CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- tenda ac10u, ac10u firmware +1 moreTenda AC10U SetOnlineDevName formSetDeviceName stack-based overflow8.8 High
- ibm qiskit ibm runtime, qiskit qiskit-ibm-runtime +1 more`qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code5.3 Medium
qiskit-ibm-runtimePyPIDynamic Variable Evaluation in qiskit-ibm-runtime2.8 Low- jupyter server proxy, jupyterhub jupyter-server-proxy +1 moreJupyter Server Proxy's Websocket Proxying does not require authentication9.1 Critical
- geoserverGeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)4.8 Medium
- geoserverGeoServer Stored Cross-Site Scripting (XSS) vulnerability in MapML HTML Page4.8 Medium
- geoserverGeoServer Stored Cross-Site Scripting (XSS) vulnerability in WMS OpenLayers Format4.8 Medium
- geoserverGeoServer Stored Cross-Site Scripting (XSS) vulnerability in GWC Seed Form4.8 Medium
- geoserverGeoServer Stored Cross-Site Scripting (XSS) vulnerability in Simple SVG Renderer4.8 Medium
- geoserverGeoServer Stored Cross-Site Scripting (XSS) vulnerability in Style Publisher4.8 Medium
- geoserverGeoServer arbitrary file renaming vulnerability in REST Coverage/Data Store API6.0 Medium
- geoserverGeoServer Stored Cross-Site Scripting (XSS) vulnerability in REST Resources API4.8 Medium
- geoserverGeoServer arbitrary file upload vulnerability in REST Coverage Store API7.2 High
- progress moveit transferMOVEit Transfer Logging Bypass Vulnerability4.3 Medium
- geoserverGeoServer log file path traversal vulnerability7.2 High
- firebirdsql firebirdServer crash when using specific form of SET BIND statement7.5 High
- ibm security verify governanceIBM Security Verify Governance information disclosure5.9 Medium
- progress telerik reportingProgress Telerik Reporting Remote Deserialization Vulnerability8.5 High
- progress telerik reportingProgress Telerik Reporting Local Deserialization Vulnerability7.7 High
- progress telerik report serverProgress Telerik Report Server Deserialization9.9 Critical
- opentext arcsight platformOpenText ArcSight Platform Remote Vulnerability9.8 Critical
yaml-rustcrates.ioyaml-rust is unmaintained.No score- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreLibvirt: negative g_new0 length can lead to unbounded memory allocation6.2 Medium
- social media share buttons by sygnoos media share buttons, sygnoos social media share buttons +1 moreWordPress Social Media Share Buttons plugin <= 2.1.0 - PHP Object Injection vulnerability8.2 High
- charlestsmith word replacer proWordPress Word Replacer Pro plugin <= 1.0 - Broken Access Control vulnerability6.5 Medium
- online discussion forum site project discussion forum site, razormist online discussion forum site +1 moreSourceCodester Online Discussion Forum Site uupdate.php unrestricted upload6.3 Medium
- olive themes one click demo import, olivethemes olive one click demo import +1 moreWordPress Olive One Click Demo Import plugin <= 1.1.1 - Broken Access Control vulnerability8.2 High
- campcodes online job finder systemCampcodes Online Job Finder System index.php sql injection6.3 Medium
- campcodes online job finder systemCampcodes Online Job Finder System controller.php cross site scripting3.5 Low
- campcodes online job finder systemCampcodes Online Job Finder System index.php cross site scripting3.5 Low
- campcodes online job finder systemCampcodes Online Job Finder System index.php cross site scripting3.5 Low
- campcodes online job finder systemCampcodes Online Job Finder System index.php cross site scripting3.5 Low
- campcodes online job finder systemCampcodes Online Job Finder System controller.php cross site scripting3.5 Low
- campcodes online job finder system, online job finder system project job finder system +1 moreCampcodes Online Job Finder System index.php cross site scripting3.5 Low
- campcodes online job finder systemCampcodes Online Job Finder System index.php cross site scripting3.5 Low
- campcodes online job finder system, online job finder system project job finder system +1 moreCampcodes Online Job Finder System index.php cross site scripting3.5 Low
- campcodes online job finder systemCampcodes Online Job Finder System controller.php sql injection6.3 Medium
- catch themes createCreate by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id'9.8 Critical
- delabon live sales notification for woocommerce – woomotiv, woomotiv +1 moreLive Sales Notification for Woocommerce – Woomotiv <= 3.4.3 - Cross-Site Request Forgery via ajax_cancel_review4.3 Medium
- magenet website article monetization by magenet, website article monetization +1 moreWebsite Article Monetization By MageNet <= 1.0.11 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- israelb1 management app for woocommerce – order notifications, order management, lead management, uptime monitoring, management app for woocommerce, wemanage +2 moreManagement App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring <= 1.2.2 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- anshuln90 animated headlineAnimated Headline <= 4.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- adrian emil tudorache order tip, railmedia order tip for woocommerce +1 moreOrder Tip for WooCommerce <= 1.3.1 - Missing Authorization to Unauthenticated Data Export5.3 Medium
- infosatech revivepress – keep your old content evergreenRevivePress – Keep your Old Content Evergreen <= 1.5.6 - Missing Authorization4.3 Medium
- dazzlersoft coming soon, under construction & maintenance mode by dazzler, dazzlersoftware coming soon\, under construction \& maintenance mode by dazzler +1 moreComing Soon, Under Construction & Maintenance Mode By Dazzler <= 2.1.2 - Maintenance Mode Bypass5.3 Medium
- cop ux flatUX Flat <= 4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode7.4 High
- colorlibplugins coming soon & maintenance mode by colorlib, colorlib coming soon \& maintenance mode +1 moreComing Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure5.3 Medium
- wpbits addons for elementor page builderWPBITS Addons For Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- aankit easy maintenance modeEasy Maintenance Mode <= 1.4.2 - Information Exposure5.3 Medium
- campcodes online job finder systemCampcodes Online Job Finder System controller.php sql injection6.3 Medium
- Show moreLoading…