CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- mozilla firefox, thunderbird +1 moreClickjacking the registerProtocolHandler info-bar4.3 Medium
- mozilla firefox, thunderbird +1 moreUnexpected GC during RegExp bailout processing6.5 Medium
- mozilla firefox, thunderbird +1 moreJIT corruption of WASM i32 return values on 64-bit CPUs7.6 High
- mozilla firefox, thunderbird +1 moreInconsistent comparator in XSLT sorting led to out-of-bounds access8.1 High
- mozilla firefox, thunderbird +1 moreUse-after-free in WebTransportChild7.5 High
- mozilla firefox, thunderbird +1 moreAudioIPC StreamData could trigger a use-after-free in the Browser process8.8 High
- libreoffice, debian linux +1 moreMacro URL arbitrary script execution7.2 High
- uniguest tripleplayUnauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows...10.0 Critical
- uniguest tripleplayUnauthenticated SQL injection vulnerability in Uniguest Tripleplay before 24.2.1 allows remote...9.8 Critical
- uniguest tripleplayUnauthenticated reflected cross-site scripting (XSS) in Uniguest Tripleplay before 24.2.1 allows...7.1 High
- uniguest tripleplayUnauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows...10.0 Critical
- nakivo backup & replication director, backup and replication, backup \& replication director +2 moreNAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files...8.6 High
- No product listedMaharashtra State Electricity Distribution Company Limited Mahavitran IOS Application 16.1...7.5 High
- wondershare filmoraWondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation.7.8 High
- qzw1210 shishuocmsshishuocms cross-site request forgery5.3 Medium
- shishuocms project shishuocmsshishuocms ManageUpLoadAction.java handleRequest unrestricted upload5.3 Medium
- i-drive i11, i12, i11 firmware +1 more +3 morei-Drive i11/i12 Device Setting improper access control for register interface2.3 Low
- i-drive i11, i12, i11 firmware +1 more +3 morei-Drive i11/i12 Video Footage/Live Video Stream access control5.3 Medium
- i-drive i11, i12, i11 firmware +1 more +3 morei-Drive i11/i12 Device Pairing authentication bypass1.0 Low
- esri arcgis serverDirectory traversal vulnerability in ArcGIS Server4.9 Medium
- esri arcgis serverStored XSS in ArcGIS Server Manager4.8 Medium
- esri arcgis serverSQL injection vulnerability in ArcGIS Server8.7 High
- esri arcgis serverLocal file inclusion (LFI) vulnerability in ArcGIS Server7.5 High
- esri arcgis serverStored XSS in ArcGIS Server Administrator Directory4.8 Medium
- esri arcgis serverStored XSS issue in Server Admin API4.8 Medium
- esri arcgis serverDirectory traversal vulnerability in the admin api for service thumbnails4.9 Medium
- esri arcgis serverStored XSS vulnerability in ArcGIS Rest Services Directory4.8 Medium
- esri arcgis serverStored XSS vulnerability in ArcGIS Server Administrator Directory4.8 Medium
- esri arcgis serverUnauthorized access to secure services in ArcGIS Server8.5 High
- esri arcgis serverStored XSS in ArcGIS Server Rest services4.8 Medium
- esri arcgis serverStored XSS issue in ArcGIS Server4.8 Medium
- esri arcgis serverStored XSS in Server Admin API4.8 Medium
- esri arcgis serverStored XSS in Server Admin under Services > lifecycleinfos4.8 Medium
- esri arcgis serverStored XSS vulnerability in Rest Services under OGCFeature Service and Map Service4.8 Medium
- esri arcgis serverStored XSS vulnerability in Rest Services under Job ID4.8 Medium
- esri arcgis serverStored XSS vulnerability in Rest Services under Layer name4.8 Medium
- esri arcgis serverStored XSS in Rest Services Directory under Identify operation4.8 Medium
- esri arcgis serverStored XSS issues in Server Admin API4.8 Medium
- esri arcgis serverStored XSS in Rest Services Directory4.8 Medium
- esri arcgis serverStored XSS vulnerability in Rest Admin API under Hosted Feature Services page4.8 Medium
- esri arcgis serverStored XSS in Server Admin API4.8 Medium
- esri arcgis serverStored XSS in Rest Services API for a Toolbox published as GP Service4.8 Medium
- i-drive i11, i12, i11 firmware +1 more +3 morei-Drive i11/i12 APK hard-coded credentials2.4 Low
- i-drive i11, i12, i11 firmware +1 more +3 morei-Drive i11/i12 WiFi default password2.3 Low
- openziti, openziti ziti-console +1 moreServer Side Request Forgery in Ziti Console8.6 High
- d-link dap-1562, dlink dap-1562 firmware +1 moreD-Link DAP-1562 HTTP POST Request pure_auth_check null pointer dereference7.1 High
- openziti, openziti ziti-console +1 moreCross Site Scripting potential in Ziti Console8.2 High
- labredescefetrj wegiaWeGIA has a stored Cross-Site Scripting (XSS) in 'processa_edicao_socio.php' via the 'socio_nome' parameter6.4 Medium
- hcl software sx, hcltech hcl sx +1 moreHCL SX is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability5.3 Medium
- d-link dap-1562, dlink dap-1562 firmware +1 moreD-Link DAP-1562 HTTP Header http_request_parse stack-based overflow6.9 Medium
- Show moreLoading…