CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368...7.8 High
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368...9.8 Critical
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368...9.8 Critical
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.951 Application 20.0.2368...9.8 Critical
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0...9.8 Critical
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0...8.8 High
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0...9.8 Critical
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0...6.1 Medium
- tenda ac15 firmwareA vulnerability has been found in Tenda AC15 15.03.05.19 in the function GetParentControlInfo of...6.5 Medium
- tenda ac15 firmwareTenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform...9.8 Critical
spacy-llmPyPISpacy-LLM Server-Side Template Injection (SSTI) vulnerability9.8 Critical- No product listedA misconfiguration in Alphion ASEE-1443 Firmware v0.4.H.00.02.15 defines a previously...8.1 High
- sysax multi serverSysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing...7.5 High
ampacheUbuntuCross Site Request Forgery (CSRF) vulnerability exists in the 'pvmsg.php?action=add_message',...8.8 High- janobe vehicle management systemVehicle Management System 1.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the ...5.4 Medium
- No product listedPeppermint Ticket Management 0.4.6 is vulnerable to Incorrect Access Control. A regular...7.2 High
- gmod apolloGMOD Apollo Relative Path Traversal9.3 Critical
- gmod apolloGMOD Apollo Incorrect Privilege Assignment7.1 High
- edimax ic-7100 ip camera, ic-7100 firmware +1 moreEdimax IC-7100 IP Camera OS Command Injection9.3 Critical
- code-projects online hotel bookingprojectworlds Online Hotel Booking addroom.php sql injection6.9 Medium
- mayurik best church management softwareSourceCodester Best Church Management Software web_crud.php sql injection5.3 Medium
- code-projects gym management systemCodezips Gym Management System change_s_pwd.php sql injection6.9 Medium
- aaluoxiang oa systemaaluoxiang oa_system address-mapper.xml sql injection5.3 Medium
- code-projects blood bank systemcode-projects Blood Bank System o+.php cross site scripting5.1 Medium
- conda-forge conda-forge-metadataRCE in the package conda-forge-metadata9.3 Critical
- code-projects shopping portalcode-projects Shopping Portal Login index.php sql injection6.9 Medium
- code-projects online class and exam scheduling systemcode-projects Online Class and Exam Scheduling System profile.php cross site scripting5.1 Medium
- phpgurukul human metapneumovirus testing management systemPHPGurukul Human Metapneumovirus Testing Management System login.php sql injection6.9 Medium
- arista networks eosOn affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being inst…5.3 Medium
- arista networks eosOn affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route flap…5.3 Medium
- vllm aibrixvLLM AIBrix Prefix Caching hash.go random values2.1 Low
- arista networks eosOn affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.9.1 Critical
- arista networks eosOn affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.7.7 High
- phpgurukul restaurant table booking systemPHPGurukul Restaurant Table Booking System password-recovery.php sql injection6.9 Medium
- zzcmsZZCMS URL register_nodb.php cross site scripting5.3 Medium
- aws temporary elevated access management (team) for aws iam identity centerRequest approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center5.3 Medium
- hzmanyun education and training systemhzmanyun Education and Training System UploadImageController.java scorm command injection5.3 Medium
- hzmanyun education and training systemhzmanyun Education and Training System exportPDF command injection5.3 Medium
- cisco asyncos, ironport security management appliance, secure email and web manager +2 moreCisco Content Security Management Appliance Information Disclosure Vulnerability5.3 Medium
- cisco meraki mx firmwareCisco Meraki MX67 and MX68 Sensitive Information Disclosure Vulnerability7.5 High
- carrier block loadCarrier Block Load Privilege Escalation7.1 High
- mackron miniaudioAn out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality...7.7 High
- enalean tuleapTuleap is missing CSRF protections on tracker fields administrative operations4.6 Medium
- enalean tuleapIn Tuleap, deleting a report can delete criteria filters in other reports4.6 Medium
- enalean tuleapTuleap allows content injection via emails sent by the mass emailing features4.1 Medium
- enalean tuleapTuleap dumps the Redis password into the generated troubleshooting archives5.3 Medium
- zitadelIDOR Vulnerabilities in ZITADEL's Admin API that Primarily Impact LDAP Configurations9.0 Critical
- matrix-org pineconeIn-memory stored Cross-site scripting (XSS) vulnerability in pineconesim6.1 Medium
- kingsoft wps office, wps office +1 moreArbitrary Code Execution in WPS Office9.3 Critical
- rackEscape Sequence Injection vulnerability in Rack lead to Possible Log Injection6.9 Medium
- Show moreLoading…