CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- biplob018 shortcode addonsWordPress Shortcode Addons <= 3.2.5 - Arbitrary File Upload vulnerability9.1 Critical
- quanticalabs chauffeur taxi booking system for wordpressWordPress Chauffeur Taxi Booking System for WordPress plugin <= 7.2 - Arbitrary File Upload vulnerability10.0 Critical
- filter custom fields & taxonomies light custom fields & taxonomies light, websupporter filter custom fields & taxonomies light, filter custom fields and taxonomies light custom fields and taxonomies light +2 moreWordPress Filter Custom Fields & Taxonomies Light plugin <= 1.05 - PHP Object Injection vulnerability8.5 High
- ibm cics transaction gateway for multiplatforms, cics transaction gateway +1 moreIBM CICS Transaction Gateway for Multiplatforms information disclosure3.1 Low
pucciniercrates.ioPuccinier is unmainted.No score- ibm cloud pak for business automationIBM Cloud Pak for Business Automation information disclosure5.3 Medium
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty denial of service5.9 Medium
- ibm security verify access, security verify access docker +1 moreIBM Security Verify Access Container information disclosure6.2 Medium
- No product listedDiscuzX install_function.php show_next_step cross site scripting3.5 Low
- zimbra zm-admin-ajaxZimbra zm-admin-ajax Form Textbox Field Error XFormItem.js XFormItem.prototype.setError cross site scripting3.5 Low
- chrisy tfo graphviz pluginchrisy TFO Graphviz Plugin tfo-graphviz-admin.php admin_page cross site scripting3.5 Low
- dreamer cms, iteachyou dreamer cms +1 moreDreamer CMS Attachment permission6.3 Medium
- ivanti itsm, neurons for itsm +1 moreAn file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to...9.9 Critical
- ivanti sentry, standalone sentry +1 moreA command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat...9.6 Critical
- youdiancmsYouDianCMS ChannelAction.class.php unrestricted upload4.7 Medium
libspdmOSS-FuzzHeap-buffer-overflow in libspdm_copy_memNo score- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40...7.5 High
org.bonitasoft.console:bonita-web-serverMaven,org.bonitasoft.platform:platform-resourcesMaven +1 moreBonita cross-site scripting vulnerability6.5 Medium- linuxserver heimdall application dashboardLinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such...9.8 Critical
kanidmopenSUSESecurity update for kanidmNo score- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreCross-Site Request Forgery (CSRF) Leading to Remote Code Execution in parisneo/lollms-webui8.8 High
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal Search Request Page search.php cross site scripting2.4 Low
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal Add Ambulance Page add-ambulance.php cross site scripting2.4 Low
glibcrates.ioUnsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter`6.9 Medium- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal Manage Ambulance Page manage-ambulance.php cross-site request forgery4.3 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword8.8 High
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal Forgot Password Page forgot-password.php sql injection7.3 High
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php sql injection7.3 High
- ideabox powerpack addons for elementor, ideaboxcreations powerpack addons for elementor (free widgets, extensions and templates) +1 morePowerPack Addons for Elementor <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via *_html_tag*6.4 Medium
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php cross site scripting4.3 Medium
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal Admin Login Page login.php sql injection7.3 High
- kyle phillips favoritesFavorites <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal Hire an Ambulance Page cross site scripting4.3 Medium
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget6.4 Medium
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table Widget6.4 Medium
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget6.4 Medium
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator Widget6.4 Medium
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget6.4 Medium
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- princeahmed file manager for google drive – integrate google driveIntegrate Google Drive <= 1.3.8 - Missing Authorization to Unauthenticated Settings Modification and Export10.0 Critical
- fernandobt list category postsList category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- munirkamal gutenberg block editor toolkit – editorskitGutenberg Block Editor Toolkit – EditorsKit <= 1.40.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- unitecms unlimited elements for elementorUnlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link6.4 Medium
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw8.8 High
- boldgrid easy seo – simple and effective seoBoldGrid Easy SEO – Simple and Effective SEO <= 1.6.13 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta Description6.4 Medium
libxml2OSS-FuzzHeap-use-after-free in dropNodeNo score- funbootfunboot v1.1 is vulnerable to Cross Site Scripting (XSS) via the title field in "create a message ."6.5 Medium
- ruijie rg-nbr700gw firmwareRuijie RG-NBR700GW 10.3(4b12) router lacks cookie verification when resetting the password,...9.8 Critical
- hometory mang board wpWordPress Mang Board WP plugin <= 1.8.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bplugins b slider - slider for your block editorWordPress B Slider plugin <= 1.1.12 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…