CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- tp-link archer ax50, archer ax50 firmware +1 moreCross-Site Scripting vulnerability in TP-Link Archer AX506.1 Medium
linkmecrates.iolinkme fails to ensure slice elements match the slice's declared typeNo scoreeyrecrates.ioeyre: Parts of Report are dropped as the wrong type during downcast7.5 High- ailux imx6, imx6 bundle +1 moreA CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the...5.6 Medium
- ailux imx6, imx6 bundle +1 moreA CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the ...5.5 Medium
- ailux imx6, imx6 bundle +1 moreA CWE-862 “Missing Authorization” vulnerability in the “measure” functionality of the web...5.3 Medium
- ailux imx6, imx6 bundle +1 moreA CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the ...5.9 Medium
- ailux imx6, imx6 bundle +1 moreA CWE-862 “Missing Authorization” vulnerability in the “file_configuration” functionality of the...5.3 Medium
- ailux imx6, imx6 bundle +1 moreA CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the ...5.9 Medium
- ailux imx6, imx6 bundle +1 moreA CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded...6.8 Medium
- ailux imx6, imx6 bundle +1 moreA CWE-693 “Protection Mechanism Failure” vulnerability in the embedded Chromium browser ...6.8 Medium
- ailux imx6, imx6 bundle +1 moreA CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser ...6.8 Medium
- ailux imx6, imx6 bundle +1 moreA CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the ...7.5 High
- linux, linux kernel +1 morecrypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ5.5 Medium
- linux, linux kernel +1 morecrypto: qcom-rng - ensure buffer for generate is completely filled8.1 High
- ailux imx6, imx6 bundle +1 moreA CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web...7.5 High
- ailux imx6, imx6 bundle +1 moreA CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web...8.1 High
- samsung android, samsung mobile devices +1 moreUse after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race...4.1 Medium
- cybellum maintenance serverImproper Management of Cryptographic Keys in the Maintenance Server in QCOW Air-Gapped Distribution (China Edition)3.8 Low
- samsung account, samsung mobile samnsung account +1 moreImproper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows...5.1 Medium
- samsung voice recorderImproper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and...5.7 Medium
- samsung voice recorderImproper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and...4.6 Medium
- samsung internetImproper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local...6.8 Medium
- samsung internetImproper handling of granting permission for Trusted Web Activities in Samsung Internet prior to...5.3 Medium
- samsung android, samsung mobile devices +1 moreOut of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024...3.3 Low
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in CustomFrequencyManagerService prior to SMR Mar-2024...4.0 Medium
- samsung android, samsung mobile devices +1 moreThe sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1...3.3 Low
- samsung android, samsung mobile devices +1 moreHeap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows a privileged...6.4 Medium
- samsung android, samsung mobile devices +1 moreStack overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows a privileged...6.4 Medium
- samsung android, samsung mobile devices +1 moreIncorrect default permission in AppLock prior to SMR MAr-2024 Release 1 allows local attackers to...5.3 Medium
- samsung internetMissing proper interaction for opening deeplink in Samsung Internet prior to version v24.0.0.0...5.4 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release...5.9 Medium
- gallagher controller 7000Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted...6.2 Medium
- gallagher command centre server, command centre +1 moreImproper neutralization of special elements in output (CWE-74) used by the email generation...6.8 Medium
- gallagher command centre server, command centre +1 moreInsufficiently protected credentials (CWE-522) for third party DVR integrations to the Command...9.1 Critical
- jmlapam jm twitter cardsJM Twitter Cards <= 14 - Information Exposure via Meta Description5.3 Medium
- simon99 change memory limitChange Memory Limit <= 1.0 - Missing Authorization via admin_logic()5.3 Medium
- pagebuildersandwich page builder sandwich – front end wordpress page builder plugin, page builder sandwich +1 morePage Builder Sandwich – Front End WordPress Page Builder Plugin <= 5.1.0 - Sensitive Information Exposure6.5 Medium
- dave kiss vimeography: vimeo video gallery wordpress plugin, davekiss vimeography +1 moreVimeography: Vimeo Video Gallery WordPress Plugin <= 2.3.2 - Authenticated (Contributor+) PHP Object Injection8.8 High
- geek code lab password protected store, rajkakadiya password protected store for woocommerce +1 morePassword Protected Store for WooCommerce <= 2.2 - Information Exposure via REST API5.3 Medium
- jkohlbach auto refresh single page, joshkohlbach auto-refresh-single-page +1 moreAuto Refresh Single Page <= 1.1 - Authenticated (Contributor+) PHP Object Injection8.8 High
- pagebuildersandwich page builder sandwich – front end wordpress page builder plugin, page builder sandwich +1 morePage Builder Sandwich <= 5.1.0 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Post Editing6.5 Medium
- razib build & control block patterns – boost up gutenberg editor, build and control block patterns, themeperch build \& control block pattern +2 moreBuild & Control Block Patterns – Boost up Gutenberg Editor <= 1.3.5.4 - Missing Authorization5.3 Medium
- alextselegidis easy!appointments, easyappointments easy\!appointments +1 moreEasy!Appointments <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- jbahlquist blue triad ezanalyticsBlue Triad EZAnalytics <= 1.0 - Reflected Cross-Site Scripting via 'bt_webid'6.1 Medium
- helderk maintenance modeMaintenance Mode <= 3.0.1 - Information Exposure5.3 Medium
- themeboy sportspress, sportspress – sports club & league manager +1 moreSportsPress – Sports Club & League Manager <= 2.7.17 - Missing Authorization to Unauthenticated Event Permalink Update5.3 Medium
- erzhongxmu jeewmsDirectory Traversal vulnerability in Jeewms v.3.7 and before allows a remote attacker to obtain...7.5 High
- erzhongxmu jeewmsAn issue in Jeewms v.3.7 and before allows a remote attacker to escalate privileges via the...9.8 Critical
- supercaliA reflected cross-site scripting (XSS) vulnerability exists in SuperCali version 1.1.0, allowing...6.1 Medium
- Show moreLoading…