CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- innovación y cualificación ajax.php pluginBroken access control vulnerability in the Innovación y Cualificación local administration plugin ajax.php6.9 Medium
- innovación y cualificación icprogreso pluginBroken access control vulnerability in the Innovación y Cualificación IcProgreso plugin6.9 Medium
- innovación y cualificación icprogreso pluginSQL injection vulnerability in the Innovación y Cualificación IcProgreso plugin9.3 Critical
- innovación y cualificación ajax.php pluginSQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php9.3 Critical
- phpgurukul human metapneumovirus testing management systemPHPGurukul Human Metapneumovirus Testing Management System Password Recovery Page password-recovery.php sql injection6.9 Medium
- phpgurukul human metapneumovirus testing management systemPHPGurukul Human Metapneumovirus Testing Management System Registered Mobile Number Search registered-user-testing.php cross site scripting5.1 Medium
- artica pandora fms, pandora fms fms +1 moreRemote Code Execution leads to Command Injection8.6 High
- artica pandora fms, pandora fms fms +1 moreQuickShell Authenticated Command Injection8.6 High
- totolink ex1800t, ex1800t firmware +1 moreTOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig stack-based overflow8.7 High
- totolink ex1800t, ex1800t firmware +1 moreTOTOLINK EX1800T cstecgi.cgi setPasswordCfg stack-based overflow8.7 High
- webassembly wabtWebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflow5.3 Medium
- oiwtech oiw-2431apgn-hpOiwtech OIW-2431APGN-HP Personal Script Submenu formScript os command injection5.3 Medium
govulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo score- No product listedgougucms Add Department Page add cross site scripting4.8 Medium
- zohocorp analytics plusAccount Takeover7.4 High
- No product listedcrmeb_java WeChatMessageController.java webHook xml external entity reference5.3 Medium
- lenve vbloglenve VBlog ArticleService.java addNewArticle cross site scripting5.1 Medium
- e-excellence u-office forcee-Excellence U-Office Force - Arbitrary File Upload8.8 High
- e-excellence u-office forcee-Excellence U-Office Force - Improper Authentication9.8 Critical
- lenve vbloglenve VBlog ArticleController.java uploadImg path traversal5.3 Medium
- phpgurukul pre-school enrollment systemPHPGurukul Pre-School Enrollment System contact-us.php sql injection6.9 Medium
- mercurial scmMercurial SCM Web Interface cross site scripting5.3 Medium
- d-link dir-823g, dlink dir-823g firmware +1 moreD-Link DIR-823G UPnP Service HNAP1 SetUpnpSettings improper authorization6.9 Medium
- d-link dir-823g, dlink dir-823g firmware +1 moreD-Link DIR-823G DDNS Service HNAP1 SetDDNSSettings improper authorization6.9 Medium
- shenzhen mingyuan cloud technology mingyuan real estate erp systemShenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System HTTP Header Service.asmx sql injection5.3 Medium
- blackvue appBlackVue App API deviceDelete get request method with sensitive query strings6.3 Medium
- blackvue appBlackVue App API Endpoint credentials storage4.8 Medium
- vam virtual airlines managerVAM Virtual Airlines Manager index.php cross site scripting5.3 Medium
- akamai app & api protectorRule 3000216 (before version 2) in Akamai App & API Protector (with Akamai ASE) before 2024-12-10...5.4 Medium
- code-projects online class and exam scheduling systemCode-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting ...3.2 Low
- fabian online class and exam scheduling systemCode-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting ...4.1 Medium
- fabian online class and exam scheduling systemCode-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting ...6.1 Medium
- fabian online class and exam scheduling systemCode-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting ...5.9 Medium
- code-projects online class and exam scheduling systemCode-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting ...4.6 Medium
- fabian online class and exam scheduling systemCode-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in...5.5 Medium
- No product listedA stored cross-site scripting (XSS) vulnerability in the Send for Approval function of FileCloud...5.0 Medium
- No product listedAn exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers...7.3 High
uptime-kumanpmDuplicate Advisory: Uptime Kuma ReDoS vulnerability6.0 Medium- carmelo online exam mastering systemSQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to...9.8 Critical
- No product listedAn issue was discovered in GL-INet Beryl AX GL-MT3000 v4.7.0. Attackers are able to download...7.5 High
- No product listedA lack of validation in the path parameter (/download) of GL-INet Beryl AX GL-MT3000 v4.7.0...7.5 High
- No product listedAn issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605...9.1 Critical
- changeweb unifiedtransformUnifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take...4.3 Medium
- changeweb unifiedtransformIncorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the...3.3 Low
- No product listedFS Inc S3150-8T2F prior to version S3150-8T2F_2.2.0D_135103 is vulnerable to Cross Site Scripting...7.1 High
- offis dcmtkDCMTK dcmjpls JPEG-LS Decoder memory corruption5.3 Medium
musescoreUbuntu,musescore2Debian,musescore3Debian +2 moreA buffer overflow in the GuitarPro1::read function of MuseScore Studio v4.3.2 allows attackers to...6.8 Medium- vam virtual airlines managerVAM Virtual Airlines Manager HTTP GET Parameter index.php sql injection6.9 Medium
- starsea99 starsea-mallStarSea99 starsea-mall Backend save cross site scripting4.8 Medium
- daycloud studentmanageDayCloud StudentManage Login Endpoint adminScoreUrl sql injection6.9 Medium
- Show moreLoading…