CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- denoDeno's improper suffix match testing for DENO_AUTH_TOKENS4.6 Medium
- diygod rsshubRSSHub vulnerable to SSRF in /mastodon, /zjoi, and /m46.5 Medium
- diygod rsshubRSSHub Cross-site Scripting vulnerability caused by internal media proxy6.1 Medium
- pmmp pocketmine-mpPocketMine-MP before 5.11.1 Denial of Service via LoginPacket8.7 High
- jenkins delphix, jenkins project delphix plugin +1 moreJenkins Delphix Plugin has improper SSL/TLS certificate validation4.2 Medium
- jenkins delphix, jenkins project delphix plugin +1 moreJenkins Delphix Plugin has SSL/TLS certificate validation disabled by default5.3 Medium
- jenkins icescrum, jenkins project icescrum plugin +1 moreJenkins iceScrum Plugin vulnerable to stored Cross-site Scripting8.8 High
- jenkins subversion partial release manager, jenkins project subversion partial release manager plugin +1 moreJenkins Subversion Partial Release Manager Plugin missing permission check4.3 Medium
- jenkins subversion partial release manager, jenkins project subversion partial release manager plugin +1 moreJenkins Subversion Partial Release Manager Plugin vulnerable to Cross-Site Request Forgery4.3 Medium
- jenkins gitbucket, jenkins project gitbucket plugin +1 moreJenkins GitBucket Plugin vulnerable to stored Cross-site Scripting8.0 High
- jenkins build monitor view, jenkins project build monitor view plugin +1 moreJenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting5.4 Medium
- jenkins appspider, jenkins project appspider plugin +1 moreJenkins AppSpider Plugin missing permission checks4.3 Medium
- jenkins mq notifier, jenkins project mq notifier plugin +1 moreJenkins MQ Notifier Plugin exposes sensitive information in build logs6.5 Medium
- jenkins owasp dependency-check, jenkins project owasp dependency-check plugin +1 moreJenkins OWASP Dependency-Check Plugin has stored XSS vulnerability5.4 Medium
- jenkins bitbucket branch source, jenkins project bitbucket branch source plugin +1 moreJenkins Bitbucket Branch Source Plugin has incorrect trust policy behavior for pull requests6.3 Medium
- jenkins html publisher, jenkins project html publisher plugin +1 moreJenkins HTML Publisher Plugin Path traversal vulnerability4.3 Medium
- jenkins html publisher, jenkins project html publisher plugin +1 moreJenkins HTML Publisher Plugin Stored XSS vulnerability4.7 Medium
- jenkins html publisher, jenkins project html publisher plugin +1 moreJenkins HTML Publisher Plugin does not properly sanitize input6.5 Medium
- jenkins docker, docker-build-step, jenkins project docker-build-step plugin +2 moreJenkins docker-build-step Plugin missing permission check8.8 High
- jenkins docker-build-step, jenkins project docker-build-step plugin +1 moreJenkins docker-build-step Plugin Cross-Site Request Forgery vulnerability6.1 Medium
- pmmp pocketmine-mpPocketMine-MP before 5.11.2 Denial of Service via BookEditPacket7.1 High
- getgrav gravRemote Code Execution by uploading a phar file using frontmatter8.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage...5.8 Medium
- jetbrains teamcityIn JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password"...4.3 Medium
- cisco appdynamics controller, appdynamics +1 moreA vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an...6.5 Medium
- cisco appdynamics controller, appdynamics +1 moreA vulnerability in the web-based management interface of Cisco AppDynamics Controller could allow...5.4 Medium
- cisco duo, duo authentication for windows logon and rdp +1 moreA vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP...4.4 Medium
- cisco business access points, business wireless access point software, wap121 firmware +11 more +13 moreA vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series...6.5 Medium
- cisco business wireless access point software, wap121 firmware, wap125 firmware +10 more +12 moreA vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500...6.5 Medium
- cisco secure clientA vulnerability in the SAML authentication process of Cisco Secure Client could allow an...8.2 High
- cisco secure clientA vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could...7.3 High
- cisco duo, duo authentication for windows logon and rdp +1 moreA vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an...6.2 Medium
- python software foundation cpythonAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 High
- 1panel-dev 1panel1Panel open source panel project has an unauthorized vulnerability.6.3 Medium
- esphomeESPHome vulnerable to stored Cross-site Scripting in edit configuration file API6.5 Medium
- icewhale casaos, icewhaletech casaos-userservice +1 moreCasaOS Improper Restriction of Excessive Authentication Attempts vulnerability9.1 Critical
- icewhale casaos-userserviceCasaOS Username Enumeration6.2 Medium
- icewhale casaos, icewhaletech casaos-userservice +1 moreCasaOS-UserService allows unauthorized access to any file7.5 High
- shopwareShopware's session is persistent in Cache for 404 pages7.5 High
- apache linkis, apache software foundation linkis datasource +1 moreApache Linkis DataSource: DataSource module Oracle SQL Database Password Logged5.3 Medium
nssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +8 more +10 moreUpdate of nssNo scorelinux-firmwareTuxCare,iwl1000-firmwareTuxCare,iwl100-firmwareTuxCare +18 more +20 moreUpdate of linux-firmwareNo scorelinux-firmwareTuxCare,iwl1000-firmwareTuxCare,iwl100-firmwareTuxCare +18 more +20 moreUpdate of linux-firmwareNo score- apache inlongApache InLong: Logged-in user could exploit an arbitrary file read vulnerability9.1 Critical
- cdac appsamvid softwareDynamic Link Library (DLL) Hijacking Vulnerability in CDAC AppSamvid Software6.3 Medium
- cdac appsamvid softwareInformation Disclosure Vulnerability in CDAC AppSamvid Software7.8 High
- cdac usb pratirodhInformation Disclosure Vulnerability in CDAC USB Pratirodh7.1 High
- getgophish gophish, gophish admin panel +1 moreCross-Site Scripting vulnerability in Gophish Admin Panel4.6 Medium
- linux, linux kernel +1 morescsi: core: Move scsi_host_busy() out of host lock for waking up EH handler5.5 Medium
- linux, linux kernel +1 moreipmr: fix kernel panic when forwarding mcast packets7.5 High
- Show moreLoading…