CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- black duck coverityAuthenticated Resources Accessible via Forced Browsing6.5 Medium
- german mesky gmaceWordPress GMAce Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- profilepress membership team paid membership plugin, ecommerce, registration form, login form, user profile & restrict content – profilepress, properfraction profilepress +1 moreWordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- wpdevart booking calendar, appointment booking system, booking calendar +1 moreWordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- daniel powney multi ratingWordPress Multi Rating Plugin <= 5.0.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- apache archivaApache Archiva privilege escalation6.5 Medium
- essentialplugin popup anything, wp onlinesupport, essential plugin popup anything – a marketing popup and lead generation conversions +1 moreWordPress Popup Anything Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in...6.1 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.5.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be...4.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external...5.5 Medium
- earnings and expense tracker app project and expense tracker app, sourcecodester earnings and expense tracker app +1 moreSourceCodester Earnings and Expense Tracker App cross site scripting3.5 Low
- m-filesLocal Elevation of Privilege in M-Files8.8 High
- german mesky gmaceGMAce <= 1.5.2 - Cross-Site Request Forgery to Arbitrary File Modification (Creation/Overwrite/Deletion)8.8 High
- earnings and expense tracker app project and expense tracker app, sourcecodester earnings and expense tracker app +1 moreSourceCodester Earnings and Expense Tracker App cross site scripting3.5 Low
- sourcecodester earnings and expense tracker app, oretnom23 earnings and expense tracker application +1 moreSourceCodester Earnings and Expense Tracker App cross site scripting3.5 Low
oracleasmopenSUSESecurity update for oracleasmNo score- sourcecodester simple task allocation system, task allocation system project allocation system +1 moreSourceCodester Simple Task Allocation System cross site scripting3.5 Low
- sourcecodester young entrepreneur e-negosyo system, young entrepreneur e-negosyo system project entrepreneur e-negosyo system +1 moreSourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scripting3.5 Low
- hadskyHadSky Installation Interface index.php command injection6.3 Medium
- qnap qts, quts hero, qutscloud +9 more +11 moreQTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVR6.6 Medium
- hadskyHadSky unrestricted upload4.7 Medium
- statamic cms, xunruicms +1 moreXunrui CMS system_log.html information disclosure4.3 Medium
- malwarebytes adwcleanerMalwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete...7.8 High
- supremainc biostar 2Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values...6.5 Medium
- peppermintAn issue in the password reset function of Peppermint v0.2.4 allows attackers to access the...8.1 High
- trudesk project trudeskTrudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...5.4 Medium
- atrocoreIn Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is...9.8 Critical
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore5.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Generic in pimcore/pimcore5.3 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Generic in pimcore/pimcore4.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcore4.0 Medium
- linux kernel, redhat enterprise linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS...7.1 High
- fedoraproject fedora, x.org x server +1 moreA flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege...7.8 High
- sambaThe Samba AD DC administration tool, when operating against a remote LDAP server, will by default...5.9 Medium
- qemu, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be...7.8 High
- sambaThe fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi...6.5 Medium
- sambaA flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but...4.3 Medium
- ffmpeglibavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves...8.1 High
- nasm netwide assemblerNASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake()...7.8 High
- nasm netwide assemblerNASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c.5.5 Medium
- nasm netwide assemblerNASM v2.16 was discovered to contain a null pointer deference in the NASM component5.5 Medium
- rarlab winrarThis vulnerability allows remote attackers to disclose sensitive information on affected...2.5 Low
- foxit pdf reader, pdf editor +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- d-link dir-3040, dlink dir-3040 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- d-link dir-825, dlink dir-825\/ac firmware, dir-825\/ee firmware +2 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- d-link dir-825, dlink dir-825\/ac firmware, dir-825\/ee firmware +2 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- d-link dir-825, dlink dir-825\/ac firmware, dir-825\/ee firmware +2 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- d-link dir-825, dlink dir-825\/ac firmware, dir-825\/ee firmware +2 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- d-link dir-825, dlink dir-825\/ac firmware, dir-825\/ee firmware +2 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- Show moreLoading…