Skip to content
OpenAdvisories

Archive

March 2024

Vulnerabilities first published in this month (UTC), newest first.

← February 2024 2024 / March April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

137 results · Clear filters · Feed

  • High 8.8
    CVE-2023-49548 Public exploit

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /custo…

  • High 7.5
    CVE-2024-25731 Public exploit

    The Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES encryption keys that can…

  • High 8.1
    CVE-2024-28088 Public exploit

    LangChain directory traversal vulnerability

    LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub re…

    langchain langchain-core PyPI
  • Medium 6.3
    CVE-2024-2074 Public exploit

    Mini-Tmall 1 sql injection

    A vulnerability was found in Mini-Tmall up to 20231017 and classified as critical. This issue affects some unknown processing of the file ?r=tmall/admin/user/1/1. The manipulation of the argument orderBy leads to sql injection. The attack may be initiated rem…

  • Medium 6.3
    CVE-2024-2057 Public exploit

    LangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery

    A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation …

    @langchain langchain_community langchain-community PyPI
  • High 8.8
    CVE-2024-0692 Public exploit Scanner template EPSS 92%

    SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

    The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.

    SolarWinds Security Event Manager
  • Medium 6.1
    CVE-2023-49539 Public exploit

    Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/inde…

  • High 7.5
    CVE-2023-49545 Public exploit

    A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive file…

  • Medium 6.1
    CVE-2023-49540 Public exploit

    Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/inde…

  • Medium 4.9
    CVE-2023-49544 Public exploit

    A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unau…

  • Critical 9.8
    CVE-2023-49543 Public exploit

    Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute a…

  • Medium 6.1
    CVE-2024-27743 Public exploit

    Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code…

  • Medium 6.1
    CVE-2024-27744 Public exploit

    Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code…

  • Critical 9.8
    CVE-2024-27747 Public exploit EPSS 24%

    File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a cr…

  • Critical 9.8
    CVE-2024-27746 Public exploit EPSS 13%

    SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a …

  • Critical 9.3
    CVE-2024-25293 Public exploit

    mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution (RCE) via the href attribute.

  • Critical 9.8
    CVE-2024-22891 Public exploit

    Nteract Remote Code Execution vulnerability

    Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link.

    nteract npm