Skip to content
OpenAdvisories

Archive

March 2024

Vulnerabilities first published in this month (UTC), newest first.

← February 2024 2024 / March April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

294 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-31114 Public exploit

    WordPress Shortcode Addons <= 3.2.5 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in biplob018 Shortcode Addons.This issue affects Shortcode Addons: from n/a through 3.2.5.

    biplob018 Shortcode Addons
  • Critical 10.0
    CVE-2024-31115

    WordPress Chauffeur Taxi Booking System for WordPress plugin <= 7.2 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in QuanticaLabs Chauffeur Taxi Booking System for WordPress.This issue affects Chauffeur Taxi Booking System for WordPress: from n/a through 7.2.

    QuanticaLabs Chauffeur Taxi Booking System for WordPress Web / CMS
  • Critical 9.9
    CVE-2023-46808

    An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes t…

    ivanti ITSM Network devices
  • Critical 9.6
    CVE-2023-41724 EPSS 13%

    A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbit…

    ivanti Sentry Network devices
  • Critical 9.8
    CVE-2023-51803

    LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "<?php ?>" subs…

  • Critical 10.0
    CVE-2024-2086

    Integrate Google Drive <= 1.3.8 - Missing Authorization to Unauthenticated Settings Modification and Export

    The Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a …

    princeahmed File Manager for Google Drive – Integrate Google Drive Web / CMS
  • Critical 9.8
    CVE-2024-28288

    Ruijie RG-NBR700GW 10.3(4b12) router lacks cookie verification when resetting the password, resulting in an administrat…

  • Critical 10.0
    CVE-2024-3094 Public exploit EPSS 91%

    Xz: malicious code in distributed source

    Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is the…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Alpine
  • Critical 10.0
    CVE-2024-30247

    Command Injection as root in NextCloudPi web panel

    NextcloudPi is a ready to use image for Virtual Machines, Raspberry Pi, Odroid HC1, Rock64 and other boards. A command injection vulnerability in NextCloudPi allows command execution as the root user via the NextCloudPi web-panel. Due to a security misconfigu…

    Nextcloud nextcloudpi
  • Critical 10.0
    CVE-2024-29202

    JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery

    JumpServer is an open source bastion host and an operation and maintenance security audit system. Attackers can exploit a Jinja2 template injection vulnerability in JumpServer's Ansible to execute arbitrary code within the Celery container. Since the Celery c…

    jumpserver jumpserver
  • Critical 10.0
    CVE-2024-29201

    JumpServer's insecure Ansible playbook validation leads to RCE in Celery

    JumpServer is an open source bastion host and an operation and maintenance security audit system. Attackers can bypass the input validation mechanism in JumpServer's Ansible to execute arbitrary code within the Celery container. Since the Celery container run…

    jumpserver jumpserver
  • Critical 9.9
    CVE-2024-23538

    Apache Fineract: Under certain system configurations, the sqlSearch parameter was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5. Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue.

    Apache Software Foundation Apache Fineract
  • Critical 9.3
    CVE-2024-30502 Scanner template

    WordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.7.9.

    WP Travel Engine WP Travel Engine
  • Critical 9.3
    CVE-2024-30498 Scanner template

    WordPress CRM Perks Forms plugin <= 1.1.4 - Unauthenticated SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.

    CRM Perks CRM Perks Forms
  • Critical 9.3
    CVE-2024-30490 Scanner template

    WordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8.

    Metagauss ProfileGrid
  • Critical 10.0
    CVE-2024-30510

    WordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 9.5.

    Salon Booking System Salon booking system
  • Critical 9.9
    CVE-2024-30500

    WordPress CubeWP plugin <= 1.1.12 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in CubeWP CubeWP – All-in-One Dynamic Content Framework.This issue affects CubeWP – All-in-One Dynamic Content Framework: from n/a through 1.1.12.

    CubeWP CubeWP – All-in-One Dynamic Content Framework
  • Critical 9.8
    CVE-2023-6191

    SQLi in WebPDKS

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Egehan Security WebPDKS allows SQL Injection. This issue affects WebPDKS: through 20240329. NOTE: The vendor was contacted early about this disclosure but di…

    Egehan Security WebPDKS
  • Critical 9.8
    CVE-2024-2411

    MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal

    The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'modal' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, al…

    stylemix MasterStudy LMS WordPress Plugin – for Online Courses and Education Web / CMS
  • Critical 9.8
    CVE-2024-2409

    MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action

    The MasterStudy LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.1. This is due to insufficient validation checks within the _register_user() function called by the 'wp_ajax_nopriv_stm_lms_register' AJAX…

    stylemix MasterStudy LMS WordPress Plugin – for Online Courses and Education Web / CMS
  • Critical 9.8
    CVE-2023-49232

    An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to …

  • Critical 9.8
    CVE-2023-49231 EPSS 43%

    An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to …

  • Critical 9.8
    CVE-2024-29667

    SQL Injection vulnerability in Tongtianxing Technology Co., Ltd CMSV6 v.7.31.0.2 through v.7.31.0.3 allows a remote att…

  • Critical 9.8
    CVE-2024-29640

    aliyundrive-webdav vulnerable to Command Injection

    An issue in aliyundrive-webdav v.2.3.3 and before allows a remote attacker to execute arbitrary code via a crafted payload to the sid parameter in the action_query_qrcode component.

    aliyundrive-webdav aliyundrive-webdav PyPI crates.io
  • Critical 9.8
    CVE-2024-31032

    An issue in Huashi Private Cloud CDN Live Streaming Acceleration Server hgateway-sixport v.1.1.2 allows a remote attack…

  • Critical 9.8
    CVE-2024-30628

    Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from fromAddressNat function.

  • Critical 9.8
    CVE-2024-30630

    Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the time parameter from saveParentControlInfo function.

  • Critical 9.8
    CVE-2024-30622

    Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the mitInterface parameter from fromAddressNat functio…

  • Critical 9.8
    CVE-2024-30635

    Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability located in the funcpara1 parameter in the formSetCfm func…

  • Critical 9.8
    CVE-2023-6437

    Authenticated RCE

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TP-Link TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3, TP-Link VX220-G2u, TP-Link VN020-G2u allows authenticate…

    TP-Link Systems TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3, TP-Link VX220-G2u, TP-Link VN020-G2u Network devices
  • Critical 9.9
    CVE-2024-29241

    Missing authorization vulnerability in System webapi component in Synology Surveillance Station before 9.2.0-9289 and 9…

    Synology Surveillance Station
  • Critical 9.1
    CVE-2024-2890

    WordPress Tumult Hype Animations plugin <= 1.9.12 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Tumult Inc. Tumult Hype Animations.This issue affects Tumult Hype Animations: from n/a through 1.9.12.

    Tumult Tumult Hype Animations
  • Critical 9.1
    CVE-2024-29100

    WordPress AI Engine plugin <= 2.1.4 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4.

    Jordy Meow AI Engine: ChatGPT Chatbot
  • Critical 9.0
    CVE-2024-30223

    WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.

    Repute InfoSystems ARMember
  • Critical 10.0
    CVE-2024-30224

    WordPress WholesaleX plugin <= 1.3.2 - Unauthenticated PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.2.

    Wholesale Team WholesaleX
  • Critical 10.0
    CVE-2024-30225

    WordPress WP Migrate plugin <= 2.6.10 - Unauthenticated PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in WPENGINE, INC. WP Migrate.This issue affects WP Migrate: from n/a through 2.6.10.

    WP Engine WP Migrate
  • Critical 9.0
    CVE-2024-30226

    WordPress BetterDocs plugin <= 3.3.3 - Unauthenticated PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in WPDeveloper BetterDocs.This issue affects BetterDocs: from n/a through 3.3.3.

    WPDeveloper BetterDocs
  • Critical 9.0
    CVE-2024-30227

    WordPress Geo Controller plugin <= 8.6.4 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in INFINITUM FORM Geo Controller.This issue affects Geo Controller: from n/a through 8.6.4.

    INFINITUM FORM Geo Controller
  • Critical 9.9
    CVE-2024-30228

    WordPress Hercules Core plugin <= 6.4 - Auth. PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Hercules Design Hercules Core.This issue affects Hercules Core : from n/a through 6.4.

    Hercules Design Hercules Core
  • Critical 9.8
    CVE-2024-28014

    Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP…

    NEC WG1200HP WR1200H WR8750N