CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- apple ipados, macos, tvos +7 more +9 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14...8.6 High
- apple macosThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma...5.5 Medium
- apple macos, tvos, watchos +3 more +5 moreThis issue was addressed through improved state management. This issue is fixed in tvOS 17.4, iOS...4.6 Medium
- apple visionos, ios and ipados, ipad os +1 more +3 moreThe issue was addressed with improved handling of caches. This issue is fixed in visionOS 1.1,...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple macos, ios and ipados, ipad os +1 more +3 moreThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, iOS 17.4...5.9 Medium
- apple macosThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14...7.8 High
- apple macos, tvos, ios and ipados +2 more +4 moreThis issue was addressed through improved state management. This issue is fixed in tvOS 17.4, iOS...5.5 Medium
- apple macosA path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma...7.1 High
- apple ipados, macos, visionos +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7...3.3 Low
- apple ipados, macos, tvos +3 more +5 moreA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple ios and ipados, ipad os, iphone os +2 moreThe issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4....2.4 Low
- apple ipados, macos, ios and ipados +1 more +3 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple visionosA permissions issue was addressed to help ensure Personas are always protected This issue is...5.5 Medium
- apple macosThis issue was addressed by removing additional entitlements. This issue is fixed in macOS Sonoma...5.5 Medium
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, macOS...7.8 High
- boyiddha automated-mess-management-systemboyiddha Automated-Mess-Management-System Login Page index.php sql injection7.3 High
- boyiddha automated-mess-management-systemboyiddha Automated-Mess-Management-System Setting index.php access control6.3 Medium
- bdtask g-prescription gynaecology & obs consultation software, g-prescription gynaecology \& obs consultation, g-prescription gynaecology \& obs consultation software +2 moreBdtask G-Prescription Gynaecology & OBS Consultation Software Password Reset change_password_save cross-site request forgery4.3 Medium
- bdtask g-prescription gynaecology & obs consultation software, g-prescription gynaecology \& obs consultation, g-prescription gynaecology \& obs consultation software +2 moreBdtask G-Prescription Gynaecology & OBS Consultation Software Edit Venue Page cross site scripting2.4 Low
- bdtask g-prescription gynaecology & obs consultation software, g-prescription gynaecology \& obs consultation +1 moreBdtask G-Prescription Gynaecology & OBS Consultation Software OBS Patient/Gynee Prescription cross site scripting2.4 Low
- bdtask g-prescription gynaecology & obs consultation software, g-prescription gynaecology \& obs consultation +1 moreBdtask G-Prescription Gynaecology & OBS Consultation Software Prescription Dashboard Index cross site scripting2.4 Low
- raspapraspap-webgui vulnerable to denial of service7.5 High
- raspapRaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via...6.5 Medium
- numbas editorNumbas editor before 7.3 mishandles reading of themes and extensions.7.3 High
- numbas editorNumbas editor before 7.3 mishandles editing of themes and extensions.6.2 Medium
- archerirm archerArcher Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a stored cross-site scripting (XSS)...7.3 High
- archerirm archerArcher Platform 6.x before 2024.03 contains a sensitive information disclosure vulnerability. An...5.3 Medium
- presta tool kit make an offer for prestashop, prestatoolkit make an offer\/offer your price +1 moreIn the module "Make an offer" (makeanoffer) <= 1.7.1 from PrestaToolKit for PrestaShop, a guest...9.8 Critical
- team-ever seoIn the module "Ever Ultimate SEO" (everpsseo) <= 8.1.2 from Team Ever for PrestaShop, a guest can...5.9 Medium
- cleanpresta cd custom fields 4 orders, prestashop +1 moreIn the module "CD Custom Fields 4 Orders" (cdcustomfields4orders) <= 1.0.0 from Cleanpresta.com...9.8 Critical
- denx u-boot, rad secflow-2v firmware +1 moreRAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs...7.5 High
- keerti1924 online-book-store-website, online bookstore, online bookstore website +2 morekeerti1924 Online-Book-Store-Website HTTP POST Request home.php sql injection6.3 Medium
- keerti1924 online-book-store-website, online bookstore, online bookstore website +2 morekeerti1924 Online-Book-Store-Website HTTP POST Request shop.php sql injection6.3 Medium
- keerti1924 online-book-store-website, online bookstore website +1 morekeerti1924 Online-Book-Store-Website signup.php cross site scripting4.3 Medium
- keerti1924 online-book-store-website, itsourcecode online book store, keerti1924 online bookstore website +2 morekeerti1924 Online-Book-Store-Website search.php sql injection6.3 Medium
- fedoraproject fedora, go-jose +1 moreGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 Medium
- keerti1924 online-book-store-website, online bookstore, online bookstore website +2 morekeerti1924 Online-Book-Store-Website unrestricted upload4.7 Medium
- keerti1924 online-book-store-website, online bookstore, online bookstore website +2 morekeerti1924 Online-Book-Store-Website shop.php logic error4.3 Medium
- keerti1924 secret-coder-php-projectkeerti1924 Secret-Coder-PHP-Project Login Page login.php cross site scripting3.5 Low
- keerti1924 php-mysql-user-login-system, php mysql user signup login system +1 morekeerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source code5.3 Medium
- keerti1924 php-mysql-user-login-system, php mysql user signup login system +1 morekeerti1924 PHP-MYSQL-User-Login-System login.php sql injection7.3 High
- amazon freertos, freertos freertos-kernel +1 morePrivilege Escalation in FreeRTOS Kernel ARMv7-M MPU ports and ARMv8-M ports with MPU support enabled8.8 High
- pgadmin 4, pgadmin.org pgadmin 4, fedoraproject fedora +2 moreUnsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 49.9 Critical
- ibm ds8900f, ds8900f firmware +1 moreIBM DS8900F file manipulation6.5 Medium
- ibm ds8900f, ds8900f firmware +1 moreIBM DS8900F security bypass5.6 Medium
- booster for woocommerce, pluggabl booster elite for woocommerce +1 moreElite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripti…6.4 Medium
- ibm ds8900f, ds8900f firmware +1 moreIBM DS8900F information disclosure6.5 Medium
- ibm ds8900f, ds8900f firmware +1 moreIBM DS8900F information disclosure4.3 Medium
- Show moreLoading…