CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- lakernote easyadminlakernote EasyAdmin IndexController.java thumbnail server-side request forgery6.3 Medium
- lakernote easyadminlakernote EasyAdmin saveReportFile server-side request forgery6.3 Medium
- lakernote easyadminlakernote EasyAdmin saveReportFile xml external entity reference6.3 Medium
- lakernote easyadminlakernote EasyAdmin saveReportFile path traversal6.3 Medium
- red hat build of apache camel - hawtio 4, build of apache camel 4.4.0 for spring boot, build of apache camel for spring boot 3 +15 more +17 moreXnio: stackoverflowexception when the chain of notifier states becomes problematically big7.5 High
- jhead project jheadMatthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow6.3 Medium
- hp inc. certain hp officejet pro printers, hp 1kr42a firmware, 1kr45a firmware +40 more +42 moreCertain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an...5.3 Medium
- freescoutFreeScout OS Command Injection vulnerability9.1 Critical
- freescoutFreeScout Stored XSS to Privilege Escalation After CSP Bypass8.0 High
- dedecmsDedeCMS mda_main.php cross-site request forgery4.3 Medium
- dedecmsDedeCMS vote_edit.php cross-site request forgery4.3 Medium
- brefphp brefSlow String Operations via MultiPart Requests in Event-Driven Functions5.3 Medium
- francisco translateTranslate Cache Poisoning Vulnerability5.3 Medium
- friends of symfony project fosuserbundle, friendsofsymfony1 symfony1 +1 moreGadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder9.8 Critical
- kaspersky password manager for windowsKaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed...2.2 Low
- dedecmsDedeCMS friendlink_edit.php cross-site request forgery4.3 Medium
- dedecmsDedeCMS baidunews.php cross-site request forgery4.3 Medium
- sailpoint identityiqIdentityIQ Authorization of QuickLink Target Identities Vulnerability7.1 High
- sailpoint identityiqIdentityIQ JavaServer Faces File Path Traversal Vulnerability10.0 Critical
- ibm security verify directoryIBM Security Verify Directory cross-site scripting4.8 Medium
- ibm security verify directoryIBM Security Verify Directory information disclosure5.3 Medium
- ibm security verify directoryIBM Security Verify Directory information disclosure2.7 Low
- ibm security verify directoryIBM Security Verify Directory information disclosure4.5 Medium
- atisoluciones ciges, ciges cigesv2 +1 moreInformation exposure vulnerability in the CIGESv2 system4.1 Medium
- atisoluciones ciges, ciges cigesv2 +1 moreStored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system6.1 Medium
- atisoluciones ciges, ciges cigesv2 +1 moreStored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system6.1 Medium
- kemptechnologies loadmasterLoadMaster Cross-Site Request Forgery (CSRF)7.5 High
- atisoluciones ciges, ciges cigesv2 +1 moreExposure of Sensitive Information vulnerability in the CIGESv2 system7.5 High
- atisoluciones ciges, ciges cigesv2 +1 moreSQL injection vulnerability in the CIGESv2 system9.8 Critical
- atisoluciones ciges, ciges cigesv2 +1 moreSQL injection vulnerability in the CIGESv2 system9.8 Critical
- atisoluciones ciges, ciges cigesv2 +1 moreSQL injection vulnerability in the CIGESv2 system9.8 Critical
- kemptechnologies loadmasterLoadMaster Command Injection Vulnerability8.4 High
- dassault systèmes solidworks desktop, 3ds 3dexperience solidworks +1 moreMultiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 20247.8 High
- checkmkPrivilege escalation in mk_informix plugin8.8 High
- checkmkInformation disclosure in mk_oracle Checkmk agent plugin3.8 Low
- checkmkPrivilege escalation in mk_oracle plugins8.2 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 SysToolRestoreSet fromSysToolRestoreSet cross-site request forgery4.3 Medium
- tenda ac15, ac15 firmware +1 moreTenda AC15 SysToolReboot fromSysToolReboot cross-site request forgery4.3 Medium
- tenda ac15, ac15 firmware +1 moreTenda AC15 Cookie execCommand R7WebsSecurityHandler stack-based overflow8.8 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 DhcpListClient fromDhcpListClient stack-based overflow8.8 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow8.8 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 WriteFacMac formWriteFacMac os command injection6.3 Medium
- tenda ac15, ac15 firmware +1 moreTenda AC15 WifiWpsStart formWifiWpsStart stack-based overflow8.8 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 WifiWpsOOB formWifiWpsOOB stack-based overflow8.8 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 SetFirewallCfg formSetFirewallCfg stack-based overflow8.8 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 QuickIndex formQuickIndex stack-based overflow8.8 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 expandDlnaFile formExpandDlnaFile stack-based overflow8.8 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 addWifiMacFilter stack-based overflow8.8 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 SetSpeedWan formSetSpeedWan stack-based overflow8.8 High
- webtoffee woocommerce pdf invoices, packing slips, delivery notes & shipping labels, woocommerce pdf invoices\, packing slips\, delivery notes and shipping labels +1 moreWooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- Show moreLoading…