CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- cisco aironet access point software, aironet access point software (ios xe controller), ios xe +1 more +3 moreA vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP)...4.7 Medium
- cisco catalyst center, digital network architecture center (dna center) +1 moreA vulnerability in the web-based management interface of Cisco Catalyst Center, formerly Cisco...4.3 Medium
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 SetSpeedWan formSetSpeedWan stack-based overflow8.8 High
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 QuickIndex formQuickIndex stack-based overflow8.8 High
- splunk, splunk enterprise +1 moreSplunk Authentication Token Exposure in Debug Log in Splunk Enterprise7.2 High
- splunk, splunk enterprise, cloud +1 more +3 moreRisky command safeguards bypass in Dashboard Examples Hub8.1 High
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 setcfm formSetCfm stack-based overflow8.8 High
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 SetClientState formSetClientState stack-based overflow8.8 High
- gradio-app gradio-app/gradio, gradio app gradio +1 moreCommand Injection in gradio-app/gradio via deploy+test-visual.yml workflow8.6 High
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 WriteFacMac formWriteFacMac command injection5.5 Medium
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow8.8 High
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 execCommand formexeCommand stack-based overflow8.8 High
- tenda f1203, f1203 firmware +1 moreTenda F1203 openSchedWifi setSchedWifi stack-based overflow8.8 High
- tenda f1203, f1203 firmware +1 moreTenda F1203 setcfm formSetCfm stack-based overflow8.8 High
- linux, linux kernel +1 morenet: pds_core: Fix possible double free in error handling path4.1 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresr9800: Add check for usbnet_get_endpoints5.5 Medium
- wpassist countdown widget, wpassist.me wordpress countdown widget +1 moreWordPress Countdown Widget plugin <= 3.1.9.1 - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)6.1 Medium
- contest-gallery contest galleryWordPress Photos and Files Contest Gallery plugin <= 21.3.2 - SQL Injection vulnerability8.5 High
- martyn chamberlin don't muck my markup, martynchamberlin dont muck my markup +1 moreWordPress Don't Muck My Markup plugin <= 1.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- cincopa post video playersWordPress Cincopa video and media plugin <= 1.159 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- tenda f1203, f1203 firmware, fh1203 firmware +2 moreTenda F1203 QuickIndex formQuickIndex stack-based overflow8.8 High
- tenda f1203, f1203 firmware +1 moreTenda F1203 execCommand R7WebsSecurityHandler stack-based overflow8.8 High
- avada fusion builderWordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- woocommerce stripe payment gatewayWordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- uncanny owl toolkit for learndash, uncannyowl uncanny toolkit for learndash +1 moreWordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability4.7 Medium
- bizswoop bizprintWordPress BizPrint plugin <= 4.5.5 - CSRF to XSS vulnerability7.1 High
- emendo seb co-marquage service-public.frWordPress Co-marquage service-public.fr plugin <= 0.5.72 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ampacheAmpache has multiple reflective XSS vulnerabilities6.1 Medium
- ampacheAmpache Stored XSS3.9 Low
- codepeople calculated fields formWordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- booster for woocommerce, pluggabl booster for woocommerce +1 moreWordPress Booster for WooCommerce plugin <= 7.1.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- krunal prajapati wp post disclaimerWordPress WP Post Disclaimer plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jory hogeveen off-canvas sidebars & menus (slidebars)WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pluginus wordpress meta data and taxonomies filter, realmag777 wordpress meta data and taxonomies filter (mdtf) +1 moreWordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- molonguiWordPress Molongui plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- alireza sedghi aparat for wordpressWordPress Aparat for WordPress plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- streamweasels twitch integrationWordPress StreamWeasels Twitch Integration plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nick doneren met mollieWordPress Doneren met Mollie plugin <= 2.10.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- brainstorm force astraWordPress Astra theme <= 4.6.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- portfolio gallery – image gallery pluginWordPress Portfolio Gallery plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- geonodeGeoNode stored XSS to full account takeover6.1 Medium
- incsub forminatorWordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- blair williams shortlinks by pretty linksWordPress Pretty Links plugin <= 3.6.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- softlab dracula dark mode - the revolutionary dark mode plugin for wordpressWordPress Dracula Dark Mode plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- stormhill media mybooktable bookstoreWordPress MyBookTable Bookstore plugin <= 3.3.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpdirectorykit wp directory kitWordPress WP Directory Kit plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- m a vinoth kumar frontend dashboardWordPress Frontend Dashboard plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates), unlimited-elements unlimited elements for elementor +2 moreWordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- seo squirrly plugin by squirrly seo, squirrly seo plugin by squirrly seo +1 moreWordPress Squirrly SEO plugin <= 12.3.16 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- metagauss eventprimeWordPress EventPrime plugin <= 3.3.9 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- Show moreLoading…