CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- rt-threadA heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.8.4 High
- rt-threadA heap buffer overflow occurs in dfs_v2 dfs_file in RT-Thread through 5.0.2.8.4 High
- reporticoSQL Injection vulnerability in Reportico Till6.5 Medium
- sane-project sane backendsSane 1.2.1 heap bounds overwrite in init_options() from backend/test.c via a long init_mode...7.1 High
texliveopenSUSE,texlive-baseopenEuler,texlive-binDebian +2 moreTeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c. NOTE:...3.3 LowllvmopenEulerLLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted...5.3 Medium- tug tex liveTex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is...6.2 Medium
- sane-project sane backendsAn issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to...7.3 High
minizincDebianAn issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn...5.5 Mediumlibqt5-qtbaseopenSUSE,qt5-qtbaseopenEuler,qt6-baseDebian +4 more +6 moreQt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function...4.2 Medium- mesa3d mesaMesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the...7.5 High
- jedsoft s-langS-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().9.1 Critical
- jedsoft s-langS-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().9.1 Critical
- midnight commander commanderGNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference...No score
- opengl libglvnd-bb06db5alibglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via...9.8 Critical
- mesa3d mesaglx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling...4.3 Medium
- xfig project xfigXfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE...4.2 Medium
- mesa3d mesaMesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is...5.3 Medium
- mesa3d mesaMesa v23.0.4 was discovered to contain a NULL pointer dereference via the function...6.2 Medium
- go standard library net/http, net\/http, golang http2 +1 more +3 moreHTTP/2 CONTINUATION flood in net/http7.5 High
- couchbase serverAn issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1....7.5 High
- supermicro x11sae-f firmware, x11sse-f firmware, x11ssm-f firmware +2 moreAn issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker...8.3 High
- supermicro x11sae-f, x11sse-f, x11ssm-f +3 more +5 moreA command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66...7.2 High
- supermicro x11sae-f firmware, x11sse-f firmware, x11ssm-f firmware +2 moreAn issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker...8.3 High
- supermicro x11sae-f firmware, x11sse-f firmware, x11ssm-f firmware +2 moreAn issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker...8.3 High
- supermicro x11sae-f firmware, x11sse-f firmware, x11ssm-f firmware +2 moreAn issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker...8.3 High
- supermicro x11sae-f firmware, x11sse-f firmware, x11ssm-f firmware +2 moreAn issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker...6.5 Medium
- supermicro x11sae-f firmware, x11sse-f firmware, x11ssm-f firmware +2 moreAn issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker...8.3 High
- No product listedstd::bad_alloc is mishandled in Precomp 0.4.8. NOTE: this is disputed because it should be...No score
- teslamateIn TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and...9.8 Critical
- mediawikiAn issue was discovered in the Cargo extension for MediaWiki through 1.39.3. There is mishandling...8.6 High
- No product listedOpswat Metadefender Core before 5.2.1 does not properly defend against potential HTML injection...6.1 Medium
- hp, inc. hp printer firmware update utility, hp inc printer firmware update utility, hp 26k67a firmware +27 more +29 moreHP Printer Firmware Update Utility for Certain HP DeskJet Printers - Potential Execution of Arbitrary Code6.3 Medium
- music gallery site project gallery site, oretnom23 music gallery site +1 moreSourceCodester Music Gallery Site unrestricted upload7.3 High
- automationdirect c-more ea9 hmi ea0-t7cl-r, c-more ea9 hmi ea9-pgmsw, c-more ea9 hmi ea9-rhmi +8 more +10 moreAutomationDirect C-MORE EA9 HMI Plaintext Storage of a Password6.5 Medium
- anisha mobile shopcode-projects Mobile Shop Login Page Details.php sql injection7.3 High
- campcodes house rental management systemCampcodes House Rental Management System index.php file inclusion5.4 Medium
- automationdirect c-more ea9 hmi ea0-t7cl-r, c-more ea9 hmi ea9-pgmsw, c-more ea9 hmi ea9-rhmi +8 more +10 moreAutomationDirect C-MORE EA9 HMI Stack-based Buffer Overflow4.3 Medium
- automationdirect c-more ea9 hmi ea0-t7cl-r, c-more ea9 hmi ea9-pgmsw, c-more ea9 hmi ea9-rhmi +19 more +21 moreAutomationDirect C-MORE EA9 HMI Path Traversal7.5 High
- campcodes house rental management systemCampcodes House Rental Management System ajax.php sql injection7.3 High
- xpdfOut-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.052.9 Low
- tianjin publicms, publiccms +1 moreTianjin PubliCMS cross-site request forgery6.9 Medium
- ruijie rg-eg350, rg-eg350 firmware +1 moreRuijie RG-EG350 HTTP POST Request vpnAction os command injection6.3 Medium
- ruijie rg-eg350, rg-eg350 firmware +1 moreRuijie RG-EG350 HTTP POST Request setAction os command injection8.8 High
- elementor website builder, elementor.com elementor website builder +1 moreWordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability9.9 Critical
- trustindex widgets for google reviewsWordPress Widgets for Google Reviews plugin <= 11.0.2 - Arbitrary File Upload vulnerability8.0 High
- theme-fusion avadaWordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerability8.5 High
- artbees jupiter x core, jupiterx core +1 moreWordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability9.0 Critical
- wen solutions wp child theme generatorWordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability9.1 Critical
- terry lin wp githuber mdWordPress WP Githuber MD plugin <= 1.16.2 - Arbitrary File Upload vulnerability9.1 Critical
- Show moreLoading…