CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- ibm secure proxy, sterling secure proxy +1 moreIBM Secure Proxy cross-site scripting5.4 Medium
- cozmoslabs paid member subscriptions, paid membership subscriptions +1 moreWordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- sysbasics customize my account for woocommerce, customize my account +1 moreWordPress Customize My Account for WooCommerce plugin <= 1.8.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- sirvWordPress Image Optimizer, Resizer and CDN – Sirv plugin <= 7.1.2 - Broken Access Control vulnerability5.4 Medium
- wpwax legal pagesWordPress Legal Pages plugin <= 1.3.7 - CSRF + Broken Access Control vulnerability4.3 Medium
- roland murg wp simple booking calendarWordPress WP Simple Booking Calendar plugin <= 2.0.8.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- pluginus husky – products filter for woocommerce (formerly woof), husky - products filter professional for woocommerce +1 moreWordPress HUSKY plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- etoile web design ultimate reviewsWordPress Ultimate Reviews plugin <= 3.2.8 - Unauthenticated Cross Site Scripting (XSS) vulnerability7.1 High
- doofinder, doofinder for woocommerce +1 moreWordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- basix nex-forms – ultimate form builder, basixonline nex-forms +1 moreWordPress NEX-Forms plugin <= 8.5.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpmu dev broken link checkerWordPress Broken Link Checker plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- livemesh addons for elementorWordPress Elementor Addons by Livemesh plugin <= 8.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- friendlyelec friendlywrtCryptographic key in plain text vulnerability in FriendlyElec's FriendlyWrt5.2 Medium
- joe dolson my calendarWordPress My Calendar plugin <= 3.4.23 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hiroaki miyashita custom field templateWordPress Custom Field Template plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- concerted action action networkWordPress Action Network plugin <= 1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- formfacadeWordPress FormFacade plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- soundcloud inc., lawrie malen shortcodeWordPress SoundCloud Shortcode plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- catchsquare wp social widgetWordPress WP Social Widget plugin <= 2.2.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- payu india, woocommerce payu india payment gateway +1 moreWordPress PayU India plugin <= 3.8.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jmash postmash, joel starnes postmash – custom post order +1 moreWordPress postMash – custom post order plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- scott reilly configure smtpWordPress Configure SMTP Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 +4 more +6 moreTripleo-ansible: bind keys are world readable5.5 Medium
- tmccombs tls-listenerSlow loris vulnerability with default configuration in tls-listener7.5 High
- openeuler aops-zeusCommand injection in aops-zeus7.2 High
- openeuler isula, isulad +1 moreTOCTOU Race Condition problem in iSulad7.0 High
- openeuler a-tune-collectorRemote command execution in A-Tune-Collector8.1 High
- openeuler migration-toolsUnauthorized RCE in migration-tools8.1 High
- openeuler gala-gopherCommand injection in ioprobe of gala-gopher7.8 High
- apache cxf, netapp oncommand workflow automation, ontap tools +2 moreApache CXF SSRF Vulnerability using the Aegis databinding9.3 Critical
- givewpWordPress Give plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- apache zookeeperApache ZooKeeper: Information disclosure in persistent watcher handling5.3 Medium
- tenda ac18, ac18 firmware +1 moreTenda AC18 openSchedWifi setSchedWifi stack-based overflow8.8 High
- mattermost, mattermost server +1 moreReflected XSS in Mattermost Jira plugin6.1 Medium
- mattermost, mattermost server +1 moreMattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before...8.8 High
- mattermost, mattermost server +1 moreMattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before...4.3 Medium
- mattermost, mattermost server +1 moreResource Exhaustion via the Invitation Feature3.1 Low
- mattermost mobileDenial of Service for mobile app users due to automatic code highlighting3.5 Low
- tenda ac18, ac18 firmware +1 moreTenda AC18 SetNetControlList formSetQosBand stack-based overflow8.8 High
- tenda ac18, ac18 firmware +1 moreTenda AC18 SetPptpServerCfg formSetPPTPServer stack-based overflow8.8 High
- tenda ac18, ac18 firmware +1 moreTenda AC18 SetOnlineDevName formSetDeviceName stack-based overflow8.8 High
- tenda ac18, ac18 firmware +1 moreTenda AC18 QuickIndex formQuickIndex stack-based overflow8.8 High
- tenda ac18, ac18 firmware +1 moreTenda AC18 SetSpeedWan formSetSpeedWan stack-based overflow8.8 High
- surya2developer hostel management serviceSurya2Developer Hostel Management Service Password Change change-password.php cross-site request forgery4.3 Medium
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.10.23 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- pluginus husky - products filter professional for woocommerce, realmag777 husky – products filter professional for woocommerce +1 moreHUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection8.8 High
- pluginus husky - products filter professional for woocommerce, realmag777 husky – products filter professional for woocommerce +1 moreHUSKY – Products Filter for WooCommerce Professional <= 1.3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- surya2developer hostel management service, hostel management system +1 moreSurya2Developer Hostel Management Service HTTP POST Request check_availability.php observable response discrepancy3.7 Low
- phpgurukul hostel management system, surya2developer hostel management service +1 moreSurya2Developer Hostel Management System manage-students.php access control6.5 Medium
- mha sistemas armhazenaMHA Sistemas arMHAzena Executa Page sql injection6.3 Medium
- Show moreLoading…