Skip to content
OpenAdvisories

Archive

March 2024

Vulnerabilities first published in this month (UTC), newest first.

← February 2024 2024 / March April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

52 results · Clear filters · Feed

  • High 7.8
    CVE-2024-23296 Exploited Public exploit

    A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, …

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Mar 6, 2024
  • High 7.5
    CVE-2024-2053 Public exploit Scanner template EPSS 45%

    Artica Proxy Unauthenticated LFI Protection Bypass Vulnerability

    The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy adminis…

    Artica Tech Artica Proxy
  • High 8.8
    CVE-2023-43318 Public exploit

    TP-Link JetStream Smart Switch TL-SG2210P 5.0 Build 20211201 allows attackers to escalate privileges via modification o…

  • High 7.8
    CVE-2023-6241 Public exploit

    Mali GPU Kernel Driver allows improper GPU memory processing operations

    Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to exploit a software race condition…

    Arm Valhall GPU Kernel Driver Arm 5th Gen GPU Architecture Kernel Driver Bifrost GPU Kernel Driver
  • High 7.5
    CVE-2023-33105 Public exploit

    Configuration Issue in WLAN Host and Firmware

    Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.

    Qualcomm Snapdragon
  • High 8.8
    CVE-2023-49546 Public exploit

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer…

  • High 7.3
    CVE-2023-49968 Public exploit

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_su…

  • High 8.8
    CVE-2023-49548 Public exploit

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /custo…

  • High 7.5
    CVE-2024-25731 Public exploit

    The Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES encryption keys that can…

  • High 8.1
    CVE-2024-28088 Public exploit

    LangChain directory traversal vulnerability

    LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub re…

    langchain langchain-core PyPI
  • High 8.8
    CVE-2024-0692 Public exploit Scanner template EPSS 92%

    SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

    The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.

    SolarWinds Security Event Manager
  • High 7.5
    CVE-2023-49545 Public exploit

    A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive file…