoodle: authenticated sql injection via availability check8.8 High
- swftoolsswfdump v0.9.2 was discovered to contain a heap buffer overflow in the function...5.5 Medium
- Show moreLoading…