CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- openclinic ga project gaAn issue was discovered in OpenClinic GA 5.247.01. A Reflected Cross-Site Scripting (XSS)...6.1 Medium
- openclinic ga project gaAn issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability...9.1 Critical
- openclinic ga project gaAn issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via...9.1 Critical
- jens-maus raspberrymaticRaspberryMatic Unauthenticated Remote Code Execution vulnerability through HMServer File Upload10.0 Critical
- ldap-account-manager ldap account manager, ldapaccountmanager lam +1 moreLAM vulnerable to Authenticated Remote Code Execution7.9 High
- remyandrade file manager app, sourcecodester file management app +1 moreSourceCodester File Manager App update-file.php unrestricted upload6.3 Medium
- clickhouse, clickhouse cloud +1 moreClickHouse's Role-based Access Control is bypassed when query caching is enabled.2.4 Low
- ilicmiljan secureprops, secure-props +1 more[TagAwareCipher] - Decryption Failure (Regex Match)2.6 Low
- django-wikidjango-wiki denial of service via regular expression7.5 High
- zitadelZITADEL vulnerable to improper HTML sanitization8.1 High
- ciliumCilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies6.1 Medium
- ciliumCilium has possible unencrypted traffic between nodes when using IPsec and L7 policies6.1 Medium
- ciliumCilium intermittent HTTP policy bypass7.2 High
- octoprintOctoPrint XSS via the "Snapshot Test" feature in Classic Webcam plugin settings4.0 Medium
- backupbolt backup boltBackup Bolt <= 1.3.0 - Sensitive Data Exposure4.7 Medium
- unknown advanced social feeds widget & shortcode, shahaji9 advanced social feeds widget \& shortcode +1 moreAdvanced Social Feeds Widget & Shortcode <= 1.7 - Admin+ Stored XSS4.8 Medium
- otwthemes buttons shortcode and widgetButtons Shortcode and Widget <= 1.16 - Stored XSS via shortcode6.1 Medium
- sterlinghamilton scalable vector graphics, unknown scalable vector graphics (svg), sterlinghamilton scalable vector graphics \(svg\) +2 moreScalable Vector Graphics (SVG) <= 3.4 - Author+ Stored XSS via SVG5.4 Medium
- bestwebsoft error log viewer by bestwebsoft, error log viewer +1 moreError Log Viewer < 1.1.3 - Directory Listing to Sensitive Data Exposure6.5 Medium
- theinnovs innovs hrInnovs HR < 1.0.3.7.1 - Employee Creation via CSRF8.8 High
- milappatel widget for social page feedsWidget for Social Page Feeds < 6.4 - Admin+ Stored XSS6.1 Medium
- blueglass jobs for wordpressJobs for WordPress < 2.7.4 - Contributor+ Stored XSS5.4 Medium
- otwthemes tabs shortcode and widgetTabs Shortcode and Widget <= 1.17 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- mediabeta enjoy social feed, unknown enjoy social feed plugin for wordpress website +1 moreEnjoy Social Feed <= 6.2.2 - Unauthenticated Arbitrary Instagram Account Unlinking8.8 High
- radykal fancy product designerFancy Product Designer < 6.1.5 - Admin+ SQL Injection6.5 Medium
- mediabeta enjoy social feed, unknown enjoy social feed plugin for wordpress website +1 moreEnjoy Social Feed <= 6.2.2 - Subscriber+ Plugin Database Reset8.8 High
- astropyastropy vulnerable to RCE in TranformGraph().to_dot_graph function8.4 High
- argoproj argo cd, argo-cd +1 moreArgo CD Denial of Service (DoS) Vulnerability Due to Unsafe Array Modification in Multi-threaded Environment7.5 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Information Exposure (CWE-200)5.3 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Information Exposure (CWE-200)5.3 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- Show moreLoading…