CVEs published March 17, 2024
31 CVEs were published on March 17, 2024: 1 critical, 11 high.
- Published
- 31
- Critical
- 1
- High
- 11
- Medium
- 16
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Tenda AC18
- 5
- PandaXGO PandaX
- 4
- SourceCodester Employee Task Management System
- 4
- 74CMS
- 1
- Autodesk AutoCAD · Autodesk Civil +2
- 1
- Autodesk FBX Review
- 1
- Benjamin Rojas WP Editor
- 1
- Codekraft AntiSpam for Contact Form
- 1
- Fujian Kelixin Communication Command and Dispatch Platform
- 1
- heyewei JFinalCMS
- 1
Critical 1
High 11
- CVE-2024-23139ActionScript Byte Code “ABC” Vulnerability in the Autodesk FBX Review softwareAutodesk FBX Review
- CVE-2024-23138Stack-based Overflow Vulnerability in the TrueViewTM Desktop SoftwareAutodesk AutoCAD · Autodesk Civil +2
- CVE-2024-2569SourceCodester Employee Task Management System admin-manage-user.php redirectSourceCodester Employee Task Management System
- CVE-2024-27961WordPress AntiSpam for Contact Form 7 plugin <= 0.6.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCodekraft AntiSpam for Contact Form
- CVE-2024-27960WordPress Email Subscription Popup plugin <= 1.2.20 - Cross Site Scripting (XSS) vulnerabilityI Thirteen Web Solution Email Subscription Popup
- CVE-2024-27959WordPress APIExperts Square for WooCommerce plugin <= 4.2.9 - Cross Site Scripting (XSS) vulnerabilityWpexpertsio WC Shop Sync – Integrate Square and WooCommerce…
- CVE-2024-27958WordPress Visualizer plugin <= 3.10.5 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeisle Visualizer
- CVE-2024-2566Fujian Kelixin Communication Command and Dispatch Platform get_extension_yl.php sql injectionFujian Kelixin Communication Command and Dispatch Platform
- CVE-2024-2558Tenda AC18 execCommand formexeCommand stack-based overflowTenda AC18
- CVE-2024-2547Tenda AC18 R7WebsSecurityHandler stack-based overflowTenda AC18
- CVE-2024-2546Tenda AC18 fromSetWirelessRepeat stack-based overflowTenda AC18
Medium, low and unrated 19
- CVE-2024-2568heyewei JFinalCMS Custom Data Page sql injectionheyewei JFinalCMS
- CVE-2024-2567jurecapuder AndroidWeatherApp Backup File androidmanifest.xml backupjurecapuder AndroidWeatherApp
- CVE-2024-25903WordPress Frontend File Manager Plugin plugin <= 22.7 - Sensitive Data Exposure vulnerabilityN-Media Frontend File Manager
- CVE-2024-25591WordPress WP Editor plugin <=1.2.7 - Sensitive Data Exposure vulnerabilityBenjamin Rojas WP Editor
- CVE-2024-24867WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerabilityOsamaesh WP Visitor Statistics
- CVE-2024-25933WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerabilityPepro Dev. Group PeproDev Ultimate Invoice
- CVE-2024-2565PandaXGO PandaX File Extension upload.go unrestricted uploadPandaXGO PandaX
- CVE-2024-2564PandaXGO PandaX user.go ExportUser path traversalPandaXGO PandaX
- CVE-2024-2563PandaXGO PandaX upload.go DeleteImage path traversalPandaXGO PandaX
- CVE-2024-2562PandaXGO PandaX role_menu.go InsertRole sql injectionPandaXGO PandaX
- CVE-2024-256174CMS Company Logo Index.php#sendCompanyLogo unrestricted upload74CMS
- CVE-2024-2560Tenda AC18 SysToolRestoreSet fromSysToolRestoreSet cross-site request forgeryTenda AC18
- CVE-2024-2559Tenda AC18 SysToolReboot fromSysToolReboot cross-site request forgeryTenda AC18
- CVE-2024-2557kishor-23 Food Waste Management System admin.php improper authorizationkishor-23 Food Waste Management System
- CVE-2024-2556SourceCodester Employee Task Management System attendance-info.php sql injectionSourceCodester Employee Task Management System
- CVE-2024-2555SourceCodester Employee Task Management System update-admin.php sql injectionSourceCodester Employee Task Management System
- CVE-2024-2554SourceCodester Employee Task Management System update-employee.php sql injectionSourceCodester Employee Task Management System
- CVE-2024-2553SourceCodester Product Review Rating System Rate Product cross site scriptingSourceCodester Product Review Rating System
- CVE-2024-2535MAGESH-K21 Online-College-Event-Hall-Reservation-System users.php cross site scriptingMAGESH-K21 Online-College-Event-Hall-Reservation-System