CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.10 +6 more +8 moreVisual Studio Elevation of Privilege Vulnerability7.3 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +13 more +15 moreDirectX Graphics Kernel File Denial of Service Vulnerability4.4 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreNTLM Hash Disclosure Spoofing Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreKernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows exFAT File System Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows USB Video Class System Driver Elevation of Privilege Vulnerability6.6 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows USB Video Class System Driver Elevation of Privilege Vulnerability6.6 Medium
- microsoft azure promptflow-core, azure promptflow-tools, azure promptflow core +1 more +3 moreAzure Promptflow Remote Code Execution Vulnerability6.5 Medium
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft office, word, 365 apps +8 more +10 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft office, word, 365 apps +8 more +10 moreMicrosoft Word Remote Code Execution Vulnerability7.0 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2024 +3 more +5 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Win32 Kernel Subsystem Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Remote Desktop Services Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreWindows Core Messaging Elevation of Privileges Vulnerability7.5 High
- synaptics audio driverPrivilege Escalation Vulnerability in CxUIUSvc service7.8 High
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator cross-site scripting4.8 Medium
- adobe substance3d - designer, substance 3d designer +1 moreSubstance3D - Designer | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - designer, substance 3d designer +1 moreSubstance3D - Designer | Out-of-bounds Write (CWE-787)7.8 High
- mockoonMockoon has a Path Traversal and LFI in the static file serving endpoint7.5 High
- joomla! project cms[20250301] - Core - Malicious file uploads via Media Manager7.1 High
- pimcorePimcore Vulnerable to SQL Injection in getRelationFilterCondition6.3 Medium
- umbraco umbraco-cms, cms +1 moreUmbraco Allows a Restricted Editor User to Delete Media Item or Access Unauthorized Content4.9 Medium
- umbraco umbraco-cms, cms +1 moreUmbraco Allows Improper API Access Control to Low-Privilege Users to Data Type Functionality4.3 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreTwo improper neutralization of special elements used in an SQL Command ('SQL Injection')...4.0 Medium
- fortinet fortisandbox, fortisandbox cloud +1 moreAn improper neutralization of special elements used in an sql command ('sql injection') in...4.1 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreMultiple improper neutralization of special elements used in an os command ('os command injection...6.5 Medium
- fortinet fortisandboxMultiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE...6.5 Medium
- fortinet fortisandboxA client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet...4.2 Medium
- fortinet fortiadcAn improper neutralization of input during web page generation ('Cross-site Scripting')...8.6 High
- fortinet fortiisolatorMultiple improper neutralization of special elements used in an OS command ('OS Command Injection...8.6 High
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreA use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0...7.0 High
- fortinet fortimailA stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7...6.5 Medium
- fortinet fortindrA cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0...7.1 High
- fortinet fortisandboxAn improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in...8.6 High
- fortinet fortisiemAn incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all...3.6 Low
- fortinet fortisandboxAn incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow...7.1 High
- fortinet fortiwebAn improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4...5.5 Medium
- fortinet fortisiemAn exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0...7.7 High
- fortinet fortiwebA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...5.2 Medium
- ratify-project ratifyRatify Azure authentication providers can leak authentication tokens to non-Azure container registries7.2 High
- ivanti secure access clientInsufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a...7.8 High
- ami aptiov, aptio v +1 moreSMM Arbitrary Write via TOCTOU Vulnerability7.5 High
- ami megarac spx, megarac-spx, megarac sp-x +9 more +11 moreRedfish Authentication Bypass10.0 Critical
- mrcmsMRCMS org.marker.mushroom.controller.FileController upload.do upload cross site scripting5.1 Medium
- mennekes smart / premium charging stationsMennekes smart/premium charges systems, Arbitrary file download using ReadFile endpoint7.1 High
- Show moreLoading…