CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds read vulnerability3.3 Low
- openatom openharmonyArkcompiler Ets Runtime has an UAF vulnerability3.8 Low
- openatom openharmonyCommunication Dsoftbus has an UAF vulnerability3.8 Low
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds write vulnerability3.8 Low
- openatom openharmonyArkcompiler Ets Runtime has a buffer overflow vulnerability3.3 Low
- openatom openharmonyArkcompiler Ets Runtime has a buffer overflow vulnerability3.3 Low
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds read vulnerability3.3 Low
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds read vulnerability3.3 Low
- openatom openharmonyArkcompiler Ets Runtime has a NULL pointer dereference vulnerability3.3 Low
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds write vulnerability3.8 Low
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds read vulnerability3.3 Low
- openatom openharmonyLiteos-A has an insecure storage of sensitive information vulnerability5.5 Medium
- openatom openharmonyArkcompiler Ets Runtime has a NULL pointer dereference vulnerability3.3 Low
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds read vulnerability3.3 Low
- openatom openharmonyArkcompiler Ets Runtime has an NULL pointer dereference vulnerability3.8 Low
- openatom openharmonyArkcompiler Ets Runtime has an UAF vulnerability3.8 Low
- openatom openharmonyCommunication Dsoftbus has an UAF vulnerability3.8 Low
- openatom openharmonyCommunication Dsoftbus has an UAF vulnerability3.8 Low
- openatom openharmonyLiteos-A has an out of bounds read vulnerability5.5 Medium
- openatom openharmonyArkcompiler Ets Runtime has an integer overflow vulnerability3.8 Low
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds read vulnerability3.3 Low
- openatom openharmonyCommunication Dsoftbus has a memory leak vulnerability3.3 Low
- openatom openharmonyArkcompiler Ets Runtime has an integer overflow vulnerability3.8 Low
- crowdytheme animation addons for elementor pro, arolax +1 moreAnimation Addons for Elementor Pro <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation8.8 High
- mtrv teachpressteachPress <= 9.0.7 - Authenticated (Contributor+) SQL Injection6.5 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injection9.8 Critical
- vowelweb vw storefrontVW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset4.3 Medium
- phpgurukul restaurant table booking systemPHPGurukul Restaurant Table Booking System check_availability.php sql injection6.9 Medium
- phpgurukul restaurant table booking systemPHPGurukul Restaurant Table Booking System add-table.php sql injection6.9 Medium
- tenda tx3, tx3 firmware +1 moreTenda TX3 setPptpUserList buffer overflow7.1 High
- tenda tx3, tx3 firmware +1 moreTenda TX3 openSchedWifi buffer overflow7.1 High
- tenda tx3, tx3 firmware +1 moreTenda TX3 SetNetControlList buffer overflow7.1 High
- tenda tx3, tx3 firmware +1 moreTenda TX3 SetStaticRouteCfg buffer overflow7.1 High
- tenda tx3, tx3 firmware +1 moreTenda TX3 setMacFilterCfg buffer overflow7.1 High
- phpgurukul restaurant table booking systemPHPGurukul Restaurant Table Booking System search-result.php sql injection6.9 Medium
- f5 nginx unitNGINX Unit Java Vulnerability6.9 Medium
- open5gsOpen5GS AMF gmm-sm.c gmm_state_authentication denial of service5.3 Medium
- qzw1210 shishuocmsshishuocms Directory Deletion Page add.json cross site scripting4.8 Medium
- docusnapThere is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions.4.3 Medium
- t0mer broadlinkmanagert0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via...6.5 Medium
- flowiseai flowiseFlowiseAI Flowise arbitrary file upload vulnerability9.8 Critical
- tsplus remote accessInsecure permissions in TSplus Remote Access v17.30 allow attackers to retrieve a list of all...5.8 Medium
- No product listedCross-Site Scripting (XSS) vulnerability exists in the WPA/WAPI Passphrase field of the Wireless...4.3 Medium
- xxyopen novel-plusAn issue in xxyopen novel plus v.4.4.0 and before allows a remote attacker to execute arbitrary...6.5 Medium
- wangl1989 mysiteformeA SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.9.8 Critical
- teampasswordmanager team password managerA Cross Site Scripting (XSS) vulnerability exists in TeamPasswordManager v12.162.284 and before...4.6 Medium
- guchengwuyue yshopmallyshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface.7.2 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.86.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.87.5 High
- mozilla firefox, thunderbird +1 moreAdding %00 and a fake extension to a jar: URL changed the interpretation of the contents7.3 High
- Show moreLoading…