CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Telephony Server Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreMicrosoft AllJoyn API Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability5.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows USB Hub Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability7.8 High
- microsoft azure sdk, azure software development kit +1 moreAzure SDK Spoofing Vulnerability7.5 High
- linuxfoundation software for open networking in the cloud, microsoft software for open networking in the cloud (sonic) +1 moreSoftware for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability7.8 High
- microsoft skype for consumer, skype +1 moreSkype for Consumer Remote Code Execution Vulnerability8.8 High
- microsoft windows defender antimalware platformMicrosoft Defender Security Feature Bypass Vulnerability5.5 Medium
github.com/cosmos/cosmos-sdkGoASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions7.1 High- stimulusreflex stimulus reflex, stimulusrelfex +1 moreReflex arbitrary method call in stimulus_reflex8.8 High
- badger meter monitoolMultiple Vulnerabilities in Badger Meter's Monitool6.3 Medium
- badger meter monitoolMultiple Vulnerabilities in Badger Meter's Monitool6.5 Medium
- badger meter monitool, badgermeter moni\:\:tool +1 moreMultiple Vulnerabilities in Badger Meter's Monitool7.3 High
- cms made simple made simple, cmsmadesimple cms made simple +1 moreCross-site Scripting in CMS Made Simple7.4 High
- badger meter monitool, badgermeter moni\:\:tool +1 moreMultiple Vulnerabilities in Badger Meter's Monitool9.8 Critical
- cms made simple made simple, cmsmadesimple cms made simple +1 moreCross-site Scripting in CMS Made Simple7.4 High
- cms made simple made simple, cmsmadesimple cms made simple, cmsmadesimple +2 moreUnrestricted Upload of File with Dangerous Type in CMS Made Simple9.8 Critical
- rejetto http file serverMultiple vulnerabilities in Rejetto's Http File Server6.5 Medium
- fortinet forticlientems, forticlient endpoint management server +1 moreA improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7...8.7 High
- fortinet fortiosAn improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions...6.7 Medium
- fortinet forticlientems, forticlient ems, forticlient enterprise management server +2 moreA improper neutralization of special elements used in an sql command ('sql injection') in...9.3 Critical
- fortinet fortios, fortiproxy, fortisase +1 more +3 moreA out-of-bounds write in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through...9.3 Critical
- fortinet fortios, fortiproxy +1 moreAn authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7...7.2 High
- fortinet fortios, fortiproxy +1 moreA stack-based buffer overflow in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0...7.7 High
- fortinet fortiportalAn improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0...3.9 Low
- fortinet fortimanager, fortianalyzer, fortianalyzer-bigdata +2 more +4 moreA use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiManager...6.3 Medium
- fortinet fortimanagerA improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3,...7.7 High
- rejetto http file serverMultiple vulnerabilities in Rejetto's Http File Server7.5 High
- faronics deep freeze server standard, deep freeze +1 moreUnquoted item or search path vulnerability in Faronics Deep Freeze Server Standard7.8 High
- code-projects employee management systemSourceCodester Employee Management System add-admin.php unrestricted upload4.7 Medium
- sourcecodester crud, crud without page reload, remyandrade crud without page reload\/refresh +2 moreSourceCodester CRUD without Page Reload add_user.php sql injection6.3 Medium
- citrix sd-wan standard/premium editions, sd wan premium edition, sd wan standard edition +12 more +14 moreServer-Side Request Forgery (SSRF)6.5 Medium
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The...9.8 Critical
- eve-ngEVE-NG Lab cross site scripting2.4 Low
ruby-rackUbunturuby-rack vulnerabilitiesNo score- siemens simcenter femapA vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected...7.8 High
- siemens sinema remote connect clientA vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1)....7.6 High
- siemens sentron 3kc atc6 expansion module ethernet, sentron 3kc act6 +1 moreA vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75)...7.5 High
- siemens cerberus pro en engineering tool, cerberus pro en fire panel fc72x ip6, cerberus pro en fire panel fc72x ip7 +29 more +31 moreA vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus...7.5 High
- siemens cerberus pro en engineering tool, cerberus pro en fire panel fc72x ip6, cerberus pro en fire panel fc72x ip7 +29 more +31 moreA vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus...7.5 High
- siemens cerberus pro en engineering tool, cerberus pro en fire panel fc72x ip6, cerberus pro en fire panel fc72x ip7 +27 more +29 moreA vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8),...10.0 Critical
- siemens sentron 7km pac3120 ac/dc, sentron 7km pac3120 dc, sentron 7km pac3220 ac/dc +1 more +3 moreA vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (All...5.1 Medium
- siemens siveillance controlA vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The...5.5 Medium
- apache dorisApache Doris: Timing Attack weakness9.8 Critical
- ladipage, binhnguyenplus ladiapp: landing page, popupx, marketing automation, affiliate marketing… +1 moreLadiApp <= 4.4 - Cross-Site Request Forgery via save_config()4.3 Medium
- binhnguyenplus ladiapp: landing page, popupx, marketing automation, affiliate marketing…, ladipage +1 moreLadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Cross-Site Request Forgery via publish_lp()4.3 Medium
- ladipage, binhnguyenplus ladiapp: landing page, popupx, marketing automation, affiliate marketing… +1 moreLadiApp <= 4.4 - Missing Authorization via save_config()4.3 Medium
- binhnguyenplus ladiapp: landing page, popupx, marketing automation, affiliate marketing…, ladipage +1 moreLadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Missing Authorization on publish_lp()4.3 Medium
- binhnguyenplus ladiapp: landing page, popupx, marketing automation, affiliate marketing…, ladipage +1 moreThe LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a...4.3 Medium
- Show moreLoading…