Skip to content
OpenAdvisories

Archive

19 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /19 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

50 results · Clear filters · Feed

  • High 7.3
    CVE-2024-2647

    Netentsec NS-ASG Application Security Gateway singlelogin.php sql injection

    A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown processing of the file /admin/singlelogin.php. The manipulation of the argument loginId leads to sql inject…

    Netentsec NS-ASG Application Security Gateway
  • High 7.3
    CVE-2024-2642

    Ruijie RG-NBS2009G-P EXCU_SHELL command injection

    A vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /EXCU_SHELL. The manipulation of the argument Command1 leads to command injection. The a…

    Ruijie RG-NBS2009G-P
  • High 7.5
    CVE-2024-2169 Public exploit

    Implementations of UDP application protocols are susceptible to network loops and denial of service

    Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.

    Microsoft MikroTik dproxy-nexgen WDS Network devices
  • High 8.3
    CVE-2024-21677

    This High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence Data Center. This Path T…

    Atlassian Confluence Data Center Web / CMS
  • High 7.8
    CVE-2023-42920

    Claris International has fixed a dylib hijacking vulnerability in the FileMaker Pro.app and Claris Pro.app versions on …

    Claris FileMaker Pro
  • High 7.1
    CVE-2024-27998

    WordPress Barcode Scanner and Inventory manager plugin <= 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue …

    Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager
  • High 7.1
    CVE-2024-29091

    WordPress WP Armour plugin <= 2.1.13 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dnesscarkey WP Armour – Honeypot Anti Spam allows Reflected XSS.This issue affects WP Armour – Honeypot Anti Spam: from n/a through 2.1.13.

    Dnesscarkey WP Armour – Honeypot Anti Spam
  • High 7.1
    CVE-2024-29092

    WordPress Permalink Manager Lite plugin <= 2.4.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maciej Bis Permalink Manager Lite allows Reflected XSS.This issue affects Permalink Manager Lite: from n/a through 2.4.3.

    Maciej Bis Permalink Manager Lite
  • High 7.1
    CVE-2024-29094

    WordPress HT Easy GA4 plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Easy GA4 ( Google Analytics 4 ) allows Stored XSS.This issue affects HT Easy GA4 ( Google Analytics 4 ): from n/a through 1.1.7.

    HasThemes HT Easy GA4 ( Google Analytics 4 )
  • High 7.6
    CVE-2023-44092

    OS Command Injection

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Pandora FMS on all allows OS Command Injection. This vulnerability allowed to create a reverse shell and execute commands in the OS. This issue affects…

    Pandora FMS Pandora FMS
  • High 7.5
    CVE-2023-44091

    Unauth Time-Based SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. This ulnerability allowed SQL injections to be made even if authentication failed.This issue affects Pandora FMS: fr…

    Pandora FMS Pandora FMS
  • High 7.5
    CVE-2024-2442

    Path Traversal vulnerability in Franklin Fueling System EVO 550/5000

    Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker to access sensitive files on the system.

    Franklin Fueling System EVO 5000 EVO 550
  • High 7.1
    CVE-2024-29099

    WordPress Evergreen Content Poster plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Evergreen Content Poster allows Reflected XSS.This issue affects Evergreen Content Poster: from n/a through 1.4.1.

    Evergreen Content Poster Evergreen Content Poster
  • High 7.1
    CVE-2024-29102

    WordPress Extensions For CF7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes Extensions For CF7 allows Stored XSS.This issue affects Extensions For CF7: from n/a through 3.0.6.

    HasThemes Extensions For CF7
  • High 7.8
    CVE-2023-6597

    An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.1…

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.1
    CVE-2024-29103

    WordPress Database for Contact Form 7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NinjaTeam Database for Contact Form 7 allows Stored XSS.This issue affects Database for Contact Form 7: from n/a through 3.0.6.

    Ninja Team Database for Contact Form 7
  • High 7.1
    CVE-2024-29110

    WordPress Tablesome plugin <= 1.0.27 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pauple Table & Contact Form 7 Database – Tablesome allows Reflected XSS.This issue affects Table & Contact Form 7 Database – Tablesome: from n/a through 1.0.…

    Pauple Table & Contact Form 7 Database – Tablesome
  • High 7.1
    CVE-2024-29113

    WordPress RegistrationMagic plugin <= 5.2.5.9 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss RegistrationMagic allows Reflected XSS.This issue affects RegistrationMagic: from n/a through 5.2.5.9.

    Metagauss RegistrationMagic
  • High 7.1
    CVE-2024-29116

    WordPress WooThumbs for WooCommerce by Iconic plugin <= 5.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IconicWP WooThumbs for WooCommerce by Iconic allows Reflected XSS.This issue affects WooThumbs for WooCommerce by Iconic: from n/a through 5.5.3.

    IconicWP WooThumbs for WooCommerce by Iconic Web / CMS
  • High 7.1
    CVE-2024-29117

    WordPress Contact Forms by Cimatti plugin <= 1.7.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Stored XSS.This issue affects Contact Forms by Cimatti: from n/a through 1.7.0.

    Cimatti Consulting Contact Forms by Cimatti
  • High 7.1
    CVE-2024-29121

    WordPress WooCommerce License Manager plugin <= 5.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firassaidi WooCommerce License Manager allows Reflected XSS.This issue affects WooCommerce License Manager: from n/a through 5.3.1.

    firassaidi WooCommerce License Manager Web / CMS
  • High 7.1
    CVE-2024-29123

    WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.6.

    Yannick Lefebvre Link Library
  • High 7.1
    CVE-2024-29125

    WordPress Coupon Affiliates plugin <= 5.12.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage.This issue affects Coupon Affiliates: from n/a through <= 5.12.7.

    Elliot Sowersby / RelyWP Coupon Affiliates
  • High 7.1
    CVE-2024-29126

    WordPress Specific Content For Mobile plugin <= 0.1.9.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Mortellaro Specific Content For Mobile – Customize the mobile version without redirections allows Reflected XSS.This issue affects Specific Content For …

    Jose Mortellaro Specific Content For Mobile – Customize the mobile version without redirections
  • High 7.1
    CVE-2024-29127

    WordPress Advanced Access Manager plugin <= 6.9.20 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager allows Reflected XSS.This issue affects Advanced Access Manager: from n/a through 6.9.20.

    AAM Advanced Access Manager
  • High 7.1
    CVE-2024-29128

    WordPress POST SMTP Mailer plugin <= 2.8.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Post SMTP POST SMTP allows Reflected XSS.This issue affects POST SMTP: from n/a through 2.8.6.

    Post SMTP POST SMTP
  • High 7.1
    CVE-2024-29129

    WordPress OxyExtras plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPLIT Pty Ltd OxyExtras allows Reflected XSS.This issue affects OxyExtras: from n/a through 1.4.4.

    WPLIT Pty OxyExtras
  • High 7.1
    CVE-2024-29130

    WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal & Stripe Add-on: from n/a through 2.0.

    Scott Paterson Contact Form 7 – PayPal & Stripe Add-on
  • High 8.5
    CVE-2024-29136

    WordPress Tourfic plugin <= 2.11.17 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.17.

    themefic Tourfic
  • High 7.1
    CVE-2024-29137 Scanner template

    WordPress Tourfic plugin <= 2.11.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.7.

    themefic Tourfic
  • High 7.1
    CVE-2024-29138 Scanner template

    WordPress Restrict User Access plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joachim Jensen Restrict User Access – Membership Plugin with Force restrict-user-access.This issue affects Restrict User Access – Membership Plugin with Forc…

    Joachim Jensen Restrict User Access – Membership Plugin with Force
  • High 7.1
    CVE-2024-29139

    WordPress MyCurator Content Curation plugin <= 3.76 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark Tilly MyCurator Content Curation allows Reflected XSS.This issue affects MyCurator Content Curation: from n/a through 3.76.

    Mark Tilly MyCurator Content Curation
  • High 7.1
    CVE-2024-29142

    WordPress Better Search plugin <= 3.3.0 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebberZone Better Search – Relevant search results for WordPress allows Stored XSS.This issue affects Better Search – Relevant search results for WordPress: …

    WebberZone Better Search – Relevant search results for WordPress Web / CMS
  • High 7.3
    CVE-2024-2635

    Multiple vulnerabilities on Meta4 HR from Cegid

    The configuration pages available are not intended to be placed on an Internet facing web server, as they expose file paths to the client, who can be an attacker. Instead of rewriting these pages to avoid this vulnerability, they will be dismissed from future…

    Cegid Meta4 HR
  • High 8.8
    CVE-2024-2614

    Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  • High 7.5
    CVE-2024-2613

    Data was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption …

    Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  • High 8.1
    CVE-2024-2612

    If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or p…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  • High 8.4
    CVE-2024-2608

    `AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienc…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  • High 8.1
    CVE-2024-2607

    Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue on…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  • High 7.5
    CVE-2024-2632

    Information Exposure Vulnerability on Meta4 HR

    A Information Exposure Vulnerability has been found on Meta4 HR. This vulnerability allows an attacker to obtain a lot of information about the application such as the variables set in the process, the Tomcat versions, library versions and underlying operatio…

    Cegid Meta4 HR