CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...8.4 High
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...6.2 Medium
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...8.4 High
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...5.5 Medium
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...6.2 Medium
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...5.9 Medium
- freeimage project freeimageBuffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker...6.8 Medium
- myprestamodules orders \(csv\, excel\) export proAn issue in MyPrestaModules ordersexport v.6.0.2 and before allows a remote attacker to execute...7.5 High
- best-kit bestkit popupSQL injection vulnerability in Best-Kit bestkit_popup v.1.7.2 and before allows a remote attacker...9.8 Critical
- prestashop abandoned cart reminder proSQL injection vulnerability in pscartabandonmentpro v.2.0.11 and before allows a remote attacker...9.8 Critical
- mz-automation libiec61850In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the...7.5 High
- getrebuild rebuildAn SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and...9.1 Critical
- remyandrade workout journal appCross Site Scripting (XSS) vulnerability in Sourcecodester Workout Journal App 1.0 allows...4.7 Medium
- draytek vigor3910 firmwareA Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices....7.5 High
- elspec-ltd g5dfr firmwareAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The...6.2 Medium
- elspec g5 digital fault recorder, elspec-ltd g5dfr firmware +1 moreAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before....7.5 High
- elspec-ltd g5dfr firmwareAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. A...6.5 Medium
- elspec g5 digital fault recorder, elspec-ltd g5dfr firmware +1 moreAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before....7.5 High
- elspec g5 digital fault recorder, elspec-ltd g5dfr firmware +1 moreAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before....9.8 Critical
- elspec g5 digital fault recorder, elspec-ltd g5dfr firmware +1 moreAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before....9.8 Critical
- elspec g5 digital fault recorder, elspec-ltd g5dfr firmware +1 moreAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before....7.5 High
- elspec g5 digital fault recorder, elspec-ltd g5dfr firmware +1 moreAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before....8.8 High
- elspec g5 digital fault recorder, elspec-ltd g5dfr firmware +1 moreAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The...5.3 Medium
- latchset jose, fedoraproject fedora +1 morelatchset jose through version 11 allows attackers to cause a denial of service (CPU consumption)...7.5 High
- chirp systems accessChirp Systems Chirp Access Use of Hard-coded Password2.3 Low
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway deleteonlineuser.php sql injection6.3 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway naccheck.php xpath injection4.3 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway singlelogin.php sql injection7.3 High
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway sql injection6.3 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway resetpwd.php xpath injection4.3 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway addfirewall.php sql injection6.3 Medium
- ruijie rg-nbs2009g-p, rg-nbs2009g-p firmware +1 moreRuijie RG-NBS2009G-P EXCU_SHELL command injection7.3 High
- ruijie rg-nbs2009g-p, rg-nbs2009g-p firmware +1 moreRuijie RG-NBS2009G-P Password passwdManage.htm improper authorization5.3 Medium
- dproxy-nexgen, microsoft wds, mikrotik routeros-tftp +1 more +3 moreImplementations of UDP application protocols are susceptible to network loops and denial of service7.5 High
- parse community server, parse-community parse-server +1 moreParse Server crash and RCE via invalid Cloud Function or Cloud Job name9.1 Critical
- atlassian confluence data center, confluence server +1 moreThis High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence...8.3 High
- ays pro survey maker, survey maker team maker +1 moreWordPress Survey Maker plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- visual composer website builderWordPress Visual Composer plugin <= 45.6.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- claris pro, filemaker pro +1 moreClaris International has fixed a dylib hijacking vulnerability in the FileMaker Pro.app and...7.8 High
- dmitry v. (ceo of "ukr solution") barcode scanner with inventory & order managerWordPress Barcode Scanner and Inventory manager plugin <= 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- five star plugins star restaurant menuWordPress Restaurant Menu and Food Ordering plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dnesscarkey wp armour – honeypot anti spamWordPress WP Armour plugin <= 2.1.13 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- maciej bis permalink manager lite, permalink manager lite project manager lite +1 moreWordPress Permalink Manager Lite plugin <= 2.4.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- saleswonder team: tobias builder for woocommerce reviews shortcodes – reviewshortWordPress Builder for WooCommerce reviews shortcodes – ReviewShort plugin <= 1.01.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- hasthemes ht easy ga4 ( google analytics 4 ), ht easy ga4 \(google analytics 4\) +1 moreWordPress HT Easy GA4 plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- artica pandora fms, pandora fms fms +1 morePath Traversal and Untrusted Upload File6.7 Medium
- artica pandora fms, pandora fms fms +1 moreOS Command Injection7.6 High
- artica pandora fms, pandora fms fms +1 moreUnauth Time-Based SQL Injection7.5 High
- franklin fueling system evo 5000, evo 550 +1 morePath Traversal vulnerability in Franklin Fueling System EVO 550/50007.5 High
- artica pandora fms, pandora fms fms +1 moreUnautH SQL Injection6.8 Medium
- Show moreLoading…