CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- smartdatasoft resido - real estate wordpress themeResido - Real Estate WordPress Theme <= 3.6 - Missing Authorization to Unauthenticated Server-Side Request Forgery and API Key Settings Update5.3 Medium
- chimpgroup jobcareerWP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover9.8 Critical
- chimpgroup jobcareerWP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Email Update/Account Takeover9.8 Critical
- cmsol auto atendimentoCM Soluces Informatica Ltda Auto Atendimento 1.x.x was discovered to contain a SQL injection via...6.8 Medium
- tenda ac9 firmwareIn Tenda AC9 v1.0 V15.03.05.14_multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a...7.1 High
- tenda ac9 firmwareIn Tenda AC9 v1.0 V15.03.05.14_multi, the mac parameter of /goform/AdvSetMacMtuWan has a stack...9.8 Critical
- tenda ac9 firmwareIn Tenda AC9 v1.0 V15.03.05.14_multi, the cloneType parameter of /goform/AdvSetMacMtuWan has a...9.8 Critical
- tenda ac9 firmwareIn Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack...9.8 Critical
- tendacn ac9 firmwareTenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB...5.9 Medium
- tenda ac6 firmwareTenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.9.8 Critical
- sendquick enteraSendQuick Entera devices before 11HF5 are vulnerable to CAPTCHA bypass via the captcha parameter5.3 Medium
- cmsol auto atendimentoCM Soluces Informatica Ltda Auto Atendimento 1.x.x was discovered to contain a SQL injection via...9.8 Critical
- openpanel openadminCross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker...5.5 Medium
- openpanelAn issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix...5.5 Medium
- openpanelAn issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix...8.0 High
- gnome libxsltnumbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an...7.8 High
- php, netapp ontap +1 moreStream HTTP wrapper truncates redirect location to 1024 bytes6.3 Medium
- php, netapp ontap +1 moreStream HTTP wrapper header check might omit basic auth header6.3 Medium
- php, netapp ontap +1 moreStreams HTTP wrapper does not fail for headers with invalid name and no colon6.3 Medium
- phplibxml streams use wrong content-type header when requesting a redirected resource6.3 Medium
- phpHeader parser of http stream wrapper does not handle folded headers6.3 Medium
- gnome libxsltxsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion...7.8 High
- nestjs nestnest allows a remote attacker to execute arbitrary code via the Content-Type header5.5 Medium
- phpReference counting in php_request_shutdown causes Use-After-Free9.2 Critical
- flowiseFlowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments Endpoint9.3 Critical
- snowflake jdbc, snowflakedb snowflake-jdbc +1 moreSnowflake JDBC Driver client-side encryption key in DEBUG logs3.3 Low
- philips intellispace cardiovascular (iscv)Philips Intellispace Cardiovascular (ISCV) Use of Weak Credentials8.5 High
- philips intellispace cardiovascular (iscv)Philips Intellispace Cardiovascular (ISCV) Improper Authentication8.5 High
- hcl software appscan traffic recorderA path traversal vulnerability in HCL AppScan Traffic Recorder4.3 Medium
- microsoft dataverseMicrosoft Dataverse Elevation of Privilege Vulnerability7.2 High
- vim, netapp bootstrap os +1 moreVim vulnerable to potential data loss with zip.vim and special crafted zip files4.4 Medium
- optigo networks visual networks capture tool, visual bacnet capture tool +1 moreUse of Hard-Coded, Security-Relevant Constants8.7 High
- optigo networks visual networks capture tool, visual bacnet capture tool +1 moreAuthentication Bypass Using an Alternate Path or Channel in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool9.3 Critical
- optigo networks visual networks capture tool, visual bacnet capture tool +1 moreUse of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool8.7 High
- cyclopsmc integratedscriptingIntegrated Scripting vulnerable to arbitrary code execution via Java reflection8.6 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreMODEL File Parsing Out-of-Bounds Read Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreMODEL File Parsing Heap-Based Buffer Overflow Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreCATPRODUCT File Parsing Uninitialized Variable Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreCATPRODUCT File Parsing Uninitialized Variable Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreMODEL File Parsing Out-of-Bounds Read Vulnerability7.8 High
- dataeaseDataEase has an improper authentication vulnerability7.7 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 more3DM File Parsing Use-After-Free Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreSLDPRT File Parsing Out-of-Bounds Read Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreSLDPRT File Parsing Memory Corruption Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreMODEL File Parsing Heap-Based Buffer Overflow Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreCATPRODUCT File Parsing Out-of-Bounds Read Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreCATPRODUCT File Parsing Uninitialized Variable Vulnerability7.8 High
- dataeaseDataease Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read Vulnerability7.3 High
- Show moreLoading…