CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- No product listedAn XML external entity (XXE) vulnerability was found in Stilog Visual Planning 8. It allows an...6.3 Medium
- stilog visual planning 8An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an...9.8 Critical
- stilog visual planning 8An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an...9.8 Critical
- dell powermax eem, solutions enabler virtual appliance, unisphere for powermax +2 more +4 moreDell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An...7.2 High
- dell powermax eem, solutions enabler virtual appliance, unisphere for powermax virtual appliance +2 more +4 moreDell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An...7.2 High
- dell powerprotect data managerDell PowerProtect Data Manager, version 19.15, contains an XML External Entity Injection...5.5 Medium
- dell powerscale onefsDell PowerScale OneFS, versions 9.5.0.x through 9.7.0.x, contain an insufficient session...5.3 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.2.x through 9.5.0.x contains a use of a broken cryptographic...5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +10 more +12 morePcp: exposure of the redis server backend allows remote command execution via pmproxy8.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreCockpit: command injection when deleting a sosreport with a crafted name7.3 High
- dell powerscale onefsDell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an UNIX symbolic link (symlink)...6.0 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (symlink)...6.0 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains a cleartext transmission of...7.3 High
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an improper privilege management...6.0 Medium
- dell powerscale onefsDell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an insertion of sensitive...7.9 High
- apple ipados, macos, safari +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17...6.5 Medium
- apple ipados, macos, macos monterey +6 more +8 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use after free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS...7.8 High
- apple ipados, macos, tvos +3 more +5 moreA path handling issue was addressed with improved validation. This issue is fixed in macOS...8.6 High
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreAn issue was addressed with improved handling of temporary files. This issue is fixed in macOS...5.5 Medium
- apple macosThis issue was addressed through improved state management. This issue is fixed in macOS Sonoma...8.8 High
- apple ipados, macos, tvos +3 more +5 moreA permissions issue was addressed by removing vulnerable code and adding additional checks. This...5.5 Medium
- apple macosA privacy issue was addressed by moving sensitive data to a protected location. This issue is...5.5 Medium
- apple ipados, macos, ios and ipados +2 more +4 moreA race condition was addressed with improved state handling. This issue is fixed in macOS...7.0 High
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed with improved checks This issue is fixed in iOS 17.2 and iPadOS 17.2,...7.5 High
- apple macosA use-after-free issue was addressed with improved memory management. This issue is fixed in...7.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the...4.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector5.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration6.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter7.4 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 open redirect was possible on the login page6.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could...6.5 Medium
- oretnom23 simple subscription websiteSourceCodester Simple Subscription Website manage_user.php sql injection6.3 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway listloginfo.php sql injection6.3 Medium
- fortra robot schedule enterprise agent, robot schedule +1 morePrivilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.047.3 High
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway list_crl_conf sql injection6.3 Medium
- shanghai brad technology bladex, shanghai brad technology bladex project brad technology bladex +1 moreShanghai Brad Technology BladeX API export-user sql injection6.3 Medium
- hcl software bigfix platformHCL BigFix Platform is susceptible to a Denial of Service attack3.5 Low
- hcl software bigfix platformHCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack2.0 Low
- hcl software bigfix platformHCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)3.5 Low
- miraheze createwikiOversight in fix for GHSA-4rcf-3cj2-46mq may have exposed suppressed wiki requests on private wikis4.9 Medium
- miraheze createwikiCreateWiki Leak of suppressed wiki requests outside of `CreateWikiGlobalWiki`4.9 Medium
- ossrs srs, simple realtime server +1 moreSRS DOM - XSS on JSONP callback7.2 High
- kimaiAPI returns timesheet entries a user should not be authorized to view6.8 Medium
- verapdf verapdf-libraryPotential XSLT injection vulnerability when using policy files8.1 High
- tp-link ex20v ax1800, tp-link archer c5v ac1200, tp-link td-w9970, tp-link td-w9970v3, tp-link vx220-g2u, tp-link vn020-g2uAuthenticated RCE9.8 Critical
- kindspells astro-shieldAstro-Shield's Content-Security-Policy header generation in middleware could be compromised by malicious injections7.5 High
- Show moreLoading…