CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- pocketbook inkpad color 3Privilege Escalation Through SUID Binary and Developer Mode8.6 High
- pocketbook inkpad color 3File Read Through Improper Sudo Privilege Management4.7 Medium
- red hat build of keycloak, data grid 8, fuse 7 +13 more +15 moreOrg.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli8.1 High
- wind media e-commerce website templateSQLi in Wind Media's E-Commerce Website Template8.6 High
- mozilla firefox, firefox for ios +1 moreQR code user confirmation bypass with invalid protocol4.3 Medium
- mozilla firefox, firefox for ios +1 moreFirefox Mobile iOS Address Bar Spoof Using Server-Side Redirect to non-http Scheme4.3 Medium
- mozilla firefox, firefox for ios +1 moreFirefox Mobile iOS Full Address Bar Spoof Using Server-Side Redirect to internal error page5.4 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 136 and Thunderbird 1368.2 High
- mozilla firefox, thunderbird +1 moreDisclosure of uninitialized memory when .toUpperCase() causes string to get longer9.8 Critical
- mozilla firefoxLock screen setting bypass in Firefox Focus for Android9.1 Critical
- mozilla firefoxAndroid Intent confirmation prompt tapjacking using Select options7.1 High
- mozilla firefoxTapjacking in Android Custom Tabs using transition animations3.9 Low
- open5gsOpen5GS AMF nsmf-handler.c amf_nsmf_pdusession_handle_update_sm_context denial of service6.9 Medium
backoffcrates.io`backoff` is unmaintained.No scoreopenpgp-card-sequoiacrates.io`openpgp-card-sequoia` is unmaintained.No score- vmware esxi, esxi, workstation, and fusion, fusion +4 more +6 moreVMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an...7.1 High
- vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 moreVMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within...8.2 High
- vmware esxi, workstation, cloud foundation +3 more +5 moreVMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that...9.3 Critical
- gn themes wp shortcodes plugin — shortcodes ultimate, vanokhin shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via src Parameter6.4 Medium
- nitesh singh ultimate wordpress auction plugin, auctionplugin ultimate auction +1 moreUltimate WordPress Auction Plugin <= 4.2.9 - Missing Authorization to Arbitrary Post Deletion5.4 Medium
- master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 moreMaster Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter6.4 Medium
- wpswings wallet system for woocommerce, wallet system for woocommerce – digital wallet, buy now pay later (bnpl), instant cashback, referral program, partial & subscription payments +1 moreWallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Missing Authorization4.3 Medium
- gorbo structured content (json-ld) #wpsc, wpsc-plugin structured content +1 moreStructured Content (JSON-LD) #wpsc <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode6.4 Medium
- master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 moreMaster Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4 Medium
- wpswings wallet system for woocommerce, wallet system for woocommerce – digital wallet, buy now pay later (bnpl), instant cashback, referral program, partial & subscription payments +1 moreWallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction <= 2.6.2 - Cross-Site Request Forgery4.3 Medium
- huawei harmonyosVulnerability of improper access permission in the HDC module Impact: Successful exploitation of...6.2 Medium
- huawei harmonyosPermission verification vulnerability in the media library module Impact: Successful exploitation...5.0 Medium
- huawei harmonyosMulti-thread problem vulnerability in the package management module Impact: Successful...6.7 Medium
- huawei harmonyosPermission verification vulnerability in the media library module Impact: Successful exploitation...5.0 Medium
- huawei harmonyosPermission management vulnerability in the lock screen module Impact: Successful exploitation of...6.2 Medium
- huawei harmonyosMulti-concurrency vulnerability in the media digital copyright protection module Impact:...8.6 High
- huawei harmonyosVulnerability of improper access permission in the process management module Impact: Successful...6.8 Medium
- huawei emui, harmonyos +1 morePermission verification bypass vulnerability in the notification module Impact: Successful...8.4 High
- huawei emui, harmonyos +1 morePermission bypass vulnerability in the window module Impact: Successful exploitation of this...7.3 High
- bowo admin and site enhancements (ase), wpase admin and site enhancements +1 moreAdmin and Site Enhancements (ASE) < 7.6.10 - Limit Login Attempt Bypass via IP Spoofing5.3 Medium
- axis os, os 2024 +1 moreDuring an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a...7.8 High
- axis os, os 2024 +1 moreDuring an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a...8.5 High
- axis communications ab osDzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param...5.3 Medium
- axis communications ab os51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did...6.5 Medium
- axis os, os 2024 +1 moreGirishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API...3.5 Low
- phpgurukul restaurant table booking systemPHPGurukul Restaurant Table Booking System profile.php sql injection5.1 Medium
- code-projects employee management systemSourceCodester Employee Management System employee.php cross site scripting5.1 Medium
- code-projects blood bank systemcode-projects Blood Bank System A+.php cross site scripting5.1 Medium
- spicethemes newscrunchNewscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload9.8 Critical
- spicethemes newscrunchNewscrunch <= 1.8.4 - Cross-Site Request Forgery to Arbitrary File Upload8.8 High
- codezips online shopping websiteCodezips Online Shopping Website cart_add.php sql injection6.9 Medium
- phpgurukul student record systemPHPGurukul Student Record System password-recovery.php sql injection6.9 Medium
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds write vulnerability3.8 Low
- openatom openharmonyArkcompiler Ets Runtime has an UAF vulnerability3.8 Low
- openatom openharmonyArkcompiler Ets Runtime has an out-of-bounds write vulnerability3.8 Low
- Show moreLoading…