CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- containers podman, redhat enterprise linux +1 morePodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 Medium
- gitlab dast api scanner, dynamic application security testing analyzer +1 moreAn issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6...5.0 Medium
- open source pgadmin, pgadmin 4 +1 morepgAdmin 4 vulnerable to directory traversal6.5 Medium
- huawei emui, harmonyos +1 moreThe Always On Display (AOD) has a path traversal vulnerability in theme files. Successful...5.3 Medium
- huawei emui, harmonyos +1 moreThe facial recognition module has a vulnerability in file permission control. Successful...7.5 High
- huawei emui, harmonyos +1 moreThe recovery mode for updates has a vulnerability that causes arbitrary disk modification....7.5 High
- huawei emui, harmonyos +1 moreThe BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this...7.4 High
- huawei emui, harmonyos +1 moreSome products have the double fetch vulnerability. Successful exploitation of this vulnerability...7.5 High
- huawei emui, harmonyos +1 moreThe facial recognition module has a vulnerability in input parameter verification. Successful...7.5 High
- huawei emui, harmonyos +1 moreThe Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this...6.5 Medium
- huawei emui, harmonyos +1 moreThe Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of...6.5 Medium
- huawei emui, harmonyos +1 moreSome smartphones have configuration issues. Successful exploitation of this vulnerability may...9.8 Critical
- huawei emui, harmonyos +1 moreSome smartphones have data initialization issues. Successful exploitation of this vulnerability...7.5 High
- huawei emui, harmonyos +1 moreThe secure OS module has configuration defects. Successful exploitation of this vulnerability may...7.5 High
- huawei emui, harmonyos +1 moreThe HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation...7.5 High
- huawei emui, harmonyos +1 moreThe control component has a spoofing vulnerability. Successful exploitation of this vulnerability...9.1 Critical
- huawei emui, harmonyos +1 moreThe MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation...9.1 Critical
- huawei emui, harmonyos +1 moreThe MediaProvider module has a vulnerability in permission verification. Successful exploitation...7.5 High
- huawei emui, harmonyos +1 moreThe HwContacts module has a logic bypass vulnerability. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreThe Bluetooth module has an authentication bypass vulnerability in the pairing process....6.5 Medium
- linux kernelA double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a...7.8 High
- parrot bebop firmwareParrot Bebop 4.7.1. allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the devic…9.1 Critical
- dji spark firmwareDJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the devi…9.1 Critical
- juiker, juiker app +1 moreJuiker app - Information Leakage2.4 Low
- scriptcasedb_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin...6.5 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a...2.3 Low
- iobit malware fighterIObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflow5.3 Medium
- iobit malware fighterIObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E008 denial of service5.5 Medium
- iobit malware fighterIObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E010 denial of service5.5 Medium
- iobit malware fighterIObit Malware Fighter IOCTL ImfHpRegFilter.sys 0x8001E040 denial of service5.5 Medium
- iobit malware fighterIObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222040 denial of service5.5 Medium
- iobit malware fighterIObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222018 denial of service5.5 Medium
- iobit malware fighterIObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222010 denial of service5.5 Medium
- iobit malware fighterIObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E04C denial of service5.5 Medium
- iobit malware fighterIObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E040 denial of service5.5 Medium
libhevcOSS-FuzzUse-of-uninitialized-value in ihevce_strm_fill_doneNo scorelibhevcOSS-FuzzUse-of-uninitialized-value in complexity_RC_reset_markingNo scorelibhevcOSS-FuzzUse-of-uninitialized-value in ihevce_enc_frm_proc_slave_thrdNo score- redis redis-pyredis-py Race Condition due to incomplete fix6.5 Medium
- redis redis-pyredis-py Race Condition vulnerability3.7 Low
- ruijienetworks rg-ew1200g pro firmware, rg-ew1800gx pro firmware, rg-ew3200gx pro firmware +2 moreRG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1...8.8 High
- dcnglobal dcbi-netlog-lab firmwareAn issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI...9.8 Critical
- lb-link bl-ac1900 firmware, bl-lte300 firmware, bl-wr9000 firmware +1 more +3 moreLB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL...9.8 Critical
- ruijienetworks rg-ew1200 firmware, rg-ew1200g pro firmware, rg-ew1200r firmware +2 moreRuijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command...9.8 Critical
- otcmsOTCMS apiRun.php AutoRun cross site scripting3.5 Low
- otcmsOTCMS URL Parameter info_deal.php UseCurl server-side request forgery6.3 Medium
- arno0x twofactorauthArno0x TwoFactorAuth login.php redirect3.5 Low
- grinnellplansgrinnellplans-php read.php interface_disp_page sql injection6.3 Medium
ndpiOSS-FuzzHeap-buffer-overflow in ndpi_workflow_process_packetNo score- avast antivirusJiangMin Antivirus IOCTL kvcore.sys 0x222010 null pointer dereference5.5 Medium
- Show moreLoading…