CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- ni flexloggerNI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability7.8 High
- ni vision builder aiNI Vision Builder AI VBAI File Processing Missing Warning Remote Code Execution Vulnerability7.8 High
- sytel softdial contact centerStored Cross-Site Scripting (XSS) vulnerability in Softdial Contact Center5.3 Medium
- sytel softdial contact centerUnrestricted file upload vulnerability in Softdial Contact Center8.7 High
- ntfs tool toolInsecure storage of sensitive information in NTFS Tool6.8 Medium
- sytel softdial contact centerPath Traversal vulnerability in Softdial Contact Center8.7 High
- codesys gateway for windows, edge gateway +1 moreCODESYS (Edge) Gateway for Windows insecure default5.3 Medium
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +12 more +14 moreCODESYS Control V3 removable media path traversal6.6 Medium
- mb connect line mbconnect24, mbnet, mbnet.rokey +1 more +3 moreMB connect line: Cloud API access due to a lack of authentication for a critical function9.1 Critical
- mb connect line mbconnect24, mbnet, mbnet.rokey +1 more +3 moreMB connect line: Configuration File on the client workstation is not encrypted7.1 High
- codesys runtime toolkitCODESYS Control V3 - OPC UA Server Authentication bypass7.5 High
- mongodb libbson, mongodb, mongodb inc server +1 more +3 moreMongoDB C Driver bson library may be susceptible to buffer overflow8.4 High
- fuji soft incorporated +f fs010mImproper neutralization of special elements used in an OS command ('OS Command Injection') issue...8.8 High
- fuji soft incorporated +f fs010mImproper neutralization of special elements used in an OS command ('OS Command Injection') issue...7.2 High
- samdani logo slider – logo showcase, logo carousel, logo gallery and client logo presentationLogo Slider <= 3.7.3 - Unauthenticated Arbitrary Shortcode Execution7.3 High
openjpegOSS-FuzzHeap-buffer-overflow in opj_j2k_read_tile_headerNo scoregraphql-javaOSS-FuzzSecurity exception in graphql.parser.GraphqlAntlrToLanguage.createTypeNo score- phpgurukul company visitor management systemPHPGurukul Company Visitor Management System Sign In index.php sql injection6.9 Medium
tzdataDebiantzdata - new timezone databaseNo score- gnetsystem g-onx firmwareAn issue was discovered on G-Net Dashcam BB GONX devices. Bypassing of Device Pairing can occur....8.1 High
- gnetsystem g-onx firmwareAn issue was discovered on G-Net Dashcam BB GONX devices. One can Remotely Dump Video Footage and...7.5 High
- gnetsystem g-onx firmwareAn issue was discovered on G-Net Dashcam BB GONX devices. A Public Domain name is Used for the...7.5 High
- gnetsystem g-onx firmwareAn issue was discovered on G-Net Dashcam BB GONX devices. Default credentials for SSID cannot be...9.8 Critical
- gnetsystem g-onx firmwareAn issue was discovered on G-Net Dashcam BB GONX devices. Managing Settings and Obtaining...4.6 Medium
- No product listedAn issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for...9.8 Critical
- No product listedAn issue was discovered on IROAD Dashcam V devices. It uses an unregistered public domain name as...9.1 Critical
- No product listedAn issue was discovered on ROADCAM X3 devices. The mobile app APK (Viidure) contains hardcoded...9.8 Critical
- No product listedAn issue was discovered on ROADCAM X3 devices. It has a uniform default credential set that...9.8 Critical
- hella dr 820 firmwareAn issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Managing Settings and...7.3 High
- hella dr 820 firmwareAn issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Remotely Dumping of...7.5 High
- hella dr 820 firmwareAn issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Default Credentials...9.8 Critical
- hella dr 820 firmwareAn issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Bypassing of Device...9.1 Critical
- hella dr 820 firmwareAn issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Hardcoded Credentials...9.8 Critical
- No product listedOn IROAD v9 devices, one can Remotely Dump Video Footage and the Live Video Stream. The dashcam...7.5 High
- No product listedOn IROAD X5 devices, a Bypass of Device Pairing can occur via MAC Address Spoofing. The dashcam's...6.5 Medium
- No product listedIn the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The...6.5 Medium
- No product listedOn IROAD V9 devices, Managing Settings and Obtaining Sensitive Data and Sabotaging the Car...7.5 High
- No product listedOn IROAD v9 devices, the dashcam has hardcoded default credentials ("qwertyuiop") that cannot be...8.8 High
- systemic-rm risk valueSystemic Risk Value <=2.8.0 is vulnerable to improper access control in /RiskValue...6.5 Medium
- systemic-rm risk valueSystemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=....7.5 High
- iitb safeA lack of rate limiting in the login page of Safe App version a3.0.9 allows attackers to bypass...9.8 Critical
- r1bbit yimioayimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the...6.1 Medium
- No product listedAn XML external entity (XXE) injection vulnerability in the component /weixin/aes/XMLParse.java...8.1 High
- r1bbit yimioayimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via...4.2 Medium
- r1bbit yimioaIncorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024...7.3 High
- r1bbit yimioayimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the...6.1 Medium
- r1bbit yimioayimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the...6.1 Medium
- cosmwasmCosmWasm Allows Bypass of Capability Restrictions in Blockchains7.5 High
- soplanningSOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The ...6.5 Medium
- soplanningA file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload...9.8 Critical
- Show moreLoading…