CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- cdexApplication users enumeration in CDeX6.3 Medium
- cdexWeak password recovery mechanism in CDeX8.0 High
- ibm storage protect plus server, storage protect plus +1 moreIBM Storage Protect Plus Server improper access control4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain...4.2 Medium
- sapplica sentrifugoCross-Site Scripting (XSS) vulnerability in Sentrifugo7.1 High
- sapplica sentrifugoCross-Site Scripting (XSS) vulnerability in Sentrifugo7.1 High
- sapplica sentrifugoCross-Site Scripting (XSS) vulnerability in Sentrifugo7.1 High
- sapplica sentrifugoSQL injection vulnerability in Sentrifugo9.8 Critical
- sapplica sentrifugoSQL injection vulnerability in Sentrifugo9.8 Critical
- sapplica sentrifugoSQL injection vulnerability in Sentrifugo9.8 Critical
- sapplica sentrifugoSQL injection vulnerability in Sentrifugo9.8 Critical
- sapplica sentrifugoSQL injection vulnerability in Sentrifugo9.8 Critical
- sapplica sentrifugoSQL injection vulnerability in Sentrifugo9.8 Critical
- sapplica sentrifugoSQL injection vulnerability in Sentrifugo9.8 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 moreGnutls: vulnerable to minerva side-channel information leak5.3 Medium
linux-laptopUbuntulinux-laptop vulnerabilitiesNo score- planet igs-4215-16t2s, planettechnologies igs-4215-16t2s firmware +1 moreOS Command Injection in Planet IGS-4215-16T2S6.4 Medium
- planet igs-4215-16t2s, planettechnologies igs-4215-16t2s firmware +1 moreCross-Site Request Forgery in Planet IGS-4215-16T2S7.1 High
- planet igs-4215-16t2s, planettechnologies igs-4215-16t2s firmware +1 moreExposure of Sensitive Information to an Unauthorized Actor in Planet IGS-4215-16T2S7.7 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nf_tables: disallow anonymous set with timeout flag7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nf_tables: disallow timeout for anonymous sets7.8 High
- abast scan visio edocument suite web viewerSQL Injection vulnerability on SCAN_VISIO eDocument Suite Web Viewer from Abast9.8 Critical
- apache dorisApache Doris: Downloading arbitrary remote jar files resulting in remote command execution9.8 Critical
- apache dorisApache Doris: Possible race condition5.3 Medium
- apache commons configuration, fedoraproject fedora, netapp ontap tools +1 more +3 moreApache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()7.3 High
- apache commons configuration, fedoraproject fedora +1 moreApache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree5.4 Medium
- opentext pvcs version managerWeak Access Control - Arbitrary file upload9.8 Critical
- opentext pvcs version managerWeak Access Control - Arbitrary file download9.8 Critical
- donbermoy complete e-commerce site, sourcecodester complete ecommerce site +1 moreSourceCodester Complete E-Commerce Site users_photo.php unrestricted upload4.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGnutls: potential crash during chain building/verification5.0 Medium
- kiloview ndi, ndi n20 firmware, ndi n3-s firmware +4 more +6 moreAuthenticated Remote Code Execution in Kiloview NDI N series products8.8 High
- kiloview ndi, ndi n4 firmware +1 moreUse of Hard-coded Credentials in Kiloview NDI N series products API middleware9.8 Critical
- filemanagerpro file managerFile Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion8.8 High
threetenbpOSS-FuzzSecurity exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parseNo score- freebsd, openbsd +1 moreNFS in a BSD derived codebase, as used in OpenBSD through 7.4 and FreeBSD through 14.0-RELEASE,...9.8 Critical
- dormakaba confidant firmware, quantum firmware, saffire firmware +2 more +4 moreThe dormakaba Saflok system before the November 2023 software update allows an attacker to unlock...5.6 Medium
- datalust seqDatalust Seq before 2023.4.11151 and 2024 before 2024.1.11146 has Incorrect Access Control...9.1 Critical
- 89luca89 distroboxDistrobox before 1.7.0.1 allows attackers to execute arbitrary code via command injection into...9.8 Critical
- chirpstack gateway-bridge, mqtt-forwarder, gateway bridge +1 more +3 moreThe Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway...7.5 High
- mispIn MISP before 2.4.187, add_misp_export in app/Controller/EventsController.php does not properly...9.8 Critical
- mispIn MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not...9.8 Critical
- moodleCross site scripting in moodle6.1 Medium
- szlbt lbt-t300-mini1 firmwareShenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer...5.3 Medium
- szlbt lbt-t300-mini1 firmware, lbt-t300-mini firmware +1 moreShenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer...9.8 Critical
- solaredge mysolaredgeThe SolarEdge mySolarEdge application before 2.20.1 for Android has a certificate verification...5.9 Medium
- surveyjs survey creator, devsoftbaltic survey-creator +1 moreCross-site scripting in Survey Creator6.1 Medium
- netcome ns-asg, netentsec application security gateway firmware +1 moreSQL Injection vulnerability in Netcome NS-ASG Application Security Gateway v.6.3.1 allows a local...7.8 High
- totolink x2000r firmwareTOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS)...5.9 Medium
- dlink go-rt-ac750 firmwareD-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the...9.8 Critical
- Show moreLoading…