Skip to content
OpenAdvisories

Archive

12 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /12 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 2.3
    CVE-2024-28238

    Session Token in URL in directus

    Directus is a real-time API and App dashboard for managing SQL database content. When reaching the /files page, a JWT is passed via GET request. Inclusion of session tokens in URLs poses a security risk as URLs are often logged in various places (e.g., web se…

    directus directus directus npm
  • Low 3.5
    CVE-2024-28113

    Open redirection using the return_url parameter in Peering Manager

    Peering Manager is a BGP session management tool. In Peering Manager <=1.8.2, it is possible to redirect users to an arbitrary page using a crafted url. As a result users can be redirected to an unexpected location. This issue has been addressed in version 1.…

    peering-manager peering-manager
  • Low 3.7
    CVE-2024-1410

    Unbounded storage of information related to connection ID retirement, in quiche

    Cloudflare quiche was discovered to be vulnerable to unbounded storage of information related to connection ID retirement, which could lead to excessive resource consumption. Each QUIC connection possesses a set of connection Identifiers (IDs); see RFC 9000 S…

    Cloudflare quiche quiche crates.io
  • Low 3.9
    CVE-2024-21761

    An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports ma…

    Fortinet FortiPortal Network devices
  • Low 2.4
    CVE-2024-2391

    EVE-NG Lab cross site scripting

    A vulnerability was found in EVE-NG 5.0.1-13 and classified as problematic. Affected by this issue is some unknown functionality of the component Lab Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has…