CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- pivotal software spring security, spring security +1 moreErroneous authentication pass in Spring Security8.2 High
- amss++, amss\+\+ project amss\+\+, amssplus amss plus +2 moreUnrestricted Upload of File with Dangerous Type vulnerability in AMSS++9.9 Critical
- amss++, amss\+\+ project amss\+\+ +1 moreCross-Site Scripting (XSS) in AMSS++7.1 High
- amss++, amss\+\+ project amss\+\+ +1 moreCross-Site Scripting (XSS) in AMSS++7.1 High
- amss++, amss\+\+ project amss\+\+ +1 moreCross-Site Scripting (XSS) in AMSS++7.1 High
- amss++, amss\+\+ project amss\+\+ +1 moreCross-Site Scripting (XSS) in AMSS++7.1 High
- amss++, amss\+\+ project amss\+\+ +1 moreCross-Site Scripting (XSS) in AMSS++7.1 High
- amss++, amss\+\+ project amss\+\+ +1 moreCross-Site Scripting (XSS) in AMSS++7.1 High
- amss++, amss\+\+ project amss\+\+, amssplus amss plus +2 moreSQL injection vulnerability in AMSS++8.2 High
- amss++, amss\+\+ project amss\+\+, amssplus amss plus +2 moreSQL injection vulnerability in AMSS++8.2 High
- amss++, amss\+\+ project amss\+\+, amssplus amss plus +2 moreSQL injection vulnerability in AMSS++8.2 High
- amss++, amss\+\+ project amss\+\+, amssplus amss plus +2 moreSQL injection vulnerability in AMSS++8.2 High
- amss++, amss\+\+ project amss\+\+, amssplus amss plus +2 moreSQL injection vulnerability in AMSS++8.2 High
- amss++, amss\+\+ project amss\+\+ +1 moreSQL injection vulnerability in AMSS++8.2 High
- amss++, amss\+\+ project amss\+\+, amssplus amss plus +2 moreSQL injection vulnerability in AMSS++8.2 High
- amss++, amss\+\+ project amss\+\+, amssplus amss plus +2 moreSQL injection vulnerability in AMSS++8.2 High
- amss++, amss\+\+ project amss\+\+, amssplus amss plus +2 moreSQL injection vulnerability in AMSS++8.2 High
- unitronics unilogic, unistream unilogic +1 moreUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded Password7.5 High
- unitronics unilogic, unistream unilogic +1 moreUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted Source8.8 High
- unitronics unilogic, unistream unilogic +1 moreUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-78: 'OS Command Injection'8.8 High
- unitronics unilogic, unistream unilogic +1 moreUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'8.8 High
- unitronics unilogic, unistream unilogic +1 moreUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-23: Relative Path Traversal8.8 High
- unitronics unilogic, unistream unilogic +1 moreUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor8.8 High
- unitronics unilogic, unistream unilogic +1 moreUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'9.8 Critical
- unitronics unilogic, unistream unilogic +1 moreUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper Authentication10.0 Critical
- libdwarf project libdwarf, fedoraproject fedora, red hat enterprise linux 7 +2 more +4 moreLibdwarf: crashes randomly on fuzzed object7.5 High
- es iperf3, red hat enterprise linux 7, enterprise linux 8 +5 more +7 moreIperf3: possible denial of service5.3 Medium
- adobe coldfusionColdFusion | Improper Access Control (CWE-284)7.4 High
- unixodbc, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreUnixodbc: out of bounds stack write due to pointer-to-integer types conversion7.8 High
- debian linux, linux kernel, netapp a150 firmware +11 more +13 moreip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()8.6 High
- debian linux, linux kernel +1 moretcp: add sanity checks to rx zerocopy7.8 High
- debian linux, linux kernel +1 morepstore/ram: Fix crash when setting number of cpus to an odd number5.5 Medium
- debian linux, linux kernel +1 moreblock/rnbd-srv: Check for unlikely string overflow5.3 Medium
- debian linux, linux kernel +1 morePCI: switchtec: Fix stdev_release() crash after surprise hot remove4.4 Medium
- linux, linux kernel +1 morenbd: always initialize struct msghdr completely4.4 Medium
- linux, linux kernel +1 morewifi: ath11k: rely on mac80211 debugfs handling for vif7.8 High
- debian linux, linux kernel +1 morellc: make llc_ui_sendmsg() more robust against bonding changes5.5 Medium
- debian linux, linux kernel +1 morellc: Drop support for ETH_P_TR_802_2.5.5 Medium
- linux, linux kernel +1 morenet: fix removing a namespace with conflicting altnames5.5 Medium
- debian linux, linux kernel +1 morecrypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init7.8 High
- linux, linux kernel +1 morehwrng: core - Fix page fault dead lock on mmap-ed hwrng5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morePM / devfreq: Fix buffer overflow in trans_stat_show7.8 High
- debian linux, linux kernel, netapp 9500 firmware +17 more +19 moreip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()5.5 Medium
- linux, linux kernel +1 moreblock: Fix iterating over an empty bio with bio_for_each_folio_all7.8 High
- linux, linux kernel +1 moreipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work7.8 High
- linux, linux kernel +1 moredrivers/thermal/loongson2_thermal: Fix incorrect PTR_ERR() judgment5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morecrypto: scomp - fix req->dst buffer overflow7.8 High
- linux, linux kernel +1 morewifi: rtw88: sdio: Honor the host max_req_size in the RX path5.5 Medium
- linux, linux kernel +1 morenet/sched: act_ct: fix skb leak and crash on ooo frags7.5 High
- debian linux, linux kernel +1 morebinder: fix race between mmput() and do_exit()4.7 Medium
- Show moreLoading…