CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- dotclearA Reflected Cross-Site Scripting (XSS) vulnerability has been identified in Dotclear version 2.29...6.1 Medium
- cmsmadesimple cms made simpleCMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability...4.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple version 2.2.19 is vulnerable to Server-Side Template Injection (SSTI). The...5.9 Medium
- cmsmadesimple cms made simpleA remote code execution vulnerability has been identified in the User Defined Tags module of CMS...7.2 High
- chatgpt-wechat-personal weixin.php, dirk1983 chatgpt-wechat-personal +1 moreA Server-Side Request Forgery (SSRF) in weixin.php of ChatGPT-wechat-personal commit a0857f6...9.8 Critical
- dirk1983 chatgpt, mm1.ltd source code +1 moreA Server-Side Request Forgery (SSRF) in pictureproxy.php of ChatGPT commit f9f4bbc allows...5.8 Medium
- wondercmsA Server-Side Request Forgery (SSRF) in the getFileFromRepo function of WonderCMS v3.1.3 allows...5.3 Medium
- wondercmsA Server-Side Request Forgery (SSRF) in the installUpdateThemePluginAction function of WonderCMS...8.1 High
- swftoolsswftools v0.9.2 was discovered to contain a strcpy parameter overlap via /home/swftools/src/swfc...9.1 Critical
- swftoolsswftools v0.9.2 was discovered to contain a segmentation violation via the function s_font at...4.3 Medium
- swftoolsswftools v0.9.2 was discovered to contain a segmentation violation via the function state_free at...5.5 Medium
- swftoolsswftools v0.9.2 was discovered to contain a segmentation violation via the function...6.2 Medium
- swftoolsswftools v0.9.2 was discovered to contain a segmentation violation via the function free_lines at...5.5 Medium
- foxit pdf editor, pdf reader +1 moreIn Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript...8.4 High
- libheiflibheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an...7.5 High
- teamwireAn issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to...7.5 High
- teamwireCross Site Scripting (XSS) vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4...9.6 Critical
- teamwireCross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0...9.6 Critical
- code-projects scholars tracking systemCode-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed.7.8 High
- plonePhone information disclosure vulnerability7.5 High
- hitachi energy mach scm server, mach scm tools, hitachienergy modular advanced control for hvdc +2 moreAuthenticated List control client can execute the LINQ query in SCM Server to present event as...7.5 High
- eptura archibus, archibus ios application +1 moreAn issue was discovered in the Archibus app 4.0.3 for iOS. There is an XSS vulnerability in the...6.1 Medium
- tp-link tl-sg2210p, tl-sg2210p firmware +1 moreTP-Link JetStream Smart Switch TL-SG2210P 5.0 Build 20211201 allows attackers to escalate...8.8 High
- multilaser re160v firmware, re163v firmware +1 moreAn issue in Multilaser RE160V firmware v12.03.01.09_pt and Multilaser RE163V firmware v12.03.01...9.8 Critical
- oretnom23 online flight booking management systemOnline Flight Booking Management System v1.0 was discovered to contain a cross-site scripting ...6.1 Medium
- motorola phonesAn improper export vulnerability was reported in the Motorola Carrier Services application that...5.0 Medium
- motorola phonesAn improper export vulnerability was reported in the Motorola OTA update application, that could...5.1 Medium
- sourcecodester online tours & travels management system, mayurik online tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System HTTP POST Request expense_category.php sql injection4.7 Medium
- liquidweb event tickets, unknown events tickets plus +1 moreEvent Tickets Plus < 5.9.1 - Contributor+ Attendees Lists Disclosure4.3 Medium
- liquidweb event tickets, theeventscalendar event tickets and registration, unknown events tickets plus +1 more +3 moreEvent Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access6.5 Medium
- coderCoder's OIDC authentication allows email with partially matching domain to register8.2 High
- suluSulu grants access to pages regardless of role permissions6.8 Medium
- jackc pgx, pgproto3 +1 morepgx SQL Injection via Protocol Message Size Overflow9.8 Critical
- jsonataJSONata expression can pollute the "Object" prototype9.8 Critical
- electron electron-builderelectron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)7.3 High
- go-zeroAuthorization Bypass Through User-Controlled Key in go-zero9.1 Critical
- jackc pgxpgx SQL Injection via Line Comment Creation8.1 High
- hashicorp vault, vault enterprise, openbao +2 moreVault Cert Auth Method Did Not Correctly Validate Non-CA Certificates8.1 High
- arista multiaccess, arista networks mos +1 moreOn affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in som…3.1 Low
- arista ng firewall, arista networks edge threat management - arista ng firewall (ngfw) +1 moreMultiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW).8.8 High
- ibm sterling connect:express for unix, sterling connect\ +1 moreIBM Connect:Express for UNIX denial of service7.5 High
- linux, linux kernel +1 moredrm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreNFSD: Fix READDIR buffer overflow9.8 Critical
- linux, linux kernel +1 morenetfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()7.8 High
- linux, linux kernel +1 moreice: xsk: return xsk buffers back to pool when cleaning the ring5.5 Medium
- linux, linux kernel +1 moreIB/qib: Fix memory leak in qib_user_sdma_queue_pkts()5.5 Medium
- linux, linux kernel +1 moreinet: fully convert sk->sk_rx_dst to RCU rules9.8 Critical
- linux, linux kernel +1 morenet: marvell: prestera: fix incorrect structure access7.1 High
- linux, linux kernel +1 moreasix: fix uninit-value in asix_mdio_read()7.1 High
- linux, linux kernel +1 moreipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module5.5 Medium
- Show moreLoading…