CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- msi afterburnerMSI Afterburner v4.6.5.16370 - Denial of Service4.4 Medium
- paddlepaddle, paddlepaddle paddlepaddle/paddle +1 morePaddlePaddle command injection vulnerability9.3 Critical
- gitlabIncorrect Authorization in GitLab7.7 High
- gitlabPrivilege Chaining in GitLab6.5 Medium
libaomOSS-FuzzHeap-buffer-overflow in od_ec_dec_initNo scorelibaomOSS-FuzzHeap-buffer-overflow in od_ec_dec_normalizeNo scorelibaomOSS-FuzzHeap-use-after-free in get_ls_tile_buffersNo score- veritas netbackup, netbackup appliance +1 moreIn Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process...9.8 Critical
- byzronetwork management platformFile Upload vulnerability in Byzro Network Smart s42 Management Platform v.S42 allows a local...7.7 High
- hcengineering hulyServer Side Request Forgery (SSRF) vulnerability in hcengineering Huly Platform v.0.6.202 allows...4.3 Medium
- iscute cute http file server, ods-im cutehttpfileserver +1 moreAn issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the...8.2 High
- oretnom23 online diagnostic lab management systemAn issue in Online Diagnostic Lab Management System 1.0 allows a remote attacker to gain control...6.3 Medium
- arris sbg6580Arris SBG6580 devices have predictable default WPA2 security passwords that could lead to...8.8 High
- dedecmsCross Site Scripting (XSS) vulnerability in Justice Systems FullCourt Enterprise v.8.2 allows a...6.1 Medium
- xunruicmsA cross-site scripting (XSS) vulnerability in XunRuiCMS up to v4.6.2 allows attackers to execute...6.1 Medium
- jfinalcms project jfinalcmsSQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive...7.5 High
- setor sil, setorinformatica s.i.l. +1 moreCross Site Scripting (XSS) vulnerability in Setor Informatica SIL 3.1 allows attackers to run...6.1 Medium
- zlog project zlogzlog 1.2.16 has a heap-based buffer overflow in struct zlog_rule_s while creating a new rule that...9.8 Critical
- easeus mobimoverInsecure permissions issue in EaseUS MobiMover 6.0.5 Build 21620 allows attackers to gain...8.1 High
- lustreAn issue was discovered in Lustre versions 2.13.x, 2.14.x, and 2.15.x before 2.15.4, allows...9.1 Critical
- oretnom23 customer support systemCross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to...5.4 Medium
- phpgurukul hotel booking management systemHotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- phpgurukul hotel booking management systemHotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the...7.5 High
- oretnom23 school fees management systemA cross-site scripting (XSS) vulnerability in the component /management/term of School Fees...5.4 Medium
- oretnom23 school fees management systemA cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees...4.7 Medium
- cypress ctm-200 firmwareCypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection...7.5 High
- code-projects student enrollmentStudent Enrollment In PHP v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- code-projects online job portalcode-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via /Employer/DeleteJob...5.5 Medium
- code-projects online job portalcode-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter...9.8 Critical
- oretnom23 lost and found information systemSourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated...8.4 High
- codeastro hospital management systemHospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the...8.8 High
- codeastro hospital management systemHospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the...2.7 Low
- codeastro hospital management systemHospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the...8.1 High
- online flight booking management system project flight booking management system, oretnom23 online flight booking management system +1 moreCross Site Scripting (XSS) vulnerability in the feedback form of Online Flight Booking Management...4.7 Medium
- oretnom23 online flight booking management systemCross Site Scripting (XSS) vulnerability in the add-airline form of Online Flight Booking...6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +7 more +9 moreLibgcrypt: vulnerable to marvin attack5.9 Medium
- thinkst canarytokensCSV Injection in exported history CSV files6.5 Medium
- cloudevents go sdk, sdk-go, sdk go +2 moreGo SDK for CloudEvents's use of WithRoundTripper to create a Client leaks credentials7.5 High
- sonatype iq serverSonatype IQ Server - Path Traversal5.4 Medium
- latchset jwcrypto, debian linux +1 moreJWCrypto vulnerable to JWT bomb Attack in `deserialize` function6.8 Medium
- robotsandpencils go-samlSAML authentication bypass vulnerability in RobotsAndPencils/go-saml7.5 High
- apollographql apollo router, router +1 moreApollo Router's Compressed Payloads do not respect HTTP Payload Limits7.5 High
- squid-cache squid, fedoraproject fedora, netapp bluexp +2 moreSQUID-2024:1 Denial of Service in HTTP Chunked Decoding8.6 High
- galetteGalette public pages accessibility restriction7.5 High
- eprosima fast-dds, fast dds +1 moreInvalid DATA_FRAG Submessage causes a bad-free error9.7 Critical
- pega platform, pegasystems pega platform +1 morePega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html...5.4 Medium
- drupal registration role, registration role project role +1 moreRegistration role - Critical - Access bypass - SA-CONTRIB-2024-0158.8 High
- rpyc project rpycRPyC's missing security check results in code execution when using numpy.array on the server-side.8.4 High
- deno*const c_void / ExternalPointer unsoundness leading to use-after-free8.4 High
- denoDeno arbitrary file descriptor close via `op_node_ipc_pipe()` leading to permission prompt bypass8.3 High
- Show moreLoading…