CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- mark kinchin beds24 online bookingWordPress Beds24 Online Booking plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- oliver seidel, bastian germann cformsiiWordPress cformsII plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- webtoffee woocommerce pdf invoices, packing slips, delivery notes and shipping labels, woocommerce pdf invoices\, packing slips\, delivery notes and shipping labels +1 moreWordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.4.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- benjamin rojas wp editorWordPress WP Editor plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- adtribes.io product feed pro for woocommerceWordPress Product Feed PRO for WooCommerce plugin <= 13.2.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- veronalabs wp smsWordPress WP SMS plugin <= 6.3.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- indianic widgets controllerWordPress Widgets Controller plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- themefusion fusion builderWordPress Avada Builder plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- n squared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.6.20 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- echo plugins knowledge base for documentation, faqs with ai assistance, echoplugins knowledge base for documentation faqs with ai assistance +1 moreWordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 11.30.2 - PHP Object Injection vulnerability8.7 High
- wapppress team wapppressWordPress WappPress plugin <= 5.0.3 - Unauthenticated Arbitrary File Upload vulnerability10.0 Critical
kernelMageia,kmod-virtualboxMageia,kmod-xtables-addonsMageia +2 moreUpdated kernel,kmod-xtables-addons,kmod-virtualbox packages fix bugs and provide mitigationsNo score- campcodes online examination system, online examination system project examination system +1 moreCampcodes Online Examination System updateExaminee.php sql injection6.3 Medium
- campcodes online examination systemCampcodes Online Examination System deleteCourseExe.php sql injection6.3 Medium
- campcodes online examination systemCampcodes Online Examination System deleteExamExe.php sql injection6.3 Medium
- hitachi energy mach scmSCM Software is a client and server application. An Authenticated System manager client can...7.5 High
- campcodes online examination systemCampcodes Online Examination System deleteQuestionExe.php sql injection6.3 Medium
- campcodes online examination systemCampcodes Online Examination System loginExe.php sql injection6.3 Medium
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 moreThe Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget6.4 Medium
- master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 moreMaster Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget6.4 Medium
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 moreThe Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing6.4 Medium
- hitachi energy rtu500 series cmu firmwareA vulnerability exists in the stb-language file handling that affects the RTU500 series product...6.8 Medium
- hitachi energy rtu500 series cmu firmwareA vulnerability exists in the stb-language file handling that affects the RTU500 series product...8.2 High
- campcodes online examination systemCampcodes Online Examination System updateCourse.php cross site scripting3.5 Low
- hitachi energy asset suite eam, hitachienergy asset suite +1 moreREST service authentication anomaly with “valid username/no password” credential combination for...5.3 Medium
- campcodes online examination system, online examination system project examination system +1 moreCampcodes Online Examination System updateExaminee.php cross site scripting3.5 Low
- campcodes online examination systemCampcodes Online Examination System updateCourse.php sql injection6.3 Medium
- remyandrade todo list in kanban boardSourceCodester Todo List in Kanban Board Add ToDo cross site scripting5.3 Medium
- remyandrade todo list in kanban board, todo list in kanban board project list in kanban board +1 moreSourceCodester Todo List in Kanban Board delete-todo.php sql injection6.3 Medium
quickjsOSS-FuzzHeap-buffer-overflow in emit_gotoNo score- gradio-app gradio-app/gradio, gradio project gradio +1 moreSSRF Vulnerability in gradio-app/gradio7.3 High
- donbermoy online chatting systemSourceCodester Online Chatting System update_room.php sql injection6.3 Medium
quickjsOSS-FuzzHeap-use-after-free in JS_NewObjectFromShapeNo score- mitel inattend, cmg suite +1 moreA vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4...9.8 Critical
- lektorLektor does not sanitize database path traversal9.1 Critical
- debian linux, kernel util-linux, siemens ruggedcom rox mx5000 +13 more +15 morewall in util-linux through 2.40, often installed with setgid tty permissions, allows escape...3.3 Low
- apache http server, fedoraproject fedora, netapp ontap +2 moreApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5 High
- wyrestorm apollo vx20, apollo vx20 firmware +1 moreAn issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can...7.5 High
- wyrestorm apollo vx20, apollo vx20 firmware +1 moreAn issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can...9.1 Critical
- wyrestorm apollo vx20 firmwareAn issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service...7.5 High
- qtAn issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3...6.2 Medium
- rt-thread, rtthread +1 moreA buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2.8.8 High
- rt-threadA buffer overflow occurs in utilities/ymodem/ry_sy.c in RT-Thread through 5.0.2 because of an...4.3 Medium
- rt-thread, rt-thread at server +1 moreA stack buffer overflow occurs in net/at/src/at_server.c in RT-Thread through 5.0.2.9.8 Critical
- rt-thread, utilities project utilities +1 moreAn out-of-bounds access occurs in utilities/var_export/var_export.c in RT-Thread through 5.0.2.5.9 Medium
- rt-threadA stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2.8.4 High
- rt-threadA heap buffer overflow occurs in finsh/msh_file.c and finsh/msh.c in RT-Thread through 5.0.2.8.4 High
- rt-threadRT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L * seed ...7.5 High
- rt-threaddrivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant...8.4 High
- npmjs domain-suffixdomain-suffix RegEx Denial of Service7.5 High
- Show moreLoading…