CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- bmc control-mHTML injection in BMC Control-M4.6 Medium
- bmc control-mDLL side-loading in BMC Control-M6.6 Medium
- bmc control-mIncorrect authorization in BMC Control-M6.4 Medium
- fitnesseImproper restriction of XML external entity references vulnerability exists in FitNesse all...5.8 Medium
- brother industries, ltd. multiple printers and scannersCross-site request forgery vulnerability in multiple printers and scanners which implement Web...6.1 Medium
- brother industries, ltd. multiple printers and scannersImproper authentication vulnerability in exists in multiple printers and scanners which implement...5.3 Medium
- fujifilm business inovation corp. apeosport-iv c2270, apeosport-iv c2270 r, apeosport-iv c3370 +34 more +36 moreCross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet...6.3 Medium
- cleancoder fitnesseFitNesse Cross-site Scripting vulnerability6.1 Medium
- fitnesseFitNesse allows execution of arbitrary OS commands9.8 Critical
- cleancoder fitnesseCross-site scripting vulnerability exists in FitNesse all releases, which may allow a remote...6.1 Medium
- abematv, inc. 'abema' app for androidImproper export of Android application components issue exists in 'ABEMA' App for Android prior...3.3 Low
- tenda ac10, ac10 firmware +1 moreTenda AC10 SetStaticRouteCfg fromSetRouteStatic stack-based overflow8.8 High
- oretnom23 employee task management systemSourceCodester Employee Task Management System update-employee.php authorization7.3 High
- oretnom23 employee task management systemSourceCodester Employee Task Management System update-admin.php authorization7.3 High
- oretnom23 employee task management systemSourceCodester Employee Task Management System task-details.php authorization7.3 High
- oretnom23 employee task management systemSourceCodester Employee Task Management System edit-task.php authorization7.3 High
- employee task management system project task management system, oretnom23 employee task management system +1 moreSourceCodester Employee Task Management System task-info.php redirect7.3 High
- oretnom23 employee task management systemSourceCodester Employee Task Management System task-details.php redirect7.3 High
- a.k.i software pmman.exe (enterprise edition), pmman.exe (pro + imap4 edition), pmman.exe (pro edition) +7 more +9 moreDirectory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products'...7.5 High
- a.k.i software pmmls.exeDirectory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe) included in A.K.I...3.7 Low
- a.k.i software pmc.exeInsufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I...4.3 Medium
- a.k.i software pmam.exe, pmc.exe, pmum.exe (pro + imap4 edition / enterprise edition) +3 more +5 moreStored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer...5.4 Medium
- oretnom23 employee task management systemSourceCodester Employee Task Management System manage-admin.php redirect7.3 High
checkstyleOSS-FuzzSecurity exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContextNo score- oretnom23 employee task management systemSourceCodester Employee Task Management System edit-task.php redirect7.3 High
- openstack murano, yaql +1 moreInformation leakage in YAQL6.5 Medium
- danielmiessler fabricdanielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of...7.4 High
- rocket chat auditRocket.Chat.Audit through 5ad78e8 depends on filecachetools, which does not exist in PyPI.9.1 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of...4.3 Medium
- tenda ac18 firmwareTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of...6.5 Medium
- tenda ac18 firmwareTenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of...9.8 Critical
amavisAlpine,amavisd-newDebian +1 moreAmavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an...7.4 High- flusityflusity CMS through 2.45 allows tools/addons_model.php Gallery Name XSS. The reporter indicates that this product "ceased its development as of February 2024."6.1 Medium
- avsystem unified management platformAn open redirect in the Login/Logout functionality of web management in AVSystem Unified...5.4 Medium
- avsystem unified management platformImproper input validation in AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS can...5.9 Medium
- avsystem unified management platformInsecure storage of LDAP passwords in the authentication functionality of AVSystem Unified...6.5 Medium
- avsystem unified management platformInsecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567...5.5 Medium
- fusionpbxFusionPBX before 5.2.0 does not validate a session.5.3 Medium
- komm.one cmsKomm.One CMS 10.4.2.14 has a Server-Side Template Injection (SSTI) vulnerability via the Velocity...7.5 High
- bizdelnick gross, debian linux +1 moregross - security update7.5 High
- siklu tg terragraph, tg firmware +1 moreSiklu TG Terragraph devices before 2.1.1 allow attackers to discover valid, randomly generated...7.5 High
- siklu tg terragraphSiklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has...9.8 Critical
- kossyThe Kossy module before 0.60 for Perl allows JSON hijacking because of X-Requested-With mishandling.9.8 Critical
- No product listedThe Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero...6.5 Medium
- perlThe Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in...9.1 Critical
libnet-cidr-lite-perlDebian,perl-Net-CIDR-LiteopenEuler +1 moreThe Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero...6.3 Medium- dcit perl-cryptxIn the CryptX module before 0.062 for Perl, gcm_decrypt_verify() and...9.8 Critical
- autodesk fbx reviewActionScript Byte Code “ABC” Vulnerability in the Autodesk FBX Review software7.8 High
- autodesk dwg trueview, advance steel, autocad +12 more +14 moreStack-based Overflow Vulnerability in the TrueViewTM Desktop Software7.8 High
- employee task management system project task management system, oretnom23 employee task management system +1 moreSourceCodester Employee Task Management System admin-manage-user.php redirect7.3 High
- Show moreLoading…