CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- poporon pz-linkcardPz-LinkCard <= 2.5.1 - Admin+ Stored XSS6.1 Medium
- poporon pz-linkcardPz-LinkCard <= 2.5.1 - Reflected XSS7.1 High
- wpdeveloper betterdocsWordPress BetterDocs plugin <= 3.3.3 - Unauthenticated PHP Object Injection vulnerability9.0 Critical
- infinitum form geo controllerWordPress Geo Controller plugin <= 8.6.4 - PHP Object Injection vulnerability9.0 Critical
- hercules design core, themesinflow hercules core +1 moreWordPress Hercules Core plugin <= 6.4 - Auth. PHP Object Injection vulnerability9.9 Critical
- givewpWordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerability8.0 High
- acowebs pdf invoices and packing slips for woocommerceWordPress PDF Invoices and Packing Slips For WooCommerce plugin <= 1.3.7 - PHP Object Injection vulnerability8.2 High
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 21.3.4 - SQL Injection vulnerability8.5 High
- supsystic slider by supsysticWordPress Slider by Supsystic plugin <= 1.8.10 - SQL Injection vulnerability7.6 High
- zoho campaignsWordPress Zoho Campaigns plugin <= 2.0.6 - SQL Injection vulnerability8.5 High
- typps calendaristaWordPress Calendarista plugin <= 15.5.7 - SQL Injection vulnerability8.5 High
- metagauss profilegridWordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.1 - Contributor+ SQL Injection vulnerability8.5 High
- it path solutions contact form to any apiWordPress Contact Form to Any API plugin <= 1.1.8 - Auth. SQL Injection vulnerability8.5 High
- tomas wordpress tooltipsWordPress Tooltips plugin < 9.4.5 - Auth. SQL Injection vulnerability8.5 High
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.0.27 - SQL Injection via shortcode vulnerability8.5 High
- decalogWordPress DecaLog plugin <= 3.9.0 - SQL Injection vulnerability7.6 High
kernel-linusMageiaUpdated kernel-linus packages fix bugs and provide mitigationsNo score- webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 moreElementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting5.4 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 moreEvents Manager <= 6.4.7.1 - Cross-Site Request Forgery4.3 Medium
- netweblogic meta tag managerMeta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object Injection8.8 High
- netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 moreEvents Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- appneta tcpreplayappneta tcpreplay get.c get_layer4_v6 heap-based overflow5.3 Medium
- oretnom23 simple subscription websiteSourceCodester Simple Subscription Website manage_plan.php sql injection6.3 Medium
- oretnom23 simple subscription website, simple subscription website project subscription website +1 moreSourceCodester Simple Subscription Website Actions.php sql injection6.3 Medium
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreUse of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3,...5.3 Medium
- nec corporation cr2500p, mr01ln, mr02ln +116 more +118 moreStack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3,...9.8 Critical
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreImproper Neutralization of Special Elements used in an OS Command vulnerability in NEC...9.8 Critical
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreImproper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2,...6.0 Medium
- nec corporation cr2500p, mr01ln, mr02ln +118 more +120 moreImproper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2,...9.8 Critical
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreHidden Functionality vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2,...9.8 Critical
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreUse of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3,...9.8 Critical
- nec corporation cr2500p, mr01ln, mr02ln +118 more +120 moreImproper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2,...9.8 Critical
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreActive Debug Code in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3,...9.8 Critical
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreImproper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2,...9.8 Critical
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreImproper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2,...5.3 Medium
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreAterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2,...4.7 Medium
- teledyne flir ax8, flir ax8 firmware +1 moreTeledyne FLIR AX8 User Registration test_login.php improper authorization5.3 Medium
- tenda fh1205, fh1205 firmware +1 moreTenda FH1205 GetParentControlInfo stack-based overflow8.8 High
- tenda fh1205, fh1205 firmware +1 moreTenda FH1205 QuickIndex formQuickIndex stack-based overflow8.8 High
- google chromeUninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...4.3 Medium
- munyweki insurance management systemCross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a...6.1 Medium
- munyweki insurance management systemCross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a...6.1 Medium
- munyweki insurance management systemCross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a...6.4 Medium
- munyweki insurance management systemCross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a...6.3 Medium
- insurance management system project management system, munyweki insurance management system +1 moreCross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a...6.1 Medium
- tenda ac10u firmwareTenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed,...8.1 High
- tenda fh1203 firmwareTenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceId parameter of the...8.0 High
- tenda fh1203 firmwareTenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the page parameter of the...8.0 High
- tenda fh1203 firmwareTenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the list1 parameter of the...7.5 High
- tenda fh1203 firmwareTenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the urls parameter of the...6.5 Medium
- Show moreLoading…