CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- tenda rx3 firmwareTenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the time and...7.5 High
- tenda rx3 firmwareTenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the deviceId...7.5 High
- tenda rx3 firmwareTenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the...7.5 High
- tenda rx3 firmwareTenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the startIp...7.5 High
- phpgurukul user registration \& login and user management systemA HTML Injection vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User...5.3 Medium
- phpgurukul user registration \& login and user management systemA SQL Injection was found in loginsystem/change-password.php in PHPGurukul User Registration &...6.1 Medium
- modxMODX allows cross-site scripting (XSS) via an SVG file5.4 Medium
- fs s3150-8t2f firmwareFS Inc S3150 8T2F Switch s3150-8t2f-switch-fsos-220d_118101 has a stored cross-site scripting ...5.4 Medium
- inovalogic customer monitorIncorrect access control in the scheduled tasks console of Inova Logic CUSTOMER MONITOR (CM) v3.1...8.8 High
- thepluginpeople enterprise mail handlerAn authenticated stored cross-site scripting (XSS) vulnerability in The Plugin People Enterprise...6.5 Medium
- pecanproject pecanCross Site Scripting vulnerability in PecanProject pecan v.1.7.2 allows a remote attacker to...6.1 Medium
- soundcloudAn issue in SoundCloud IOS application v.7.65.2 allows a local attacker to escalate privileges...6.7 Medium
- celk saudeUser Enumeration via Discrepancies in Error Messages in the Celk Sistemas Celk Saude v.3.1.252.1...5.3 Medium
- rafed-system rafed cms websiteA cross-site scripting (XSS) vulnerability in the component index.php of Rafed CMS Website v1.44...6.1 Medium
- espressif esp-idfEspressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass...8.8 High
- italtel i-mcs nfvCross-site scripting (XSS) vulnerability in Italtel S.p.A. i-MCS NFV v.12.1.0-20211215 allows...6.1 Medium
- zadarmaCross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker...4.7 Medium
- str4d ed25519-javaEd25519 Signature Malleability in ed25519-java Due to Missing Scalar Range Check4.3 Medium
- omniauth saml, onelogin ruby-saml, netapp storagegrid +2 moreRuby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)9.3 Critical
- omniauth saml, onelogin ruby-saml, netapp storagegrid +2 moreruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)9.3 Critical
- omniauth saml, onelogin ruby-saml +1 moreruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses7.7 High
- avid nexis e-series, nexis f-series, nexis pro+ +1 more +3 moreAuthenticated Remote Command Injection affecting Avid NEXIS8.7 High
omniauth-samlRubyGemsomniauth-saml has dependency on ruby-saml version with Signature Wrapping Attack issueNo scorejinja2Ubuntujinja2 regressionNo scoregithub.com/cosmos/ibc-goGo,github.com/cosmos/ibc-go/v2Go,github.com/cosmos/ibc-go/v3Go +5 more +7 moreIBC-Go: Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain haltNo scoregithub.com/cosmos/cosmos-sdkGoCosmos SDK: x/group can halt when erroring in EndBlocker8.7 High- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect uwp app +2 moreGlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability6.0 Medium
- palo alto networks globalprotect app, globalprotect uwp app +1 moreGlobalProtect App: Local Privilege Escalation (PE) Vulnerability7.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame6.8 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI6.8 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Denial of Service (DoS) in GlobalProtect8.2 High
- rmosolgo graphql-rubyRemote code execution when loading a crafted GraphQL schema9.1 Critical
- apache nifiApache NiFi: Potential Insertion of MongoDB Password in Provenance Record6.9 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability7.5 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Image Verification Bypass Vulnerability6.7 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Routing Denial of Service Vulnerability8.6 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Access Control List Bypass Vulnerability5.8 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Access Control List Bypass Vulnerability4.0 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Secure Boot Bypass Vulnerability6.7 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for ASR 9000 Series Routers L2VPN Denial of Service Vulnerability8.6 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity7.4 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software CLI Privilege Escalation Vulnerability8.8 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability8.6 High
macropay-solutions/laravel-crud-wizard-freePackagistlaravel-crud-wizard-free has File Validation Bypass6.9 Medium- apache felix http webconsole pluginApache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin5.6 Medium
- schneider electric webhmi – deployed with ecostruxure power automation systemCWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could...9.8 Critical
- schneider electric ecostruxure power automation system user interface (epas-ui) - secured versionsCWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass...7.0 High
- xerox xerox® desktop print experienceLocal Privilege Escalation on Xerox® Desktop Print Experience® v8.55.2 Medium
- 1e client, platform +1 moreSymbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion7.8 High
- schneider electric ecostruxure panel serverCWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause...4.0 Medium
- Show moreLoading…