CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- sato-global cl4nx plus firmwareAn authentication bypass vulnerability in the web client interface for the CL4NX printer before...9.8 Critical
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreImproper Privilege Management in thorsten/phpmyfaq7.2 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting in thorsten/phpmyfaq6.3 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq8.1 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq4.7 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Generic in thorsten/phpmyfaq8.4 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreImproper Neutralization of Input During Web Page Generation in thorsten/phpmyfaq4.7 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreWeak Password Requirements in thorsten/phpmyfaq5.5 Medium
- generex ups cs141, cs141 firmware +1 moreAdmin password reset via file upload vulnerability in Generex CS1418.8 High
- generex ups cs141, cs141 firmware +1 morePrivilege Escalation via file upload vulnerability at Generex CS1414.3 Medium
- generex ups cs141, cs141 firmware +1 moreRCE via file upload vulnerability in Generex CS14110.0 Critical
- generex ups cs141, cs141 firmware +1 moreDoS via file upload vulnerability at Generex CS1417.5 High
- generex ups cs141, cs141 firmware +1 moreImproper Input Validation in Generex CS1417.5 High
- x-man project x-manX-Man 1.0 has a SQL injection vulnerability, which can cause data leakage.7.5 High
- ibosIBOS mark&op=delFromSend sql injection6.3 Medium
- iteachyou dreamer cmsDreamer CMS File Upload cross site scripting3.5 Low
- pandora kmplayerKMPlayer SHFOLDER.dll uncontrolled search path5.3 Medium
- ibosIBOS htaccess unrestricted upload6.3 Medium
- sourcecodester grade point average gpa calculator, grade point average \(gpa\) calculator project point average \(gpa\) calculator +1 moreSourceCodester Grade Point Average GPA Calculator index.php cross site scripting3.5 Low
- mindsdbArbitrary File Write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdb7.5 High
- ibosIBOS Report Search getlist sql injection6.3 Medium
- jeecg boot, unspecified jeecg-boot +1 morejeecg-boot Sleep Command SysDictMapper.java sql injection4.3 Medium
- air cargo management system project cargo management system, sourcecodester air cargo management system +1 moreSourceCodester Air Cargo Management System GET Parameter manage_user.php sql injection4.7 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is vulnerable to HTML injection. HTML code is stored and included without being...4.6 Medium
- simple and beautiful shopping cart system project and beautiful shopping cart system, sourcecodester simple and beautiful shopping cart system +1 moreSourceCodester Simple and Beautiful Shopping Cart System upload.php unrestricted upload6.3 Medium
- sourcecodester young entrepreneur e-negosyo system, young entrepreneur e-negosyo system project entrepreneur e-negosyo system +1 moreSourceCodester Young Entrepreneur E-Negosyo System sql injection6.3 Medium
- sourcecodester young entrepreneur e-negosyo system, young entrepreneur e-negosyo system project entrepreneur e-negosyo system +1 moreSourceCodester Young Entrepreneur E-Negosyo System login.php sql injection7.3 High
- unpoly unpoly-railsDenial of Service in unpoly-rails5.9 Medium
- sourcecodester young entrepreneur e-negosyo system, young entrepreneur e-negosyo system project entrepreneur e-negosyo system +1 moreSourceCodester Young Entrepreneur E-Negosyo System sql injection5.5 Medium
- sourcecodester young entrepreneur e-negosyo system, young entrepreneur e-negosyo system project entrepreneur e-negosyo system +1 moreSourceCodester Young Entrepreneur E-Negosyo System passwordrecover.php sql injection6.3 Medium
- sourcecodester young entrepreneur e-negosyo system, young entrepreneur e-negosyo system project entrepreneur e-negosyo system +1 moreSourceCodester Young Entrepreneur E-Negosyo System unrestricted upload7.3 High
- nextcloud server, kiteworks security-advisories +1 moreInsecure randomness for default password in nextcloud3.5 Low
- nextcloud server, kiteworks security-advisories +1 moreUnrestricted filenames for logo or favicon as admin in the theming settings in nextcloud server2.4 Low
- nextcloud server, kiteworks security-advisories +1 moreReference fetch can saturate the server bandwidth for 10 seconds in nextcloud server5.7 Medium
- nextcloud server, kiteworks security-advisories +1 morePotential share collision for recipients when caching is enabled in nextcloud server5.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreScope of workflow operations is not validated in nextcloud server9.1 Critical
- nextcloud, kiteworks security-advisories +1 moreApp lockout in nextcloud Android app can be bypassed via thirdparty apps4.4 Medium
- nextcloud, kiteworks security-advisories +1 moreApp pin of the iOS app can be bypassed in Nextcloud iOS4.4 Medium
- mindsdbArbitrary File Write when Extracting Tarballs retrieved from a remote location using in mindsdb8.5 High
- manageengine opmanager, zohocorp manageengine opmanager, manageengine opmanager msp +1 more +3 moreA blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of...5.8 Medium
- academysoftwarefoundation openimageioAn information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of...5.3 Medium
- academysoftwarefoundation openimageioA denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO...7.5 High
- academysoftwarefoundation openimageioAn out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of...7.5 High
- sniproxyA buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6...9.8 Critical
- infoline project management systemSSRF in Infoline Project Management System9.8 Critical
mrubyOSS-FuzzUNKNOWN READ in iv_putNo scorewiresharkOSS-FuzzStack-buffer-overflow in ext11_work_out_bundlesNo score- acymailing, acymailing newsletter plugin for joomla in the enterprise version +1 moreStored XSS affecting the AcyMailing plugin for Joomla7.2 High
- acymailing, acymailing newsletter plugin for joomla +1 moreMissing access control affecting the AcyMailing plugin for Joomla6.5 Medium
- acymailing, acymailing newsletter plugin for joomla in the enterprise version +1 moreUnauthenticated RCE affecting the AcyMailing plugin for Joomla9.8 Critical
- Show moreLoading…