CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- rockwell automation arena simulation, rockwellautomation arena +1 moreRockwell Automation Arena Simulation Vulnerable To Uninitialized Pointer7.8 High
- rockwell automation arena simulation, rockwellautomation arena +1 moreRockwell Automation Arena Simulation Vulnerable To Memory Corruption7.8 High
- eclipse threadx netx duo, eclipse foundation threadx +1 moreInteger wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()7.0 High
- rockwell automation arena simulation, rockwellautomation arena, arena simulation software +2 moreRockwell Automation Arena Simulation Vulnerable To Memory Corruption7.8 High
- rockwell automation arena simulation, rockwellautomation arena +1 moreRockwell Automation Arena Simulation vulnerable to out of bounds write7.8 High
- dell grab, grab for windows +1 moreDell Grab for Windows, versions 5.0.4 and below, contains an improper file permissions...5.5 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Stored Cross Site Scripting in UploadHandler5.4 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg thumb_url5.4 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg image_url5.4 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg image_id5.4 Medium
- dell grab, grab for windows +1 moreDell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive...4.8 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Unauthenticated Reflected Cross Site Scripting in GalleryBox current_url6.1 Medium
- dell grab, grab for windows +1 moreDell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder...6.7 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moretracing: Ensure visibility when inserting an element into tracing_map5.5 Medium
- debian linux, linux kernel +1 morebtrfs: don't abort filesystem when attempting to snapshot deleted subvolume5.5 Medium
- pimcorePimcore Preview Documents are not restricted to logged in users anymore6.5 Medium
- zscaler client connectorZScalerService Local Privilege Escalation7.0 High
- zscaler client connectorLack of input santization on Zscaler Client Connector enables arbitrary code execution7.3 High
- zscaler client connectorRevert password check incorrect type validation7.3 High
- zscaler client connectorZSATrayManager Arbitrary File Deletion7.3 High
- ibm app connect enterprise, integration bus +1 moreIBM App Connect Enterprise and IBM Integration Bus for z/OS information disclosure4.9 Medium
- ibm common cryptographic architectureIBM Common Cryptographic Architecture information disclosure3.7 Low
- langchain, langchain-ai langchain-ai/langchain, langchain-ai\/langchain +2 moreBillion Laughs Attack leading to DoS in langchain-ai/langchain5.9 Medium
- ibm common cryptographic architectureIBM Common Cryptographic Architecture denial of service7.5 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 QuickIndex formQuickIndex stack-based overflow8.8 High
- miraheze createwikiCreateWiki's wiki request suppression ignores the suppression settings set by the suppressor4.9 Medium
- teamviewer remote clientImproper symlink resolution in TeamViewer Remote client for macOS7.1 High
- voidcoders void contact form 7 widget for elementor page builderWordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.3 - Broken Access Control vulnerability4.3 Medium
- snp digital salesking, snpdigital salesking wordpress +1 moreWordPress SalesKing plugin <= 1.6.15 - Unauthenticated Plugin Settings Change vulnerability6.5 Medium
- prince radio playerWordPress Radio Player plugin <= 2.0.73 - Unauthenticated Broken Access Control vulnerability6.5 Medium
- themeisle multiple page generator plugin – mpg, multiple page generator +1 moreWordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Broken Access Control vulnerability4.3 Medium
- wholesale wholesalexWordPress WholesaleX plugin <= 1.3.1 - Broken Access Control vulnerability6.5 Medium
- wholesale wholesalexWordPress WholesaleX plugin <= 1.3.1 - Sensitive Data Exposure on User Export vulnerability6.5 Medium
- exclusive addons elementor, exclusiveaddons exclusive addons for elementor, tim strifler exclusive addons elementor +2 moreWordPress Exclusive Addons for Elementor plugin <= 2.6.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- webtoffee product import export for woocommerceWordPress Product Import Export for WooCommerce plugin <= 2.4.1 - Arbitrary File Upload vulnerability9.1 Critical
- accessally popupally, popupally wordpress +1 moreWordPress PopupAlly plugin <= 2.1.0 - Broken Access Control vulnerability4.3 Medium
- wedevs woocommerce conversion trackingWordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability4.3 Medium
- property hive propertyhiveWordPress PropertyHive plugin <= 2.0.6 - Missing Authorization to Non-Arbitrary Plugin Installation vulnerability4.3 Medium
- uriahs victor location picker at checkout for woocommerceWordPress Kikote plugin <= 1.8.9 - Broken Access Control vulnerability4.3 Medium
- woocommerce box officeWordPress WooCommerce Box Office plugin <= 1.2.2 - Broken Access Control vulnerability6.5 Medium
- zerochannel 0ch bbs scriptCross-site scripting vulnerability exists in 0ch BBS Script ver.4.00. An arbitrary script may be...6.1 Medium
- extend themes calliopeWordPress Calliope theme <= 1.0.33 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- fortunefield ffbullOS command injection vulnerability exists in ffBull ver.4.11, which may allow a remote...9.8 Critical
- flash cgi mini threadCross-site scripting vulnerability exists in Mini Thread Version 3.33βi. An arbitrary script may...5.4 Medium
- ln-lab webproxyOS command injection vulnerability exists in WebProxy 1.7.8 and 1.7.9, which may allow a remote...7.3 High
- tvrockCross-site scripting vulnerability exists in TvRock 0.9t8a. An arbitrary script may be executed...6.1 Medium
- sira easyrangeEasyRange Ver 1.41 contains an issue with the executable file search path when displaying an...7.8 High
- deepak anand wp dummy content generatorWordPress WP Dummy Content Generator plugin <= 3.1.2 - Broken Access Control vulnerability4.3 Medium
- wpdevelop booking calendarWordPress Booking Calendar plugin <= 9.4.3 - SQL Injection7.6 High
- codexthemes thegem (elementor), thegem (wpbakery) +1 moreAuth. Stored Cross-Site Scripting (XSS) vulnerability in TheGem theme by CodexThemes5.4 Medium
- Show moreLoading…