CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- iroad dash cam fx2, iroadau fx2 firmware +1 moreIROAD Dash Cam FX2 upload_file unrestricted upload5.3 Medium
- iroad dash cam fx2, iroadau fx2 firmware +1 moreIROAD Dash Cam FX2 Password Hash passwd weak password hash2.3 Low
- iroad dash cam fx2, iroadau fx2 firmware +1 moreIROAD Dash Cam FX2 HTTP/RTSP event information disclosure5.3 Medium
- iroad dash cam fx2, iroadau fx2 firmware +1 moreIROAD Dash Cam FX2 Device Registration default password5.3 Medium
- iroad dash cam x5, dash cam x6 +1 moreIROAD Dash Cam X5/Dash Cam X6 Domain origin validation6.3 Medium
- iroad dash cam x5, dash cam x6 +1 moreIROAD Dash Cam X5/Dash Cam X6 improper authorization9.3 Critical
- iroad dash cam x5, dash cam x6 +1 moreIROAD Dash Cam X5/Dash Cam X6 API Endpoint missing authentication6.9 Medium
- iroad dash cam x5, dash cam x6 +1 moreIROAD Dash Cam X5/Dash Cam X6 Device Pairing hard-coded credentials7.7 High
- iroad x5 mobile appIROAD X5 Mobile App API Endpoint hard-coded credentials6.9 Medium
- iroad dash cam x5IROAD Dash Cam X5 SSID default credentials2.3 Low
- otale tale blogotale Tale Blog Site Settings save saveOptions cross site scripting4.8 Medium
- otale tale blogotale Tale Blog logs improper authentication6.9 Medium
- matio project matiotbeu matio io.c strdup_vprintf heap-based overflow5.3 Medium
- zip-rs zip2zip Vulnerable to Incorrect Path Canonicalization During Archive Extraction, Leading to Arbitrary File Write7.3 High
- matio project matiotbeu matio mat.c Mat_VarPrint heap-based overflow5.3 Medium
- mooveagency gdpr cookie complianceGDPR Cookie Compliance < 4.15.9 - Admin+ Stored XSS3.5 Low
- mooveagency gdpr cookie complianceGDPR Cookie Compliance < 4.15.9 - Admin+ Stored XSS3.5 Low
- mooveagency gdpr cookie complianceGDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSS3.5 Low
- mooveagency gdpr cookie complianceGDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSS4.8 Medium
- mooveagency gdpr cookie complianceGDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSS4.8 Medium
- mooveagency gdpr cookie complianceGDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSS4.8 Medium
- ays pro poll makerPoll Maker < 5.5.4 - Admin+ Stored XSS4.8 Medium
- codename065 download managerDownload Manager < 3.3.07 - Unauthenticated Data Exposure4.6 Medium
- drivin soluçõesDrivin Soluções API registerSchool cross site scripting5.1 Medium
- shibboleth opensaml c++ libraryThe OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter...4.0 Medium
- boxdot gurkgurk (aka gurk-rs) mishandles ANSI escape sequences5.4 Medium
- onosproject onos-lib-goonos-lib-go allows an index out-of-range panic6.2 Medium
- kohaKoha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the...7.7 High
- parallels desktopAlludo Parallels Desktop before 19.4.2 and 20.x before 20.2.2 for macOS on Intel platforms allows...7.8 High
- square wireWire has Uncontrolled Recursion on Nested Groups5.8 Medium
- x.org x serverIn X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse...7.7 High
- 274056675 springboot-openai-chatgpt274056675 springboot-openai-chatgpt Chat History chat deleteChat access control5.3 Medium
- cookforweb all in menuWordPress All In Menu Plugin <= 1.1.5 - SQL Injection vulnerability8.5 High
- fs-code fs posterWordPress FS Poster plugin <= 6.5.8 - SQL Injection vulnerability8.5 High
- aldo latino privatecontentWordPress PrivateContent plugin <= 8.11.4 - SQL Injection vulnerability8.5 High
- aldo latino privatecontentWordPress PrivateContent plugin <= 8.11.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- aldo latino privatecontentWordPress PrivateContent plugin <= 8.11.5 - Subscriber+ Site Wide Broken Access Control vulnerability8.3 High
- freshface fresh frameworkWordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Broken Access Control vulnerability8.6 High
- notfound pie register premiumWordPress Pie Register Premium plugin <= 3.8.3.2 - Path Traversal to Non-Arbitrary File Deletion vulnerability6.3 Medium
- colabrio ohio extraWordPress Ohio Theme Extra plugin <= 3.4.7 - Shortcode Injection vulnerability6.5 Medium
- magepeopleteam booking and rental managerWordPress Booking and Rental Manager Plugin <= 2.2.6 - PHP Object Injection vulnerability8.8 High
- recapture cart recovery and email marketing for woocommerceWordPress Recapture for WooCommerce Plugin <= 1.0.43 - CSRF to Settings Change vulnerability6.5 Medium
- maennchen1.de m1.downloadlistWordPress m1.DownloadList plugin <= 0.19 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- publishpress authorsWordPress PublishPress Authors plugin <= 4.7.3 - SQL Injection vulnerability7.6 High
- silverplugins217 multiple shipping and billing address for woocommerceWordPress Multiple Shipping And Billing Address For Woocommerce Plugin <= 1.3 - SQL Injection vulnerability9.3 Critical
- zzmaster wp antiddosWordPress WP AntiDDOS Plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- notfound debug-bar-extenderWordPress Debug-Bar-Extender Plugin <= 0.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- nicola mustone wp discord postWordPress WP Discord Post Plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- spring devs pre order addon for woocommerce – advance order/backorder pluginWordPress Pre Order Addon for WooCommerce plugin<= 1.0.7 - Reflected Cross-Site Scripting7.1 High
- kdmurray random image selectorWordPress Random Image Selector plugin <= 1.5.6 - Reflected Cross-Site Scripting vulnerability7.1 High
- Show moreLoading…