CVEs published March 18, 2024
194 CVEs were published on March 18, 2024: 13 critical, 72 high. 1 is now in CISA KEV.
- Published
- 194
- Critical
- 13
- High
- 72
- Medium
- 98
- Low
- 4
- Unrated
- 7
- Now in CISA KEV
- 1
- Fix available
- 49
Most affected products
- Adobe Experience Manager
- 44
- Linux
- 21
- Amssplus AMSS++
- 16
- SourceCodester Employee Task Management System
- 8
- Unitronics Unistream Unilogic
- 8
- glpi-project glpi
- 6
- Adobe Animate
- 4
- Adobe Bridge
- 4
- BMC Control-M
- 3
- cilium · github.com/cilium/cilium
- 3
Critical 13
- CVE-2024-24578RaspberryMatic Unauthenticated Remote Code Execution vulnerability through HMServer File Upload jens-maus RaspberryMatic
- CVE-2024-21652Argo CD vulnerable to Bypassing of Brute Force Protection via Application Crash and In-Memory Data Lossargoproj argo-cd · github.com/argoproj/argo-cd/v2
- CVE-2024-2051 CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover and unauthorized Schneider Electric Easergy T200 (Modbus) Models: T200I,… +1
- CVE-2024-2599Unrestricted Upload of File with Dangerous Type vulnerability in AMSS++Amssplus AMSS++
- CVE-2024-27768Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'Unitronics Unistream Unilogic
- CVE-2024-27767Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper AuthenticationUnitronics Unistream Unilogic
- CVE-2024-28125FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands.unclebob FitNesse · org.fitnesse:fitnesse
- CVE-2018-25099In the CryptX module before 0.062 for Perl, gcm_decrypt_verify() and chacha20poly1305_decrypt_verify() do not verify the tag.
- CVE-2021-47155The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situati
- CVE-2021-47157The Kossy module before 0.60 for Perl allows JSON hijacking because of X-Requested-With mishandling.
- CVE-2022-47036Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an
- CVE-2024-28537Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function.
- CVE-2024-29151Rocket.Chat.Audit through 5ad78e8 depends on filecachetools, which does not exist in PyPI.
High 72
- CVE-2024-28865django-wiki denial of service via regular expressiondjango-wiki · wiki
- CVE-2024-28855ZITADEL vulnerable to improper HTML sanitizationzitadel · github.com/zitadel/zitadel
- CVE-2024-28248Cilium intermittent HTTP policy bypasscilium · github.com/cilium/cilium
- CVE-2024-23333LAM vulnerable to Authenticated Remote Code ExecutionLDAPAccountManager lam
- CVE-2024-0858Innovs HR < 1.0.3.7.1 - Employee Creation via CSRFInnovs HR
- CVE-2024-0779Enjoy Social Feed <= 6.2.2 - Unauthenticated Arbitrary Instagram Account UnlinkingEnjoy Social Feed plugin for WordPress website
- CVE-2024-0780Enjoy Social Feed <= 6.2.2 - Subscriber+ Plugin Database ResetEnjoy Social Feed plugin for WordPress website
- CVE-2023-41334astropy vulnerable to RCE in TranformGraph().to_dot_graph functionastropy
- CVE-2024-21662Argo CD vulnerable to Bypassing of Rate Limit and Brute Force Protection Using Cache Overflowargoproj argo-cd · github.com/argoproj/argo-cd/v2
- CVE-2024-21661Argo CD Denial of Service (DoS) Vulnerability Due to Unsafe Array Modification in Multi-threaded Environmentargoproj argo-cd · github.com/argoproj/argo-cd +1
- CVE-2024-20761Adobe Animate 2024 BMP File Parsing Out-Of-Bound Write Remote Code execution VulnerabilityAdobe Animate
- CVE-2024-20754Lightroom Desktop | Untrusted Search Path (CWE-426)Adobe Lightroom Desktop
- CVE-2024-27096SQL Injection in through the search engineglpi-project glpi
- CVE-2024-2229 CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution when a malicious project file is loaSchneider Electric EcoStruxure Power Design - Ecodial
- CVE-2024-2052 CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated files and logs exfiltratSchneider Electric Easergy T200 (Modbus) Models: T200I,… +1
- CVE-2024-2050 CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an attacker injects Schneider Electric Easergy T200 (Modbus) Models: T200I,… +1
- CVE-2024-20755Adobe Bridge PDF Parsing Heap Memory Corruption Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2024-20752ZDI-CAN-22653: Adobe Bridge PS File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2024-20756Adobe Bridge 2024 Out of Bound Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2024-2390Local Privilege Escalation Tenable Nessus Agent · Tenable Nessus
- CVE-2024-20746Adobe Premiere Pro Out-of-bounds Write Arbitrary code executionAdobe Premiere Pro
- CVE-2024-20745ZDI-CAN-22671: Adobe Premiere Pro AVI File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe Premiere Pro
- CVE-2024-1753Buildah: buildah: container escape via improper bind mount validationbuildah · Red Hat Enterprise Linux +4
- CVE-2024-22257In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, vSpring Security · org.springframework.security:spring-secur…
- CVE-2024-2598Cross-Site Scripting (XSS) in AMSS++Amssplus AMSS++
- CVE-2024-2597Cross-Site Scripting (XSS) in AMSS++Amssplus AMSS++
- CVE-2024-2596Cross-Site Scripting (XSS) in AMSS++Amssplus AMSS++
- CVE-2024-2595Cross-Site Scripting (XSS) in AMSS++Amssplus AMSS++
- CVE-2024-2594Cross-Site Scripting (XSS) in AMSS++Amssplus AMSS++
- CVE-2024-2593Cross-Site Scripting (XSS) in AMSS++Amssplus AMSS++
- CVE-2024-2592SQL injection vulnerability in AMSS++Amssplus AMSS++
- CVE-2024-2591SQL injection vulnerability in AMSS++Amssplus AMSS++
- CVE-2024-2590SQL injection vulnerability in AMSS++Amssplus AMSS++
- CVE-2024-2589SQL injection vulnerability in AMSS++Amssplus AMSS++
- CVE-2024-2588SQL injection vulnerability in AMSS++Amssplus AMSS++
- CVE-2024-2587SQL injection vulnerability in AMSS++Amssplus AMSS++
- CVE-2024-2586SQL injection vulnerability in AMSS++Amssplus AMSS++
- CVE-2024-2585SQL injection vulnerability in AMSS++Amssplus AMSS++
- CVE-2024-2584SQL injection vulnerability in AMSS++Amssplus AMSS++
- CVE-2024-27774Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded PasswordUnitronics Unistream Unilogic
- CVE-2024-27773Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted SourceUnitronics Unistream Unilogic
- CVE-2024-27772Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-78: 'OS Command Injection'Unitronics Unistream Unilogic
- CVE-2024-27771Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'Unitronics Unistream Unilogic
- CVE-2024-27770Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-23: Relative Path TraversalUnitronics Unistream Unilogic
- CVE-2024-27769Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-200: Exposure of Sensitive Information to an Unauthorized ActorUnitronics Unistream Unilogic
- CVE-2024-2002Libdwarf: crashes randomly on fuzzed objectlibdwarf · Red Hat Enterprise Linux
- CVE-2024-20767ColdFusion | Improper Access Control (CWE-284)Adobe ColdFusion
- CVE-2024-1013Unixodbc: out of bounds stack write due to pointer-to-integer types conversionRed Hat Enterprise Linux
- CVE-2024-26641ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()Linux
- CVE-2024-26640tcp: add sanity checks to rx zerocopyLinux
- CVE-2024-26637wifi: ath11k: rely on mac80211 debugfs handling for vifLinux
- CVE-2023-52616crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_initLinux
- CVE-2023-52614PM / devfreq: Fix buffer overflow in trans_stat_showLinux
- CVE-2024-26632block: Fix iterating over an empty bio with bio_for_each_folio_allLinux
- CVE-2024-26631ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_workLinux
- CVE-2023-52612crypto: scomp - fix req->dst buffer overflowLinux
- CVE-2023-52610net/sched: act_ct: fix skb leak and crash on ooo fragsLinux
- CVE-2024-2581Tenda AC10 SetStaticRouteCfg fromSetRouteStatic stack-based overflowTenda AC10
- CVE-2024-2577SourceCodester Employee Task Management System update-employee.php authorizationSourceCodester Employee Task Management System
- CVE-2024-2576SourceCodester Employee Task Management System update-admin.php authorizationSourceCodester Employee Task Management System
- CVE-2024-2575SourceCodester Employee Task Management System task-details.php authorizationSourceCodester Employee Task Management System
- CVE-2024-2574SourceCodester Employee Task Management System edit-task.php authorizationSourceCodester Employee Task Management System
- CVE-2024-2573SourceCodester Employee Task Management System task-info.php redirectSourceCodester Employee Task Management System
- CVE-2024-2572SourceCodester Employee Task Management System task-details.php redirectSourceCodester Employee Task Management System
- CVE-2023-40747Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver.A.K.I Software pmman.exe
- CVE-2024-2571SourceCodester Employee Task Management System manage-admin.php redirectSourceCodester Employee Task Management System
- CVE-2024-2570SourceCodester Employee Task Management System edit-task.php redirectSourceCodester Employee Task Management System
- CVE-2022-47037Siklu TG Terragraph devices before 2.1.1 allow attackers to discover valid, randomly generated credentials via GetCredentials.
- CVE-2023-52159A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger a denial of service (
- CVE-2024-24230Komm.One CMS 10.4.2.14 has a Server-Side Template Injection (SSTI) vulnerability via the Velocity template engine.
- CVE-2024-28054Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some ma
- CVE-2024-29154danielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of innerHTML mishandling, such as in htmlToPl
Medium, low and unrated 109
- CVE-2024-28864[TagAwareCipher] - Decryption Failure (Regex Match)IlicMiljan Secure-Props · ilicmiljan/secure-props
- CVE-2024-28250Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policiescilium · github.com/cilium/cilium
- CVE-2024-28249Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policiescilium · github.com/cilium/cilium
- CVE-2024-28237OctoPrint XSS via the "Snapshot Test" feature in Classic Webcam plugin settingsOctoPrint
- CVE-2024-2604SourceCodester File Manager App update-file.php unrestricted uploadSourceCodester File Manager App
- CVE-2024-22412ClickHouse's Role-based Access Control is bypassed when query caching is enabled.ClickHouse
- CVE-2023-7236Backup Bolt <= 1.3.0 - Sensitive Data ExposureBackup Bolt
- CVE-2024-0951Advanced Social Feeds Widget & Shortcode <= 1.7 - Admin+ Stored XSSAdvanced Social Feeds Widget & Shortcode
- CVE-2024-0711Buttons Shortcode and Widget <= 1.16 - Stored XSS via shortcodeButtons Shortcode and Widget
- CVE-2023-7085Scalable Vector Graphics (SVG) <= 3.4 - Author+ Stored XSS via SVGScalable Vector Graphics
- CVE-2023-6821Error Log Viewer < 1.1.3 - Directory Listing to Sensitive Data ExposureError Log Viewer by BestWebSoft
- CVE-2024-0973Widget for Social Page Feeds < 6.4 - Admin+ Stored XSSWidget for Social Page Feeds
- CVE-2024-0820Jobs for WordPress < 2.7.4 - Contributor+ Stored XSSJobs for WordPress
- CVE-2024-0719Tabs Shortcode and Widget <= 1.17 - Contributor+ Stored Cross-Site ScriptingTabs Shortcode and Widget
- CVE-2024-0365Fancy Product Designer < 6.1.5 - Admin+ SQL InjectionFancy Product Designer
- CVE-2024-26065Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26106Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26063Adobe Experience Manager | Information Exposure (CWE-200)Adobe Experience Manager
- CVE-2024-26080Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26062Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26035Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26033Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-20760Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26064Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26120Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26069Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26061Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26104Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26103Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26051Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26101Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26096Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26056Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26034Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26124Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26119Adobe Experience Manager | Information Exposure (CWE-200)Adobe Experience Manager
- CVE-2024-26031Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26059Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26073Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26030Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26102Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26044Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26038Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26050Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26067Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26040Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26094Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26042Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26028Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26118Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26032Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26105Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26052Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26107Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26045Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-20768Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26125Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26041Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-26043Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-20762Adobe Animate MP3 File parsing unitialized heap memory corruptionAdobe Animate
- CVE-2024-20764Adobe Animate 2024 SWF File parsing memory corruptionAdobe Animate
- CVE-2024-20763Adobe Animate 2024 GIF file parsing memory corruptionAdobe Animate
- CVE-2024-27914Reflected Cross-Site Scripting (XSS) in search engine when debug mode is enabled in GLPIglpi-project glpi
- CVE-2024-27104Stored XSS in dashboards in GLPIglpi-project glpi
- CVE-2024-27098Blind Server-Side Request Forgery (SSRF) using Arbitrary Object Instantiation in GLPIglpi-project glpi
- CVE-2024-20757Bridge 2024 TIF File Parsing Out-Of-Bound Read Information Disclosure VulnerabilityAdobe Bridge
- CVE-2024-27930Sensitive fields access through dropdowns in GLPIglpi-project glpi
- CVE-2024-27937glpi Users emails enumerationglpi-project glpi
- CVE-2024-1658Grid Shortcodes < 1.1.1 - Contributor+ Stored XSSGrid Shortcodes
- CVE-2024-1333Responsive Pricing Table < 5.1.11 - Author+ Stored XSSResponsive Pricing Table
- CVE-2024-1331Team Members < 5.3.2 - Author+ Stored XSSTeam Members
- CVE-2024-2496Libvirt: null pointer dereference in udevconnectlistallinterfaces()libvirt · Red Hat Enterprise Linux
- CVE-2023-7250Iperf3: possible denial of serviceRed Hat Enterprise Linux
- CVE-2023-52619pstore/ram: Fix crash when setting number of cpus to an odd numberLinux
- CVE-2023-52618block/rnbd-srv: Check for unlikely string overflowLinux
- CVE-2023-52617PCI: switchtec: Fix stdev_release() crash after surprise hot removeLinux
- CVE-2024-26638nbd: always initialize struct msghdr completelyLinux
- CVE-2024-26636llc: make llc_ui_sendmsg() more robust against bonding changesLinux
- CVE-2024-26635llc: Drop support for ETH_P_TR_802_2.Linux
- CVE-2024-26634net: fix removing a namespace with conflicting altnamesLinux
- CVE-2023-52615hwrng: core - Fix page fault dead lock on mmap-ed hwrngLinux
- CVE-2024-26633ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()Linux
- CVE-2023-52613drivers/thermal/loongson2_thermal: Fix incorrect PTR_ERR() judgmentLinux
- CVE-2023-52611wifi: rtw88: sdio: Honor the host max_req_size in the RX pathLinux
- CVE-2023-52609binder: fix race between mmput() and do_exit()Linux
- CVE-2024-1606HTML injection in BMC Control-MBMC Control-M
- CVE-2024-1605DLL side-loading in BMC Control-MBMC Control-M
- CVE-2024-1604Incorrect authorization in BMC Control-MBMC Control-M
- CVE-2024-28039Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated unclebob FitNesse
- CVE-2024-22475Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIBROTHER INDUSTRIES Multiple printers and scanners · FUJI… +2
- CVE-2024-21824Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER IBROTHER INDUSTRIES Multiple printers and scanners · FUJI… +2
- CVE-2024-27974Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remFUJIFILM Business Inovation DocuPrint P450 d · FUJIFILM… +22
- CVE-2024-28128Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execuunclebob FitNesse · org.fitnesse:fitnesse
- CVE-2024-23604Cross-site scripting vulnerability exists in FitNesse all releases, which may allow a remote unauthenticated attacker to execute an arbitrarunclebob FitNesse
- CVE-2024-28745Improper export of Android application components issue exists in 'ABEMA' App for Android prior to 10.65.0 allowing another app installed onAbemaTV 'ABEMA' App for Android
- CVE-2023-40160Directory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe) included in A.K.I Software's PMailServer/PMailServer2 producA.K.I Software pmmls.exe
- CVE-2023-39933Insufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I Software's PMailServer/PMailServer2 productA.K.I Software pmc.exe
- CVE-2023-39223Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products.A.K.I Software pmc.exe · A.K.I Software pmam.exe +1
- CVE-2021-47154The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address stri
- CVE-2021-47156The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP address string, which (
- CVE-2024-24539FusionPBX before 5.2.0 does not validate a session.
- CVE-2024-25654Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with local access to the U
- CVE-2024-25655Insecure storage of LDAP passwords in the authentication functionality of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow
- CVE-2024-25656Improper input validation in AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS can result in unauthenticated CPE (Customer Premis
- CVE-2024-25657An open redirect in the Login/Logout functionality of web management in AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS could a
- CVE-2024-27757flusity CMS through 2.45 allows tools/addons_model.php Gallery Name XSS.
- CVE-2024-28547Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function.
- CVE-2024-28550Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the filePath parameter of formExpandDlnaFile function.
- CVE-2024-29156In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL language fails to sayaql