CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- unknown countdown timerCountdown Timer <= 1.0 - Reflected XSS7.1 High
- unknown s3bubble media streaming (aws|elementor|youtube|vimeo functionality), s3bubble s3bubble-amazon-web-services-oembed-media-streaming-support +1 moreS3Bubble Media Streaming <= 8.0 - Reflected XSS7.1 High
- notfound seo toolsSEO Tools <= 4.0.7 - Reflected XSS6.1 Medium
- forsyspress wp login controlWP Login Control <= 2.0.0 - Reflected XSS7.1 High
- socialsnap social snap, unknown social share buttons, social sharing icons, click to tweet — social media plugin by social snap +1 moreSocial Media Plugin by Social Snap <= 1.3.6 - Admin+ Stored XSS3.5 Low
- notfound xv random quotesXV Random Quotes <= 1.40 - Settings Reset via CSRF4.3 Medium
- notfound xv random quotesXV Random Quotes <= 1.40 - Reflected XSS7.1 High
- frazahmed productdynoProductDyno <= 1.0.24 - Reflected Cross-Site Scripting via 'res' Parameter6.1 Medium
- wedevs appsero helperAppsero Helper <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- realmag777 wpcs – wordpress currency switcher professionalWPCS – WordPress Currency Switcher Professional <= 1.2.0.4 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- realmag777 husky – products filter professional for woocommerce, pluginus husky - products filter professional for woocommerce +1 moreHUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion9.8 Critical
- zte goldendbImproper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This...5.3 Medium
- zyxel ax7501-b1 firmware, ax7501-b0 firmware, dx3300-t0 firmware +38 more +40 moreA post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the...7.2 High
- zyxel ex5601-t1 firmware, ax7501-b0 firmware, ax7501-b1 firmware +35 more +37 moreA post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601...7.2 High
- zyxel vmg8825-t50k firmware, dm4200-b0 firmware, emg5723-t50k firmware +3 more +5 moreA post-authentication command injection vulnerability in the "DNSServer” parameter of the...7.2 High
openjdk-17-cracUbuntuopenjdk-17-crac vulnerabilitiesNo scoreopenjdk-21-cracUbuntuopenjdk-21-crac vulnerabilitiesNo score- ibm common cryptographic architecture, 4769 developers toolkit +1 moreIBM Common Cryptographic Architecture information disclosure6.5 Medium
- ibm common cryptographic architecture, 4769 developers toolkit +1 moreIBM Common Cryptographic Architecture information disclosure3.7 Low
- ibm common cryptographic architecture, 4769 developers toolkit +1 moreIBM Common Cryptographic Architecture denial of service6.5 Medium
- sap se s/4hana (manage bank statements)Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)4.3 Medium
- sap se commerce (swagger ui)Cross-Site Scripting (XSS) vulnerability in SAP Commerce (Swagger UI)8.8 High
- sap se s/4hana (manage bank statements)Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)4.3 Medium
- sap se electronic invoicing for brazil (edocument cockpit)Missing Authorization check in SAP Electronic Invoicing for Brazil (eDocument Cockpit)2.4 Low
- sap se netweaver application server javaCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java5.4 Medium
- sap se crm and sap s/4hana (interaction center)Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)3.5 Low
- sap se netweaver (abap class builder)Missing Authorization check in SAP NetWeaver (ABAP Class Builder)8.8 High
- sap se fiori apps (posting library)Broken Access Control in SAP Fiori apps (Posting Library)4.3 Medium
- sap se netweaver application server abap (applications based on sap gui for html)Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)6.1 Medium
- sap se business one (service layer)Broken Authentication in SAP Business One (Service Layer)6.8 Medium
- sap se s/4hana (manage purchasing info records)Missing Authorization check in S/4HANA (Manage Purchasing Info Records)4.3 Medium
- sap se just in timeMissing Authorization check in SAP JIT(Outbound)3.1 Low
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence) +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)5.4 Medium
- sap se business warehouse (process chains)Missing Authorization Check in SAP Business Warehouse (Process Chains)5.7 Medium
- sap se netweaver application server abapCross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP6.1 Medium
- sap se netweaver enterprise portal (obn component)Missing Authentication check in SAP NetWeaver Enterprise Portal (OBN component)5.3 Medium
- sap se s/4hana (rbd)Missing Authorization check in SAP S/4HANA (RBD)4.3 Medium
- sap se business objects business intelligence platformInformation Disclosure in SAP Business Objects Business Intelligence Platform4.1 Medium
- sap se web dispatcher and internet communication managerInformation Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager4.9 Medium
- sap se businessobjects business intelligence platformCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)4.7 Medium
opencvOSS-FuzzHeap-buffer-overflow in std::__1::__function::__func<cv::PngDecoder::compose_frameNo score- datalust seqAn issue was discovered in Datalust Seq before 2024.3.13545. Missing Content-Type validation can...8.8 High
- datalust seqAn issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message...6.5 Medium
- archerIn Archer Platform 6 through 6.14.00202.10024, an authenticated user with record creation...1.8 Low
- percona monitoring and managementAn issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova. The default service...10.0 Critical
- openmrsA reflected cross-site scripting (XSS) vulnerability in the component /legacyui...5.4 Medium
- openmrsA Cross-Site Request Forgery (CSRF) in the component /admin/users/user.form of Openmrs 2.4.3...8.0 High
- openmrsA Cross-Site Request Forgery (CSRF) in Openmrs 2.4.3 Build 0ff0ed allows attackers to execute...6.8 Medium
- openmrsA stored cross-scripting (XSS) vulnerability in Openmrs v2.4.3 Build 0ff0ed allows attackers to...4.8 Medium
- digitaldruid hoteldruidAn issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the...7.1 High
- Show moreLoading…