CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- skyhigh client proxyA malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password.5.5 Medium
- skyhigh client proxyA malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid...5.5 Medium
- apache airflowApache Airflow: Ignored Airflow Permissions8.1 High
- livemesh elementor addons by livemesh, livemeshelementor addons for elementor +1 moreWordPress Livemesh Addons for Elementor Plugin <= 8.3.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- sonicwall email securityAn improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in...4.9 Medium
- sonicwall sonicosImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the...8.3 High
- sonicwall sonicosAn Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker...5.3 Medium
- papercut mf, ng, ng, papercut mf +2 moreServer Side Request Forgery in PaperCut NG/MF6.5 Medium
- papercut mf, ng, ng, papercut mf +2 moreReflected XSS in PaperCut NG/MF6.3 Medium
- papercut mf, ng, ng, papercut mf +2 moreServer-side resource injection in PaperCut NG/MF7.2 High
- papercut mf, ng, ng, papercut mf +2 moreUnauthorized write operations in PaperCut NG/MF7.2 High
- papercut mf, ng, ng, papercut mf +2 moreImproper authorization controls in PaperCut NG/MF4.8 Medium
- papercut mf, ng, ng, papercut mf +2 moreIncorrect authorization controls in PaperCut NG/MF APIs8.6 High
- papercut mf, ng, ng, papercut mf +2 moreImproper access controls on APIs on Linux and macOS in PaperCut NG/MF3.1 Low
pcapplusplusOSS-FuzzUse-of-uninitialized-value in pcpp::Packet::createFirstLayerNo scorejavaparserOSS-FuzzSecurity exception in com.github.javaparser.GeneratedJavaParser.ExpressionNo score- canonical snapdsnapd will follow archived symlinks when unpacking a filesystem4.8 Medium
- canonical snapdsnapd non-regular file indefinite blocking read5.8 Medium
- linkedin greykitegreykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj...7.5 High
- zenmlzenml v0.55.4 was discovered to contain an arbitrary file upload vulnerability in the load...8.8 High
- airflow-diagrams project airflow-diagramsAirflow-Diagrams v2.1.0 was discovered to contain an arbitrary file upload vulnerability in the...9.8 Critical
- webedition cmsWebedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/we_cmd.php6.5 Medium
- webedition cmsWebedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/we_cmd.php.6.3 Medium
- fme modules quickproducttable module for pestashop, fmemodules b2b quick order form +1 moreSQL injection vulnerability in FME Modules quickproducttable module for PrestaShop v.1.2.1 and...9.8 Critical
- advancedplugins ultimateimagetoolAn issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a...9.8 Critical
- sunnytoo stproductcomments, product comments +1 moreSQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and...9.8 Critical
- tenda ax12 firmwareTenda AX12 v1.0 v22.03.01.16 was discovered to contain a stack overflow via the ssid parameter in...9.8 Critical
- phpgurukul user registration \& login and user management system, user registration and login and user management system +1 moreThe bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management...6.5 Medium
- gunet open eclass platform, openeclass +1 moreUnrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and...9.1 Critical
- radare radare2An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local...5.5 Medium
- delinea secret serverBroken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows...4.3 Medium
- delinea secret serverIn Delinea PAM Secret Server 11.4, it is possible for a user (with access to the Report...7.6 High
- delinea secret serverUser enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4. This...5.3 Medium
- delinea distributed engine, secret server +1 moreInsecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3...5.9 Medium
- delinea secret serverIn Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to...6.7 Medium
- vinchin backup and recoveryVinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution ...8.8 High
- tp-link omada er605, omada er605 firmware +1 moreIn TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an...10.0 Critical
- netgear dgnd4000 firmwareAn issue in NETGEAR-DGND4000 v.1.1.00.15_1.00.15 allows a remote attacker to escalate privileges...8.8 High
- eyoucmsThere is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4,...9.8 Critical
- pinterest querybookCross-site websocket hijacking in Querybook5.6 Medium
- rocklobster contact form 7Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting6.1 Medium
- livemesh wpbakery page builder addons by livemesh, livemeshthemes wpbakery page builder addons +1 moreWPBakery Page Builder Addons by Livemesh <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- opentext netiq privileged account managerInsecure renegotiation in SSL protocol caused Denial of service attack in Privileged Account Manager8.6 High
- opentext™ exceed turbo x, opentext exceed turbox +1 moreHTML injection in OpenText™ Exceed Turbo X affecting version 12.5.1. The vulnerability could...6.4 Medium
- opentext™ exceed turbo x, opentext exceed turbox +1 moreUse of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions...4.7 Medium
- opentext exceed turbo x, exceed turbox +1 moreImproper authentication vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.0 and...8.6 High
- argoproj argo-cd, argo cd +1 moreUsers with `create` but not `override` privileges can perform local sync in argo-cd6.4 Medium
- argoproj argo-cd, argo cd +1 moreCross-site scripting on application summary component in argo-cd9.1 Critical
- westerndigital sandisk privateaccess, sandisk privateaccess windows app +1 moreSanDisk PrivateAccess DLL Hijacking Vulnerability7.9 High
- pterodactyl wingsImproper isolation of server file access in github.com/pterodactyl/wings10.0 Critical
- Show moreLoading…