CVEs published March 12, 2024
186 CVEs were published on March 12, 2024: 14 critical, 88 high. 2 are now in CISA KEV.
- Published
- 186
- Critical
- 14
- High
- 88
- Medium
- 79
- Low
- 5
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 87
Most affected products
- Microsoft Windows
- 33
- PHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- 13
- binhnguyenplus LadiApp: Landing Page, PopupX, Marketing Aut…
- 7
- Apache Software Foundation Apache Pulsar · org.apache.pulsa…
- 5
- Badger Meter Monitool
- 4
- Microsoft Windows Server · Microsoft Windows
- 4
- 3uu Shariff Wrapper
- 3
- CMS Made Simple
- 3
- peering-manager
- 3
- sjaved Easy Social Feed – Social Photos Gallery and Post Fe…
- 3
Critical 14
- CVE-2024-21400Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege VulnerabilityMicrosoft Azure Kubernetes Service
- CVE-2024-21334Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityMicrosoft System Center Operations Manager (SCOM) · Microso…
- CVE-2024-1301Multiple Vulnerabilities in Badger Meter's MonitoolBadger Meter Monitool
- CVE-2024-1527Unrestricted Upload of File with Dangerous Type in CMS Made SimpleCMS Made Simple
- CVE-2023-48788A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.Fortinet FortiClientEMS
- CVE-2023-42789A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortFortinet FortiProxy · Fortinet FortiSASE +1
- CVE-2022-32257A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2).Siemens SINEMA Remote Connect Server
- CVE-2024-22039A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versSiemens Cerberus PRO EN Engineering Tool · Siemens Cerb… +19
- CVE-2023-41313Apache Doris: Timing Attack weaknessApache Software Foundation Apache Doris
- CVE-2024-25995PHOENIX CONTACT: Remote code execution in CHARX SeriesPHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-22127Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)SAP_SE SAP NetWeaver AS Java
- CVE-2024-24093SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Up
- CVE-2024-25331DIR-822 Rev.
- CVE-2024-28553Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat function.
High 88
- CVE-2023-7072Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpointpickplugins Post Grid
- CVE-2024-0386weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Refererboldgrid weForms – Easy Drag & Drop Contact Form Builder Fo…
- CVE-2024-2395Bulgarisation for WooCommerce <= 3.0.14 - Cross-Site Request Forgeryautopolisbg Bulgarisation for WooCommerce
- CVE-2024-28236Insecure Variable Substitution in Velago-vela worker · github.com/go-vela/worker
- CVE-2024-23300A use-after-free issue was addressed with improved memory management.Apple GarageBand
- CVE-2023-5410A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering.HP PC BIOS
- CVE-2024-28114Remote Code Execution using Server Side Template Injection in Peering Managerpeering-manager
- CVE-2024-28121Reflex arbitrary method call in stimulus_reflexstimulusreflex stimulus_reflex · stimulus_reflex
- CVE-2024-28186SMTP Mail Credentials Disclosed in Error Log in freescoutfreescout-helpdesk freescout
- CVE-2024-27894Apache Pulsar: Pulsar Functions Worker Allows Unauthorized File Access and Unauthorized HTTP/HTTPS ProxyingApache Software Foundation Apache Pulsar · org.apache.pulsa…
- CVE-2024-27317Apache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File ModificationApache Software Foundation Apache Pulsar · org.apache.pulsa…
- CVE-2024-27135Apache Pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code ExecutionApache Software Foundation Apache Pulsar · org.apache.pulsa…
- CVE-2022-34321Apache Pulsar: Improper Authentication for Pulsar Proxy Statistics EndpointApache Software Foundation Apache Pulsar · org.apache.pulsa…
- CVE-2024-1138TIBCO FTL Privilege EscalationTIBCO Software TIBCO FTL - Enterprise Edition
- CVE-2024-26165Visual Studio Code Elevation of Privilege VulnerabilityMicrosoft Visual Studio Code
- CVE-2024-26204Outlook for Android Information Disclosure VulnerabilityMicrosoft Outlook for Android
- CVE-2024-26182Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-26178Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-26176Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-26173Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-26170Windows Composite Image File System (CimFS) Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-26169Windows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-26166Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-26162Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21440Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21437Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21436Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21435Windows OLE Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21434Microsoft Windows SCSI Class System File Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21433Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21432Windows Update Stack Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21431Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-21427Windows Kerberos Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2024-21419Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2024-21407Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21390Microsoft Authenticator Elevation of Privilege VulnerabilityMicrosoft Authenticator
- CVE-2024-21330Open Management Infrastructure (OMI) Elevation of Privilege VulnerabilityMicrosoft System Center Operations Manager (SCOM) · Micr… +6
- CVE-2024-26164Microsoft Django Backend for SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server backend for Django · mssql-django
- CVE-2024-26161Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-26203Azure Data Studio Elevation of Privilege VulnerabilityMicrosoft Azure Data Studio
- CVE-2024-26199Microsoft Office Elevation of Privilege VulnerabilityMicrosoft 365 Apps for Enterprise
- CVE-2024-26198Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Microsof…
- CVE-2024-26190Microsoft QUIC Denial of Service VulnerabilityMicrosoft Visual Studio · Microsoft Windows Server +3
- CVE-2024-26159Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21451Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21450Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21446NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21445Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-21444Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21443Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21442Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2024-21441Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21439Windows Telephony Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-21438Microsoft AllJoyn API Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-21426Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2024-21421Azure SDK Spoofing VulnerabilityMicrosoft Azure SDK
- CVE-2024-21418Software for Open Networking in the Cloud (SONiC) Elevation of Privilege VulnerabilityMicrosoft Software for Open Networking in the Cloud
- CVE-2024-21411Skype for Consumer Remote Code Execution VulnerabilityMicrosoft Skype for Consumer
- CVE-2024-21392.NET and Visual Studio Denial of Service VulnerabilityMicrosoft Visual Studio · Microsoft PowerShell +13
- CVE-2024-1302Multiple Vulnerabilities in Badger Meter's MonitoolBadger Meter Monitool
- CVE-2024-1529Cross-site Scripting in CMS Made SimpleCMS Made Simple
- CVE-2024-1528Cross-site Scripting in CMS Made SimpleCMS Made Simple
- CVE-2023-47534A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0Fortinet FortiClientEMS
- CVE-2024-23112An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0Fortinet FortiOS · Fortinet FortiProxy
- CVE-2023-42790A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.Fortinet FortiProxy · Fortinet FortiOS
- CVE-2023-36554A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.10, version 6.4.0 tFortinet FortiManager
- CVE-2024-1226Multiple vulnerabilities in Rejetto's Http File ServerRejetto Http File Server
- CVE-2024-1618Unquoted item or search path vulnerability in Faronics Deep Freeze Server StandardFaronics Deep Freeze Server Standard
- CVE-2024-27907A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000).Siemens Simcenter Femap
- CVE-2024-22045A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1).Siemens SINEMA Remote Connect Client
- CVE-2024-22044A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions).Siemens SENTRON 3KC ATC6 Expansion Module Ethernet
- CVE-2024-22041A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x IP6 (All versions),Siemens Cerberus PRO EN Engineering Tool · Siemens Cerb… +21
- CVE-2024-22040A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x IP6 (All versions),Siemens Cerberus PRO EN Engineering Tool · Siemens Cerb… +21
- CVE-2024-26288PHOENIX CONTACT: Lack of SSL support in CHARX SeriesPHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-26004PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX SeriesPHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-26003PHOENIX CONTACT: DoS of the control agent in CHARX SeriesPHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-26002PHOENIX CONTACT: File ownership manipulation in CHARX SeriesPHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-26001PHOENIX CONTACT: Out of bounds write only memory accessPHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-25999PHOENIX CONTACT: Privilege escalation in the OCPP agent servicePHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-25998PHOENIX CONTACT: Command injection in the OCPP ServicePHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-27121Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series.OMRON Machine Automation Controller NJ Series · OMRON Machi…
- CVE-2024-21805Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2.Sky Co. SKYSEA Client View
- CVE-2024-24092SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php.
- CVE-2024-25325SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain sensitive information via a crafted payloa
- CVE-2024-27758In RPyC before 6.0.0, when a server exposes a method that calls the attribute named __array__ for a client-provided netref (e.g., np.array(crpyc
- CVE-2024-28338A login bypass in TOTOLINK A8000RU V7.1cu.643_B20200521 allows attackers to login to Administrator accounts via providing a crafted session
- CVE-2024-28340An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows
- CVE-2024-28535Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter of fromAddressNat function.
Medium, low and unrated 84
- CVE-2024-1326Jeg Elementor Kit <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tagsjegtheme Jeg Kit for Elementor – Powerful Addons for Elemen…
- CVE-2023-6500Shariff Wrapper <= 4.6.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode3uu Shariff Wrapper
- CVE-2024-1278Easy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodesjaved Easy Social Feed – Social Photos Gallery and Post Fe…
- CVE-2024-1214Easy Social Feed <= 6.5.4 - Cross-Site Request Forgerysjaved Easy Social Feed – Social Photos Gallery and Post Fe…
- CVE-2024-0966Shariff Wrapper <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting3uu Shariff Wrapper
- CVE-2024-1502Tutor LMS – eLearning and online course solution <= 2.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletionthemeum Tutor LMS – eLearning and online course solution
- CVE-2024-1213Easy Social Feed <= 6.5.4 - Cross-Site Request Forgerysjaved Easy Social Feed – Social Photos Gallery and Post Fe…
- CVE-2024-1503Tutor LMS – eLearning and online course solution <= 2.6.1 - Cross-Site Request Forgery to Plugin Deactivation and Data Erasethemeum Tutor LMS – eLearning and online course solution
- CVE-2024-1450Shariff Wrapper <= 4.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting3uu Shariff Wrapper
- CVE-2024-1421HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widgetdevitemsllc HT Mega Addons for Elementor – Elementor Widget…
- CVE-2024-1397HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTagdevitemsllc HT Mega Addons for Elementor – Elementor Widget…
- CVE-2024-2107Blossom Spa <= 1.3.3 - Sensitive Information Exposureblossomthemes Blossom Spa
- CVE-2024-2406Gacjie Server Upload.php index unrestricted uploadGacjie Server
- CVE-2024-27305SMTP smuggling in aiosmtpdaio-libs aiosmtpd · aiosmtpd
- CVE-2024-28238Session Token in URL in directusdirectus
- CVE-2024-28239URL Redirection to Untrusted Site in OAuth2/OpenID in directusdirectus
- CVE-2024-28113Open redirection using the return_url parameter in Peering Managerpeering-manager
- CVE-2024-28112Cross site scripting on router page in Peering Managerpeering-manager
- CVE-2023-30968Stored XSS in gaiacom.palantir.acme.gaia:gaia
- CVE-2024-2130CWW Companion <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingcodeworkweb CWW Companion
- CVE-2024-2031Video Conferencing with Zoom <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodej_3rk Video Conferencing with Zoom
- CVE-2024-28098Apache Pulsar: Improper Authorization For Topic-Level Policy ManagementApache Software Foundation Apache Pulsar · org.apache.pulsa…
- CVE-2024-1410Unbounded storage of information related to connection ID retirement, in quiche Cloudflare quiche · quiche
- CVE-2024-1765Unlimited resource allocation by QUIC CRYPTO frames flooding in quicheCloudflare quiche · quiche
- CVE-2024-1137TIBCO ActiveSpaces Information Leak VulnerabilityTIBCO Software TIBCO ActiveSpaces - Enterprise Edition
- CVE-2024-26185Windows Compressed Folder Tampering VulnerabilityMicrosoft Windows
- CVE-2024-26181Windows Kernel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-26177Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-26174Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-26160Windows Cloud Files Mini Filter Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-21448Microsoft Teams for Android Information Disclosure VulnerabilityMicrosoft Teams for Android
- CVE-2024-21408Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2024-26201Microsoft Intune Linux Agent Elevation of Privilege VulnerabilityMicrosoft Intune Company Portal for Android
- CVE-2024-26197Windows Standards-Based Storage Management Service Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2024-21430Windows USB Attached SCSI (UAS) Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-21429Windows USB Hub Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-20671Microsoft Defender Security Feature Bypass VulnerabilityMicrosoft Windows Defender Antimalware Platform
- CVE-2024-2182Ovn: insufficient validation of bfd packets may lead to denial of serviceovn · Fast Datapath for Red Hat Enterprise Linux +3
- CVE-2024-1304Multiple Vulnerabilities in Badger Meter's MonitoolBadger Meter Monitool
- CVE-2024-1303Multiple Vulnerabilities in Badger Meter's MonitoolBadger Meter Monitool
- CVE-2024-1227Multiple vulnerabilities in Rejetto's Http File ServerRejetto Http File Server
- CVE-2023-46717An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and beFortinet FortiOS
- CVE-2024-21761An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to dowFortinet FortiPortal
- CVE-2023-41842A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute unauFortinet FortiPortal · Fortinet FortiAnalyzer-BigData +2
- CVE-2024-2394SourceCodester Employee Management System add-admin.php unrestricted uploadSourceCodester Employee Management System
- CVE-2024-2393SourceCodester CRUD without Page Reload add_user.php sql injectionSourceCodester CRUD without Page Reload
- CVE-2024-2049Server-Side Request Forgery (SSRF)Citrix SD-WAN Standard/Premium Editions
- CVE-2024-2391EVE-NG Lab cross site scriptingEVE-NG
- CVE-2024-21483A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (All versions >= V3.2.3 < V3.2.4 only when manufactureSiemens SENTRON 7KM PAC3120 AC/DC · Siemens SENTRON 7KM… +2
- CVE-2023-45793A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1).Siemens Siveillance Control
- CVE-2023-4629LadiApp <= 4.4 - Cross-Site Request Forgery via save_config()binhnguyenplus LadiApp: Landing Page, PopupX, Marketing Aut…
- CVE-2023-4729LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Cross-Site Request Forgery via publish_lp()binhnguyenplus LadiApp: Landing Page, PopupX, Marketing Aut…
- CVE-2023-4627LadiApp <= 4.4 - Missing Authorization via save_config()binhnguyenplus LadiApp: Landing Page, PopupX, Marketing Aut…
- CVE-2023-4728LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Missing Authorization on publish_lp()binhnguyenplus LadiApp: Landing Page, PopupX, Marketing Aut…
- CVE-2023-4626The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ladiflow_save_hbinhnguyenplus LadiApp: Landing Page, PopupX, Marketing Aut…
- CVE-2023-4731LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Cross-Site Request Forgery via init_endpointbinhnguyenplus LadiApp: Landing Page, PopupX, Marketing Aut…
- CVE-2023-4628LadiApp <= 4.4 - Cross-Site Request Forgery via ladiflow_save_hook()binhnguyenplus LadiApp: Landing Page, PopupX, Marketing Aut…
- CVE-2024-2371Information exposure vulnerability in Korenix JetI/O 6550Korenix JetI/O
- CVE-2024-0906f(x) Private Site <= 1.2.1 - Sensitive Information Exposureturtlepod f(x) Private Site
- CVE-2024-1328Newsletter2Go <= 4.0.14 - Authenticated(Subscriber+) Stored Cross-Site Scripting via styleNewsletter2Go
- CVE-2024-27279Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.appleple a-blog cms Ver.3.1.x series · appleple a-blog c… +3
- CVE-2024-26005PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX SeriesPHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-26000PHOENIX CONTACT: Out of bounds read only memory accessPHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-25997PHOENIX CONTACT: Log injection in CHARX SeriesPHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-25996PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series PHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-25994PHOENIX CONTACT: Unintended script file upload in CHARX SeriesPHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-21584Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability.Implem Pleasanter
- CVE-2024-24964Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2.Sky Co. SKYSEA Client View
- CVE-2023-6814Information Exposure Vulnerability in Cosminexus Component ContainerHitachi Cosminexus Component Container
- CVE-2024-25645Information Disclosure vulnerability in SAP NetWeaver (Enterprise Portal)SAP_SE SAP NetWeaver
- CVE-2024-28163Information Disclosure vulnerability in SAP NetWeaver Process Integration (Support Web Pages)SAP_SE SAP NetWeaver Process Integration
- CVE-2024-27902Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP applications based on SAPGUI for HTML (WebGUI)SAP_SE SAP NetWeaver AS ABAP applications based on SAPGUI f…
- CVE-2024-27900Missing Authorization check in SAP ABAP PlatformSAP_SE SAP ABAP Platform
- CVE-2024-25644Information Disclosure vulnerability in NetWeaver (WSRM)SAP_SE NetWeaver
- CVE-2024-22133Improper Access Control in SAP Fiori Front End ServerSAP_SE SAP Fiori Front End Server
- CVE-2023-42307Cross Site Scripting (XSS) vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name"
- CVE-2023-42308Cross Site Scripting (XSS) vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbit
- CVE-2023-43279Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application via crafted tcprewri
- CVE-2023-43292Cross Site Scripting vulnerability in My Food Recipe Using PHP with Source Code v.1.0 allows a local attacker to execute arbitrary code via
- CVE-2023-49453Reflected cross-site scripting (XSS) vulnerability in Racktables v0.22.0 and before, allows local attackers to execute arbitrary code and ob
- CVE-2024-24097Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News F
- CVE-2024-24101Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update.
- CVE-2024-26521HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, escalate privileges, and
- CVE-2024-28339An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows atta