CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- samsung android, samsung mobile devices +1 moreUse of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1...4.0 Medium
- samsung android, samsung mobile devices +1 moreUse of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent...6.5 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local...7.3 High
- ray-project rayray vulnerable to Insertion of Sensitive Information into Log File5.7 Medium
- rsupport co.,ltd. remoteview agent (for windows)Incorrect access permission of a specific service issue exists in RemoteView Agent (for Windows)...7.8 High
- rsupport co.,ltd. remoteview agent (for windows)Incorrect access permission of a specific folder issue exists in RemoteView Agent (for Windows)...7.8 High
- google chromeOut of bounds read in V8 in Google Chrome prior to 133.0.6943.141 allowed a remote attacker to...4.3 Medium
- djangoproject django, debian linux +1 moreDjango Vulnerable to Allocation of Resources Without Limits or Throttling5.0 Medium
- No product listedBuffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers...7.5 High
- crmebcrmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead() in /system...9.8 Critical
- No product listedAn issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2...8.1 High
- mytaagAn issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to...5.1 Medium
- mytaagAn issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a physically proximate...5.1 Medium
- mytaagAn issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to...5.1 Medium
- No product listedIncorrect access control in the KSRTC AWATAR app of Karnataka State Road Transport Corporation v1...7.5 High
- publiccmsAn arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of...9.8 Critical
- go standard library net/http, golang.org/x/net golang.org/x/net/http/httpproxy, golang.org/x/net/proxy +2 moreHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 Medium
- xendeadlock potential with VT-d and legacy PCI device pass-through7.5 High
- microsoft hololensA vulnerability in the pairing request method in Microsoft HoloLens 1 and 2 - Windows Holographic...6.5 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +17 more +19 moreAn issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...7.5 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +17 more +19 moreAn issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...7.5 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +7 more +9 moreAn issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080,...7.5 High
- No product listedA SQL Injection vulnerability has been identified in EPICOR Prophet 21 (P21) up to 23.2.5232....8.1 High
- jenkinsJenkins Open Redirect vulnerability4.3 Medium
- jenkinsJenkins cross-site request forgery (CSRF) vulnerability5.4 Medium
- jenkinsJenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission4.3 Medium
- jenkinsJenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission4.3 Medium
- nationalsecurityagency emissaryEmissary Use of a Broken or Risky Cryptographic Algorithm7.5 High
- pallets jinja, debian linux +1 moreJinja sandbox breakout through attr filter selecting format method5.4 Medium
dglPyPIdmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()8.9 High- livewire voltVolt Allows RCE Via User-Crafted Requests9.3 Critical
- devolutions serverIncorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an...7.1 High
- drupal two-factor authentication (tfa), two-factor authentication project authentication +1 moreTwo-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2025-0238.1 High
- open-telemetry opentelemetry-dotnetOpenTelemetry .NET has a Denial of Service (DoS) Vulnerability in API Package7.5 High
- artificial intelligence project intelligence, drupal ai (artificial intelligence) +1 moreAI (Artificial Intelligence) - Moderately critical - Gadget Chain - SA-CONTRIB-2025-0226.6 Medium
- artificial intelligence project intelligence, drupal ai (artificial intelligence) +1 moreAI (Artificial Intelligence) - Critical - Remote Code Execution - SA-CONTRIB-2025-0217.5 High
- symantec carbon black cloud windows sensorCarbon Black Cloud Windows Sensor Information Leak2.5 Low
- cisco telepresence management suite (tms), telepresence management suite +1 moreA vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS...4.6 Medium
- cisco secure clientCisco Secure Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability7.1 High
- openidentityplatform opendjOpenDJ Denial of Service (Dos) using alias loop8.7 High
- redaxoREDAXO allows Authenticated Reflected Cross Site Scripting - packages installation6.1 Medium
- redaxoREDAXO allows Arbitrary File Upload in the mediapool page5.4 Medium
- luceeRCE in Lucee REST endpoint9.8 Critical
- keysight ixia vision product familyKeysight Ixia Vision Product Family Path Traversal6.9 Medium
- keysight ixia vision product familyKeysight Ixia Vision Product Family Path Traversal6.9 Medium
- keysight ixia vision product familyKeysight Ixia Vision Product Family Improper Restriction of XML External Entity Reference6.9 Medium
- convert forms project forms, tassos.gr convert forms component for joomla, convertforms component for joomla +2 moreExtension - tassos.gr - SQL injection in Convert Forms component version 1.0.0-1.0.0 - 4.4.9 for Joomla2.7 Low
- keysight ixia vision product familyKeysight Ixia Vision Product Family Path Traversal8.6 High
- perforce gliffyUsername Enumeration in Gliffy6.9 Medium
- opentext identity manager advanced editionInsufficiently Protected Credentials10.0 Critical
- Show moreLoading…