CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- tenda ac7, ac7 firmware +1 moreTenda AC7 GetParentControlInfo stack-based overflow8.8 High
- zachary segal catablogWordPress CataBlog plugin <= 1.7.0 - Arbitrary File Upload vulnerability9.1 Critical
- julien crego manager for icomoonWordPress Manager for Icomoon plugin <= 2.0 - Arbitrary File Upload vulnerability9.1 Critical
- hewlett packard enterprise (hpe) arubaos-s switchAuthenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon4.9 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability9.3 Critical
- perfectwpthemes glaze blog lite, themebeez cream blog, cream magazine +1 more +3 moreReflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes7.1 High
- google chrome, fedoraproject fedora +1 moreType Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker...7.7 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to...7.5 High
- google chrome, fedoraproject fedora +1 moreUse after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to...8.8 High
- peepso community by peepsoWordPress Community by PeepSo plugin <= 6.0.9.0 - Server Information Disclosure5.3 Medium
- wireshark, fedoraproject fedora +1 moreMismatched Memory Management Routines in Wireshark7.8 High
- wpeverest user registration, user registration \& membership +1 moreWordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability7.4 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 WifiGuestSet fromSetWifiGusetBasic stack-based overflow8.8 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 openSchedWifi setSchedWifi stack-based overflow8.8 High
- onthegosystems typesWordPress Toolset Types plugin <= 3.4.17 - Authenticated Arbitrary File Upload Vulnerability7.2 High
- mbbhatti upload resumeWordPress Upload Resume plugin <= 1.2.0 - Sensitive Data Exposure vulnerability5.9 Medium
- mainwp file uploader extensionWordPress MainWP File Uploader Extension Plugin <= 4.1 - Unauthenticated Arbitrary File Upload Vulnerability10.0 Critical
- mndpsingh287 theme editorWordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability7.2 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 saveParentControlInfo stack-based overflow8.8 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 WifiExtraSet fromSetWirelessRepeat stack-based overflow8.8 High
- hewlett packard enterprise (hpe) icewall gen11, icewall sso agentA security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a...6.5 Medium
- tenda ac7, ac7 firmware +1 moreTenda AC7 SetStaticRouteCfg fromSetRouteStatic stack-based overflow8.8 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 WriteFacMac formWriteFacMac os command injection6.3 Medium
- metagauss registrationmagicWordPress RegistrationMagic plugin <= 5.3.0.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- tenda ac7, ac7 firmware +1 moreTenda AC7 WifiWpsStart formWifiWpsStart stack-based overflow8.8 High
- linux, linux kernel +1 moredrm/amdgpu: Fix the null pointer when load rlc firmware5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay()5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Fix late derefrence 'dsc' check in 'link_set_dsc_pps_packet()'5.5 Medium
- linux, linux kernel +1 morethermal: intel: hfi: Add syscore callbacks for system-wide PM7.8 High
- debian linux, linux kernel +1 moreiio: adc: ad7091r: Allow users to configure device events5.5 Medium
- linux, linux kernel +1 morenet/mlx5e: Fix operation precedence bug in port timestamping napi_poll context7.1 High
- linux, linux kernel +1 moredrm/amd/display: Refactor DMCUB enter/exit idle interface5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Wake DMCUB before executing GPINT commands7.8 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 WifiWpsOOB formWifiWpsOOB stack-based overflow8.8 High
- grafanaUsers outside an organization can delete a snapshot with its key6.5 Medium
- gsheetconnector cf7 google sheets connectorWordPress CF7 Google Sheets Connector plugin <= 5.0.5 - Sensitive Data Exposure via Debug Log vulnerability7.5 High
- debian linux, linux kernel +1 moreSUNRPC: Fix a suspicious RCU usage warning7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreext4: avoid online resizing failures due to oversized flex bg5.5 Medium
- debian linux, linux kernel +1 morebpf: Check rcu_read_lock_trace_held() before calling bpf map helpers7.8 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 SetNetControlList formSetQosBand stack-based overflow8.8 High
- apache airflowApache Airflow: Potentially harmful permission changing by log task handler5.3 Medium
- tenda ac7, ac7 firmware +1 moreTenda AC7 SetOnlineDevName formSetDeviceName stack-based overflow8.8 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 setcfm formSetCfm stack-based overflow8.8 High
- eclipse threadxInteger wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet()7.3 High
- rockwell automation arena simulation, rockwellautomation arena, arena simulation software +2 moreRockwell Automation Arena Simulation Vulnerable To Memory Corruption7.8 High
- devolutions serverImproper access control in PAM vault permissions in Devolutions Server 2024.1.6 and earlier...9.8 Critical
- devolutions serverImproper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an...8.8 High
- rockwell automation arena simulation, rockwellautomation arena +1 moreRockwell Automation Arena Simulation Vulnerable To Buffer Overflow4.4 Medium
- eclipse threadxMissing array size check in _Mtxinit() in the Xtensa port7.0 High
- Show moreLoading…