CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) a...6.8 Medium
- phpgurukul local services search engine management systemPHPGurukul Local Services Search Engine Management System serviceman-search.php sql injection6.9 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an...7.8 High
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an...8.8 High
pygments-style-solarizedPyPIAfter the owner removed the project from PyPI, another user uploaded a new version with non-working codeNo score- code-projects modern bagcode-projects Modern Bag login.php sql injection6.9 Medium
- red hat multicluster engine for kubernetes, advanced cluster management for kubernetes 2 +1 moreHive: exposure of vcenter credentials via clusterprovision in hive / mce / acm8.2 High
- code-projects real estate property management systemcode-projects Real Estate Property Management System Parameter InsertCustomer.php sql injection5.3 Medium
- phpgurukul doctor appointment management systemPHPGurukul Doctor Appointment Management System search.php sql injection6.9 Medium
- nask - pib botsenseLogs manipulation in BotSense6.3 Medium
- phpgurukul online banquet booking systemPHPGurukul Online Banquet Booking System booking-search.php sql injection6.9 Medium
postquantum-feldman-vssPyPIPostQuantum-Feldman-VSS'S Dependency Vulnerability in gmpy2 Leading to Interpreter Crash8.7 High- coreos zincatiZincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods2.1 Low
- phpgurukul curfew e-pass management systemPHPGurukul Curfew e-Pass Management System search-pass.php sql injection6.9 Medium
- mattermost, mattermost desktop +1 moremacOS TCC Bypass via Code Injection3.3 Low
- phpgurukul apartment visitors management systemPHPGurukul Apartment Visitors Management System admin-profile.php sql injection6.9 Medium
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes enovia change manager, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes enovia product engineering specialist, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes 3dswymerStored Cross-site Scripting (XSS) vulnerability affecting 3DPlay in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x8.7 High
- dassault systèmes 3dswymerStored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x8.7 High
- silabs.com simplicity sdkDPA Countermeasures need reseeding4.2 Medium
- fortinet fortiosAn Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1...5.2 Medium
- fortinet antivirus engine, forticlientwindows +1 moreFortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6...4.7 Medium
- phpgurukul apartment visitors management systemPHPGurukul Apartment Visitors Management System create-pass.php sql injection6.9 Medium
- sylius paypalpluginSylius PayPal Plugin Payment Amount Manipulation Vulnerability6.5 Medium
- expr-lang exprMemory Exhaustion in Expr Parser with Unrestricted Input7.5 High
- obiba agateAgate vulnerable to HTML injection in user signup - Administrator phishing risk5.4 Medium
- fortinet fortiosAn exposure of sensitive information to an unauthorized actor vulnerability in FortiOS version 6...4.9 Medium
- fortinet fortisiemA use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote...3.6 Low
- fortinet fortiwlcA use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and...6.5 Medium
- fortinet fortiwlcAn improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and...4.8 Medium
- fortinet fortisandboxA Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and...7.8 High
- fortinet fortiwlcAn improper neutralization of input during web page generation in FortiWLC version 8.6.0, version...4.2 Medium
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of input during web page generation in the SSL VPN portal of...4.0 Medium
- phpgurukul medical card generation system, medical card system +1 morePHPGurukul Medical Card Generation System download-medical-cards.php sql injection6.9 Medium
- itsourcecode vehicle management systemSourceCodester Vehicle Management System confirmbooking.php cross site scripting5.1 Medium
- immunity debugger debuggerBuffer overflow in Immunity Debugger5.4 Medium
- viames pair frameworkviames Pair Framework PHP Object UserRemember.php getCookieContent deserialization6.9 Medium
- phpgurukul human metapneumovirus testing management systemPHPGurukul Human Metapneumovirus Testing Management System Admin Profile Page profile.php cross site scripting5.1 Medium
- phpgurukul human metapneumovirus testing management systemPHPGurukul Human Metapneumovirus Testing Management System profile.php sql injection5.3 Medium
- phpgurukul human metapneumovirus testing management systemPHPGurukul Human Metapneumovirus Testing Management System check_availability.php sql injection5.3 Medium
- Show moreLoading…