CVEs published March 2, 2024
69 CVEs were published on March 2, 2024: 1 critical, 15 high.
- Published
- 69
- Critical
- 1
- High
- 15
- Medium
- 19
- Low
- 1
- Unrated
- 33
- Now in CISA KEV
- 0
- Fix available
- 17
Most affected products
- Linux
- 57
- averta Master Slider – Responsive Touch Slider
- 3
- Hikvision HikCentral Professional
- 2
- Bdtask Isshue Multi Store eCommerce Shopping Cart Solution
- 1
- Complianz – GDPR/CCPA Cookie Consent
- 1
- g5theme Ultimate Bootstrap Elements for Elementor
- 1
- hexo-theme-anzhiyu
- 1
- mintplex-labs/anything-llm
- 1
- nextendweb Nextend Social Login and Register
- 1
- tigroumeow AI Engine – The Chatbot, AI Framework & MCP for…
- 1
Critical 1
High 15
- CVE-2023-52574team: fix null-ptr-deref when team device type is changedLinux
- CVE-2023-52572cifs: Fix UAF in cifs_demultiplex_thread()Linux
- CVE-2023-52571power: supply: rk817: Fix node refcount leakLinux
- CVE-2023-52565media: uvcvideo: Fix OOB readLinux
- CVE-2023-52530wifi: mac80211: fix potential key use-after-freeLinux
- CVE-2023-52523bpf, sockmap: Reject sk_msg egress redirects to non-TCP socketsLinux
- CVE-2023-52522net: fix possible store tearing in neigh_periodic_work()Linux
- CVE-2023-52517spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drainLinux
- CVE-2023-52513RDMA/siw: Fix connection failure handlingLinux
- CVE-2023-52509ravb: Fix use-after-free issue in ravb_tx_timeout_work()Linux
- CVE-2023-52503tee: amdtee: fix use-after-free vulnerability in amdtee_close_sessionLinux
- CVE-2023-52502net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()Linux
- CVE-2024-26621mm: huge_memory: don't force huge page alignment on 32 bitLinux
- CVE-2024-0795Create user API role not enforced mintplex-labs/anything-llm
- CVE-2024-25063Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLHikvision HikCentral Professional
Medium, low and unrated 53
- CVE-2024-2133Bdtask Isshue Multi Store eCommerce Shopping Cart Solution Manage Sale Page manage_invoice cross site scriptingBdtask Isshue Multi Store eCommerce Shopping Cart Solution
- CVE-2023-52582netfs: Only call folio_start_fscache() one time for each folioLinux
- CVE-2023-52581netfilter: nf_tables: fix memleak when more than 255 elements expiredLinux
- CVE-2023-52580net/core: Fix ETH_P_1588 flow dissectorLinux
- CVE-2023-52578net: bridge: use DEV_STATS_INC()Linux
- CVE-2023-52577dccp: fix dccp_v4_err()/dccp_v6_err() againLinux
- CVE-2023-52576x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()Linux
- CVE-2023-52573net: rds: Fix possible NULL-pointer dereferenceLinux
- CVE-2023-52570vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent()Linux
- CVE-2023-52569btrfs: remove BUG() after failure to insert delayed dir index itemLinux
- CVE-2023-52568x86/sgx: Resolves SECS reclaim vs. page fault for EAUG raceLinux
- CVE-2023-52567serial: 8250_port: Check IRQ data before useLinux
- CVE-2023-52566nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()Linux
- CVE-2023-52564Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux"Linux
- CVE-2023-52563drm/meson: fix memory leak on ->hpd_notify callbackLinux
- CVE-2023-52562mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy()Linux
- CVE-2023-52561arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reservedLinux
- CVE-2023-52560mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()Linux
- CVE-2023-52559iommu/vt-d: Avoid memory allocation in iommu_suspend()Linux
- CVE-2023-52518Bluetooth: hci_codec: Fix leaking content of local_codecsLinux
- CVE-2023-52532net: mana: Fix TX CQE error handlingLinux
- CVE-2023-52531wifi: iwlwifi: mvm: Fix a memory corruption issueLinux
- CVE-2023-52529HID: sony: Fix a potential memory leak in sony_probe()Linux
- CVE-2023-52528net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_regLinux
- CVE-2023-52527ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()Linux
- CVE-2023-52526erofs: fix memory leak of LZMA global compressed deduplicationLinux
- CVE-2023-52525wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packetLinux
- CVE-2023-52524net: nfc: llcp: Add lock when modifying device listLinux
- CVE-2023-52520platform/x86: think-lmi: Fix reference leakLinux
- CVE-2023-52519HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bitLinux
- CVE-2023-52516dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lockLinux
- CVE-2023-52512pinctrl: nuvoton: wpcm450: fix out of bounds writeLinux
- CVE-2023-52511spi: sun6i: reduce DMA RX transfer width to single byteLinux
- CVE-2023-52510ieee802154: ca8210: Fix a potential UAF in ca8210_probeLinux
- CVE-2023-52508nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()Linux
- CVE-2023-52507nfc: nci: assert requested protocol is validLinux
- CVE-2023-52506LoongArch: Set all reserved memblocks on Node#0 at initializationLinux
- CVE-2023-52505phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registersLinux
- CVE-2023-52504x86/alternatives: Disable KASAN in apply_alternatives()Linux
- CVE-2023-52501ring-buffer: Do not attempt to read past "commit"Linux
- CVE-2023-52500scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG commandLinux
- CVE-2023-52499powerpc/47x: Fix 47x syscall return crashLinux
- CVE-2022-48628ceph: drop messages from MDS when unmountingLinux
- CVE-2022-48627vt: fix memory overlapping when deleting chars in the bufferLinux
- CVE-2024-1398Ultimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingg5theme Ultimate Bootstrap Elements for Elementor
- CVE-2024-1449Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta Master Slider – Responsive Touch Slider
- CVE-2024-0611Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callbackaverta Master Slider – Responsive Touch Slider
- CVE-2023-6326Master Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_actionaverta Master Slider – Responsive Touch Slider
- CVE-2024-0378AI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site Scriptingtigroumeow AI Engine – The Chatbot, AI Framework & MCP for…
- CVE-2024-1775Nextend Social Login and Register <= 3.1.12 - Reflected Self-Based Cross-Site Scripting via error_descriptionnextendweb Nextend Social Login and Register
- CVE-2024-1592Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request DeletionComplianz – GDPR/CCPA Cookie Consent
- CVE-2024-25064Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not haHikvision HikCentral Professional
- CVE-2024-25865Cross Site Scripting (XSS) vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia sehexo-theme-anzhiyu