# CVEs published 2024-03-03 30 CVEs were published on March 3, 2024: 4 critical, 9 high. Days are UTC. - [CVE-2024-2151](https://cve.now/CVE-2024-2151.md): SourceCodester Online Mobile Management Store Product Price logic error (CVSS 4.3, SourceCodester Online Mobile Management Store) - [CVE-2024-2150](https://cve.now/CVE-2024-2150.md): SourceCodester Insurance Management System file inclusion (CVSS 5.3, SourceCodester Insurance Management System) - [CVE-2024-2149](https://cve.now/CVE-2024-2149.md): CodeAstro Membership Management System settings.php sql injection (CVSS 4.7, CodeAstro Membership Management System) - [CVE-2024-2148](https://cve.now/CVE-2024-2148.md): SourceCodester Online Mobile Management Store Users.php unrestricted upload (CVSS 6.3, SourceCodester Online Mobile Management Store) - [CVE-2024-2147](https://cve.now/CVE-2024-2147.md): SourceCodester Online Mobile Management Store login.php sql injection (CVSS 7.3, SourceCodester Online Mobile Management Store) - [CVE-2023-28512](https://cve.now/CVE-2023-28512.md): IBM Watson CP4D Data Stores improper input validation (CVSS 5.9, IBM Watson CP4D Data Stores) - [CVE-2023-27291](https://cve.now/CVE-2023-27291.md): IBM Watson CP4D Data Stores information disclosure (CVSS 4.5, IBM Watson CP4D Data Stores) - [CVE-2022-43880](https://cve.now/CVE-2022-43880.md): IBM QRadar WinCollect Agent (CVSS 4.4, IBM QRadar WinCollect Agent) - [CVE-2024-2146](https://cve.now/CVE-2024-2146.md): SourceCodester Online Mobile Management Store ?p=products cross site scripting (CVSS 3.5, SourceCodester Online Mobile Management Store) - [CVE-2024-0765](https://cve.now/CVE-2024-0765.md): Default user role exporting save state of instance (CVSS 9.6, mintplex-labs/anything-llm) - [CVE-2024-2145](https://cve.now/CVE-2024-2145.md): SourceCodester Online Mobile Management Store update-tracker.php cross site scripting (CVSS 3.5, SourceCodester Online Mobile Management Store) - [CVE-2024-22355](https://cve.now/CVE-2024-22355.md): IBM QRadar Suite information dislosure (CVSS 5.9, IBM QRadar Suite Products · IBM Cloud Pak for Security) - [CVE-2023-47742](https://cve.now/CVE-2023-47742.md): IBM QRadar Suite information dislosure (CVSS 5.9, IBM QRadar Suite Products · IBM Cloud Pak for Security) - [CVE-2023-43054](https://cve.now/CVE-2023-43054.md): IBM Engineering Test Management cross-site scripting (CVSS 6.4, IBM Engineering Test Management) - [CVE-2023-47745](https://cve.now/CVE-2023-47745.md): IBM MQ Container information disclosure (CVSS 6.2, IBM MQ Operator) - [CVE-2024-27255](https://cve.now/CVE-2024-27255.md): IBM MQ Container information disclosure (CVSS 5.9, IBM MQ Operator) - [CVE-2024-25016](https://cve.now/CVE-2024-25016.md): IBM MQ denial of service (CVSS 7.5, IBM MQ) - [CVE-2024-2135](https://cve.now/CVE-2024-2135.md): Bdtask Hospita AutoManager Hospital Activities Page form cross site scripting (CVSS 2.4, Bdtask Hospita AutoManager) - [CVE-2024-2134](https://cve.now/CVE-2024-2134.md): Bdtask Hospita AutoManager Investigation Report cross-site request forgery (CVSS 4.3, Bdtask Hospita AutoManager) - [CVE-2019-25210](https://cve.now/CVE-2019-25210.md): An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3. (CVSS 9.1) - [CVE-2024-24302](https://cve.now/CVE-2024-24302.md): An issue was discovered in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote atta (CVSS 9.8) - [CVE-2024-24307](https://cve.now/CVE-2024-24307.md): Path Traversal vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows a remo (CVSS 7.5) - [CVE-2024-25551](https://cve.now/CVE-2024-25551.md): Cross Site Scripting (XSS) vulnerability in sourcecodester Simple Student Attendance System v1.0 allows attackers to execute arbitrary code (CVSS 6.1) - [CVE-2024-25839](https://cve.now/CVE-2024-25839.md): An issue was discovered in Webbax "Super Newsletter" (supernewsletter) module for PrestaShop versions 1.4.21 and before, allows local attack (CVSS 7.5) - [CVE-2024-25842](https://cve.now/CVE-2024-25842.md): An issue was discovered in Presta World "Account Manager - Sales Representative & Dealers - CRM" (prestasalesmanager) module for PrestaShop (CVSS 7.5) - [CVE-2024-25844](https://cve.now/CVE-2024-25844.md): An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for PrestaShop before version 4.1.26, allows remote attac (CVSS 7.5) - [CVE-2024-25847](https://cve.now/CVE-2024-25847.md): SQL Injection vulnerability in MyPrestaModules "Product Catalog (CSV, Excel) Import" (simpleimportproduct) modules for PrestaShop versions 6 (CVSS 9.8) - [CVE-2024-26469](https://cve.now/CVE-2024-26469.md): Server-Side Request Forgery (SSRF) vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.1 (CVSS 8.1) - [CVE-2024-28084](https://cve.now/CVE-2024-28084.md): p2putil.c in iNet wireless daemon (IWD) through 2.15 allows attackers to cause a denial of service (daemon crash) or possibly have unspecifi (CVSS 7.5) - [CVE-2024-28088](https://cve.now/CVE-2024-28088.md): LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load\_ch (CVSS 8.1, langchain-core · langchain) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2024-03-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.