CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- wpswings ultimate gift cards for woocommerceUltimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates <= 2.6.6 - Missing Authorization to Unauthenticated Information Exposure5.3 Medium
- redhat libvirt, debian linux, red hat enterprise linux 6 +5 more +7 moreLibvirt: null pointer dereference in udevconnectlistallinterfaces()5.0 Medium
- charlestsmith word replacer proWord Replacer Pro <= 1.0 - Missing Authorization to Unauthenticated Arbitrary Content Update5.3 Medium
- sygnoos social media share buttonsSocial Media Share Buttons <= 2.1.0 - Authenticated (Subscriber+) PHP Object Injection8.8 High
- spring framework, vmware spring framework, netapp active iq unified manager +2 moreCVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)8.1 High
- sewpafly post thumbnail editorWordPress Post Thumbnail Editor plugin <= 2.4.8 - Unauthenticated Sensitive Data Exposure vulnerability5.3 Medium
- elementor proWordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability6.5 Medium
- wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 moreElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting5.5 Medium
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget6.4 Medium
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- softaculous backuply – backup, restore, migrate and cloneBackuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversal4.9 Medium
- element invader elementinvader addons for elementor, elementinvader addons for elementor +1 moreElementInvader Addons for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- andrei ivasiuc fontific | google fonts, fontific +1 moreWordPress Fontific plugin <= 0.1.6 - CSRF to XSS vulnerability7.1 High
- sandi verdev watermark reloadedWordPress Watermark RELOADED plugin <= 1.3.5 - CSRF to XSS vulnerability7.1 High
- bee beepressWordPress BeePress plugin <= 6.9.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- pixelemu terraclassifiedsWordPress TerraClassifieds plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability8.8 High
- edgarrojas woocommerce pdf invoice builderWordPress WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin <= 1.2.101 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- ari soft stream quiz, ari-soft ari stream quiz +1 moreWordPress ARI Stream Quiz – WordPress Quizzes Builder plugin <= 1.2.32 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- automattic crowdsignal dashboard, automattic, inc. crowdsignal dashboard – polls, surveys & more +1 moreWordPress Crowdsignal Polls & Ratings plugin <= 3.0.11 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- averta depicter slider, depicter +1 moreWordPress Depicter Slider plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- atlas gondal export media urls, atlasgondal export all urls +1 moreWordPress Export Media URLs plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- nick mcreynolds product table by wbw, woobewoo product table +1 moreWordPress Product Table by WBW plugin <= 1.8.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- rocket elements split test for elementorWordPress Split Test For Elementor plugin <= 1.6.9 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
wiresharkOSS-FuzzGlobal-buffer-overflow in dissect_dns_answerNo scorep11-kitOSS-FuzzHeap-buffer-overflow in p11_rpc_buffer_get_date_valueNo score- totolink a7000r firmware, x5000r firmware +1 moreBuffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115...7.5 High
- totolink a7000r firmware, x5000r firmware +1 moreBuffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115...9.8 Critical
- mitel micontact center businessA vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4...6.8 Medium
- mitel micontact center businessA vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4...7.5 High
- sir gnuboard, gnuboard gnuboard6 +1 moreCross Site Scripting (XSS) vulnerability in Gnuboard g6 before Github commit...6.1 Medium
djangorestframework-simplejwtPyPI,python-djangorestframework-simplejwtDebian +1 moreImproper Privilege Management in djangorestframework-simplejwt5.5 Medium- carrier masmobile classic, mas asp.net services, honeywell masmobile asp.net services +1 more +3 moreMAS (a Carrier brand) MASmobile Classic Authorization Bypass6.5 Medium
- mdp rotpROTP 6.2.2 and 6.2.1 has 0666 permissions for the .rb files.5.3 Medium
- friendsofsymfony1 symfony1, friends of symfony project fosuserbundle +1 moreGadget chain in Symfony 1 due to vulnerable Swift Mailer dependency5.0 Medium
- magesh-k21 online-college-event-hall-reservation-systemMAGESH-K21 Online-College-Event-Hall-Reservation-System login.php sql injection7.3 High
- apple xcodeA logic issue was addressed with improved state management.5.5 Medium
- linux, linux kernel +1 moremt76: mt7921: fix possible AOOB issue in mt7921_mcu_tx_rate_report7.8 High
- linux, linux kernel +1 moreefi/fdt: fix panic when no valid fdt found5.5 Medium
- linux, linux kernel +1 moreHID: amd_sfh: Fix memory leak in amd_sfh_work5.5 Medium
- linux, linux kernel +1 moremptcp: fix sk_forward_memory corruption on retransmission7.5 High
- linux, linux kernel +1 morenet/tls: Fix use-after-free after the TLS device goes down and up8.1 High
- linux, linux kernel +1 morenvmet: fix freeing unallocated p2pmem7.5 High
- linux, linux kernel +1 morenetfilter: nft_ct: skip expectations for confirmed conntrack7.8 High
- linux, linux kernel +1 morebpf, lockdown, audit: Fix buggy SELinux lockdown permission checks5.5 Medium
- linux, linux kernel +1 moreice: track AF_XDP ZC enabled queues in bitmap5.5 Medium
- linux, linux kernel +1 moreipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions7.8 High
- linux, linux kernel +1 moresch_htb: fix refcount leak in htb_parent_to_leaf_offload5.5 Medium
- linux, linux kernel +1 moreio_uring: fix link timeout refs7.8 High
- linux, linux kernel +1 moreio_uring: fix ltout double free on completion race7.8 High
- Show moreLoading…