CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- upxA heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an...7.5 High
- upxA heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an...7.5 High
- upxA heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an...7.5 High
- upxA heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an...7.5 High
- redhat openshift assisted installer, openshift container platform +1 moreOpenShift Assisted Installer leaks image pull secrets as plaintext in installation logs5.5 Medium
- rizinA flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section...7.8 High
- linux kernelAn issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a...5.5 Medium
- deno, deno runtime, serde v8 +2 moreDeno improperly handles resizable ArrayBuffer10.0 Critical
- geonodeGeoserver for GeoNode sensitive information leak7.5 High
- invernyx smartcars 3, smartcars-3-bugs +1 moresmartCARS 3 Password Stored as plain text in Error Log8.0 High
- ruifang-tech rebuildRebuild publish cross site scripting3.5 Low
- ruifang-tech rebuildRebuild list-file sql injection6.3 Medium
- ruifang-tech rebuildRebuild list sql injection6.3 Medium
- crmeb java, zhong bang crmeb java +1 moreZhong Bang CRMEB Java save cross site scripting3.5 Low
- linuxfoundation argo-cdArgo CD authenticated but unauthorized users may enumerate Application names via the API4.3 Medium
- directusdirectus vulnerable to Insertion of Sensitive Information into Log File4.2 Medium
- crmeb java, zhong bang crmeb java +1 moreZhong Bang CRMEB Java list getAdminList sql injection6.3 Medium
- 201206030 novel-plusnovel-plus list sql injection4.7 Medium
- tailscaleNon-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process5.7 Medium
- basercmsbaserCMS allows any file to be uploaded9.8 Critical
- basercmsbaserCMS File Uploader Remote Code Execution (RCE) vulnerability9.8 Critical
- 201206030 novel-plusnovel-plus DictController.java sql injection6.3 Medium
- amd 2nd gen amd ryzen™ threadripper™ processor, 3rd gen amd ryzen™ threadripper™ processors, athlon gold 3150u firmware +93 more +95 moreInsufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper...8.8 High
- amd 2nd gen amd ryzen™ threadripper™ processor, 3rd gen amd ryzen™ threadripper™ processors, athlon gold 3150u firmware +93 more +95 moreInsufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to...8.8 High
- devolutions serverPermission bypass when importing or synchronizing entries in User vault in Devolutions Server...6.5 Medium
- devolutions remote desktop managerPermission bypass when importing or synchronizing entries in User vault in Devolutions Remote...6.5 Medium
- klaviyoWordPress Klaviyo Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- ajay d'souza top 10 – popular posts plugin for wordpress, top 10 - popular posts project 10 - popular posts +1 moreWordPress Top 10 Plugin <= 3.2.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- cminds cm answersWordPress CM Answers Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- awsm embed any document, awsm innovations embed any document – embed pdf, word, powerpoint and excel files +1 moreWordPress Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files Plugin <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- blockonomics, blockonomics wordpress bitcoin payments – blockonomics +1 moreWordPress Blockonomics Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- advancedformintegration advanced form integration, nasirahmed connect contact form 7, woocommerce to google sheets & other platforms – advanced form integration +1 moreWordPress Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration Plugin <= 1.62.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- this.functional ctt expresso para woocommerceWordPress CTT Expresso para WooCommerce Plugin <= 3.2.11 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- amauri wpmobile.app, amauric wpmobile.app — android and ios mobile application, wpmobile.app — android and ios mobile application +2 moreWordPress WPMobile.App — Android and iOS Mobile Application Plugin <= 11.13 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
amandaUbuntuamanda regressionNo score- rhys wynne wp ebay product feedsWordPress WP eBay Product Feeds Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- rhys wynne wp flipclockWordPress WP Flipclock Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
ndpiOSS-FuzzUNKNOWN WRITE in processCertificateElementsNo scorehdf5OSS-FuzzHeap-buffer-overflow in H5G__node_cmp3No scorelibxml2OSS-FuzzGlobal-buffer-overflow in htmlParsePINo score- masterk very simple google maps, very simple google maps project simple google maps +1 moreWordPress Very Simple Google Maps Plugin <= 2.8.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- mainwp code snippets extensionWordPress MainWP Code Snippets Extension Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- templatesnext toolkit, unknown templatesnext toolkit +1 moreWordPress TemplatesNext ToolKit Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- lester 'gamerz' chan wp-commentnaviWordPress WP-CommentNavi Plugin <= 1.12.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- oopspam anti-spamWordPress OOPSpam Anti-Spam Plugin <= 1.1.35 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- tussendoor open rdw kenteken voertuiginformatieWordPress Open RDW kenteken voertuiginformatie Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)7.1 High
- magepeople team event manager and tickets selling plugin for woocommerce, mage-people event manager and tickets selling for woocommerce +1 moreWordPress Event Manager for WooCommerce Plugin <= 3.8.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- michael winkler teachpressWordPress teachPress Plugin <= 8.1.8 is vulnerable to Cross Site Scripting (XSS)7.1 High
- community events project events, jackdewey community events +1 moreWordPress Community Events Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
- nextend smart slider 3WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to Cross Site Scripting (XSS)5.4 Medium
- Show moreLoading…