Skip to content
OpenAdvisories

Archive

16 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /16 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

50 results · Feed

  • Medium 4.3
    CVE-2023-51512

    WordPress Product Table by WBW plugin <= 1.8.6 - Cross Site Request Forgery (CSRF) vulnerability

    Cross Site Request Forgery (CSRF) vulnerability in WBW Product Table by WBW.This issue affects Product Table by WBW: from n/a through 1.8.6.

    WBW Product Table by WBW
  • Medium 5.4
    CVE-2023-51521

    WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.18.

    ExpressTech Systems Quiz And Survey Master
  • Medium 4.3
    CVE-2023-51407

    WordPress Split Test For Elementor plugin <= 1.6.9 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Rocket Elements Split Test For Elementor.This issue affects Split Test For Elementor: from n/a through 1.6.9.

    Rocket Elements Split Test For Elementor
  • Medium 6.5
    CVE-2023-36483

    MAS (a Carrier brand) MASmobile Classic Authorization Bypass

    Authorization bypass can be achieved by session ID prediction in MASmobile Classic Android  version 1.16.18 and earlier and MASmobile Classic iOS version 1.7.24 and earlier which allows remote attackers to retrieve sensitive data  including customer data, sec…

    MAS (a Carrier brand) MAS ASP.Net Services MASmobile Classic
  • High 7.5
    CVE-2024-28640 EPSS 14%

    Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remo…

  • Medium 6.8
    CVE-2024-28070

    A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthe…

  • High 7.5
    CVE-2024-28069

    A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthe…

  • Critical 9.8
    CVE-2024-28639

    Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote…

  • Medium 6.1
    CVE-2024-24156

    Cross Site Scripting (XSS) vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, …

  • Medium 5.5
    CVE-2024-22513 Public exploit

    Improper Privilege Management in djangorestframework-simplejwt

    djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the for_user method.

    djangorestframework-simplejwt python-djangorestframework-simplejwt python-djangorestframework-simplejwt Debian Ubuntu PyPI