CVEs published March 3, 2024
30 CVEs were published on March 3, 2024: 4 critical, 9 high.
- Published
- 30
- Critical
- 4
- High
- 9
- Medium
- 14
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- SourceCodester Online Mobile Management Store
- 5
- Bdtask Hospita AutoManager
- 2
- IBM MQ Operator
- 2
- IBM QRadar Suite Products · IBM Cloud Pak for Security
- 2
- IBM Watson CP4D Data Stores
- 2
- CodeAstro Membership Management System
- 1
- IBM Engineering Test Management
- 1
- IBM MQ
- 1
- IBM QRadar WinCollect Agent
- 1
- langchain-core · langchain
- 1
Critical 4
- CVE-2024-0765Default user role exporting save state of instancemintplex-labs/anything-llm
- CVE-2019-25210An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3.
- CVE-2024-24302An issue was discovered in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote atta
- CVE-2024-25847SQL Injection vulnerability in MyPrestaModules "Product Catalog (CSV, Excel) Import" (simpleimportproduct) modules for PrestaShop versions 6
High 9
- CVE-2024-2147SourceCodester Online Mobile Management Store login.php sql injectionSourceCodester Online Mobile Management Store
- CVE-2024-25016IBM MQ denial of serviceIBM MQ
- CVE-2024-24307Path Traversal vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows a remo
- CVE-2024-25839An issue was discovered in Webbax "Super Newsletter" (supernewsletter) module for PrestaShop versions 1.4.21 and before, allows local attack
- CVE-2024-25842An issue was discovered in Presta World "Account Manager - Sales Representative & Dealers - CRM" (prestasalesmanager) module for PrestaShop
- CVE-2024-25844An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for PrestaShop before version 4.1.26, allows remote attac
- CVE-2024-26469Server-Side Request Forgery (SSRF) vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.1
- CVE-2024-28084p2putil.c in iNet wireless daemon (IWD) through 2.15 allows attackers to cause a denial of service (daemon crash) or possibly have unspecifi
- CVE-2024-28088LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chlangchain-core · langchain
Medium, low and unrated 17
- CVE-2024-2151SourceCodester Online Mobile Management Store Product Price logic errorSourceCodester Online Mobile Management Store
- CVE-2024-2150SourceCodester Insurance Management System file inclusionSourceCodester Insurance Management System
- CVE-2024-2149CodeAstro Membership Management System settings.php sql injectionCodeAstro Membership Management System
- CVE-2024-2148SourceCodester Online Mobile Management Store Users.php unrestricted uploadSourceCodester Online Mobile Management Store
- CVE-2023-28512IBM Watson CP4D Data Stores improper input validationIBM Watson CP4D Data Stores
- CVE-2023-27291IBM Watson CP4D Data Stores information disclosureIBM Watson CP4D Data Stores
- CVE-2022-43880IBM QRadar WinCollect AgentIBM QRadar WinCollect Agent
- CVE-2024-2146SourceCodester Online Mobile Management Store ?p=products cross site scriptingSourceCodester Online Mobile Management Store
- CVE-2024-2145SourceCodester Online Mobile Management Store update-tracker.php cross site scriptingSourceCodester Online Mobile Management Store
- CVE-2024-22355IBM QRadar Suite information dislosureIBM QRadar Suite Products · IBM Cloud Pak for Security
- CVE-2023-47742IBM QRadar Suite information dislosureIBM QRadar Suite Products · IBM Cloud Pak for Security
- CVE-2023-43054IBM Engineering Test Management cross-site scriptingIBM Engineering Test Management
- CVE-2023-47745IBM MQ Container information disclosureIBM MQ Operator
- CVE-2024-27255IBM MQ Container information disclosureIBM MQ Operator
- CVE-2024-2135Bdtask Hospita AutoManager Hospital Activities Page form cross site scriptingBdtask Hospita AutoManager
- CVE-2024-2134Bdtask Hospita AutoManager Investigation Report cross-site request forgeryBdtask Hospita AutoManager
- CVE-2024-25551Cross Site Scripting (XSS) vulnerability in sourcecodester Simple Student Attendance System v1.0 allows attackers to execute arbitrary code