CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- ritecmsRiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...8.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...8.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...6.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...5.5 Medium
- leantimeCross Site Scripting vulnerability in Leantime 3.0.6 allows a remote attacker to execute...5.4 Medium
- mz-automation libiec61850An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a...7.5 High
- agro-school management system project management system, carmelo agro-school management system +1 moreSQL Injection vulnerability in code-projects Agro-School Management System 1.0 allows attackers...9.8 Critical
- carmelo computer science time table systemSQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows...7.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote...8.8 High
- code-projects student enrollment, student enrollment in php +1 moreAn arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student...9.8 Critical
- code-projects student enrollmentSQL Injection vulnerability in Student Enrollment In PHP 1.0 allows attackers to run arbitrary...8.8 High
- webkul bagistoBagisto vulnerable to Insecure Direct Object Reference (IDOR)6.5 Medium
- jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 moreJeg Elementor Kit <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags6.4 Medium
- easysocialfeed easy social feed, sjaved easy social feed – social photos gallery and post feed for wordpress +1 moreEasy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- 3uu shariff wrapperShariff Wrapper <= 4.6.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion5.4 Medium
- easysocialfeed easy social feed, sjaved easy social feed – social photos gallery and post feed for wordpress +1 moreEasy Social Feed <= 6.5.4 - Cross-Site Request Forgery4.3 Medium
- 3uu shariff wrapperShariff Wrapper <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.6.1 - Cross-Site Request Forgery to Plugin Deactivation and Data Erase4.3 Medium
- easysocialfeed easy social feed, sjaved easy social feed – social photos gallery and post feed for wordpress +1 moreEasy Social Feed <= 6.5.4 - Cross-Site Request Forgery5.4 Medium
- 3uu shariff wrapperShariff Wrapper <= 4.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- pickplugins post grid, post grid combo +1 morePost Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint7.5 High
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget6.4 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag6.4 Medium
- weformspro weforms, boldgrid weforms – easy drag & drop contact form builder for wordpress +1 moreweForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer7.2 High
- autopolis bulgarisation for woocommerceBulgarisation for WooCommerce <= 3.0.14 - Cross-Site Request Forgery7.3 High
- blossomthemes blossom spaBlossom Spa <= 1.3.3 - Sensitive Information Exposure5.8 Medium
- go-vela workerInsecure Variable Substitution in Vela7.7 High
- apple garagebandA use-after-free issue was addressed with improved memory management. This issue is fixed in...7.8 High
- devolutions serverGacjie Server Upload.php index unrestricted upload5.4 Medium
- aio-libs aiosmtpdSMTP smuggling in aiosmtpd5.3 Medium
- directusSession Token in URL in directus2.3 Low
- directusURL Redirection to Untrusted Site in OAuth2/OpenID in directus5.4 Medium
- hp inc. pc bios, hp inc business desktop pcs, business notebook pcs +2 more +4 moreA potential security vulnerability has been reported in the system BIOS of certain HP PC products...8.2 High
- peering-manager peering manager, peering-manager +1 moreRemote Code Execution using Server Side Template Injection in Peering Manager8.1 High
- peering-manager peering manager, peering-manager +1 moreOpen redirection using the return_url parameter in Peering Manager3.5 Low
- peering-manager peering manager, peering-manager +1 moreCross site scripting on router page in Peering Manager6.1 Medium
- palantir com.palantir.acme.gaia:gaiaStored XSS in gaia6.8 Medium
- freescoutSMTP Mail Credentials Disclosed in Error Log in freescout7.1 High
- codeworkweb cww companionCWW Companion <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- deepen bajracharya video conferencing with zoomVideo Conferencing with Zoom <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- apache pulsarApache Pulsar: Pulsar Functions Worker Allows Unauthorized File Access and Unauthorized HTTP/HTTPS Proxying8.5 High
- apache pulsarApache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File Modification8.4 High
- apache pulsarApache Pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code Execution8.5 High
- apache pulsarApache Pulsar: Improper Authentication for Pulsar Proxy Statistics Endpoint8.2 High
- apache pulsarApache Pulsar: Improper Authorization For Topic-Level Policy Management6.4 Medium
- cloudflare quicheUnbounded storage of information related to connection ID retirement, in quiche3.7 Low
- cloudflare quicheUnlimited resource allocation by QUIC CRYPTO frames flooding in quiche5.9 Medium
- tibco software inc. activespaces - enterprise editionTIBCO ActiveSpaces Information Leak Vulnerability4.3 Medium
- Show moreLoading…