CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- debian linux, linux kernel +1 morellc: call sock_orphan() at release time7.8 High
- linux, linux kernel +1 morepds_core: Prevent race issues involving the adminq7.8 High
- linux, linux kernel +1 morepowerpc/mm: Fix null-pointer dereference in pgtable_cache_add5.5 Medium
- linux, linux kernel +1 morepowerpc/lib: Validate size for vector operations7.8 High
- linux, linux kernel +1 moreFS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree7.8 High
- linux, linux kernel +1 moreUBSAN: array-index-out-of-bounds in dtSplitRoot7.8 High
- debian linux, linux kernel +1 morejfs: fix slab-out-of-bounds Read in dtSearch7.8 High
- debian linux, linux kernel +1 morejfs: fix array-index-out-of-bounds in dbAdjTree7.8 High
- linux, linux kernel +1 morejfs: fix uaf in jfs_evict_inode7.8 High
- linux, linux kernel +1 morejfs: fix array-index-out-of-bounds in diNewExt7.8 High
- linux, linux kernel +1 mores390/ptrace: handle setting of fpc register correctly7.1 High
- debian linux, linux kernel +1 moreKVM: s390: fix setting of fpc register4.0 Medium
- linux, linux kernel +1 moresysctl: Fix out of bounds access for empty sysctl registers5.5 Medium
- linux, linux kernel +1 morewifi: rt2x00: restart beacon queue when hardware reset5.5 Medium
- linux, linux kernel +1 morewifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()7.8 High
- linux, linux kernel +1 morewifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()5.5 Medium
- linux, linux kernel +1 morereiserfs: Avoid touching renamed directory if parent does not change7.8 High
- linux, linux kernel +1 moreocfs2: Avoid touching renamed directory if parent does not change7.8 High
- linux, linux kernel +1 moremedia: rkisp1: Fix IRQ disable race issue4.7 Medium
- linux, linux kernel +1 moref2fs: fix to tag gcing flag on page during block migration7.3 High
- linux, linux kernel +1 moreIB/ipoib: Fix mcast list locking5.5 Medium
- linux, linux kernel +1 moredrm/msm/dpu: Add mutex lock in control vblank irq7.8 High
- debian linux, linux kernel, netapp h610c firmware +2 more +4 moredrm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()5.5 Medium
- linux kernel, linux +1 morespmi: mediatek: Fix UAF on device remove3.8 Low
- debian linux, linux kernel +1 moreceph: fix deadlock or deadcode of misusing dget()5.5 Medium
- heateor sassy social share, social sharing plugin – sassy social share +1 moreSocial Sharing Plugin – Sassy Social Share <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- hashthemes totalTotal <= 2.1.59 - Missing Authorization to Authenticated (Subscriber+) Sections Update4.3 Medium
- croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsqua simply schedule appointments +1 moreAppointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Reset4.3 Medium
firefoxUbuntufirefox regressionsNo score- moxa nport w2150a/w2250a series, nport w2150a-t firmware, nport w2150a firmware +2 more +4 moreNPort W2150A/W2250A Series Web Server Stack-based Buffer Overflow Vulnerability8.2 High
- zuoxingdong lagomAn issue in zuoxingdong lagom v.0.1.2 allows a local attacker to execute arbitrary code via the...6.6 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote...8.8 High
- oretnom23 school fees management system, sourcecodester school fees payment system +1 moreA cross-site scripting (XSS) vulnerability in the component /management/class of School Fees...6.5 Medium
- oretnom23 school fees management systemA cross-site scripting (XSS) vulnerability in the component /management/settings of School Fees...6.1 Medium
- oretnom23 school fees management systemA cross-site scripting (XSS) vulnerability in the component /management/class of School Fees...6.8 Medium
- oretnom23 school fees management systemBroken access control in the component /admin/management/users of School Fees Management System...8.8 High
- oretnom23 school fees management systemA directory listing vulnerability in School Fees Management System v1.0 allows attackers to list...7.5 High
- mayurik best student result management systemA directory listing vulnerability in Best Student Result Management System v1.0 allows attackers...7.5 High
- sourcecodester customer support system, mayurik best student management system +1 moreA directory listing vulnerability in Customer Support System v1 allows attackers to list...7.5 High
- oretnom23 customer support systemIncorrect access control in Customer Support System v1 allows non-administrator users to access...8.8 High
- oretnom23 customer support systemA cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to...5.4 Medium
- oretnom23 customer support systemA cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to...5.4 Medium
- oretnom23 customer support systemA cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to...6.1 Medium
- oretnom23 customer support systemA cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to...6.1 Medium
- oretnom23 customer support systemA cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to...6.1 Medium
- multilaser re160 firmwareAn issue in Multilaser RE160 firmware v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01 allows attackers to...8.8 High
- multilaser re160 firmware, re160v firmware, re163v firmware +2 moreMultilaser RE160 v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01, Multilaser RE160V v12.03.01.08_pt and...9.8 Critical
- vanderbilt redcapSQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to...6.5 Medium
- Show moreLoading…