CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- oretnom23 lost and found information systemSourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated...7.5 High
- axigen mail serverAn issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1...9.1 Critical
- openpne optimelineplugin, openpne project plugin "optimelineplugin" +1 moreOpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contains a cross-site scripting...5.4 Medium
- go standard library html/templateErrors returned from JSON marshaling may break template escaping in html/template5.4 Medium
- go standard library net/mail, net\/mail +1 moreComments in display names are incorrectly handled in net/mail7.5 High
- go standard library net/http, net/http/cookiejar +1 moreIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 Medium
- go standard library net/textprotoMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 Medium
- go standard library crypto/x509Verify panics on certificates with an unknown public key algorithm in crypto/x5095.9 Medium
- devolutions serverImproper privilege management in Just-in-time (JIT) elevation module in Devolutions Server 2023.3...7.6 High
- devolutions serverImproper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier...4.3 Medium
- devolutions serverImproper session management in the identity provider authentication flow in Devolutions Server...5.5 Medium
- devolutions serverDenial of service in PAM password rotation during the check-in process in Devolutions Server 2023...4.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 before 9.2.7 is vulnerable to Stored XSS via the Name field of a Group type2.2 Low
- deno, deno runtime +1 moreDeno interactive permission prompt spoofing via improper ANSI stripping8.8 High
- denoDeno's Node.js Compatibility Runtime has Cross-Session Data Contamination7.2 High
- google.golang.org/protobuf google.golang.org/protobuf/encoding/protojson, google.golang.org/protobuf/internal/encoding/json +1 moreInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +1 moreAruba has identified certain configurations of ArubaOS that can lead to partial disclosure of...3.7 Low
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +2 moreAn unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed...5.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +1 moreThere is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful...5.5 Medium
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....7.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....7.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....7.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) arubaos wi-fi controllers and campus/remote access points +2 moreAuthenticated command injection vulnerabilities exist in the ArubaOS command line interface....7.2 High
- ibm aspera faspexIBM Aspera Faspex HTTP header injection5.4 Medium
- ibm spectrum virtualizeIBM Spectrum Virtualize security bypass5.3 Medium
- ibm watson cp4d data storesIBM Watson CP4D Data Stores file modificiation4.2 Medium
- apple ios and ipados, ipad os, iphone os +2 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- apple ipados, macos, tvos +6 more +8 moreA memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4...7.8 High
- apple ipados, macos, tvos +6 more +8 moreA memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7...7.8 High
- apple ios and ipados, ipad os, iphone os +2 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 17.4 and...3.3 Low
- artica tech proxy, articatech artica proxy +1 moreArtica Proxy Loopback Services Remotely Accessible Unauthenticated9.8 Critical
- artica tech proxy, articatech artica proxy +1 moreArtica Proxy Unauthenticated File Manager Vulnerability9.8 Critical
- artica tech proxy, articatech artica proxy +1 moreArtica Proxy Unauthenticated PHP Deserialization Vulnerability9.8 Critical
- artica tech proxy, articatech artica proxy +1 moreArtica Proxy Unauthenticated LFI Protection Bypass Vulnerability7.5 High
- ibm cloud pak for automation, cloud pak for business automation +1 moreIBM Cloud Pak for Automation CSV injection7.0 High
- blue planet inventory (bpi), orchestration (bpo), route optimization and analysis (roa) +6 more +8 moreSAML implementation allows privilege escalation9.0 Critical
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure6.5 Medium
- vmware esxi, fusion, workstation +1 more +3 moreInformation disclosure vulnerability7.1 High
- vmware esxi, broadcom vmware cloud foundation, vmware cloud foundation +2 moreOut-of-bounds write vulnerability7.9 High
- vmware esxi, fusion, workstation +1 more +3 moreUse-after-free vulnerability9.3 Critical
- vmware esxi, fusion, workstation +1 more +3 moreUse-after-free vulnerability9.3 Critical
- nvidia geforce, gpu display driver, vgpu driver, cloud gaming driver, quadro +2 more +4 moreCVE6.1 Medium
- nvidia gpu display driver, vgpu driver, cloud gaming driverCVE7.1 High
- sixlabors imagesharpUse After Free in SixLabors.ImageSharp7.1 High
- tomphttp bare-server-node, tomp bare server +1 moreHTTP Handling Vulnerability in the Bare server9.8 Critical
- lfprojects minder`GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user7.1 High
- denoInsufficient permission checking in `Deno.makeTemp*` APIs5.8 Medium
- xpodas octopod, octoped +1 moreAuthentication Bypass in XPodas' Octopod9.8 Critical
eth-abiPyPIeth-abi is vulnerable to recursive DoSNo score- zksoftware uface 5Authentication Bypass in ZKSoftware's UFace 59.8 Critical
- Show moreLoading…