CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- projectworlds life insurance management systemprojectworlds Life Insurance Management System clientStatus.php sql injection6.9 Medium
- code-projects online ticket reservation systemcode-projects Online Ticket Reservation System passenger.php cross site scripting5.3 Medium
- zte link, mu5120 +1 moreZTELink has a configuration defect vulnerability4.2 Medium
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal admin-profile.php sql injection6.9 Medium
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal booking-details.php sql injection6.9 Medium
- fave themes homeyHomey <= 2.4.3 - Cross-Site Request Forgery to User Verification4.3 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export4.3 Medium
- fave themes homeyHomey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check8.1 High
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal search.php sql injection6.9 Medium
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal about-us.php sql injection6.9 Medium
- code-projects blood bank management systemcode-projects Blood Bank Management System edit_state.php sql injection5.1 Medium
- phpgurukul apartment visitors management systemPHPGurukul Apartment Visitors Management System visitor-detail.php sql injection5.3 Medium
- phpgurukul apartment visitors management systemPHPGurukul Apartment Visitors Management System forgot-password.php sql injection5.3 Medium
- phpgurukul apartment visitors management systemPHPGurukul Apartment Visitors Management System search-visitor.php sql injection5.3 Medium
- redwoodjs sdkoperations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic...3.2 Low
- backdropcms bootstrap lite themeAn XSS issue was discovered in the Bootstrap Lite theme before 1.x-1.4.5 for Backdrop CMS. It...6.4 Medium
- backdropcms bootstrap 5 lite themeAn XSS issue was discovered in the Bootstrap 5 Lite theme before 1.x-1.0.3 for Backdrop CMS. It...6.4 Medium
- backdropcms link iframe formatterAn XSS issue was discovered in the Link iframe formatter module before 1.x-1.1.1 for Backdrop CMS...6.4 Medium
- backdropcms mail disguiseAn issue was discovered in the Mail Disguise module before 1.x-1.0.5 for Backdrop CMS. It enables...6.4 Medium
- backdropcms masqueradeAn issue was discovered in the Masquerade module before 1.x-1.0.1 for Backdrop CMS. It allows...7.5 High
- No product listedA vulnerability was discovered in the Arctera InfoScale 7.0 through 8.0.2 where a .NET remoting...9.8 Critical
- graphicsmagickWPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation.4.5 Medium
- graphicsmagickJXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.4.3 Medium
- No product listedIncorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers...4.3 Medium
- docmosis tornadoAn issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary...9.8 Critical
- google chromeos, chrome os +1 moreTest CVE description6.8 Medium
- phpgurukul user registration & login and user management system, user registration \& login and user management system +1 morePHPGurukul User Registration & Login and User Management System login.php sql injection6.9 Medium
- code-projects blood bank systemcode-projects Blood Bank System AB+.php cross site scripting5.1 Medium
OpenTelemetry.AutoInstrumentationNuGetDoS Vulnerability in TraceContextPropagator.Extract - OpenTelemetry.Api7.5 High- phpgurukul art gallery management systemPHPGurukul Art Gallery Management System search.php cross site scripting5.1 Medium
- sixlabors imagesharpOut-of-bounds Write in SixLabors ImageSharp7.5 High
- mayurik best employee management systemSourceCodester Best Employee Management System print1.php sql injection5.3 Medium
- code-projects blood bank management systemcode-projects Blood Bank Management System delete_bloodGroup.php sql injection5.1 Medium
- linzhaoguan pb-cmsLinZhaoguan pb-cms Add New Topic admin#themes deserialization5.1 Medium
- huang-yk student-managehuang-yk student-manage cross-site request forgery5.3 Medium
- s-a-zhd ecommerce-website-using-phps-a-zhd Ecommerce-Website-using-PHP shop.php sql injection5.3 Medium
- iocoder ruoyi-vue-prozhijiantianya ruoyi-vue-pro deploy special elements used in a template engine5.3 Medium
- code-projects blood bank management systemcode-projects Blood Bank Management System delete_members.php sql injection5.1 Medium
- code-projects blood bank management systemcode-projects Blood Bank Management System upload exposure of information through directory listing6.9 Medium
- fastgptFastGPT SSRF6.9 Medium
- fleetdm fleetSAML authentication vulnerability due to improper SAML response validation9.3 Critical
- code-projects blood bank management systemcode-projects Blood Bank Management System delete_requester.php sql injection5.3 Medium
- nocodbNocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Page5.4 Medium
- envoyproxy gatewayEnvoy Gateway Log Injection Vulnerability5.3 Medium
- group-office group office, intermesh groupoffice +1 moreGroup-Office has a Stored XSS Vulnerability via user's name field6.9 Medium
- collaboraonline onlineRemote Code Execution within Collabora Online jail with Macros Enabled6.3 Medium
- s-a-zhd ecommerce-website-using-phps-a-zhd Ecommerce-Website-using-PHP details.php sql injection5.3 Medium
- s-a-zhd ecommerce-website-using-phps-a-zhd Ecommerce-Website-using-PHP customer_register.php unrestricted upload5.3 Medium
- phpgurukul pre-school enrollment systemPHPGurukul Pre-School Enrollment System edit-class.php sql injection6.9 Medium
- code-projects blood bank management systemcode-projects Blood Bank Management System view_donor.php sql injection5.3 Medium
- Show moreLoading…