By publication date
Exploited and new serious CVEs: March 2024
205 records · 8 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
Page 3 of 3
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
52Plan | CVE-2023-49231No exploit | An authentication bypass vulnerability was found in Stilog Visual Planning 8.CWE-294 | Critical9.8 | — | 42.8% | Mar 29, 2024 |
67This week | CVE-2024-3094Proof of concept | Xz: malicious code in distributed sourcetukaani · xz · CWE-506 | Critical10.0 | — | 90.9% | Mar 29, 2024 |
26Monitor | CVE-2024-29278Proof of concept | funboot v1.1 is vulnerable to Cross Site Scripting (XSS) via the title field in "create a message ."CWE-79 | Medium6.5 | — | 0.4% | Mar 29, 2024 |
39Monitor | CVE-2023-41724No exploit | A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the ivanti · standalone sentry · CWE-77 | High8.8 | — | 12.8% | Mar 30, 2024 |
36Monitor | CVE-2024-31114Proof of concept | WordPress Shortcode Addons <= 3.2.5 - Arbitrary File Upload vulnerabilitybiplob018 · shortcode addons · CWE-434 | Critical9.1 | — | 1.3% | Mar 31, 2024 |
- CVE-2023-4923152Plan
An authentication bypass vulnerability was found in Stilog Visual Planning 8.
CriticalCVSS 9.8No exploitEPSS 42%Mar 29, 2024
- CVE-2024-309467This week
Xz: malicious code in distributed source
CriticalCVSS 10.0Proof of conceptEPSS 90%tukaani · xzMar 29, 2024
- CVE-2024-2927826Monitor
funboot v1.1 is vulnerable to Cross Site Scripting (XSS) via the title field in "create a message ."
MediumCVSS 6.5Proof of conceptEPSS 0%Mar 29, 2024
- CVE-2023-4172439Monitor
A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the
HighCVSS 8.8No exploitEPSS 12%ivanti · standalone sentryMar 30, 2024
- CVE-2024-3111436Monitor
WordPress Shortcode Addons <= 3.2.5 - Arbitrary File Upload vulnerability
CriticalCVSS 9.1Proof of conceptEPSS 1%biplob018 · shortcode addonsMar 31, 2024