CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- zframeworks zzzj1983 zz ZroleAction.java getUserList sql injection5.3 Medium
- zframeworks zzzj1983 zz ZorgAction.java GetDBUser sql injection5.3 Medium
- zframeworks zzzj1983 zz Customer Information cross site scripting4.8 Medium
- totolink x18, x18 firmware +1 moreTOTOLINK X18 cstecgi.cgi setMtknatCfg os command injection5.3 Medium
- zframeworks zzzj1983 zz ZorgAction.java getUserOrgForUserId sql injection5.3 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro v520, radeon™ pro v620 +26 more +28 moreInsufficient clearing of GPU global memory could allow a malicious process running on the same...6.5 Medium
- zframeworks zzzj1983 zz ZworkflowAction.java getOaWid sql injection5.3 Medium
- tenda ac7 1200m, ac7 firmware +1 moreTenda AC7 1200M telnet TendaTelnet os command injection5.3 Medium
- zframeworks zzzj1983 zz ZfileAction.upload unrestricted upload5.3 Medium
- ibm cognos analytics mobileIBM Cognos Mobile information disclosure2.0 Low
- ibm cognos analytics mobileIBM Cognos Mobile information disclosure2.4 Low
- projectteam mini-tmallMini-Tmall Admin Name admin cross site scripting4.8 Medium
- linux, linux kernel +1 moreALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC7.8 High
- ffmpegFFmpeg IAMF File iamf_parse.c audio_element_obu memory leak5.3 Medium
- frappe hrmspbrong hrms resource.go HrmsDB improper authorization6.9 Medium
- tenda ac6, ac6 firmware +1 moreTenda AC6 WifiExtraSet stack-based overflow8.7 High
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +1 moreAap-gateway: aap-gateway privilege escalation8.1 High
- zframeworks zzzj1983 zz cross-site request forgery5.3 Medium
- zframeworks zzzj1983 zz SuperZ.java GetUserOrg sql injection5.3 Medium
- at software solutions atsvdAT Software Solutions ATSVD Login Endpoint login.aspx sql injection6.9 Medium
- pixsoft vivazPixsoft Vivaz Login Endpoint servlet cross site scripting5.3 Medium
- pixsoft solPixsoft Sol Login Endpoint servlet sql injection6.9 Medium
- pixsoft e-saphiraPixsoft E-Saphira Login Endpoint servlet sql injection6.9 Medium
- eastnets paymentsafeEastnets PaymentSafe Edit Manual Reply directRouter.rfc cross site scripting5.1 Medium
- bitaxe esp-minerIn Bitaxe ESP-Miner before 2.5.0 with AxeOS, one can use an /api/system CSRF attack to update the...5.4 Medium
- libarchivelist_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return...4.0 Medium
- eastnets paymentsafeEastnets PaymentSafe URL Default.aspx improper authorization5.3 Medium
- blizzard battle.netBlizzard Battle.Net profapi.dll uncontrolled search path7.3 High
- d-link dar-7000, dlink dar-7000 firmware +1 moreD-Link DAR-7000 HTTP POST Request sxh_vpnlic.php get_ip_addr_details command injection5.3 Medium
- skycaijiZorlan SkyCaiji Tool.php previewAction server-side request forgery5.3 Medium
- hunan zhonghe baiyi information technology baiyiyun asset management and operations systemHunan Zhonghe Baiyi Information Technology Baiyiyun Asset Management and Operations System anyUserBoundHouse.php sql injection5.3 Medium
- ibm controllerIBM Controller information disclosure5.3 Medium
- skycaijiZorlan SkyCaiji Tool.php fileAction unrestricted upload5.3 Medium
- rizinrizinorg rizin utf8.c rz_utf8_encode heap-based overflow4.8 Medium
- teastudio.pl wp posts carouselWP Posts Carousel <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto_play_timeout Parameter6.4 Medium
- ays-pro secure copy content protection and content lockingSecure Copy Content Protection and Content Locking <= 4.4.7 - Missing Authorization to Unauthenticated User Email Retrieval via ays_sccp_reports_user_search Function5.3 Medium
- awordpresslife album galleryAlbum Gallery – WordPress Gallery <= 1.6.3 - Authenticated (Editor+) PHP Object Injection via Gallery Meta7.2 High
- rizinrizinorg rizin pdb.c msf_stream_directory_free buffer overflow4.8 Medium
- edge22 generateblocksGenerateBlocks <= 1.9.1 - Authenticated (Contributor+) Sensitive Information Exposure via 'get_image_description'4.3 Medium
- sminozzi database backup and table integrity check with automated schedulingDatabase Backup and check Tables Automated With Scheduler 2024 <= 2.36 - Authenticated (Administrator+) Arbitrary File Deletion7.2 High
- wordplus better messages, better messages – live chat, chat rooms, real-time messaging & private messages +1 moreBetter Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_links4.8 Medium
- stellarwp kadence blocks — page builder toolkit for gutenberg editorGutenberg Blocks by Kadence Blocks <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon'6.4 Medium
- wordplus better messages, better messages – live chat, chat rooms, real-time messaging & private messages +1 moreBetter Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory7.5 High
- devsoftbaltic surveyjs: drag & drop form builderSurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via S…8.8 High
- select-themes setsail membershipSetSail Membership <= 1.0.3 - Authentication Bypass via Account Takeover9.8 Critical
- sminozzi database backup and table integrity check with automated schedulingDatabase Backup and check Tables Automated With Scheduler 2024 <= 2.35 - Authenticated (Administrator+) Sensitive Information Exposure7.2 High
- wpkube authors listAuthors List <= 2.0.6 - Unauthenticated Arbitrary Shortcode Execution6.5 Medium
- elated-themes academist membershipAcademist Membership <= 1.1.6 - Authentication Bypass via Account Takeover9.8 Critical
- edge-themes alloggio membershipAlloggio Membership <= 1.1 - Authentication Bypass via Social Login Account Takeover9.8 Critical
- specialk simple download counterSimple Download Counter <= 2.0 - Authenticated (Author+) Arbitrary File Read6.5 Medium
- Show moreLoading…