Skip to content
OpenAdvisories

Archive

5 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /5 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.9
    CVE-2024-1898

    Improper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier allows a low privileg…

    Devolutions Server
  • Low 2.2
    CVE-2024-2179

    Concrete CMS version 9 before 9.2.7 is vulnerable to Stored XSS via the Name field of a Group type

    Concrete CMS version 9 before 9.2.7 is vulnerable to Stored XSS via the Name field of a Group type since there is insufficient validation of administrator provided data for that field. A rogue administrator could inject malicious code into the Name field whic…

    Concrete CMS Concrete CMS concrete5/concrete5 Packagist
  • Low 3.7
    CVE-2024-25616

    Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in …

    Hewlett Packard Enterprise (HPE) ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
  • Low 2.4
    CVE-2024-23256

    A logic issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4. A user's l…

    Apple iOS and iPadOS iOS
  • Low 3.8
    CVE-2023-42419

    Improper Management of Cryptographic Keys in the Maintenance Server in QCOW Air-Gapped Distribution (China Edition)

    Maintenance Server, in Cybellum's QCOW air-gapped distribution (China Edition), versions 2.15.5 through 2.27, was compiled with a hard-coded private cryptographic key. An attacker with administrative privileges & access to the air-gapped server could potentia…

    Cybellum Maintenance Server
  • Low 3.3
    CVE-2024-20836

    Out of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local at…

    Samsung Mobile Samsung Mobile Devices
  • Low 3.3
    CVE-2024-20834

    The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to …

    Samsung Mobile Samsung Mobile Devices