CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- openatom openharmonyWlan has a use after free vulnerability4.3 Medium
- openatom openharmonyPasteboard has an out-of-bounds read vulnerability2.9 Low
- mozilla thunderbird, debian linux +1 moreThe encrypted subject of an email message could be incorrectly and permanently assigned to an...7.5 High
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6983, mt6985, mt6989, mt8168, mt8188, mt8195, mt8673, mt8675 +1 moreIn pq, there is a possible out of bounds read due to an incorrect bounds check. This could lead...3.4 Low
- google android, mediatek mt6739, mt6761 +29 more +31 moreIn pq, there is a possible write-what-where condition due to an incorrect bounds check. This...6.7 Medium
- google android, mediatek mt6835, mt6855 +9 more +11 moreIn vdec, there is a possible permission bypass due to a permissions bypass. This could lead to...4.4 Medium
- google android, mediatek mt6761, mt6765 +18 more +20 moreIn battery, there is a possible escalation of privilege due to a missing bounds check. This could...7.2 High
- google android, mediatek, inc. mt2713, mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6785, mt6789, mt6835, mt6855, mt6879, mt6883, mt6885, mt6886, mt6893, mt6895, mt6983, mt6985, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8185, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8370, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8675, mt8676, mt8678, mt8755, mt8765, mt8766, mt8768, mt8775, mt8781, mt8786, mt8788, mt8789, mt8791, mt8792, mt8796, mt8797, mt8798 +1 moreIn nvram, there is a possible information disclosure due to a missing bounds check. This could...4.4 Medium
- google android, mediatek mt6580, mt6739 +34 more +36 moreIn aee, there is a possible permission bypass due to a missing permission check. This could lead...6.7 Medium
- google android, mediatek mt6985, mt6989 +3 more +5 moreIn wlan firmware, there is a possible out of bounds write due to improper input validation. This...8.4 High
- google android, mediatek mt6739, mt6757 +18 more +20 moreIn da, there is a possible out of bounds write due to lack of valudation. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6739, mt6757, mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8167, mt8168, mt8195, mt8512 +1 moreIn da, there is a possible information disclosure due to improper input validation. This could...4.4 Medium
- mediatek mt7925, mt7927, software package +1 more +3 moreIn wlan driver, there is a possible memory leak due to improper input handling. This could lead...5.9 Medium
- mediatek mt7615, software development kit +1 moreIn wlan driver, there is a possible out of bounds write due to improper input validation. This...9.8 Critical
- mediatek mt6890, mt7915, mt7916 +5 more +7 moreIn wlan service, there is a possible out of bounds write due to improper input validation. This...9.8 Critical
- mayurik best pos management systemSourceCodester Best POS Management System admin_class.php sql injection6.3 Medium
- mayurik best pos management systemSourceCodester Best POS Management System index.php file inclusion4.3 Medium
- sourcecodester online mobile management store, oretnom23 online mobile store management system +1 moreSourceCodester Online Mobile Management Store view_product.php sql injection6.3 Medium
- sourcecodester online mobile management store, oretnom23 online mobile store management system +1 moreSourceCodester Online Mobile Management Store view_order.php sql injection6.3 Medium
- sourcecodester online mobile management store, oretnom23 online mobile store management system +1 moreSourceCodester Online Mobile Management Store manage_product.php sql injection4.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: use-after-free in procrenderaddglyphs7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreXorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents7.3 High
- byzronetwork management platformSQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a...7.8 High
- flycms project flycmsFlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the ...7.4 High
- dlink go-rt-ac750 firmware, gortac750 a1 firmware +1 moreA Cross-site scripting (XSS) vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi and...6.1 Medium
- flusityFlusity-CMS v2.33 is vulnerable to Cross Site Scripting (XSS) in the "Contact form."6.1 Medium
- flusityFlusity-CMS v2.33 is affected by: Cross Site Scripting (XSS) in 'Custom Blocks.'6.1 Medium
- elinksmart esmartcamThe Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES...7.5 High
- idurar project idurariA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to...7.5 High
- oretnom23 customer support systemCustomer Support System v1 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- oretnom23 customer support systemCustomer Support System v1 was discovered to contain a SQL injection vulnerability via the id...4.3 Medium
- oretnom23 customer support systemCustomer Support System v1 was discovered to contain a SQL injection vulnerability via the id...7.3 High
- oretnom23 customer support systemCustomer Support System v1 was discovered to contain a SQL injection vulnerability via the...8.8 High
- oretnom23 customer support systemCustomer Support System v1 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- oretnom23 customer support systemCustomer Support System v1 was discovered to contain a SQL injection vulnerability via the email...8.8 High
- sourcecodester online mobile management store, oretnom23 online mobile store management system +1 moreSourceCodester Online Mobile Management Store Product Price logic error4.3 Medium
- itsourcecode insurance management systemSourceCodester Insurance Management System file inclusion5.3 Medium
- codeastro membership management systemCodeAstro Membership Management System settings.php sql injection4.7 Medium
- sourcecodester online mobile management store, oretnom23 online mobile store management system +1 moreSourceCodester Online Mobile Management Store Users.php unrestricted upload6.3 Medium
- sourcecodester online mobile management store, oretnom23 online mobile store management system +1 moreSourceCodester Online Mobile Management Store login.php sql injection7.3 High
- ibm watson cp4d data storesIBM Watson CP4D Data Stores improper input validation5.9 Medium
- ibm watson cp4d data storesIBM Watson CP4D Data Stores information disclosure4.5 Medium
- ibm qradar wincollect agent, qradar wincollect +1 moreIBM QRadar WinCollect Agent4.4 Medium
- sourcecodester online mobile management store, oretnom23 online mobile store management system +1 moreSourceCodester Online Mobile Management Store ?p=products cross site scripting3.5 Low
- mintplexlabs anythingllm, mintplex-labs mintplex-labs/anything-llm +1 moreDefault user role exporting save state of instance9.6 Critical
- sourcecodester online mobile management store, oretnom23 online mobile store management system +1 moreSourceCodester Online Mobile Management Store update-tracker.php cross site scripting3.5 Low
- ibm cloud pak for security, qradar suite products, qradar suite +2 moreIBM QRadar Suite information dislosure5.9 Medium
- ibm cloud pak for security, qradar suite products, qradar suite +2 moreIBM QRadar Suite information dislosure5.9 Medium
- Show moreLoading…