Skip to content
OpenAdvisories

Archive

17 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /17 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.8
    CVE-2024-23139

    ActionScript Byte Code “ABC” Vulnerability in the Autodesk FBX Review software

    A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the curren…

    Autodesk FBX Review
  • High 7.8
    CVE-2024-23138

    Stack-based Overflow Vulnerability in the TrueViewTM Desktop Software

    A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the curr…

    Autodesk AutoCAD AutoCAD Mechanical AutoCAD Plant 3D
  • High 7.3
    CVE-2024-2569

    SourceCodester Employee Task Management System admin-manage-user.php redirect

    A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin-manage-user.php. The manipulation leads to execution after redirect. The attack…

    SourceCodester Employee Task Management System
  • High 7.1
    CVE-2024-27961

    WordPress AntiSpam for Contact Form 7 plugin <= 0.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codekraft AntiSpam for Contact Form 7 allows Reflected XSS.This issue affects AntiSpam for Contact Form 7: from n/a through 0.6.0.

    Codekraft AntiSpam for Contact Form 7
  • High 7.1
    CVE-2024-27960

    WordPress Email Subscription Popup plugin <= 1.2.20 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Email Subscription Popup allows Stored XSS.This issue affects Email Subscription Popup: from n/a through 1.2.20.

    I Thirteen Web Solution Email Subscription Popup
  • High 7.1
    CVE-2024-27959

    WordPress APIExperts Square for WooCommerce plugin <= 4.2.9 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpexpertsio WC Shop Sync – Integrate Square and WooCommerce for Seamless Shop Management allows Reflected XSS.This issue affects WC Shop Sync – Integrate Squ…

    WPExperts.io WC Shop Sync – Integrate Square and WooCommerce for Seamless Shop Management Web / CMS
  • High 7.1
    CVE-2024-27958

    WordPress Visualizer plugin <= 3.10.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualizer allows Reflected XSS.This issue affects Visualizer: from n/a through 3.10.5.

    themeisle Visualizer
  • High 7.3
    CVE-2024-2566

    Fujian Kelixin Communication Command and Dispatch Platform get_extension_yl.php sql injection

    A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240313. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file api/client/get_extension_yl.php. The manipulation …

    Fujian Kelixin Communication Command and Dispatch Platform
  • High 8.8
    CVE-2024-2558

    Tenda AC18 execCommand formexeCommand stack-based overflow

    A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may …

    Tenda AC18
  • High 8.8
    CVE-2024-2547

    Tenda AC18 R7WebsSecurityHandler stack-based overflow

    A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function R7WebsSecurityHandler. The manipulation of the argument password leads to stack-based buffer overflow. The attack may be launched remotely. …

    Tenda AC18
  • High 8.8
    CVE-2024-2546

    Tenda AC18 fromSetWirelessRepeat stack-based overflow

    A vulnerability has been found in Tenda AC18 15.13.07.09 and classified as critical. Affected by this vulnerability is the function fromSetWirelessRepeat. The manipulation of the argument wpapsk_crypto5g leads to stack-based buffer overflow. The attack can be…

    Tenda AC18