Skip to content
OpenAdvisories

Archive

12 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /12 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.8
    CVE-2024-26170 Public exploit

    Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

    Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

    Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows
  • High 7.8
    CVE-2024-26169 Exploited · Ransomware Public exploit

    Windows Error Reporting Service Elevation of Privilege Vulnerability

    Windows Error Reporting Service Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Jun 13, 2024
  • Medium 5.5
    CVE-2024-26160 Public exploit EPSS 11%

    Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

    Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

    Microsoft Windows 11 version 23H2 Windows 11 version 22H2 Windows Server 2022, 23H2 Edition (Server Core installation) Windows
  • Medium 6.3
    CVE-2024-1304 Public exploit

    Multiple Vulnerabilities in Badger Meter's Monitool

    Cross-site scripting vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier. This vulnerability allows a remote attacker to send a specially crafted javascript payload to an authenticated user and partially hijack their browser s…

    Badger Meter Monitool
  • Medium 6.5
    CVE-2024-1303 Public exploit

    Multiple Vulnerabilities in Badger Meter's Monitool

    Incorrectly limiting the path to a restricted directory vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier. This vulnerability allows an authenticated attacker to retrieve any file from the device using the download-file func…

    Badger Meter Monitool
  • High 7.3
    CVE-2024-1302 Public exploit

    Multiple Vulnerabilities in Badger Meter's Monitool

    Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier. A local attacker could change the application's file parameter to a log file obtaining all sensitive information such as database credentials.

    Badger Meter Monitool
  • Critical 9.8
    CVE-2024-1301 Public exploit

    Multiple Vulnerabilities in Badger Meter's Monitool

    SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send a specially crafted SQL query to the server via the j_username parameter and retrieve the information stored in the database.

    Badger Meter Monitool
  • Critical 9.3
    CVE-2023-48788 Exploited · Ransomware Public exploit Scanner template EPSS 98%

    A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS versi…

    Fortinet FortiClientEMS Network devices
    KEV Mar 25, 2024
  • Critical 9.3
    CVE-2023-42789 Public exploit

    A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0…

    Fortinet FortiOS FortiProxy FortiSASE Network devices
  • Critical 9.1
    CVE-2024-22127 Public exploit

    Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)

    SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands…

    SAP SAP NetWeaver AS Java (Administrator Log Viewer plug-in)
  • Medium 4.8
    CVE-2024-26521 Public exploit

    HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, esc…