CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreipmi: ipmb: Add check devm_kasprintf() returned value5.5 Medium
- seeyon zhiyuan interconnect fe collaborative office platformSeeyon Zhiyuan Interconnect FE Collaborative Office Platform addUser.jsp sql injection6.9 Medium
- microdicom dicom viewerMicroDicom DICOM Viewer mDicom.exe memory corruption4.8 Medium
- finder fire safety erp/crm (new system)SQLi in Finder Fire Safety's Finder ERP/CRM (New System)7.5 High
- finder fire safety erp/crm (old system)SQLi in Finder Fire Safety's Finder ERP/CRM (Old System)9.8 Critical
- smartwares c724ip, cip-37210at +1 morePath traversal in Smartwares cameras5.9 Medium
linux-azureUbuntulinux-azure vulnerabilitiesNo score- smartwares c724ip, cip-37210at +1 moreShared credentials in Smartwares cameras7.5 High
- smartwares c724ip, cip-37210at +1 moreCommand Injection in Smartwares cameras7.7 High
- ataksapp reservation management systemXSS in AtaksAPP's Reservation Management System4.7 Medium
- gitlabIncorrect Authorization in GitLab4.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreRing: some aes functions may panic when overflow checking is enabled in ring5.3 Medium
- docker desktopExposure of Proxy Credentials in Docker Desktop Logs5.2 Medium
- apache traffic serverApache Traffic Server: Request smuggling via pipelining after a chunked message body6.3 Medium
- apache traffic serverApache Traffic Server: Intercept plugins are not access controlled6.3 Medium
- apache traffic serverApache Traffic Server: ACL is not fully compatible with older versions6.3 Medium
- extremepacs extreme xdsSensetive Data Exposure in ExtremePACS' Extreme XDS7.6 High
- cookiebot by usercentrics – automatic cookie banner for gdpr/ccpa & google consent modeCookie banner plugin for WordPress – Cookiebot CMP by Usercentrics <= 4.4.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission4.3 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 morePodlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function4.3 Medium
- apache traffic serverApache Traffic Server: Expect header field can unreasonably retain resource4.3 Medium
- huang-yk student-managehuang-yk student-manage Edit a Student Information Page cross site scripting4.8 Medium
- ninjateam notibar – notification bar for wordpressNotibar <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5 Medium
- gitlabIncorrect Authorization in GitLab3.1 Low
- katsushi-kawamori moving media libraryMoving Media Library <= 1.22 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Deletion6.5 Medium
- unknown url shortener | conversion tracking | ab testing | woocommerce, tahminajannat url shortener \| conversion tracking \| ab testing \| woocommerce +1 moreEasy Broken Link Checker <= 9.0.2 - Reflected XSS6.1 Medium
- ad inserter inserterAd Inserter - Reflected cross-site scripting (XSS)5.1 Medium
- samsung notesOut-of-bounds read in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local...5.5 Medium
- samsung notesOut-of-bounds read in parsing rle of bmp image in Samsung Notes prior to version 4.4.26.71 allows...5.5 Medium
- samsung notesOut-of-bounds write in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local...7.3 High
- samsung notesOut-of-bounds read in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local...5.5 Medium
- samsung notesOut-of-bounds write in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows...7.3 High
- samsung notesOut-of-bounds read in parsing wbmp image in Samsung Notes prior to vaersion 4.4.26.71 allows...5.5 Medium
- samsung notesOut-of-bounds read in parsing image data in Samsung Notes prior to vaersion 4.4.26.71 allows...5.5 Medium
- samsung mobile my files, samsung myfiles +1 moreImproper export of Android application components in My Files prior to version 15.0.07.5 in...5.5 Medium
- samsung notesOut-of-bounds read in applying binary of text data in Samsung Notes prior to version 4.4.26.71...5.5 Medium
- samsung notesImproper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to...4.6 Medium
- samsung mobile galaxy wearableImproper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local...4.0 Medium
- samsung notesOut-of-bounds read in appending text paragraph in Samsung Notes prior to version 4.4.26.71 allows...5.5 Medium
- samsung notesOut-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.26.71...5.5 Medium
- samsung notesOut-of-bounds read in action link data in Samsung Notes prior to version 4.4.26.71 allows...5.5 Medium
- samsung notesOut-of-bounds read in applying binary of video content in Samsung Notes prior to version 4.4.26...5.5 Medium
- samsung notesOut-of-bounds read in applying extra data of base content in Samsung Notes prior to version 4.4...5.5 Medium
- samsung notesOut-of-bounds read in applying binary of pdf content in Samsung Notes prior to version 4.4.26.71...5.5 Medium
- samsung notesOut-of-bounds read in reading string of SPen in Samsung Notes prior to version 4.4.26.71 allows...5.5 Medium
- samsung notesOut-of-bounds read in applying binary of voice content in Samsung Notes prior to version 4.4.26...5.5 Medium
- samsung notesOut-of-bounds read in applying binary of hand writing content in Samsung Notes prior to version 4...5.5 Medium
- samsung notesOut-of-bounds read in applying binary of drawing content in Samsung Notes prior to version 4.4.26...5.5 Medium
- samsung wear os, samsung mobile devices +1 moreIncorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local...6.2 Medium
- samsung wear os, samsung mobile devices +1 moreImproper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged...4.4 Medium
- samsung wear os, samsung mobile devices +1 moreIncorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local...6.2 Medium
- Show moreLoading…