CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- themegrill colormagColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name6.4 Medium
- creativethemes blocksy companionBlocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- liquidpoll – polls, surveys, nps and feedback reviewsLiquidPoll – Polls, Surveys, NPS and Feedback Reviews <= 3.3.76 - Information Exposure4.3 Medium
- campcodes online marriage registration systemCampcodes Online Marriage Registration System admin-profile.php cross site scripting3.5 Low
- campcodes online marriage registration systemCampcodes Online Marriage Registration System application-bwdates-reports-details.php cross site scripting3.5 Low
- campcodes online marriage registration systemCampcodes Online Marriage Registration System search.php cross site scripting3.5 Low
ffmpegMageiaUpdated ffmpeg packages fix security vulnerabilityNo score- campcodes online marriage registration systemCampcodes/PHPGurukul Online Marriage Registration System application-bwdates-reports-details.php sql injection5.3 Medium
- mozilla firefox, firefox esr, debian linux +2 moreAn attacker was able to inject an event handler into a privileged object that would allow...8.4 High
- mozilla firefoxAn attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling...9.8 Critical
- logpoint siemLogpoint before 7.1.0 allows Self-XSS on the LDAP authentication page via the username to the...5.4 Medium
- anchorcms anchor cmsCross-Site Request Forgery in Anchor CMS7.4 High
- dlink dir-845l firmwareDIR-845L router <= v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the...9.0 Critical
- dlink dir-845l firmwareA command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1...8.8 High
- anchorcms anchor, anchor cms +1 moreCross-Site Request Forgery in Anchor CMS2.4 Low
- seacmsSQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to...9.8 Critical
- dzzofficeThere is Stored Cross-Site Scripting (XSS) in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php...6.1 Medium
- givanz vvvebjsVvvebJs Arbitrary File Upload vulnerability6.5 Medium
- givanz vvvebjsVvvebJs Reflected Cross-Site Scripting (XSS) vulnerability6.1 Medium
- moodleCross-site Scripting in Moodle Chat5.4 Medium
- niushop, niushop b2b2c multi-business +1 moreSQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate...5.4 Medium
- niushop b2b2c multi-businessSQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate...8.8 High
- magicflu, magicflue +1 moreFile Upload vulnerability in magicflue v.7.0 and before allows a remote attacker to execute...9.8 Critical
- codiadCodiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter.5.4 Medium
- lycheeorg lycheeCross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers...8.3 High
- lycheeorg lycheeCross Site Scripting (XSS) vulnerability in Lychee 3.1.6, allows remote attackers to execute...6.1 Medium
- dingflow snowSQL injection vulnerability in snow snow v.2.0.0 allows a remote attacker to execute arbitrary...6.3 Medium
- atos cardos, eviden cardos api +1 moreIn the Windows installer in Atos Eviden CardOS API before 5.5.5.2811, Local Privilege Escalation...7.8 High
- campcodes online marriage registration systemCampcodes Online Marriage Registration System search.php sql injection6.3 Medium
- campcodes online marriage registration system, online marriage registration system project marriage registration system +1 moreCampcodes Online Marriage Registration System user-profile.php cross site scripting3.5 Low
- campcodes online marriage registration systemCampcodes Online Marriage Registration System search.php sql injection6.3 Medium
- advantech webaccess/scadaAdvantech WebAccess/SCADA SQL Injection6.4 Medium
- campcodes online marriage registration systemCampcodes Online Marriage Registration System search.php cross site scripting3.5 Low
- campcodes complete online beauty parlor management system, complete online beauty parlor management system project online beauty parlor management system +1 moreCampcodes Complete Online Beauty Parlor Management System contact-us.php sql injection6.3 Medium
- claris filemaker server, pro +1 moreA privilege escalation issue existed in FileMaker Server, potentially exposing sensitive...4.9 Medium
- delta electronics diaenergieDelta Electronics DIAEnergie Cross-site scripting4.6 Medium
- delta electronics diaenergieDelta Electronics DIAEnergie Path traversal8.1 High
- delta electronics diaenergieDelta Electronics DIAEnergie Path traversal8.1 High
- delta electronics diaenergieDelta Electronics DIAEnergie SQL injection8.8 High
- layer5 mesheryMeshery SQL Injection vulnerability7.5 High
- delta electronics diaenergieDelta Electronics DIAEnergie SQL injection8.8 High
- delta electronics diaenergieDelta Electronics DIAEnergie SQL injection8.8 High
- isaacs node-tar, tar +1 morenode-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation6.5 Medium
- delta electronics diaenergieDelta Electronics DIAEnergie SQL injection8.8 High
- delta electronics diaenergieDelta Electronics DIAEnergie SQL injection8.8 High
- delta electronics diaenergieClient-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie8.8 High
- getgrav gravGrav vulnerable to Server Side Template Injection (SSTI) via Twig escape handler8.8 High
- campcodes complete online beauty parlor management systemCampcodes Complete Online Beauty Parlor Management System admin-profile.php sql injection5.3 Medium
- getgrav gravGrav vulnerable to Server Side Template Injection (SSTI)8.8 High
- getgrav gravGrav vulnerable to Server Side Template Injection (SSTI)8.8 High
- Show moreLoading…