CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- totolink x6000r, x6000r firmware +1 moreTotolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injection8.8 High
- 1panel-dev 1panel1Panel swap baseApi.UpdateDeviceSwap command injection6.3 Medium
gpacOSS-FuzzHeap-buffer-overflow in gf_strmemstrNo scoregpacOSS-FuzzStack-buffer-overflow in rtpin_satip_get_server_ipNo scorewordpressDebianwordpress - security updateNo score- libexpat project libexpat, fedoraproject fedora, netapp active iq unified manager +17 more +19 morelibexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of...7.5 High
- codeastro ecommerce site, ecommerce website +1 moreCodeAstro Ecommerce Site Search action.php sql injection6.3 Medium
- codeastro membership management systemCodeAstro Membership Management System add_members.php sql injection6.3 Medium
- sourcecodester online mobile management store, oretnom23 online mobile store management system +1 moreSourceCodester Online Mobile Management Store HTTP GET Request manage_category.php sql injection6.3 Medium
- razormist tourist reservation systemSourceCodester Tourist Reservation System System.cpp ad_writedata buffer overflow6.3 Medium
- extend themes colibri page builderColibri Page Builder <= 1.0.260 - Missing Authorization4.3 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway index.php sql injection6.3 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway sql injection6.3 Medium
- creativethemes blocksyBlocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion5.4 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Unauthenticated Stored Cross-Site Scripting6.5 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Arbitrary Post Overwrite6.5 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending4.3 Medium
- dell idrac8, integrated dell remote access controller 8 +1 moreA command injection vulnerability exists in local RACADM. A malicious authenticated user could...8.0 High
- hitrontech coda-4582u firmware, coda-4589 firmware +1 moreHitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi...5.2 Medium
- winmailAn issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code...8.8 High
- grandstream gxp1400 firmware, gxp1405 firmware, gxp1610 firmware +5 more +7 moreAn issue was discovered in Grandstream GXP14XX 1.0.8.9 and GXP16XX 1.0.7.13, allows remote...8.8 High
- newlandemea nquire 1000 mantaAn issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011,...7.5 High
- newlandemea nquire 1000 mantaAn issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011,...9.8 Critical
- gpacAn issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers...9.8 Critical
- gpacHeap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows...8.8 High
- emc documentum d2CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2. The...5.8 Medium
- kozea weasyprint, fedoraproject fedora +1 moreWeasyPrint allows the attachment of arbitrary files and URLs to a PDF7.4 High
- dalibo anonymizer, postgresql anonymizer +1 moreImproper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule8.0 High
- dalibo anonymizer, postgresql anonymizer +1 moreSQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule8.0 High
- ibm spss statisticsIBM SPSS Statistics denial of service6.2 Medium
- gotomain libosdpRMAC revert to the beginning of the session in libosdp5.1 Medium
- gotomain libosdplibosdp has a null pointer deref in osdp_reply_name6.5 Medium
- qnap myqnapcloud, qts +1 moremyQNAPcloud4.7 Medium
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud4.3 Medium
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud9.8 Critical
- qnap qts, quts hero, qutscloud +2 moreNetwork & Virtual Switch4.9 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.9 Medium
- qnap photo stationPhoto Station5.5 Medium
- lestrrat-go jwxJWX vulnerable to a denial of service attack using compressed JWE message6.8 Medium
- django markdownx markdownxCross-Site Scripting vulnerability in Django MarkdownX5.4 Medium
- zkteco zkbio mediaZKTeco ZKBio Media Service Port 9999 download path traversal5.3 Medium
- bdtask hospital automanagerBdtask Hospital AutoManager Prescription Page improper authorization3.8 Low
- bdtask hospital automanagerBdtask Hospital AutoManager Update Bill Page cross-site request forgery4.3 Medium
- servit affiliate-toolkit, cservit affiliate-toolkit – multi-network affiliate & amazon product display +1 moreaffiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_product4.3 Medium
- servit affiliate-toolkit, cservit affiliate-toolkit – multi-network affiliate & amazon product display +1 moreaffiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_list6.3 Medium
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- boyiddha automated-mess-management-systemboyiddha Automated-Mess-Management-System member_edit.php cross site scripting3.5 Low
- boyiddha automated-mess-management-systemboyiddha Automated-Mess-Management-System Chat Book chat.php cross site scripting3.5 Low
- boyiddha automated-mess-management-systemboyiddha Automated-Mess-Management-System view.php sql injection6.3 Medium
- Show moreLoading…