CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- enterprisedt completeftp, completeftp server +1 moreThis vulnerability allows remote attackers to delete arbitrary files on affected installations of...8.2 High
- flexera revenera installshieldA vulnerability has been reported in the windows installer (MSI) built with InstallScript custom...7.8 High
- mi xiaomi router firmwareWhen Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal...7.5 High
- flexera flexnet publisherA Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5,...7.5 High
- flexera flexnet manager, flexnet manager suite 2015 +1 moreA vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including...7.8 High
- statamic cms, xunruicms +1 moreXunrui CMS Install.txt direct request4.3 Medium
- statamic cms, xunruicms +1 moreXunrui CMS test.php information disclosure4.3 Medium
- drivergeniusDriverGenius IOCTL mydrivers64.sys 0x9C40A108 memory corruption5.3 Medium
- drivergeniusDriverGenius IOCTL mydrivers64.sys 0x9C40A0E0 memory corruption5.3 Medium
- drivergeniusDriverGenius IOCTL mydrivers64.sys 0x9c402084 denial of service5.5 Medium
- drivergeniusDriverGenius IOCTL mydrivers64.sys 0x9C402088 memory corruption7.8 High
- school registration and fee system project registration and fee system, sourcecodester school registration and fee system +1 moreSourceCodester School Registration and Fee System GET Parameter edit_stud.php sql injection6.3 Medium
- cp plus kvms proCP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to sensitive credentials being...7.8 High
- matrix-org matrix-react-sdkPrototype pollution in matrix-react-sdk8.2 High
- robodkRoboDK versions 5.5.3 and prior contain an insecure permission assignment to critical directories...7.9 High
- matrix-org matrix-js-sdk, matrix javascript sdk +1 morePrototype pollution in matrix-js-sdk8.2 High
- school registration and fee system project registration and fee system, sourcecodester school registration and fee system +1 moreSourceCodester School Registration and Fee System POST Parameter login.php sql injection7.3 High
- propump and controls, inc. osprey pump controller, propumpservice osprey pump controller firmware +1 moreCVE-2023-287128.2 High
- propump and controls, inc. osprey pump controller, propumpservice osprey pump controller firmware +1 moreCVE-2023-287187.1 High
- propump and controls, inc. osprey pump controller, propumpservice osprey pump controller firmware +1 moreCVE-2023-283989.8 Critical
- ibm aspera, aspera cargo, aspera connect +2 moreIBM Aspera code execution8.4 High
- smarty, fedoraproject fedora +1 moreCross site scripting vulnerability in Javascript escaping in smarty/smarty7.1 High
- ibm aspera, aspera cargo, aspera connect +2 moreIBM Aspera code execution8.4 High
- propump and controls, inc. osprey pump controller, propumpservice osprey pump controller firmware +1 moreCVE-2023-286487.5 High
- propump and controls, inc. osprey pump controller, propumpservice osprey pump controller firmware +1 moreCVE-2023-273949.8 Critical
- propump and controls, inc. osprey pump controller, propumpservice osprey pump controller firmware +1 moreCVE-2023-278869.8 Critical
- propump and controls, inc. osprey pump controller, propumpservice osprey pump controller firmware +1 moreCVE-2023-286549.8 Critical
- dataeaseDataEase AWS redshift data source exists for remote code execution vulnerability8.0 High
- propump and controls, inc. osprey pump controller, propumpservice osprey pump controller firmware +1 moreCVE-2023-283757.5 High
- propump and controls, inc. osprey pump controller, propumpservice osprey pump controller firmware +1 moreCVE-2023-283958.3 High
- matrix-org matrix-react-sdk, matrix react sdk +1 morePrototype pollution in matrix-react-sdk8.2 High
- silabs gecko software development kit, silabs.com gsdk +1 moreBluetooth LE Invalid prepare write request command leads to denial of service6.5 Medium
- comrak project comrakAttacker controlled data in AST nodes is not validated in comrak5.3 Medium
comrakcrates.ioComrak vulnerable to production of excessive output when parsing Markdown (GHSL-2023-048)5.3 Medium- comrak project comrakQuadratic runtime when parsing Markdown in comrak5.3 Medium
- openssl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreCertificate policy check not enabled5.3 Medium
- openssl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreInvalid certificate policies in leaf certificates are silently ignored5.3 Medium
libxml2OSS-FuzzGlobal-buffer-overflow in xmlStrndupNo score- hitachi energy sdm600SDM600 software privilege level7.5 High
- hitachi energy sdm600SDM600 API permission check4.8 Medium
- hitachi energy sdm600SDM600 endpoint vulnerability7.5 High
- apache openmeetingsApache OpenMeetings: allows user impersonation9.8 Critical
- hitachi energy sdm600SDM600 API web services authorization validation7.7 High
- hitachi energy sdm600SDM600 file permission validation9.9 Critical
- apache fineractapache fineract: SQL injection vulnerability in certain procedure calls6.3 Medium
- apache fineractApache Fineract: SQL injection vulnerability4.3 Medium
- apache fineractApache Fineract: SSRF template type vulnerability in certain authenticated users8.1 High
- mehjabin orthi interactive svg image map builderWordPress Interactive SVG Image Map Builder Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates), unlimited-elements unlimited elements for elementor +2 moreWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- fullworks quick event managerWordPress Quick Event Manager Plugin <= 9.6.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- Show moreLoading…