CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- yooooomi your spotifyDisclosure of Spotify API Access Tokens to Guest Users Using Public Tokens in your_spotify6.5 Medium
- yooooomi your spotifyNoSQL Injection Leading to Authentication Bypass in your_spotify5.3 Medium
- zoom rooms, zoom video communications, inc. rooms client for windows +1 moreZoom Rooms Client for Windows - Improper Access Control7.2 High
- zoom rooms, zoom video communications, inc. rooms client for windows +1 moreZoom Rooms Client for Windows - Race Condition5.3 Medium
- arcserve unified data protection, udp +1 moreUnauthenticated DoS in Arcserve Unified Data Protection7.5 High
- arcserve unified data protection, udp +1 moreAuthentication Bypass via wizardLogin in Arcserve Unified Data Protection8.8 High
- arcserve unified data protection, udp +1 moreAuthentication Bypass via wizardLogin in Arcserve Unified Data Protection9.8 Critical
- yooooomi your spotifyAuthentication Bypass Because of Hardcoded JWT Secret in your_spotify9.1 Critical
- devolutions remote desktop managerImproper cleanup in temporary file handling component in Devolutions Remote Desktop Manager 2024...5.9 Medium
- mayurik best pos management systemSourceCodester Best POS Management System view_order.php sql injection6.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss4.3 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation (PE) Vulnerability4.5 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local User Can Disable GlobalProtect5.5 Medium
- yooooomi your spotifyCross-Site Request Forgery (CSRF) vulnerability in API and login in your_spotify8.1 High
Microsoft.Native.Quic.MsQuic.OpenSSLNuGet,Microsoft.Native.Quic.MsQuic.SchannelNuGet +1 moreRemote Denial of Service Vulnerability in Microsoft QUIC7.5 High- yooooomi your spotifyClickjacking in your_spotify6.5 Medium
- dell dss 8440 firmware, emc xc core 6420 system firmware, emc xc core xc450 firmware +122 more +124 moreDell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter...3.8 Low
- cisco ios xr software, ios xr +1 moreA vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an...4.3 Medium
- cisco ios xr softwareA vulnerability in the Secure Copy Protocol (SCP) and SFTP feature of Cisco IOS XR Software could...6.5 Medium
- cisco ios xr softwareA vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an...7.4 High
- cisco ios xr softwareA vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress...5.8 Medium
- cisco ios xr software, ios xr +1 moreA vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the...5.8 Medium
- cisco ios xr softwareA vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could...5.3 Medium
- cisco ios xr software, ios xr +1 moreA vulnerability in the SSH client feature of Cisco IOS XR Software for Cisco 8000 Series Routers...7.8 High
- dell dss 8440 firmware, emc xc core 6420 system firmware, emc xc core xc450 firmware +122 more +124 moreDell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter...3.8 Low
- cisco ios xr software, ios xr +1 moreA vulnerability in the PPP over Ethernet (PPPoE) termination feature of Cisco IOS XR Software for...7.4 High
- cool plugins cryptocurrency widgets – price ticker & coins list, coolplugins cryptocurrency widgets +1 moreWordPress Cryptocurrency Widgets – Price Ticker & Coins List Plugin <= 2.6.8 is vulnerable to Broken Access Control4.7 Medium
- dell emc xc core xc450 firmware, emc xc core xc650 firmware, emc xc core xc6520 firmware +56 more +58 moreDell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition...5.3 Medium
- dell emc xc core xc450 firmware, emc xc core xc650 firmware, emc xc core xc6520 firmware +56 more +58 moreDell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication...5.3 Medium
- wp codeus advanced sermonsWordPress Advanced Sermons plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- wpmaspik maspik, yonifre maspik – spam blacklist +1 moreWordPress Maspik – Spam blacklist Plugin <= 0.10.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- dell dss 8440 firmware, emc storage nx3240 firmware, emc storage nx3340 firmware +84 more +86 moreDell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication...7.2 High
- david de boer paytium: mollie payment forms & donations, paytium +1 moreWordPress Paytium: Mollie payment forms & donations Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- themencode tnc pdf viewerWordPress TNC PDF viewer Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- linux, linux kernel +1 moremm: cachestat: fix folio read-after-free in cache walk7.1 High
- apache tomcat, debian linux, fedoraproject fedora +2 moreApache Tomcat: WebSocket DoS with incomplete closing handshake6.3 Medium
- apache tomcat, debian linux, fedoraproject fedora +2 moreApache Tomcat: HTTP/2 header handling DoS7.5 High
- leap13 premium addons, premium addons for elementor addons pro for elementor +1 morePremium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget6.4 Medium
- theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +1 moreAvada <= 7.11.5 - Authenticated(Contributor+) Sensitive Information Exposure via Form Entries6.5 Medium
- leap13 premium addons, premium addons for elementor addons pro for elementor +1 morePremium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module6.4 Medium
- leap13 premium addons, premium addons for elementor addons pro for elementor +1 morePremium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget6.4 Medium
- leap13 premium addons, premium addons for elementor addons pro for elementor +1 morePremium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Global Badge Module6.4 Medium
- leap13 premium addons, premium addons for elementor addons pro for elementor +1 morePremium Addons for Elementor PRO <= 2.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget link6.4 Medium
- leap13 premium addons, premium addons for elementor addons pro for elementor +1 morePremium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module6.4 Medium
- ckanPotential log injection in reset user endpoint in ckan4.3 Medium
- brizy, themefusecom brizy – page builder +1 moreBrizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- burst-statistics burst statistics, burstbv burst statistics – privacy-friendly wordpress analytics (google analytics alternative) +1 moreBurst Statistics – Privacy-Friendly Analytics for WordPress <= 1.5.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via burst_total_pageviews_count6.4 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.6.1 - Authenticated (Subscriber+) SQL Injection8.8 High
- exclusiveaddons exclusive addons for elementorExclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget6.4 Medium
- dev.institute restrict user access, intoxstudio restrict user access – ultimate membership & content protection +1 moreRestrict User Access – Ultimate Membership & Content Protection <= 2.5 - Information Exposure5.3 Medium
- Show moreLoading…