CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- itopvpn dualsafe password managerAn issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker...7.1 High
- oscommerceAn issue was discovered in osCommerce v4, allows local attackers to bypass file upload...6.6 Medium
- zkteco biotimeAn issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive...7.5 High
- zkteco biotimeAn issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive...6.5 Medium
- tramyardg autoexpressStored Cross-Site Scripting (XSS) vulnerability in tramyardg autoexpress 1.3.0, allows remote...6.1 Medium
- tramyardg autoexpressAn issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote...9.8 Critical
- tramyardg autoexpressA SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote...9.8 Critical
- microsoft xbox gaming servicesXbox Gaming Services Elevation of Privilege Vulnerability8.8 High
- github enterprise serverCSRF vulnerability was identified in GitHub Enterprise Server that allowed performing actions on behalf of a user4.3 Medium
- github enterprise serverImproper input validation vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console9.1 Critical
- github enterprise serverRemote Code Execution in GitHub Enterprise Server Allowed Administrators to gain SSH access to the appliance8.0 High
- owncastOwncast cross origin request8.2 High
- campcodes complete online dj booking systemCampcodes Complete Online DJ Booking System aboutus.php cross site scripting3.5 Low
- campcodes complete online dj booking systemCampcodes Complete Online DJ Booking System admin-profile.php cross site scripting3.5 Low
- acryldata datahub-helmDefault secret use for initial deployment9.1 Critical
- saleor storefront, react-storefront +1 moreSaleor Storefront session leak in cache4.3 Medium
- campcodes complete online dj booking systemCampcodes Complete Online DJ Booking System booking-bwdates-reports-details.php cross site scripting3.5 Low
- campcodes complete online dj booking systemCampcodes Complete Online DJ Booking System booking-search.php cross site scripting3.5 Low
- eprosima fast-dds, fast dds +1 moreManipulated DATA Submessage causes a heap-buffer-overflow error9.7 Critical
- campcodes complete online dj booking systemCampcodes Complete Online DJ Booking System contactus.php cross site scripting3.5 Low
- campcodes complete online dj booking systemCampcodes Complete Online DJ Booking System user-search.php cross site scripting3.5 Low
- zulip, zulip server +1 moreMoving single messages from public to private streams leaves them accessible6.5 Medium
- campcodes complete online dj booking systemCampcodes Complete Online DJ Booking System booking-bwdates-reports-details.php sql injection6.3 Medium
- campcodes complete online dj booking systemCampcodes Complete Online DJ Booking System booking-search.php sql injection6.3 Medium
- campcodes complete online dj booking systemCampcodes Complete Online DJ Booking System user-search.php sql injection6.3 Medium
- folio spring module coreFolio Spring Module Core Schema Name HibernateSchemaService.java dropSchema sql injection5.5 Medium
ibexa/corePackagistIbexa Kernel's files with blacklisted extensions can be still saved to draftsNo scoreezsystems/ezplatform-kernelPackagistIbexa Kernel's files with blacklisted extensions can be still saved to draftsNo score- elated-themes frappeFrappe File Permissions can by bypassed using certain endpoints8.1 High
- elated-themes frappeFrappe SQL Injection from reporting logic7.5 High
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +32 more +34 moreGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads7.5 High
- jupyter oauthenticatorGoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace7.5 High
- tenda ac10u, ac10u firmware +1 moreTenda AC10U addWifiMacFilter stack-based overflow8.8 High
- tenda ac10u, ac10u firmware +1 moreTenda AC10U openSchedWifi setSchedWifi stack-based overflow8.8 High
- mobyExternal DNS requests from 'internal' networks could lead to data exfiltration5.9 Medium
- umbraco umbraco-cms, cms +1 moreUmbraco possible user enumeration vulnerability3.7 Low
- tenda ac10u, ac10u firmware +1 moreTenda AC10U SetStaticRouteCfg fromSetRouteStatic stack-based overflow8.8 High
- tenda ac10u, ac10u firmware +1 moreTenda AC10U execCommand formexeCommand stack-based overflow8.8 High
- ibm mqIBM MQ denial of service5.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote...4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote...6.5 Medium
- google chrome, fedoraproject fedora +1 moreIncorrect security UI in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a...4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote...6.5 Medium
- google chrome, fedoraproject fedora +1 moreObject lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...8.8 High
- tenda ac10u, ac10u firmware +1 moreTenda AC10U WriteFacMac formWriteFacMac os command injection6.3 Medium
- tenda ac10u, ac10u firmware +1 moreTenda AC10U WifiWpsStart formWifiWpsStart stack-based overflow8.8 High
- tenda ac10u, ac10u firmware +1 moreTenda AC10U SetNetControlList formSetQosBand stack-based overflow8.8 High
- tenda ac10u, ac10u firmware +1 moreTenda AC10U SetFirewallCfg formSetFirewallCfg stack-based overflow8.8 High
- Show moreLoading…