CVEs published March 8, 2024
103 CVEs were published on March 8, 2024: 6 critical, 29 high.
- Published
- 103
- Critical
- 6
- High
- 29
- Medium
- 56
- Low
- 12
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 77
Most affected products
- Apple macOS
- 26
- Apple iOS and iPadOS · Apple macOS +2
- 10
- Apple iOS and iPadOS · Apple macOS
- 7
- Apple iOS and iPadOS · Apple macOS +1
- 6
- Apple iOS and iPadOS · Apple macOS +3
- 5
- boyiddha Automated-Mess-Management-System
- 5
- Bdtask G-Prescription Gynaecology & OBS Consultation Softwa…
- 4
- Apple Safari · Apple iOS and iPadOS +4
- 3
- Apple iOS and iPadOS · Apple visionOS
- 2
- Bdtask Hospital AutoManager
- 2
Critical 6
- CVE-2024-21899QTS, QuTS hero, QuTScloudQNAP Systems QTS · QNAP Systems QuTS hero +1
- CVE-2024-23255An authentication issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2024-23286A buffer overflow issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-23265A memory corruption vulnerability was addressed with improved locking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-25845In the module "CD Custom Fields 4 Orders" (cdcustomfields4orders) <= 1.0.0 from Cleanpresta.com for PrestaShop, a guest can perform SQL inje
- CVE-2024-25849In the module "Make an offer" (makeanoffer) <= 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::ch
High 29
- CVE-2024-28123Wasmi Out-of-bounds Write for host to Wasm calls with more than 128 Parameterswasmi-labs wasmi · wasmi
- CVE-2024-2339Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking ruleDALIBO PostgreSQL Anonymizer
- CVE-2024-2338SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking ruleDALIBO PostgreSQL Anonymizer
- CVE-2024-23234An out-of-bounds write issue was addressed with improved input validation.Apple macOS
- CVE-2024-23263A logic issue was addressed with improved validation.Apple Safari · Apple iOS and iPadOS +4
- CVE-2024-23238An access issue was addressed with improved access restrictions.Apple macOS
- CVE-2024-23280An injection issue was addressed with improved validation.Apple Safari · Apple iOS and iPadOS +3
- CVE-2024-23278The issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-0258The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-23274An injection issue was addressed with improved input validation.Apple macOS
- CVE-2024-23235A race condition was addressed with additional validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-23258An out-of-bounds read was addressed with improved input validation.Apple macOS · Apple visionOS
- CVE-2024-23253A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2024-23233This issue was addressed with improved checks.Apple macOS
- CVE-2024-23291A privacy issue was addressed with improved private data redaction for log entries.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-23268An injection issue was addressed with improved input validation.Apple macOS
- CVE-2024-23247The issue was addressed with improved memory handling.Apple macOS
- CVE-2024-23226The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-23288This issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-23270The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-23246This issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-23285This issue was addressed with improved handling of symlinks.Apple macOS
- CVE-2024-23294This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2024-23276A logic issue was addressed with improved checks.Apple macOS
- CVE-2024-2282boyiddha Automated-Mess-Management-System Login Page index.php sql injectionboyiddha Automated-Mess-Management-System
- CVE-2019-6268RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /..
- CVE-2024-26313Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a stored cross-site scripting (XSS) vulnerability.
- CVE-2024-27613Numbas editor before 7.3 mishandles reading of themes and extensions.
- CVE-2024-28754RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to cause a persistent denial of service (bricking) via a crafted request.billz/raspap-webgui
Medium, low and unrated 68
- CVE-2023-32264CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2.OpenText Documentum D2
- CVE-2022-43855IBM SPSS Statistics denial of serviceIBM SPSS Statistics
- CVE-2024-21901myQNAPcloudQNAP Systems myQNAPcloud · QNAP Systems QTS
- CVE-2024-21900QTS, QuTS hero, QuTScloudQNAP Systems QTS · QNAP Systems QuTS hero +1
- CVE-2023-32969Network & Virtual SwitchQNAP Systems QuTScloud · QNAP Systems QTS +1
- CVE-2023-34980QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2023-47221Photo StationQNAP Systems Photo Station
- CVE-2024-2319Cross-Site Scripting vulnerability in Django MarkdownXDjango MarkdownX · django-markdownx
- CVE-2024-2318ZKTeco ZKBio Media Service Port 9999 download path traversalZKTeco ZKBio Media
- CVE-2024-2317Bdtask Hospital AutoManager Prescription Page improper authorizationBdtask Hospital AutoManager
- CVE-2024-2316Bdtask Hospital AutoManager Update Bill Page cross-site request forgeryBdtask Hospital AutoManager
- CVE-2024-1851affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_create_listcservit affiliate-toolkit – Multi-Network Affiliate & Amazo…
- CVE-2024-2298affiliate-toolkit – WordPress Affiliate Plugin <= 3.5.4 - Missing Authorization via atkp_import_productcservit affiliate-toolkit – Multi-Network Affiliate & Amazo…
- CVE-2024-1987WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodecbutlerjr WP-Members Membership Plugin
- CVE-2024-2285boyiddha Automated-Mess-Management-System member_edit.php cross site scriptingboyiddha Automated-Mess-Management-System
- CVE-2024-2284boyiddha Automated-Mess-Management-System Chat Book chat.php cross site scriptingboyiddha Automated-Mess-Management-System
- CVE-2024-2283boyiddha Automated-Mess-Management-System view.php sql injectionboyiddha Automated-Mess-Management-System
- CVE-2024-23259The issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2024-23275A race condition was addressed with additional validation.Apple macOS
- CVE-2024-23279A privacy issue was addressed with improved private data redaction for log entries.Apple macOS
- CVE-2024-23297The issue was addressed with improved checks.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2024-23281This issue was addressed with improved state management.Apple macOS
- CVE-2024-23239A race condition was addressed with improved state handling.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-23242A privacy issue was addressed by not logging contents of text fields.Apple iOS and iPadOS · Apple macOS
- CVE-2024-23254The issue was addressed with improved UI handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2024-23262This issue was addressed with additional entitlement checks.Apple iOS and iPadOS · Apple visionOS
- CVE-2024-23245This issue was addressed by adding an additional prompt for user consent.Apple macOS
- CVE-2024-23269A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.Apple macOS
- CVE-2024-23290A logic issue was addressed with improved restrictions.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-23249The issue was addressed with improved memory handling.Apple macOS
- CVE-2024-23232A privacy issue was addressed with improved handling of temporary files.Apple macOS
- CVE-2024-23273This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +1
- CVE-2024-23272A logic issue was addressed with improved checks.Apple macOS
- CVE-2024-23264A validation issue was addressed with improved input sanitization.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-23248The issue was addressed with improved memory handling.Apple macOS
- CVE-2024-23287A privacy issue was addressed with improved handling of temporary files.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-23244A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2024-23205A privacy issue was addressed with improved private data redaction for log entries.Apple iOS and iPadOS · Apple macOS
- CVE-2024-23292This issue was addressed with improved data protection.Apple iOS and iPadOS · Apple macOS
- CVE-2024-23284A logic issue was addressed with improved state management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2024-23267The issue was addressed with improved checks.Apple macOS
- CVE-2024-23230This issue was addressed with improved file handling.Apple macOS
- CVE-2024-23231A privacy issue was addressed with improved private data redaction for log entries.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-23266The issue was addressed with improved checks.Apple macOS
- CVE-2024-23289A lock screen issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-23227This issue was addressed with improved redaction of sensitive information.Apple macOS
- CVE-2024-23250An access issue was addressed with improved access restrictions.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-23293This issue was addressed through improved state management.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-23220The issue was addressed with improved handling of caches.Apple iOS and iPadOS · Apple visionOS
- CVE-2023-28826This issue was addressed with improved redaction of sensitive information.Apple macOS · Apple iOS and iPadOS
- CVE-2024-23277The issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2024-23241This issue was addressed through improved state management.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-23216A path handling issue was addressed with improved validation.Apple macOS
- CVE-2024-23257The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-23201A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-23240The issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2024-23283A privacy issue was addressed with improved private data redaction for log entries.Apple iOS and iPadOS · Apple macOS
- CVE-2024-23295A permissions issue was addressed to help ensure Personas are always protected.Apple visionOS
- CVE-2024-23260This issue was addressed by removing additional entitlements.Apple macOS
- CVE-2024-2281boyiddha Automated-Mess-Management-System Setting index.php access controlboyiddha Automated-Mess-Management-System
- CVE-2024-2277Bdtask G-Prescription Gynaecology & OBS Consultation Software Password Reset change_password_save cross-site request forgeryBdtask G-Prescription Gynaecology & OBS Consultation Softwa…
- CVE-2024-2276Bdtask G-Prescription Gynaecology & OBS Consultation Software Edit Venue Page cross site scriptingBdtask G-Prescription Gynaecology & OBS Consultation Softwa…
- CVE-2024-2275Bdtask G-Prescription Gynaecology & OBS Consultation Software OBS Patient/Gynee Prescription cross site scriptingBdtask G-Prescription Gynaecology & OBS Consultation Softwa…
- CVE-2024-2274Bdtask G-Prescription Gynaecology & OBS Consultation Software Prescription Dashboard Index cross site scriptingBdtask G-Prescription Gynaecology & OBS Consultation Softwa…
- CVE-2024-25848In the module "Ever Ultimate SEO" (everpsseo) <= 8.1.2 from Team Ever for PrestaShop, a guest can perform SQL injection in affected versions
- CVE-2024-26309Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a sensitive information disclosure vulnerability.
- CVE-2024-27612Numbas editor before 7.3 mishandles editing of themes and extensions.
- CVE-2024-28753RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request.