CVEs published March 11, 2024
91 CVEs were published on March 11, 2024: 7 critical, 47 high.
- Published
- 91
- Critical
- 7
- High
- 47
- Medium
- 34
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 16
Most affected products
- Google Android
- 57
- NI LabVIEW
- 5
- ndijkstra Mollie Forms
- 2
- 404 Solution
- 1
- Canon Color imageCLASS MF740C Series · Canon Color imag… +24
- 1
- ChatGPTNextWeb NextChat · nextchat
- 1
- Checkmk
- 1
- CollaboraOnline online
- 1
- Enhanced Text Widget
- 1
- Exafunction codeium-chrome
- 1
Critical 7
- CVE-2023-49785NextChat vulnerable to Server-Side Request Forgery and Cross-site ScriptingChatGPTNextWeb NextChat · nextchat
- CVE-2024-27228there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2024-27227A malicious DNS response can trigger a number of OOB reads, writes, and other memory issuesGoogle Android
- CVE-2024-27207Exported broadcast receivers allowing malicious apps to bypass broadcast protection.Google Android
- CVE-2024-23717In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input validatiGoogle Android
- CVE-2024-0039In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-2184Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may alloCanon Color imageCLASS MF740C Series · Canon Color imag… +24
High 47
- CVE-2024-28199Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlexphlex-ruby phlex · phlex
- CVE-2024-28187OS Command Injection Vulnerability in SOY CMSinunosinsi soycms
- CVE-2024-28197Account Takeover via Session Fixation in Zitadel [Bypassing MFA]zitadel · github.com/zitadel/zitadel
- CVE-2024-27236In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion.Google Android
- CVE-2024-27233In ppcfw_init_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized data.Google Android
- CVE-2024-27229In ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing null check.Google Android
- CVE-2024-27226In tmu_config_gov_params of , there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-27224In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-27222In onSkipButtonClick of FaceEnrollFoldPage.java, there is a possible way to access the file the app cannot access due to Intent Redirect GRGoogle Android
- CVE-2024-27221In update_policy_data of , there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-27220In lpm_req_handler of , there is a possible out of bounds memory access due to a missing bounds check.Google Android
- CVE-2024-27219In tmu_set_pi of tmu.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-27213In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free.Google Android
- CVE-2024-27212In init_data of , there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-27211In AtiHandleAPOMsgType of ati_Main.c, there is a possible OOB write due to a missing null check.Google Android
- CVE-2024-27210In policy_check of fvp.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-27209there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2024-27208there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-27206there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-27205there is a possible memory corruption due to a use after free.Google Android
- CVE-2024-27204In tmu_set_gov_active of tmu.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-25993In tmu_reset_tmu_trip_counter of , there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-25992In tmu_tz_control of tmu.c, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-25988In SAEMM_DiscloseGuti of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-25986In ppmp_unprotect_buf of drm_fw.c, there is a possible compromise of protected memory due to a logic error in the code.Google Android
- CVE-2024-25985In bigo_unlocked_ioctl of bigo.c, there is a possible UAF due to a missing bounds check.Google Android
- CVE-2024-22011In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-22009In init_data of , there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-22008In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2024-22005there is a possible Authentication Bypass due to improperly used crypto.Google Android
- CVE-2024-1068404 Solution < 2.35.8 - Admin+ SQL Injection404 Solution
- CVE-2024-1696Santesoft Sante FFT Imaging Out-of-bounds WriteSantesoft Sante FFT Imaging
- CVE-2024-0051In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2024-0050In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check.Google Android
- CVE-2024-0049In multiple locations, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2024-0048In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of nuGoogle Android
- CVE-2024-0046In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the codGoogle Android
- CVE-2024-0045In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation.Google Android
- CVE-2024-0044In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation.Google Android
- CVE-2024-23612Improper Error Handling Issue in LabVIEWNI LabVIEW
- CVE-2024-23609Improper Error Handling Issue in LabVIEWNI LabVIEW
- CVE-2024-23611Out of Bounds Write Due to Missing Bounds Check in LabVIEWNI LabVIEW
- CVE-2024-23610Out of Bounds Write Due to Missing Bounds Check in LabVIEWNI LabVIEW
- CVE-2024-23608Out of Bounds Write Due to Missing Bounds Check in LabVIEWNI LabVIEW
- CVE-2024-0670Privilege escalation in windows agentCheckmk
- CVE-2022-46070GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path.
- CVE-2024-28816Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php.
Medium, low and unrated 37
- CVE-2024-25114Sensitive Information Disclosure (JailID) to users in Collabora OnlineCollaboraOnline online
- CVE-2024-1400Mollie Forms <= 2.6.3 - Missing Authorization to Arbitrary Post Duplicationndijkstra Mollie Forms
- CVE-2024-1645Mollie Forms <= 2.6.3 - Missing Authorizationndijkstra Mollie Forms
- CVE-2024-27297Nix Corruption of fixed-output derivationsNixOS nix
- CVE-2024-27938SMTP Smuggling in Postalpostalserver postal
- CVE-2024-28120API key leak in codeium-chromeExafunction codeium-chrome
- CVE-2024-2357IKEv2 misconfiguration can cause libreswan to abort and restartThe Libreswan Project (www.libreswan.org) libreswan
- CVE-2024-28198XML external entity (XXE) injection in OpenOLATOpenOLAT
- CVE-2024-27237In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code.Google Android
- CVE-2024-27235In plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-27234In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-27230In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds checGoogle Android
- CVE-2024-27225In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow.Google Android
- CVE-2024-27223In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-27218In update_freq_data of , there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-25991In acpm_tmu_ipc_handler of tmu_plugin.c, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-25990In pktproc_perftest_gen_rx_packet_sktbuf_mode of link_rx_pktproc.c, there is a possible out of bounds write due to a race condition.Google Android
- CVE-2024-25989In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-25987In pt_sysctl_command of pt.c, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2024-25984In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow.Google Android
- CVE-2024-22010In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-22007In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2024-22006OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.Google Android
- CVE-2024-1487Photos and Files Contest Gallery < 21.3.1 - Author+ Stored Cross Site ScriptingPhotos and Files Contest Gallery
- CVE-2024-0561Ultimate Posts Widget < 2.3.1 - Admin+ Stored XSSUltimate Posts Widget
- CVE-2024-1279Paid Memberships Pro < 2.12.9 - Contributor+ Arbitrary User Custom Field DisclosurePaid Memberships Pro
- CVE-2023-7247Login as User or Customer <= 3.8 - Admin Account TakeoverLogin as User or Customer
- CVE-2024-1290Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account TakeoverUser Registration
- CVE-2024-1273Starbox < 3.5.0 - Contributor+ Stored XSSStarbox
- CVE-2024-0559Enhanced Text Widget < 1.6.6 - Admin+ Stored XSSEnhanced Text Widget
- CVE-2023-6444Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email DisclosureSeriously Simple Podcasting
- CVE-2024-0053In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy.Google Android
- CVE-2024-0052In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check.Google Android
- CVE-2024-0047In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code.Google Android
- CVE-2024-1441Libvirt: off-by-one error in udevlistinterfacesbystatus()libvirt · Red Hat Enterprise Linux
- CVE-2024-25854Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Su
- CVE-2024-28823Amazon AWS aws-js-s3-explorer (aka AWS JavaScript S3 Explorer) 1.0.0 allows XSS via a crafted S3 bucket name to index.html.