CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- ruby-lang rubyStringIO buffer overread vulnerability9.8 Critical
PanelSwWix4.SdkNuGetWiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM7.3 HighPanelSW.Custom.WiXNuGetWiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM7.3 High- phpmyfaqphpMyFAQ Path Traversal in Attachments3.8 Low
- johnbillion wp crontrol, wp-crontrol +1 moreWP Crontrol possible RCE when combined with a pre-condition8.2 High
- phpmyfaqphpMyFAQ Stored HTML Injection at contentLink4.7 Medium
- phpmyfaqphpMyFAQ SQL injections at insertentry & saveentry8.8 High
- phpmyfaqphpMyFAQ Stored XSS at FAQ News Content4.3 Medium
- phpmyfaqphpMyFAQ's File Upload Bypass at Category Image Leads to RCE7.2 High
- phpmyfaqphpMyFAQ Stored XSS at user email5.5 Medium
- phpmyfaqphpMyFAQ SQL Injection at "Save News"8.8 High
- oroinc oroplatform, orocommerce +1 moreOroPlatform's storefront user can access history and most viewed data from matching back-office user with the same ID4.3 Medium
- oroinc oroplatform, platform +1 moreOroPlatform's pinned entity creation form shows pages of other users4.3 Medium
- espressif esp-idfAnti Rollback bypass with physical access and TOCTOU attack6.1 Medium
- bosch network synchronizer, network synchronizer enterprise, network synchronizer standard +2 moreCommand Injection in the diagnostics interface of the Bosch Network Synchronizer allows...8.8 High
- mergen software quality management systemSQLi in Mergen Soft Quality Management System9.8 Critical
qpdfUbuntuqpdf vulnerabilityNo scoreunsafe-libyamlcrates.iounsafe-libyaml is unmaintainedNo score- codepeople google maps cpWordPress Google Maps CP plugin <= 1.0.43 - Missing Authorization Leading To Feedback Submission Vulnerability4.3 Medium
- themehunk advance wordpress search plugin, th advance product search, advanced wordpress search +2 moreWordPress TH Advance Product Search plugin <= 1.2.1 - Unauthenticated Plugin Settings Reset vulnerability6.5 Medium
- mainwp wordfence extensionWordPress MainWP Wordfence Extension Plugin <= 4.0.7 - Subscriber+ Arbitrary Plugin Activation Vulnerability5.4 Medium
- sharethis dashboard for google analyticsWordPress ShareThis Dashboard for Google Analytics plugin <= 3.1.4 - Broken Access Control vulnerability5.4 Medium
- muffingroup bethemeWordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability5.4 Medium
- muffingroup bethemeWordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability5.4 Medium
- muffingroup bethemeWordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability5.4 Medium
- muffingroup bethemeWordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability4.3 Medium
- seo squirrly plugin by squirrly seo, squirrly seo plugin by squirrly seo +1 moreWordPress Squirrly SEO (Peaks) plugin <= 12.1.20 - Broken Access Control vulnerability6.3 Medium
- wp swings points and rewards for woocommerceWordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Broken Access Control vulnerability6.5 Medium
- kainelabs youzify, youzify - buddypress moderation +1 moreWordPress Youzify - Buddypress Moderation plugin <= 1.2.5 - Unauthenticated Cross Site Scripting (XSS) vulnerability7.3 High
- linux, linux kernel +1 moreNFC: nci: fix memory leak in nci_allocate_device5.5 Medium
- linux, linux kernel +1 moreNFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()7.5 High
- linux, linux kernel +1 morescsi: target: core: Avoid smp_processor_id() in preemptible code7.5 High
- linux, linux kernel +1 moreiommu/vt-d: Fix sysfs leak in alloc_iommu()5.5 Medium
- linux, linux kernel +1 mores390/dasd: add missing discipline function5.5 Medium
- linux, linux kernel +1 morenet/sched: fq_pie: fix OOB access in the traffic path7.8 High
- linux, linux kernel +1 morenetfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-AVX2 version5.5 Medium
- linux, linux kernel +1 moremisc/uss720: fix memory leak in uss720_probe5.5 Medium
- linux, linux kernel +1 moreiio: adc: ad7124: Fix potential overflow due to non sequential channel numbers5.5 Medium
- linux, linux kernel +1 morenet: usb: fix memory leak in smsc75xx_bind5.5 Medium
- linux, linux kernel +1 moreUSB: usbfs: Don't WARN about excessively large memory allocations5.5 Medium
- linux, linux kernel +1 moreserial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'5.5 Medium
- linux, linux kernel +1 moreNFS: fix an incorrect limit in filelayout_decode_layout()9.8 Critical
- linux, linux kernel +1 moreNFS: Fix an Oopsable condition in __nfs_pageio_add_request()5.5 Medium
- linux, linux kernel +1 moreNFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()5.5 Medium
- linux, linux kernel +1 moredrm/meson: fix shutdown crash when component not probed5.5 Medium
- linux, linux kernel +1 morenet/mlx5e: Fix null deref accessing lag dev5.5 Medium
- linux, linux kernel +1 moretipc: wait and exit until all work queues are done7.8 High
- linux, linux kernel +1 moretipc: skb_linearize the head skb when reassembling msgs9.8 Critical
- linux, linux kernel +1 morespi: spi-fsl-dspi: Fix a resource leak in an error handling path5.5 Medium
- linux, linux kernel +1 morenet: dsa: mt7530: fix VLAN traffic leaks8.1 High
- Show moreLoading…