CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- authzed spicedbInteger overflow in chunking helper causes dispatching to miss elements or panic7.3 High
- commend ws203vicmCommend WS203VICM Weak Encoding for Password5.7 Medium
- commend ws203vicm, ws203vicm firmware +1 moreCommend WS203VICM Improper Access Control9.4 Critical
- commend ws203vicm, ws203vicm firmware +1 moreCommend WS203VICM Argument Injection8.6 High
- cisa icsnpp-ethercat, industrial control systems network protocol parsers (icsnpp) - ethercat plugin for zeek +1 moreEthercat Zeek Plugin Out-of-bounds Read8.2 High
- cisa icsnpp-ethercat, industrial control systems network protocol parsers (icsnpp) - ethercat plugin for zeek +1 moreEthercat Zeek Plugin Out-of-bounds Write9.8 Critical
- cisa icsnpp-ethercat, industrial control systems network protocol parsers (icsnpp) - ethercat plugin for zeek +1 moreEthercat Zeek Plugin Out-of-bounds Write9.8 Critical
@budibase/servernpmBudibase affected by VM2 Constructor Escape Vulnerability9.8 Critical- hp thinpro, hp inc. thinpro 8.0 +1 morePrevious versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8) could potentially contain security...8.2 High
- santesoft dicom viewer pro, sante dicom viewer pro +1 moreSantesoft Sante DICOM Viewer Pro Out-of-Bounds Read7.8 High
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System index.php sql injection6.3 Medium
- codeastro house rental management systemCodeAstro House Rental Management System tenant.php missing authentication5.3 Medium
- remyandrade daily habit trackerSourceCodester Daily Habit Tracker update-tracker.php cross site scripting3.5 Low
- parse-community parse-serverParse Server literalizeRegexPart SQL Injection10.0 Critical
- mini mini-tmallMini-Tmall 1 sql injection6.3 Medium
- oretnom23 block inserter for dynamic contentSourceCodester Block Inserter for Dynamic Content view_post.php sql injection6.3 Medium
- remyandrade flashcard quiz appSourceCodester Flashcard Quiz App update-flashcard.php cross site scripting3.5 Low
@sentry/react-nativenpmPotential leakage of Sentry auth tokens by React Native SDK with Expo pluginNo score- openbsdOpenBSD 7.4 and 7.3 m_split() network buffer kernel crash7.5 High
- remyandrade faq management systemSourceCodester FAQ Management System Update FAQ cross site scripting3.5 Low
- openbsdOpenBSD 7.3 invalid l2tp message npppd crash7.5 High
- openbsdOpenBSD 7.4 pf state race condition kernel crash6.2 Medium
- remyandrade faq management systemSourceCodester FAQ Management System add-faq.php cross site scripting3.5 Low
- 3ds 3dexperience, catia composer, simulia abaqus +2 more +4 moreOS Command Injection vulnerability affecting documentation server on certain Releases of 3DEXPERIENCE, SIMULIA Abaqus, SIMULIA Isight and CATIA Composer9.4 Critical
- directusDirectus version number disclosure5.3 Medium
- apache archivaApache Archiva: disabling user registration is not effective7.5 High
- apache archivaApache Archiva: incorrect authentication potentially leading to account takeover7.5 High
- apache archivaApache Archiva: reflected XSS5.4 Medium
- directusDirectus MySQL accent insensitive email matching8.2 High
- remyandrade faq management systemSourceCodester FAQ Management System delete-faq.php sql injection6.3 Medium
- remyandrade computer inventory systemSourceCodester Computer Inventory System update-computer.php cross site scripting3.5 Low
- remyandrade computer inventory systemSourceCodester Computer Inventory System delete-computer.php sql injection6.3 Medium
- apache ambariApache Ambari: Various XSS problems6.1 Medium
- remyandrade computer inventory systemSourceCodester Computer Inventory System add-computer.php cross site scripting2.4 Low
- remyandrade barangay population monitoring systemSourceCodester Barangay Population Monitoring System update-resident.php cross site scripting3.5 Low
- opentext arcsight enterprise security managerOpenText / Micro Focus ArcSight Enterprise Security Manager Remote Vulnerability4.3 Medium
- rahman selectcoursrahman SelectCours Template CacheController.java getCacheNames injection4.3 Medium
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway, secure connect gateway policy manager +2 moreDell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery...8.0 High
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 moreDell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site...7.6 High
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway, secure connect gateway policy manager +2 moreDell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site...7.6 High
- dell secure connect gateway (scg) policy manager, secure connect gateway, policy manager for secure connect gateway +2 moreDell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site...7.6 High
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 moreDell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site...7.6 High
- mayurik petrol pump management, sourcecodester petrol pump management software +1 moreSourceCodester Petrol Pump Management Software profile_crud.php cross site scripting2.4 Low
- mayurik petrol pump management, sourcecodester petrol pump management software +1 moreSourceCodester Petrol Pump Management Software edit_categories.php sql injection4.7 Medium
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway, secure connect gateway policy manager +2 moreDell Secure Connect Gateway (SCG) Policy Manager, all versions, contain an improper authorization...5.8 Medium
- dell dup framework, update package framework +1 moreDell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontrolled Search Path...6.7 Medium
- dell cpg bios, latitude 5280 firmware, latitude 5288 firmware +171 more +173 moreDell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user...6.8 Medium
- mayurik petrol pump management, sourcecodester petrol pump management software +1 moreSourceCodester Petrol Pump Management Software edit_supplier.php sql injection4.7 Medium
- mayurik petrol pump management, sourcecodester petrol pump management software +1 moreSourceCodester Petrol Pump Management Software login_crud.php sql injection4.7 Medium
- mayurik petrol pump management, sourcecodester petrol pump management software +1 moreSourceCodester Petrol Pump Management Software service_crud.php unrestricted upload4.7 Medium
- Show moreLoading…