CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- linux, linux kernel +1 morenet: dsa: fix a crash if ->get_sset_count() fails7.8 High
- linux, linux kernel +1 morenet: dsa: sja1105: add error handling in sja1105_setup()7.8 High
- linux, linux kernel +1 morei2c: i801: Don't generate an interrupt on bus reset7.8 High
- linux, linux kernel +1 moremptcp: fix data stream corruption7.8 High
- linux, linux kernel +1 moreinterconnect: qcom: bcm-voter: add a missing of_node_put()5.5 Medium
- linux, linux kernel +1 morenet: fec: fix the potential memory leak in fec_enet_init()5.5 Medium
- linux, linux kernel +1 morenet: fujitsu: fix potential null-ptr-deref5.5 Medium
- linux, linux kernel +1 moreocteontx2-pf: fix a buffer overflow in otx2_set_rxfh_context()7.8 High
- linux, linux kernel +1 moreptp: ocp: Fix a resource leak in an error handling path6.2 Medium
- linux, linux kernel +1 moremld: fix panic in mld_newpack()5.5 Medium
- linux, linux kernel +1 morebtrfs: do not BUG_ON in link_to_fixup_dir5.5 Medium
- linux, linux kernel +1 morenet/smc: remove device from smcd_dev_list after failed device_add()5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu: Fix a use-after-free7.8 High
- linux, linux kernel +1 moregve: Add NULL pointer checks when freeing irqs.5.5 Medium
- linux, linux kernel +1 moreiommu/amd: Clear DMA ops when switching domain5.3 Medium
- linux, linux kernel +1 morenet: hns3: put off calling register_netdev() until client initialize complete5.5 Medium
- linux, linux kernel +1 morecxgb4: avoid accessing registers when clearing filters7.1 High
- linux, linux kernel +1 morenet: lantiq: fix memory corruption in RX ring9.8 Critical
- linux, linux kernel +1 morenet: zero-initialize tc skb extension on allocation8.6 High
- dell powerscale onefsDell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability. A...5.3 Medium
- awesomestcode livebotAwesomestCode LiveBot parseMessage.js parseSend cross site scripting3.5 Low
- lg led assistantPath traversal via file upload on LG LED Assistant5.3 Medium
- lg led assistantPassword reset vulnerability without authorization on LG LED Assistant9.1 Critical
- sangoma technologies cg6kwin2k.sysExposed IOCTL with insufficient access control issue exists in cg6kwin2k.sys prior to 2.1.7.0. By...6.1 Medium
- hitachi unified storage vm, virtual storage platform, virtual storage platform 5100, 5500, 5100h, 5500h +9 more +11 moreInformation Exposure Vulnerability in Hitachi Disk Array Systems9.9 Critical
- cminds cm download managerCM Download and File Manager < 2.9.1 - Download Edit via CSRF8.8 High
- brainstormforce schema, unknown wp-schema-pro, wpschema pro +2 moreSchema Pro < 2.7.16 - Contributor+ Custom Field Access4.3 Medium
- cminds cm download managerCM Download Manager < 2.9.0 - Download Deletion via CSRF4.8 Medium
- web3 web3-utilsweb3-utils Prototype Pollution vulnerability7.5 High
- cminds cm download managerCM Download and File Manager < 2.9.0 - Download Unpublish via CSRF6.8 Medium
- sparkle wp educenterWordPress Educenter theme <= 1.5.5 - Broken Access Control4.3 Medium
- hashthemes hashone, viral, viral news +2 moreBroken Access Control leading to Arbitrary Plugin Activation in multiple HashThemes themes4.3 Medium
- inspirythemes realhomesWordPress RealHomes theme <= 4.0.2 - Broken Access Control vulnerability4.3 Medium
- inspirythemes realhomesWordPress RealHomes theme <= 4.0.2 - Broken Access Control vulnerability5.4 Medium
- ari susanto easy-popup-showCross-site request forgery (CSRF) vulnerability in easy-popup-show all versions allows a remote...6.1 Medium
- kddi corporation hgw bl1500hmHGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network...6.5 Medium
- kddi corporation hgw bl1500hm, kddi hgw bli500hm firmware +1 moreHGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network...8.8 High
- kddi corporation hgw bl1500hm, kddi hgw bli500hm firmware +1 moreHGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to...8.8 High
libxml2OSS-FuzzHeap-use-after-free in xmlCopyPropInternalNo score- gnu emacs, org mode, debian linux +2 moreIn Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org...7.1 High
- gnu emacs, debian linux, gnu org mode +2 moreIn Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.2.8 Low
- gnu emacs, debian linux, gnu org mode +2 moreIn Emacs before 29.3, Gnus treats inline MIME contents as trusted.5.5 Medium
- gnu emacs, org mode +1 moreIn Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This...7.8 High
- anopeAnope before 2.0.15 does not prevent resetting the password of a suspended account.5.3 Medium
- tongtianxing technology co ltd cmsv6Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through...9.8 Critical
- thi-ng paths@thi.ng/paths Prototype Pollution vulnerability9.8 Critical
- lepton-cms lepton, leptoncms +1 moreFile Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute...8.8 High
- mayurik php task management systemThe delete admin users function of SourceCodester PHP Task Management System 1.0 is vulnerable to...9.8 Critical
- mayurik php task management systemSourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee...7.5 High
- mayurik php task management systemSourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php...7.5 High
- Show moreLoading…