CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- code-projects exam form submissionCross Site Scripting (XSS) vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form...6.1 Medium
- code-projects exam form submissionCross Site Scripting (XSS) vulnerability in Code-Projects Exam Form Submission 1.0 allows...6.1 Medium
intel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreProtection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an...6.5 Mediumintel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreNon-transparent sharing of return predictor targets between contexts in some Intel(R) Processors...5.5 Medium- siemens simatic s7-1500 tm mfp - gnu/linux subsystemInformation exposure through microarchitectural state after transient execution from some...6.5 Medium
- intel 3rd gen intel xeon scalable processor family, 4th gen intel xeon bronze processors, 4th gen intel xeon gold processors +8 more +10 moreProtection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when...6.1 Medium
- chatgptnextweb nextchatNextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting9.1 Critical
- phlexCross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex7.1 High
- collabora onlineSensitive Information Disclosure (JailID) to users in Collabora Online2.6 Low
- ndijkstra mollie formsMollie Forms <= 2.6.3 - Missing Authorization4.3 Medium
- ndijkstra mollie formsMollie Forms <= 2.6.3 - Missing Authorization to Arbitrary Post Duplication4.3 Medium
- nixos nixNix Corruption of fixed-output derivations6.3 Medium
- postalserver postalSMTP Smuggling in Postal5.3 Medium
- codeium, exafunction codeium-chrome +1 moreAPI key leak in codeium-chrome6.5 Medium
- saitodev soy cms, inunosinsi soycms +1 moreOS Command Injection Vulnerability in SOY CMS7.2 High
- zitadelAccount Takeover via Session Fixation in Zitadel [Bypassing MFA]7.5 High
- the libreswan project (www.libreswan.org) libreswanIKEv2 misconfiguration can cause libreswan to abort and restart6.5 Medium
- frentix openolatXML external entity (XXE) injection in OpenOLAT4.6 Medium
- contest-gallery contest gallery, unknown photos and files contest gallery +1 morePhotos and Files Contest Gallery < 21.3.1 - Author+ Stored Cross Site Scripting5.4 Medium
- inisev ultimate posts widgetUltimate Posts Widget < 2.3.1 - Admin+ Stored XSS5.4 Medium
- unknown user registration, strategy11 user registration forms +1 moreFormidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover6.5 Medium
- strangerstudios paid memberships proPaid Memberships Pro < 2.12.9 - Contributor+ Arbitrary User Custom Field Disclosure4.3 Medium
- unknown login as user or customer, wp-buy login as user or customer \(user switching\) +1 moreLogin as User or Customer <= 3.8 - Admin Account Takeover4.9 Medium
- squirrly starboxStarbox < 3.5.0 - Contributor+ Stored XSS6.1 Medium
- aaron13100 404 solution404 Solution < 2.35.8 - Admin+ SQL Injection7.2 High
- inisev enhanced text widgetEnhanced Text Widget < 1.6.6 - Admin+ Stored XSS6.5 Medium
- castos seriously simple podcastingSeriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure5.3 Medium
- santesoft fft imaging, sante fft imaging +1 moreSantesoft Sante FFT Imaging Out-of-bounds Write7.8 High
- google androidIn createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execu…6.7 Medium
- ni labviewImproper Error Handling Issue in LabVIEW7.8 High
- ni labviewImproper Error Handling Issue in LabVIEW7.8 High
- ni labviewOut of Bounds Write Due to Missing Bounds Check in LabVIEW7.8 High
- ni labviewOut of Bounds Write Due to Missing Bounds Check in LabVIEW7.8 High
- ni labviewOut of Bounds Write Due to Missing Bounds Check in LabVIEW7.8 High
- checkmkPrivilege escalation in windows agent8.8 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreLibvirt: off-by-one error in udevlistinterfacesbystatus()5.5 Medium
- xen, fedoraproject fedora +1 morex86: shadow stack vs exceptions from emulation stubs6.5 Medium
- canon c1127i series, c1127p, c1333i series +23 more +25 moreBuffer overflow in identifier field of WSD probe request process of Small Office Multifunction...9.8 Critical
pcre2OSS-FuzzHeap-buffer-overflow in pcre2_fuzzsupport.cNo score- No product listedAmazon AWS aws-js-s3-explorer (aka AWS JavaScript S3 Explorer) 1.0.0 allows XSS via a crafted S3...6.1 Medium
- aaravrajsingh chatbotStudent Information Chatbot a0196ab allows SQL injection via the username to the login function...7.1 High
- munyweki insurance management systemCross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows...6.1 Medium
- geovision gv-asmanager, gv asmanager asmanager +1 moreGV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path.7.5 High
- kirillmakarov musicshelfMusicshelf SHA-1 PinningTrustManager.java weak password hash1.6 Low
- kirillmakarov musicshelfMusicshelf Backup androidmanifest.xml backup1.8 Low
- iovisor bpf compiler collectionIf kernel headers need to be extracted, bcc will attempt to load them from a temporary directory....2.8 Low
- bpftraceIf kernel headers need to be extracted, bpftrace will attempt to load them from a temporary...2.8 Low
- aol aim tritonAOL AIM Triton Invite denial of service5.3 Medium
- keerti1924 secret-coder-php-projectkeerti1924 Secret-Coder-PHP-Project secret_coder.sql inclusion of sensitive information in source code3.7 Low
- dreamer cms, iteachyou dreamer cms +1 moreDreamer CMS toEdit cross-site request forgery4.3 Medium
- Show moreLoading…