Security Vulnerabilities - CVEs Published In March 2024
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.002
Published
2024-03-12
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CVSS Score
9.8
EPSS Score
0.069
Published
2024-03-12
Microsoft Authenticator Elevation of Privilege Vulnerability
CVSS Score
7.1
EPSS Score
0.011
Published
2024-03-12
.NET and Visual Studio Denial of Service Vulnerability
CVSS Score
7.5
EPSS Score
0.006
Published
2024-03-12
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
CVSS Score
9.0
EPSS Score
0.01
Published
2024-03-12
Windows Hyper-V Remote Code Execution Vulnerability
CVSS Score
8.1
EPSS Score
0.054
Published
2024-03-12
Microsoft Defender Security Feature Bypass Vulnerability
CVSS Score
5.5
EPSS Score
0.003
Published
2024-03-12
CMS Made Simple version 2.2.14, does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /admin/moduleinterface.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session.
CVSS Score
7.4
EPSS Score
0.001
Published
2024-03-12
Vulnerability in CMS Made Simple 2.2.14, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /admin/adduser.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload to an authenticated user and partially take over their browser session.
CVSS Score
7.4
EPSS Score
0.001
Published
2024-03-12
SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send a specially crafted SQL query to the server via the j_username parameter and retrieve the information stored in the database.
CVSS Score
9.8
EPSS Score
0.137
Published
2024-03-12