CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- binhnguyenplus ladiapp: landing page, popupx, marketing automation, affiliate marketing…, ladipage +1 moreLadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Cross-Site Request Forgery via init_endpoint4.3 Medium
- binhnguyenplus ladiapp: landing page, popupx, marketing automation, affiliate marketing…, ladipage +1 moreLadiApp <= 4.4 - Cross-Site Request Forgery via ladiflow_save_hook()4.3 Medium
- korenix jeti/o 6550Information exposure vulnerability in Korenix JetI/O 65506.2 Medium
- turtlepod f(x) private site, shellcreeper f\(x\) private site +1 moref(x) Private Site <= 1.2.1 - Sensitive Information Exposure5.3 Medium
- newsletter2goNewsletter2Go <= 4.0.14 - Authenticated(Subscriber+) Stored Cross-Site Scripting via style6.4 Medium
- appleple a-blog cms, appleple inc. a-blog cms ver.3.1.x series, a-blog cms ver.2.10.x series +2 more +4 moreDirectory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier,...6.5 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Lack of SSL support in CHARX Series8.7 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 morePHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series4.8 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series7.5 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: DoS of the control agent in CHARX Series7.5 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: File ownership manipulation in CHARX Series7.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Out of bounds write only memory access7.4 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 morePHOENIX CONTACT: Out of bounds read only memory access5.9 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 morePHOENIX CONTACT: Privilege escalation in the OCPP agent service8.4 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Command injection in the OCPP Service7.3 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Log injection in CHARX Series5.3 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series5.3 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Remote code execution in CHARX Series9.8 Critical
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Unintended script file upload in CHARX Series5.3 Medium
- omron corporation machine automation controller nj series, machine automation controller nx series, omron nj101-9020 firmware +2 more +4 morePath traversal vulnerability exists in Machine Automation Controller NJ Series and Machine...7.2 High
- implem inc. pleasanterPleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker...6.1 Medium
- sky co.,ltd. skysea client viewImproper access control vulnerability exists in the resident process of SKYSEA Client View...6.3 Medium
- sky co.,ltd. skysea client viewImproper access control vulnerability exists in the specific folder of SKYSEA Client View...7.8 High
- hitachi cosminexus component containerInformation Exposure Vulnerability in Cosminexus Component Container5.6 Medium
- sap se netweaver (enterprise portal), sap netweaver enterprise portal +1 moreInformation Disclosure vulnerability in SAP NetWeaver (Enterprise Portal)5.3 Medium
- sap netweaver process integration, sap se netweaver process integration (support web pages) +1 moreInformation Disclosure vulnerability in SAP NetWeaver Process Integration (Support Web Pages)5.3 Medium
- sap netweaver as abap, sap se netweaver as abap applications based on sapgui for html (webgui) +1 moreCross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP applications based on SAPGUI for HTML (WebGUI)5.4 Medium
- sap abap platformMissing Authorization check in SAP ABAP Platform4.3 Medium
- sap netweaver, sap se netweaver (wsrm) +1 moreInformation Disclosure vulnerability in NetWeaver (WSRM)5.3 Medium
- sap fiori front end serverImproper Access Control in SAP Fiori Front End Server4.6 Medium
- sap netweaver, sap se netweaver as java (administrator log viewer plug-in), sap netweaver application server java +2 moreCode Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)9.1 Critical
matioOSS-FuzzStack-buffer-overflow in H5S_get_simple_extent_dimsNo score- tenda ac18 firmwareTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat...9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter of...9.8 Critical
- netgear cbk40 firmware, cbk43 firmware, cbr40 firmware +2 moreAn information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40...7.5 High
- netgear cbk40 firmware, cbk43 firmware, cbr40 firmware +2 moreAn information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0...5.4 Medium
- totolink a8000ru firmwareA login bypass in TOTOLINK A8000RU V7.1cu.643_B20200521 allows attackers to login to...8.0 High
- oscommerce ce phoenixHTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to...4.8 Medium
- dlink dir-822 firmwareDIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN...9.3 Critical
- walterjnr1 employee management systemSQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain...7.1 High
- code-projects scholars tracking systemCode-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility...9.8 Critical
- code-projects scholars tracking systemCross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 allows...5.4 Medium
- code-projects scholars tracking systemSQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run...9.8 Critical
- code-projects scholars tracking systemSQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to...7.8 High
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 10 +5 more +7 moreOvn: insufficient validation of bfd packets may lead to denial of service6.5 Medium
- microsoft .net, .net 7.0, .net 8.0 +8 more +10 more.NET and Visual Studio Denial of Service Vulnerability7.5 High
- racktables project racktables, dedecms +1 moreReflected cross-site scripting (XSS) vulnerability in Racktables v0.22.0 and before, allows local...6.1 Medium
microcodeMageia,intel-microcodeDebian,intel-ucodeAlpaquita +2 more +4 moreIncorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with...5.3 Medium- rems my food recipe, sourcecodester my food recipe using php +1 moreCross Site Scripting vulnerability in My Food Recipe Using PHP with Source Code v.1.0 allows a...6.1 Medium
- broadcom tcpreplay, fedoraproject fedora +1 moreNull Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to...6.5 Medium
- Show moreLoading…