CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- opentext™ service managervulnerability has been discovered in OpenText™ Service Manager.2.1 Low
- opentext™ service managerPrivilege Escalation vulnerability has been discovered in OpenText™ Service Manager.7.3 High
- red hat build of apache camel 4.8 for quarkus 3.15, build of apache camel 4.8.5 for spring boot, build of apicurio registry 2 +8 more +10 moreSmallrye-fault-tolerance: smallrye fault tolerance7.5 High
- apache camelApache Camel: Camel Message Header Injection through request parameters4.8 Medium
- ibm app connect enterprise certified container, app connect enterprise certified containers operands, app connect operator +2 moreIBM App Connect Enterprise Certified Container denial of service4.3 Medium
- flarum, flarum framework +1 moreFlarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite6.8 Medium
- juniper junos, junos os +1 moreJunos OS: An local attacker with shell access can execute arbitrary code6.7 Medium
- ruby json, ruby-lang javascript object notation +1 moreRuby JSON Parser has Out-of-bounds Read7.5 High
- eclipse cyclone data distribution service, eclipse foundation cyclone dds +1 moreInteger Underflow in DDS_Security_Deserialize_ methods may lead to OOB read8.8 High
- jetbrains ktorIn JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible5.3 Medium
- jetbrains runtimeIn JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure...5.2 Medium
xorg-serverUbuntu,xorg-server-hwe-16.04Ubuntu,xorg-server-hwe-18.04Ubuntu +2 morexorg-server, xwayland regressionNo score- bitdefender box v1, box firmware +1 moreUnauthenticated Firmware Downgrade in Bitdefender Box v11.8 Low
- bitdefender box v1, box firmware +1 moreUnauthenticated Command Injection in Bitdefender BOX v19.4 Critical
- bitdefender box v1, box firmware +1 moreBitdefender Box Insecure Update Mechanism Vulnerability in libboxhermes.so9.4 Critical
- hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 moreShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flas…6.4 Medium
- hillstone networks next generation firewallAbsolute Path Disclosure Vulnerability in Hillstone Next Generation FireWall5.3 Medium
- linux, linux kernel +1 morepowerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moregtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moretcp: drop secpath at the same time as we currently drop dst7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreio_uring: prevent opcode speculation7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moredrop_monitor: fix incorrect initialization order5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()5.5 Medium
- linux, linux kernel +1 moremm/zswap: fix inconsistency when zswap_store_page() fails3.3 Low
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreUSB: gadget: f_midi: f_midi_complete to call queue_work5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moregeneve: Fix use-after-free in geneve_find_dev().7.8 High
- linux, linux kernel +1 morenet/sched: cls_api: fix error handling causing NULL dereference5.5 Medium
- linux, linux kernel +1 mores390/ism: add release function for struct device7.8 High
- linux, linux kernel +1 moreibmvnic: Don't reference skb after sending to VIOS8.6 High
- linux, linux kernel +1 moresockmap, vsock: For connectible sockets allow only connected5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebpf: avoid holding freeze_mutex during mmap operation5.5 Medium
- linux, linux kernel +1 morenet: Add rx_skb of kfree_skb to raw_tp_null_args[].5.5 Medium
- linux, linux kernel +1 morebpf: Fix softlockup in arena_map_free on 64k page kernel7.8 High
- linux, linux kernel +1 morenvmet: Fix crash when a namespace is disabled9.8 Critical
- linux, linux kernel +1 moredrm/i915/gt: Use spin_lock_irqsave() in interruptible context5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morenfp: bpf: Add check for nfp_app_ctrl_msg_alloc()5.5 Medium
- linux, linux kernel +1 moreASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreacct: perform last write from workqueue5.5 Medium
- linux, linux kernel +1 moremtd: spi-nor: sst: Fix SST write failure5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: client: Add check for next_buffer in receive_encrypted_standard()7.5 High
- linux, linux kernel +1 morebtrfs: fix double accounting race when btrfs_run_delalloc_range() failed7.8 High
- linux, linux kernel +1 morebpf: Fix deadlock when freeing cgroup storage5.5 Medium
- amentotech workreapWorkreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover9.8 Critical
- pagelayer, softaculous page builder: pagelayer – drag and drop website builder +1 morePage Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode4.3 Medium
- linux, linux kernel +1 moreksmbd: fix racy issue from session lookup and expire9.8 Critical
- uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder plugin, uncanny automator +1 moreUncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook5.5 Medium
- djeet finale lite – sales countdown timer & discount for woocommerce, xlplugins finale +1 moreFinale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.19.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Countdown Timer6.4 Medium
- webaways nex-forms – ultimate forms plugin for wordpressNEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.8.1 - Unauthenticated Sensitive Information Exposure5.3 Medium
- jouni malinen hostapdhostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi...3.7 Low
- gkdv blogbuzztime for wpBlogBuzzTime-for-wp <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- Show moreLoading…