CVEs published in March 2024
25 tracked CVEs from 6 vendors had their first vendor advisory published in March 2024: 3 critical, 12 high. Newest first.
15 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2024-24785Critical
Golang Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-24784High
Golang Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-24783High
Golang Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-22201High
Eclipse Jetty Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-29946High
In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands
Splunk · 1 advisory - Added
CVE-2024-29945High
In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the software potentially exposes authentication tokens during the…
Splunk · 1 advisory - Added
CVE-2024-26303Medium
ArubaOS-Switch: Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon
Aruba · 1 advisory - Added
CVE-2024-28757High
libexpat Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-21892High
Node.js Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-21677High
Confluence Data Center: This High severity Path Traversal vulnerability was introduced in version 6.13.0 of Confluence Data Center.
Atlassian · 1 advisory - Added
CVE-2023-47534Critical
improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets
Fortinet · 1 advisory - Added
CVE-2024-21901Medium
QTS: SQL injection vulnerability has been reported to affect myQNAPcloud.
QNAP · 1 advisory - Added
CVE-2024-21900Medium
QTS: injection vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2024-21899Critical
QTS: improper authentication vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2023-47221Medium
Photo Station: path traversal vulnerability has been reported to affect Photo Station.
QNAP · 1 advisory - Added
CVE-2023-34980Medium
QTS: OS command injection vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2023-32969Medium
QTS: cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch.
QNAP · 1 advisory - Added
CVE-2023-52426Medium
libexpat Vulnerability in NetApp Products
NetApp · 1 advisory - Added
Aruba has identified certain configurations of ArubaOS that can
Aruba · 1 advisory - Added
CVE-2024-25615Medium
ArubaOS: unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed
Aruba · 1 advisory - Added
CVE-2024-25614Medium
ArubaOS: There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS.
Aruba · 1 advisory - Added
CVE-2024-25613High
ArubaOS: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
Aruba · 1 advisory - Added
CVE-2024-25612High
ArubaOS: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
Aruba · 1 advisory - Added
CVE-2024-25611High
ArubaOS: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
Aruba · 1 advisory - Added
CVE-2024-1356High
ArubaOS: Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
Aruba · 1 advisory