Skip to content
OpenAdvisories

Archive

6 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /6 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-27304 Public exploit

    pgx SQL Injection via Protocol Message Size Overflow

    pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple me…

    jackc pgx kots k3s Debian Ubuntu Azure Linux Wolfi Go
  • High 8.0
    CVE-2024-28157 Public exploit

    Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting

    Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs.

    Jenkins Project Jenkins GitBucket Plugin org.jenkins-ci.plugins:gitbucket Web / CMS Maven
  • High 7.3
    CVE-2024-20338 Public exploit

    A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, …

    Cisco Cisco Secure Client Network devices
  • High 7.5
    CVE-2023-49980 Public exploit

    A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories an…

  • Medium 6.5
    CVE-2023-49985 Public exploit

    A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 all…

  • Medium 4.7
    CVE-2023-49971 Public exploit

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scri…

  • High 7.5
    CVE-2023-49979 Public exploit

    A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive file…

  • High 8.8
    CVE-2023-49982 Public exploit

    Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers t…

  • Medium 6.1
    CVE-2023-49973 Public exploit

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scri…

  • High 7.5
    CVE-2023-49981 Public exploit

    A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensit…

  • Medium 6.1
    CVE-2023-49974 Public exploit

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scri…

  • Medium 6.1
    CVE-2023-49984 Public exploit

    A cross-site scripting (XSS) vulnerability in the component /management/settings of School Fees Management System v1.0 …

  • Medium 6.8
    CVE-2023-49983 Public exploit

    A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 all…

  • High 7.2
    CVE-2023-49978 Public exploit

    Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages an…

  • Medium 5.4
    CVE-2023-49976 Public exploit

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scri…

  • Medium 5.4
    CVE-2023-49977 Public exploit

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scri…