Skip to content
OpenAdvisories

Archive

20 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /20 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.7
    CVE-2024-28231 Public exploit

    Manipulated DATA Submessage causes a heap-buffer-overflow error

    eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8, manipulated DATA Submessage can cause a heap overflow error in the Fast-DDS proces…

    eProsima Fast-DDS fastdds fastdds Debian Ubuntu
  • High 7.2
    CVE-2023-51444 Public exploit

    GeoServer arbitrary file upload vulnerability in REST Coverage Store API

    GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file upload vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with permissions …

    geoserver geoserver org.geoserver:gs-restconfig org.geoserver:gs-platform Maven
  • Critical 9.9
    CVE-2024-1800 Public exploit EPSS 34%

    Progress Telerik Report Server Deserialization

    In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.

    Progress Software Telerik Report Server
  • Medium 6.1
    CVE-2024-2387 Public exploit

    Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms <= 1.82.0 - SQL Injection to Reflected Cross-Site Scripting via integration_id

    The Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms plugin for WordPress is vulnerable to SQL Injection via the ‘integration_id’ parameter in all versions up to, and including, 1.82.0 due to insufficient…

    Nasir Ahmed AFI – The Easiest Integration Plugin Web / CMS