CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- cegid meta4 hrMultiple vulnerabilities on Meta4 HR from Cegid7.3 High
- cegid meta4 hrMultiple vulnerabilities on Meta4 HR from Cegid6.1 Medium
- cegid meta4 hrMultiple vulnerabilities on Meta4 HR from Cegid6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreTo harden ICU against exploitation, the behavior for out-of-memory conditions was changed to...2.7 Low
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system...5.9 Medium
- cegid meta4 hrInformation Exposure Vulnerability on Meta4 HR7.5 High
- alma blog, devklan alma blog +1 moreCross-site Scripting at Alma Devklan Blog5.8 Medium
- alma blog, devklan alma blog +1 moreObservable Response Discrepancy at Alma Devklan Blog5.3 Medium
- alma blog, devklan alma blog +1 moreImproper Access Control at Alma Devklan Blog6.5 Medium
- apache wicketApache Wicket: Possible bypass of CSRF protection6.5 Medium
- apache hop engineApache Hop Engine: ID isn't escaped when generating HTML6.5 Medium
- dell nx3230 firmware, nx3330 firmware, poweredge platform +23 more +25 moreDell PowerEdge Server BIOS contains an Improper SMM communication buffer verification...4.4 Medium
- dell nx3230 firmware, nx3330 firmware, poweredge platform +23 more +25 moreDell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high...7.2 High
- axis os, os 2022 +1 moreSandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip...6.5 Medium
- axis communications ab osSandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs local_list...6.5 Medium
- psf blackBlack vulnerable to Regular Expression Denial of Service (ReDoS)5.3 Medium
- laravel livewireCross-site Scripting in livewire/livewire6.1 Medium
- fujian kelixin communication command and dispatch platform, kelixin communication command and dispatch project communication command and dispatch +1 moreFujian Kelixin Communication Command and Dispatch Platform editemedia.php sql injection6.3 Medium
- fujian kelixin communication command and dispatch platform, kelixin communication command and dispatch project communication command and dispatch +1 moreFujian Kelixin Communication Command and Dispatch Platform pwd_update.php sql injection6.3 Medium
- fujian kelixin communication command and dispatch platform, kelixin communication command and dispatch project communication command and dispatch +1 moreFujian Kelixin Communication Command and Dispatch Platform down_file.php sql injection6.3 Medium
pcre2OSS-FuzzHeap-buffer-overflow in pcre2_fuzzsupport.cNo score- unit4 financialsCross Site Scripting vulnerability in Unit4 Financials by Coda v.2024Q1 allows a remote attacker...6.1 Medium
- html-js doracmsCross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to...8.8 High
- employee management system project management system, walterjnr1 employee management system +1 moreSQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary...9.8 Critical
- szlbt lbt-t300-mini1 firmware, lbt-t300-mini firmware +1 moreShenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer...6.5 Medium
- szlbt lbt-t300-mini1 firmware, lbt-t300-mini firmware +1 moreShenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer...5.7 Medium
- advancedplugins reportsstatisticsAn issue in Advanced Plugins reportsstatistics v1.3.20 and before allows a remote attacker to...9.8 Critical
- knowband spinwheelSQL injection vulnerability in KnowBand spinwheel v.3.0.3 and before allows a remote attacker to...9.8 Critical
- sourcecodester open source medicine ordering systemOpen Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- linksys e1000 firmwareThere is stack-based buffer overflow vulnerability in pc_change_act function in Linksys E1000...6.7 Medium
- No product listedUBEE DDW365 XCNDDW365 8.14.3105 software on hardware 3.13.1 allows a remote attacker within Wi-Fi...7.2 High
- eprosima fast ddsAn issue in the HistoryQosPolicy component of FastDDS v2.12.x, v2.11.x, v2.10.x, and v2.6.x leads...7.5 High
- mozilla firefoxMemory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of...8.8 High
- mozilla firefoxData was not properly sanitized when decoding a QUIC ACK frame; this could have led to...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have...8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA missing delay on when pointer lock was used could have allowed a malicious page to trick a user...5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUsing a markup injection an attacker could have stolen nonce values. This could have been used to...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe permission prompt input delay could have expired while the window is not in focus, which made...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 more`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...8.4 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreReturn registers were overwritten which could have allowed an attacker to execute arbitrary code....8.1 High
- mozilla firefoxPassing invalid data could have led to invalid wasm values being created, such as arbitrary...3.7 Low
- koha-community koha library softwareA multiple Cross-site scripting (XSS) vulnerability in the '/members/moremember.pl', and ‘...8.1 High
- speedy11cz mcrpxDirectory Traversal vulnerability in Speedy11CZ MCRPX v.1.4.0 and before allows a local attacker...5.5 Medium
- devan-kerman arrpPath traversal in flaskcode Devan-Kerman ARRP8.8 High
- potatosalad erlang-joseerlang-jose vulnerable to denial of service via large p2c value5.3 Medium
- seling visual access managerAn issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the ...6.5 Medium
- openclinic ga project gaAn issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path...7.5 High
- openclinic gaAn issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path...7.5 High
- openclinic gaAn issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has...7.5 High
- Show moreLoading…