CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- anisha online book systemcode-projects Online Book System index.php sql injection7.3 High
- campcodes online art gallery management systemCampcodes Online Art Gallery Management System adminHome.php sql injection6.3 Medium
- bdtask multi-store inventory management system, multi store inventory management system +1 moreBdtask Multi-Store Inventory Management System Store Update Page cross site scripting2.4 Low
- bdtask multi-store inventory management system, multi store inventory management system +1 moreBdtask Multi-Store Inventory Management System cross site scripting2.4 Low
- bdtask multi-store inventory management system, multi store inventory management system +1 moreBdtask Multi-Store Inventory Management System Page Title cross site scripting2.4 Low
- nuuo cameraNUUO Camera deletefile.php denial of service5.4 Medium
- zitadelZITADEL's actions can overload reserved claims6.1 Medium
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 GetParentControlInfo stack-based overflow8.8 High
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 QuickIndex formQuickIndex stack-based overflow8.8 High
- zitadelZITADEL Improper Content-Type Validation Leads to Account Takeover via Stored XSS + CSP Bypass8.7 High
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 setcfm formSetCfm stack-based overflow8.8 High
- saleorSaleor vulnerable to customers addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method4.2 Medium
- serverpodServerpod client accepts any certificate7.4 High
- serverpodImproved security for stored password hashes5.3 Medium
tzdataTuxCareUpdate of alt-phpNo score- ciliumInsecure IPsec transport encryption in Cilium8.0 High
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 WriteFacMac formWriteFacMac command injection6.3 Medium
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 execCommand formexeCommand stack-based overflow8.8 High
tzdataTuxCareUpdate of alt-phpNo scoretzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo scoretzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- pi-holePihole Authenticated Arbitrary File Read with root privileges7.6 High
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo scoretzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- jupyter jupyterhubXSS in JupyterHub via Self-XSS leveraged by Cookie Tossing8.1 High
zlibTuxCare,minizipTuxCare,minizip-develTuxCare +2 more +4 moreUpdate of zlibNo score- elastic elasticsearchElasticsearch Incorrect Authorization in the Remote Cluster Security API key based security model4.4 Medium
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 NatStaticSetting fromNatStaticSetting stack-based overflow8.8 High
selinux-policyTuxCare,selinux-policy-develTuxCare,selinux-policy-docTuxCare +4 more +6 moreUpdate of selinux-policyNo scoretzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 fromRouteStatic fromSetRouteStatic stack-based overflow8.8 High
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software...6.8 Medium
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software...8.6 High
- drupal tacjsTacJS - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-0165.4 Medium
- forgerock access managementPath Traversal in ForgeRock Access Managment8.1 High
- cisco aironet access point software, business access points, aironet access point software (ios xe controller) +3 more +5 moreA vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an...8.6 High
- cisco aironet access point software, business wireless access point software, aironet access point software (ios xe controller) +1 more +3 moreA vulnerability in the boot process of Cisco Access Point (AP) Software could allow an...5.9 Medium
- elastic elasticsearchElasticsearch Uncontrolled Resource Consumption vulnerability4.9 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could...5.6 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless...7.4 High
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 GetParentControlInfo stack-based overflow8.8 High
- cisco ios xe software, ios xe +1 moreA vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated,...6.5 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software...6.0 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco...8.6 High
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS...7.4 High
- cisco ios xe software, ios xe +1 moreA vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged,...5.5 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an...8.6 High
- cisco iosA vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an...7.4 High
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and...8.6 High
- cisco ios xe software, ios xe +1 moreA vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow...5.8 Medium
- Show moreLoading…