CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- langchain, langchain community +1 moreLangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery6.3 Medium
- helpdeskzCross-Site Scripting vulnerability in HelpDeskZ4.6 Medium
- apache airflowApache Airflow: Overly broad default permissions for Viewer/Ops (audit logs)4.7 Medium
- dell secure connect gateway, secure connect gateway (scg) 5.0 appliance - srs +1 moreDell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS...7.1 High
- dell secure connect gateway, secure connect gateway (scg) 5.0 appliance - srs +1 moreDell Secure Connect Gateway, 5.18, contains an Inadequate Encryption Strength Vulnerability. An...3.7 Low
- mayurik petrol pump management, sourcecodester petrol pump management software +1 moreSourceCodester Petrol Pump Management Software product.php unrestricted upload4.7 Medium
- djeet finale lite – sales countdown timer & discount for woocommerce, xlplugins finale, finale lite +3 more +5 moreNextMove Lite – Thank You Page for WooCommerce & Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.17.0 - Missing Authorization to Unauthenticated System Information Disclosure5.3 Medium
- atsumi oet-213h-bts1Initialization of a resource with an insecure default vulnerability in OET-213H-BTS1 sold in...8.3 High
- j's communications co., ltd. revoworks browser, revoworks scvx +1 moreProtection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when...9.1 Critical
- solarwinds security event managerSolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability8.8 High
- w&t com redirector legacy, com redirector pnp, opc-server +4 more +6 moreWiesemann & Theis: Multiple products prone to unquoted search path7.8 High
- sirvWordPress Sirv plugin <= 7.2.0 - Broken Access Control vulnerability5.4 Medium
- sirvWordPress Sirv plugin <= 7.2.0 - Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- awordpresslife responsive slideshow, awplife slider responsive slideshow +1 moreSlider Responsive Slideshow – Image slider, Gallery slideshow <= 1.3.8 - Authenticated (Contributor+) PHP Object Injection8.8 High
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty information disclosure5.3 Medium
- ibm filenet content managerIBM FileNet Content Manager directory traversal5.3 Medium
- ibm cp4ba - filenet content manager, filenet content manager +1 moreIBM FileNet Content Manager privilege escalation6.3 Medium
- ibm cognos command centerIBM Cognos Command Center information disclosure5.3 Medium
- ibm engineering requirements management, engineering requirements management doors, engineering requirements management doors web access +2 moreIBM Engineering Requirements Management cross-site request forgery6.5 Medium
- ibm engineering requirements management, engineering requirements management doors, engineering requirements management doors web access +2 moreIBM Engineering Requirements Management information disclosure5.1 Medium
- ibm engineering requirements management, engineering requirements management doors, engineering requirements management doors web access +2 moreIBM Engineering Requirements Management cross-site scripting4.8 Medium
- microdicom dicom viewerMicroDicom DICOM Viewer Out-of-Bounds Write7.8 High
- microdicom dicom viewerMicroDicom DICOM Heap-based Buffer Overflow7.8 High
- delta electronics cncsoft-bDelta Electronics CNCSoft-B Stack-based Buffer Overflow7.8 High
- netentsec application security gateway, ns-asg application security gateway, ns-asg firmware +2 moreNetentsec NS-ASG Application Security Gateway list_ipAddressPolicy.php sql injection6.3 Medium
- mayurik petrol pump managementFile Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute...9.8 Critical
- mayurik petrol pump managementSQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute...9.8 Critical
- mayurik petrol pump managementCross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to...6.1 Medium
- mayurik petrol pump management, petroleum management software application project management software application +1 moreCross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to...6.1 Medium
- cszcms csz cms, cszcms +1 moreA Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows an attacker to execute arbitrary...6.1 Medium
- codelyfe stupid simple cms, stupid simple cms +1 moreStupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via ...8.8 High
- libtor lbt-t300-t390 firmwareLBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in...7.5 High
- libtor lbt-t300-t390 firmwareLBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in...7.5 High
- libtor lbt-t300-t390 firmwareLBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in...7.5 High
- libtor lbt-t300-t390 firmwareLBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in...6.5 Medium
- libtor lbt-t300-t390 firmwareLBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apn_name_3g parameter...6.5 Medium
- libtor lbt-t300-t390 firmwareLBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow via the vpn_client_ip...6.5 Medium
- codelyfe stupid simple cmsStupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...6.3 Medium
- codelyfe stupid simple cms, stupid simple cms +1 moreStupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting (XSS) within the blog title of the...6.1 Medium
- webkul bagistoBagist Cross-site Scripting vulnerability6.5 Medium
- linksys e2000 firmwareLinksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.8.8 High
- phpseclib, debian linux +1 morephpseclib guardrails needed on OID length7.5 High
- phpseclib, debian linux, phpseclib 1x +2 more +4 morephpseclib: guardrails needed on isPrime and randomPrime7.5 High
- google androidIn wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic...5.5 Medium
- google androidIn aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This...8.4 High
- google androidIn plugin_extern_func of TBD, there is a possible out of bounds read due to a missing bounds...5.5 Medium
- google androidIn fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check....5.9 Medium
- google androidIn ppcfw_init_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized...7.8 High
- google androidIn ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out...5.1 Medium
- google androidIn ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer...7.5 High
- Show moreLoading…