CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- mha sistemas armhazenaMHA Sistemas arMHAzena Cadastro Page cross site scripting3.5 Low
- bradwenqiang hrBradWenqiang HR Background Management register selectAll sql injection6.3 Medium
- zemana antiloggerZemana AntiLogger v2.74.204.664 - Denial of Service (DoS)5.5 Medium
- zemana antiloggerZemana AntiLogger v2.74.204.664 - Kernel Memory Leak5.5 Medium
pcre2OSS-FuzzHeap-buffer-overflow in pcre2_fuzzsupport.cNo scorethreetenbpOSS-FuzzSecurity exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parseNo score- mitsubishi melsec l06cpu\(-p\), melsec l26cpu\(-p\), melsec q03udvcpu +48 more +50 moreInteger Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series...9.8 Critical
- mitsubishi melsec l06cpu\(-p\), melsec l26cpu\(-p\), melsec q03udvcpu +48 more +50 moreInteger Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series...9.8 Critical
- mitsubishi melsec l06cpu\(-p\), melsec l26cpu\(-p\), melsec q03udvcpu +48 more +50 moreIncorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and...9.8 Critical
- totolink x2000r firmwareTOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS)...8.0 High
- totolink x2000r firmwareTOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the...5.4 Medium
- totolink x2000r firmwareTOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting (XSS)...5.4 Medium
- trendnet tew-827dru firmwareThere is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware...10.0 Critical
- trendnet tew-827dru firmwareThere is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware...8.8 High
- gpacgpac 2.3-DEV-rev921-g422b78ecf-master was discovered to contain an out of boundary read...6.2 Medium
- gpacgpac 2.3-DEV-rev921-g422b78ecf-master was discovered to contain a out of boundary write...7.1 High
- glpi-project glpiAn issue in GLPI v.10.0.12 and before allows a remote attacker to execute arbitrary code,...8.8 High
- cimg, clmg project clmg +1 moreA heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library:...7.8 High
- No product listedA Cross Site Scripting vulnerability in Healthcare-Chatbot through 9b7058a can occur via a...5.4 Medium
- abocms abo.cmsSQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary...9.8 Critical
- mitsubishi melsec l06cpu\(-p\), melsec l26cpu\(-p\), melsec q03udvcpu +48 more +50 moreInteger Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series...9.8 Critical
- mitsubishi melsec l06cpu\(-p\), melsec l26cpu\(-p\), melsec q03udvcpu +48 more +50 moreIncorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and...9.8 Critical
- zemana antiloggerZemana AntiLogger v2.74.204.664 - Arbitrary Process Termination5.5 Medium
- microsoft edge, edge for android +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability3.9 Low
- microsoft edge (chromium-based), edge chromium, edge (chromium-based) extended stable +2 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability4.7 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- softing edgeaggregator, edgeconnector +1 moreCleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator8.0 High
- bobbingwide oikoik <= 4.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- plv8Plv8 Deferred Trigger Privilege Escalation7.2 High
- vantage6 vantage6-uiSecurity headers not set in vantage6-UI5.4 Medium
- vantage6CORS settings overly permissive in vantage64.2 Medium
- vantage6Username timing attack on recover password/MFA token in vantage65.3 Medium
- ibm iIBM i privilege escalation8.4 High
- ibm integration bus for z/os, integration bus +1 moreIBM Integration Bus for z/OS cross-site request forgery4.5 Medium
- root3 support app, root3nl supportapp +1 morePrivilege Escalation Abusing installer in SupportApp7.3 High
- ibm maximo application suite, maximo asset management +1 moreIBM Maximo Application Suite XML external entity injection8.2 High
- apple itunes, itunes for windows +1 moreA logic issue was addressed with improved checks. This issue is fixed in iTunes 12.13.1 for...7.8 High
- hopsoft turboboost commands, turboboost commands project commands, hopsoft turbo boost-commands +2 moreArbitrary method invocation turbo_boost-commands8.1 High
bindTuxCare,bind-chrootTuxCare,bind-develTuxCare +7 more +9 moreUpdate of bindNo score- follow-redirectsProxy-Authorization header kept across hosts in follow-redirects6.5 Medium
- No product listedImproper input validation in the Intel(R) CSME installer software before version 2328.5.5.0 may...6.7 Medium
- No product listedInsertion of sensitive information into log file for some Intel(R) Local Manageability Service...3.3 Low
- intel converged security and manageability engineIncorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0...6.7 Medium
- No product listedUncontrolled resource consumption for some Intel(R) SPS firmware versions may allow a privileged...6.8 Medium
- No product listedRace condition in BIOS firmware for some Intel(R) Processors may allow a privileged user to...7.2 High
- intel xeon e-2124g firmwareOn-chip debug and test interface with improper access control in some 4th Generation Intel(R)...7.2 High
- pega platform, pegasystems pega platform +1 morePega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation.7.7 High
- fortra goanywhere mft, goanywhere managed file transfer +1 morePath traversal in GoAnywhere MFT 7.4.1 and Earlier6.5 Medium
- sagemcom fast3686 v2 vodafone, f\@st 3686 firmware +1 moreInsufficient session timeout vulnerability in Sagemcom router7.7 High
- skyhigh client proxyA malicious insider exploiting this vulnerability can circumvent existing security controls put...5.5 Medium
- Show moreLoading…