CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- linux, linux kernel +1 morenet: caif: fix memory leak in caif_device_notify5.5 Medium
- linux, linux kernel +1 morenet: caif: fix memory leak in cfusbl_device_notify5.5 Medium
- linux, linux kernel +1 moreHID: magicmouse: fix NULL-deref on disconnect5.5 Medium
- linux, linux kernel +1 moreext4: fix memory leak in ext4_fill_super5.5 Medium
- linux, linux kernel +1 morepid: take a reference when initializing `cad_pid`7.8 High
- linux, linux kernel +1 moreext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed5.5 Medium
- linux, linux kernel +1 moreext4: fix memory leak in ext4_mb_init_backend on error path.5.5 Medium
- linux, linux kernel +1 moreocfs2: fix data corruption by fallocate5.5 Medium
- linux, linux kernel +1 morebtrfs: abort in rename_exchange if we fail to insert the second ref7.1 High
- linux, linux kernel +1 morex86/kvm: Teardown PV features on boot CPU as well7.8 High
- linux, linux kernel +1 morexen-netback: take a reference to the RX task thread8.8 High
- linux, linux kernel +1 morex86/kvm: Disable kvmclock on all CPUs on shutdown7.1 High
- linux, linux kernel +1 moreneighbour: allow NUD_NOARP entries to be forced GCed7.5 High
github.com/go-vela/cliGoCLI for Vela Insecure Variable Substitution7.7 Highgithub.com/go-vela/sdk-goGoGolang SDK for Vela Insecure Variable Substitution7.7 Highgithub.com/go-vela/serverGoServer/API for Vela Insecure Variable Substitution7.7 Highgithub.com/go-vela/typesGoTypes for Vela Insecure Variable Substitution7.7 High- open-metadata openmetadataSpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` in OpenMetadata8.8 High
- open-metadata openmetadataAuthentication Bypass in OpenMetadata9.8 Critical
- open-metadata openmetadataSpEL Injection in `PUT /api/v1/events/subscriptions` in OpenMetadata8.8 High
- open-metadata openmetadataSpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadata8.8 High
- open-metadata openmetadataSpEL Injection in `PUT /api/v1/policies` in OpenMetadata9.4 Critical
- opentext vertica, vertica management console +1 moreOpenText Vertica Management console might be prone to bypass via crafted requests5.0 Medium
- discourseDenial of service through invites in Discourse6.5 Medium
- discourseDenial of service via Staff Actions in Discourse6.5 Medium
- discourseDisclosure of the existence of secret categories with custom backgrounds in Discourse5.3 Medium
- discourseDisclosure of the existence of secret subcategories in Discourse5.3 Medium
- discourseNo rate limits on POST /uploads endpoint in Discourse5.3 Medium
- corewcfCoreWCF NetFraming based services can leave connections open when they should be closed7.5 High
fgrPyPIfgr Vulnerable to Insecure Default Variable Initialization3.7 Low- snowflake hive metastore connector, snowflakedb snowflake-hive-metastore-connector +1 moreElevation of privilege in Snowflake Hive MetaStore Connector Helper script4.0 Medium
- projectdiscovery nucleiUnsigned code template execution through workflows in projectdiscovery/nuclei7.4 High
- zephyrproject zephyrMissing Security Control in Zephyr OS IP Packet Handling8.6 High
- amd cpu, xen +1 moreSpeculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.5.7 Medium
- logitech logi tuneElectron Code Injection in Logi Tune macOS Application4.4 Medium
- sciener ttlock appCVE-2023-69607.5 High
- sciener kontrol lux, ttlock app +1 moreCVE-2023-70036.8 Medium
- sciener gateway g2CVE-2023-70078.2 High
- sciener kontrol lux, kontrol lux firmware +1 moreCVE-2023-70069.1 Critical
- sciener ttlock appCVE-2023-70046.5 Medium
- sciener kontrol lux, kontrol lux firmware +1 moreCVE-2023-70098.2 High
- sciener kontrol lux, kontrol lux firmware +1 moreCVE-2023-70179.8 Critical
- raspap, raspap raspap-webgui +1 moreRaspAP raspap-webgui HTTP POST Request provider.php code injection4.7 Medium
- fluid-cloudnative fluidOS Command Injection for Fluid Users with JuicefsRuntime4.0 Medium
- ibm host access transformation servicesIBM Host Access Transformation Services information disclosure6.2 Medium
- ibm secure proxy, sterling secure proxy +1 moreIBM Secure Proxy information disclosure4.0 Medium
- ibm secure proxy, sterling secure proxy +1 moreIBM Secure Proxy cross-site scripting6.1 Medium
- ibm secure proxy, sterling secure proxy +1 moreIBM Secure Proxy file manipulation5.9 Medium
- ibm secure proxy, sterling secure proxy +1 moreIBM Secure Proxy information disclosure4.3 Medium
- ibm secure proxy, sterling secure proxy +1 moreIBM Secure Proxy cross-site scripting6.1 Medium
- Show moreLoading…