Skip to content
OpenAdvisories

Archive

1 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /1 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

58 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-52555

    mongo-express Cross-site Request Forgery vulnerability

    In mongo-express 1.0.2, /admin allows CSRF, as demonstrated by deletion of a Collection.

    mongo-express npm
  • Medium 6.1
    CVE-2023-49539 Public exploit

    Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/inde…

  • Medium 6.1
    CVE-2023-49540 Public exploit

    Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/inde…

  • Medium 4.9
    CVE-2023-49544 Public exploit

    A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unau…

  • Medium 6.1
    CVE-2024-24511

    Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title co…

  • Medium 6.1
    CVE-2024-24512

    Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle…

  • Medium 6.1
    CVE-2024-27743 Public exploit

    Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code…

  • Medium 6.5
    CVE-2024-27567

    LBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow via the vpn_client_ip parameter in the config_vpn_p…

  • Medium 6.5
    CVE-2024-27569

    LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the init_nvram functi…

  • Medium 6.1
    CVE-2024-27734

    A Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows an attacker to execute arbitrary code via a crafted scri…

  • Medium 6.1
    CVE-2024-27744 Public exploit

    Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code…

  • Medium 6.1
    CVE-2024-27558

    Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting (XSS) within the blog title of the settings.

  • Medium 6.5
    CVE-2024-27499

    Bagist Cross-site Scripting vulnerability

    Bagisto v1.5.1 is vulnerable for Cross site scripting(XSS) via png file upload vulnerability in product review option.

    bagisto/bagisto Packagist
  • Medium 6.3
    CVE-2024-27559

    Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /save_settings…

  • Medium 6.5
    CVE-2024-27568

    LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apn_name_3g parameter in the setupEC20Apn fu…

  • Medium 5.4
    CVE-2024-25434

    A cross-site scripting (XSS) vulnerability in Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML vi…

  • Medium 6.1
    CVE-2024-25438

    A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitra…

  • Medium 6.1
    CVE-2024-25436

    A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitra…