CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- hasthemes wp educationWP Education < 1.2.7 - Arbitrary Plugin Activation via CSRF4.3 Medium
- unknown formidable forms, strategy11 formidable form builder +1 moreFormidable Forms < 6.1 - IP Spoofing6.5 Medium
- gallerycreator gallery blocks with lightbox. image gallery, (html5 video , youtube, vimeo) video gallery and lightbox for native gallery, simplygallery simply gallery blocks with lightbox +1 moreGallery Blocks with Lightbox < 3.0.8 - Subscriber+ Arbitrary Options Update8.1 High
- hasthemes ht politicHT Politic < 2.3.8 - Arbitrary Plugin Activation via CSRF4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was...4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible4.6 Medium
- keysight technologies n6854a geolocation server, keysight n6854a firmware +1 moreN6854A Geolocation Server versions 2.4.2 are vulnerable to untrusted data deserialization, which...7.8 High
- delta electronics infrasuite device masterIn Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could set...7.8 High
- delta electronics infrasuite device masterDelta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a...7.8 High
- delta electronics infrasuite device masterCVE-2023-11409.8 Critical
- delta electronics infrasuite device masterCVE-2023-11418.8 High
- delta electronics infrasuite device masterCVE-2023-11369.8 Critical
- delta electronics infrasuite device masterCVE-2023-11427.5 High
- delta electronics infrasuite device masterCVE-2023-11347.1 High
- delta electronics infrasuite device masterCVE-2023-11438.8 High
- delta electronics infrasuite device masterCVE-2023-11376.5 Medium
- delta electronics infrasuite device masterCVE-2023-11448.8 High
- delta electronics infrasuite device masterCVE-2023-11387.5 High
- delta electronics infrasuite device masterCVE-2023-11398.8 High
- delta electronics infrasuite device masterCVE-2023-11339.8 Critical
- apache inlongApache InLong: JDBC Deserialization Vulnerability in InLong8.8 High
- wpsoul greenshift, greenshift – animation and page builder blocks +1 moreWordPress Greenshift – animation and page builder blocks Plugin <= 4.9.9 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- contempoinc real estate 7 wordpress, contempothemes real estate 7 +1 moreWordPress Real Estate 7 Theme <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- le van toan woocommerce vietnam checkoutWordPress Woocommerce Vietnam Checkout Plugin <= 2.0.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- pankaj jha wordpress ping optimizer, wordpress ping optimizer project ping optimizer +1 moreWordPress WordPress Ping Optimizer Plugin <= 2.35.1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- csaf-validator-lib project csaf-validator-libArbitrary Code Execution using the validate function of csaf-validator-lib6.5 Medium
- secvisogram csaf-validator-service, csaf-validator-lib project csaf-validator-lib +1 moreInsufficient Input Validation in the Endpoint of the csaf-validator-service7.5 High
libdwarfOSS-FuzzHeap-double-free in _dwarf_read_line_table_headerNo scorelibdwarfOSS-FuzzHeap-double-free in _dwarf_read_line_table_headerNo scorendpiOSS-FuzzUNKNOWN WRITE in processCertificateElementsNo scorelibxsltOSS-FuzzUse-of-uninitialized-value in xmlSwitchEncodingNo scorelibdwarfOSS-FuzzInvalid-free in fuzz_die_cu_attrs.cNo score- abb rccmdUse of Default Password9.6 Critical
firefoxUbuntufirefox regressionsNo score- gm mylink infotainment systemThe MyLink infotainment system (build 2021.3.26) in General Motors Chevrolet Equinox 2021...6.8 Medium
- misp-project mispIn MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.6.1 Medium
- cerebrate-project cerebrateIn Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.9.8 Critical
- graphql-javaGraphQL Java vulnerable to stack consumption7.5 High
- linux kernelIn the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because...5.3 Medium
- linuxfoundation runcAppArmor bypass with symlinked /proc in runc6.1 Medium
- zoom, zoom rooms, virtual desktop infrastructure +3 more +5 moreImproper trust boundary implementation for SMB in Zoom Clients8.3 High
- zoom meetings, zoom video communications inc client for meetings for it admin macos installers +1 moreLocal Privilege Escalation in Zoom for macOS Installers7.8 High
- xipblog project xipblogSQL injection vulnerability found in PrestaShop xipblog v.2.0.1 and before allow a remote...9.8 Critical
- file management system project management systemA cross-site scripting (XSS) vulnerability in File Management Project 1.0.0 allows attackers to...6.1 Medium
- water billing system project billing systemSourceCodester Water Billing System v1.0 was discovered to contain a cross-site scripting (XSS)...6.1 Medium
- opengoofy hippo4jHippo4j allows attacker to obtain sensitive info via ConfigVerifyController function of Tenant Management module6.5 Medium
- phpgurukul park ticketing management systemPhpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name...9.8 Critical
- phpgurukul park ticketing management systemPhpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via...4.8 Medium
- llvmLLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion.5.5 Medium
- Show moreLoading…