CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)4.8 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe animateAdobe Animate MP3 File parsing unitialized heap memory corruption5.5 Medium
- adobe animateAdobe Animate 2024 SWF File parsing memory corruption5.5 Medium
- adobe animateAdobe Animate 2024 GIF file parsing memory corruption5.5 Medium
- adobe animateAdobe Animate 2024 BMP File Parsing Out-Of-Bound Write Remote Code execution Vulnerability7.8 High
- argoproj argo cd, argo-cd +1 moreArgo CD vulnerable to Bypassing of Rate Limit and Brute Force Protection Using Cache Overflow7.5 High
- argoproj argo cd, argo-cd +1 moreArgo CD vulnerable to Bypassing of Brute Force Protection via Application Crash and In-Memory Data Loss9.8 Critical
- adobe lightroom, lightroom desktop +1 moreLightroom Desktop | Untrusted Search Path (CWE-426)7.8 High
- glpi-project glpiReflected Cross-Site Scripting (XSS) in search engine when debug mode is enabled in GLPI5.3 Medium
- glpi-project glpiStored XSS in dashboards in GLPI4.5 Medium
- glpi-project glpiBlind Server-Side Request Forgery (SSRF) using Arbitrary Object Instantiation in GLPI6.4 Medium
- glpi-project glpiSQL Injection in through the search engine7.7 High
- schneider electric ecostruxure power design - ecodial, schneider-electric ecostruxure power monitoring expert +1 moreCWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code...7.8 High
- schneider electric easergy t200 (dnp3) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (iec104) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (modbus) models: t200i, t200e, t200p, t200s, t200h +1 more +3 moreCWE-552: Files or Directories Accessible to External Parties vulnerability exists that could...7.5 High
- schneider electric easergy t200 (dnp3) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (iec104) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (modbus) models: t200i, t200e, t200p, t200s, t200h +2 moreCWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)...8.2 High
- schneider electric easergy t200 (dnp3) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (iec104) models: t200i, t200e, t200p, t200s, t200h, easergy t200 (modbus) models: t200i, t200e, t200p, t200s, t200h +5 more +7 moreCWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that...9.8 Critical
- adobe bridgeBridge 2024 TIF File Parsing Out-Of-Bound Read Information Disclosure Vulnerability5.5 Medium
- adobe bridgeAdobe Bridge PDF Parsing Heap Memory Corruption Remote Code Execution Vulnerability7.8 High
- adobe bridgeZDI-CAN-22653: Adobe Bridge PS File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge 2024 Out of Bound Write Remote Code Execution Vulnerability7.8 High
- tenable nessus, nessus agent +1 moreLocal Privilege Escalation7.8 High
- glpi-project glpiSensitive fields access through dropdowns in GLPI6.5 Medium
- glpi-project glpiglpi Users emails enumeration6.5 Medium
- unknown grid shortcodesGrid Shortcodes < 1.1.1 - Contributor+ Stored XSS5.4 Medium
- spwebguy responsive pricing tableResponsive Pricing Table < 5.1.11 - Author+ Stored XSS5.4 Medium
- spwebguy team membersTeam Members < 5.3.2 - Author+ Stored XSS6.1 Medium
- adobe premiere proAdobe Premiere Pro Out-of-bounds Write Arbitrary code execution7.8 High
- adobe premiere proZDI-CAN-22671: Adobe Premiere Pro AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 8.6 extended update support +9 more +11 moreBuildah: buildah: container escape via improper bind mount validation8.6 High
- Show moreLoading…