CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- kubernetes kubeletKubernetes GitRepo Volume Inadvertent Local Repository Access6.5 Medium
- kubernetes kubeletKubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API5.9 Medium
- dataeaseDataEase Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read Vulnerability7.3 High
- santesoft sante pacs serverSantesoft Sante PACS Server Access of Uninitialized Pointer DoS7.5 High
- santesoft sante pacs serverSantesoft Sante PACS Server HTTP.db SHA1 Hash Truncation7.8 High
- santesoft sante pacs serverSantesoft Sante PACS Server Path Traversal Information Disclosure7.5 High
github.com/cheqd/cheqd-nodeGocheqd-node Security patch for upstream vulnerabilities in IBC-Go (ISA-2025-001) and Cosmos SDK (ISA-2025-002)No score- santesoft sante pacs serverSantesoft Sante PACS Server Stack-based Buffer Overflow9.8 Critical
- devolutions serverImproper access control in web extension restriction feature in Devolutions Server 2024.3.13 and...8.1 High
- devolutions serverImproper access control in temporary access requests and checkout requests endpoints in...6.5 Medium
- devolutions remote desktop managerExposure of sensitive information in My Personnal Credentials password history component in...6.5 Medium
- devolutions remote desktop managerExposure of sensitive information in hub data source export feature in Devolutions Remote Desktop...6.5 Medium
- devolutions serverExposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13...7.5 High
- servmask all-in-one wp migration and backupAll in One WP Migration <= 7.89 - Unauthenticated PHP Object Injection7.5 High
paredcrates.iopared Vulnerable to Use After Free in `Parc` and `Prc` Due to Missing Lifetime Constraints6.8 Medium- dell networkerDell NetWorker, 19.11.0.3 and below versions, contain(s) an Open Redirect Vulnerability in NMC....4.3 Medium
- rising technosoft cap back office applicationNo Rate Limiting Vulnerability in CAP back office application8.2 High
- rising technosoft cap back office applicationImproper Access Control Vulnerability in CAP back office application8.2 High
- rising technosoft cap back office applicationAuthentication Bypass Vulnerability in CAP back office application8.2 High
- rising technosoft cap back office applicationAccount Takeover Vulnerability in CAP back office application8.3 High
- rising technosoft cap back office applicationImproper Authentication Vulnerability in CAP back office application8.2 High
- siemens simcenter femap v2401, simcenter femap v2406, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2401 (All versions < V2401.0003),...7.3 High
- codename065 download managerDownload Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwrite5.4 Medium
- croixhaug appointment booking calendar — simply schedule appointments booking pluginAppointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.5 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- issuetrak auditIDOR in Issuetrak NewAuditID parameter via Inv_PopTrakXShow.asp7.7 High
- gitlabIncorrect Authorization in GitLab2.7 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- andreafarracani wowpthWoWPth <= 2.0 - Reflected XSS7.1 High
- andreafarracani wowpthWoWPth <= 2.0 - Reflected XSS7.1 High
- rivercitygraphix limit bioLimit Bio <= 1.0 - Stored XSS via CSRF7.1 High
- s-a wp click infoWP Click Info <= 2.7.4 - Reflected XSS7.1 High
- notfound scheduleSchedule <= 1.0.0 - Reflected XSS7.1 High
- unknown wp e-customers betaWP E Customers <= 0.0.1 - Reflected XSS7.1 High
- rivercitygraphix limit bioLimit Bio <= 1.0 - Reflected XSS7.1 High
- gitlabImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab3.7 Low
- gitlabGeneration of Error Message Containing Sensitive Information in GitLab4.4 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabIncorrect Authorization in GitLab4.3 Medium
- apppresser, scottopolis apppresser – mobile app framework +1 moreAppPresser – Mobile App Framework <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting7.2 High
- brechtvds wp recipe makerWP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- pagelayer, softaculous page builder: pagelayer – drag and drop website builder +1 morePage Builder: Pagelayer – Drag and Drop website builder <= 1.9.9 - Missing Authorization to Authenticated (Contributor+) Post Publication4.3 Medium
- sminozzi reportattacks — brute force & login protectionWordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins <= 2.32 - Authenticated (Admin+) SQL Injection4.9 Medium
- strategy11team business directory plugin – easy listing directories for wordpressBusiness Directory Plugin - Easy Listing Directories for WordPress <= 6.4.14 - Insecure Direct Object Reference to Listing Arbitrary Image Addition5.3 Medium
- arielbrailovsky arielbrailovsky-viraladArielbrailovsky-Viralad <= 1.0.8 - Unauthenticated SQL Injection7.5 High
- clearcodehq cc-img-shortcodeCC-IMG-Shortcode <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- vcita crm and lead management by vcitaCRM and Lead Management by vcita <= 2.7.5 - Missing Authorization to Authenticated (Susbcriber+) Widget Toggle4.3 Medium
- arielbrailovsky arielbrailovsky-viraladArielbrailovsky-Viralad <= 1.0.8 - Unauthenticated SQL Injection7.5 High
- tenda rx3 firmwareTenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to buffer overflow via the...7.5 High
- tenda rx3 firmwareTenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list...7.5 High
- tenda rx3 firmwareTenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list...7.5 High
- Show moreLoading…