CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- microsoft dataverseMicrosoft Dataverse Remote Code Execution Vulnerability8.7 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS...5.5 Medium
kamailioOSS-FuzzUNKNOWN READ in extract_sess_versionNo score- horde impHorde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS...7.2 High
- qtencodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and...5.8 Medium
- varnish-software varnish enterpriseVarnish Enterprise before 6.0.13r13 allows remote attackers to obtain sensitive information via...4.0 Medium
- varnish-software varnish cache, varnish enterprise, varnish cache project cache +2 moreVarnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via...5.4 Medium
- intevation openslidesAn issue was discovered in OpenSlides before 4.2.5. When creating new chats via the chat_group...3.5 Low
- intevation openslidesAn issue was discovered in OpenSlides before 4.2.5. During login at the /system/auth/login/...5.3 Medium
- intevation openslidesA directory traversal issue was discovered in OpenSlides before 4.2.5. Files can be uploaded to...3.0 Low
- intevation openslidesAn XSS issue was discovered in OpenSlides before 4.2.5. When submitting descriptions such as...5.4 Medium
- anujk305 vehicle record management systemPhpgurukul Vehicle Record Management System v1.0 is vulnerable to SQL Injection in /index.php via...7.3 High
- anujk305 human metapneumovirus \(hmpv\) - testing management systemPhpgurukul Human Metapneumovirus (HMPV) – Testing Management System v1.0 is vulnerable to SQL...5.4 Medium
- linksys e5600 firmwareLinksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the...8.6 High
- linksys e5600 firmwareIn Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection...6.3 Medium
- linksys e5600 firmwareIn Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection...6.3 Medium
- linksys e5600 firmwareLinksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the pt...6.3 Medium
- ioffice ioffice20Guangzhou Hongfan Technology Co., LTD. iOffice20 has any user login vulnerability. An attacker...7.7 High
- linuxfoundation pipecdPipeCD Vulnerable to Privilege Escalation9.8 Critical
- kubesliceInsecure permissions in kubeslice v1.3.1 allow attackers to gain access to the service account's...7.4 High
- linuxfoundation kuadrantInsecure permissions in kuadrant v0.11.3 allow attackers to gain access to the service account's...7.4 High
- loxilbLoxiLB v.0.9.7 and before is vulnerable to Incorrect Access Control which allows attackers to...7.4 High
- apple macosThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14...7.8 High
- apple ipados, macos, visionos +2 more +4 moreThis issue was addressed through improved state management. This issue is fixed in visionOS 1.3,...6.5 Medium
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.1 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 10.6, tvOS...7.5 High
- xpdfOut-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checking2.1 Low
- esri portal for arcgisBUG-0001743369.8 Critical
- openbsdOpenBSD wg(4) kernel crash7.1 High
- centralsquare etrakit.netBlind SQL Injection vulnerability in eTRAKiT.Net9.3 Critical
- audi utr dashcamAudi UTR Dashcam Command API access control5.1 Medium
- redlibRedlib allows a Denial of Service via DEFLATE Decompression Bomb in restore_preferences Form8.7 High
- redis go-redisgo-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment3.7 Low
- audi utr dashcamAudi UTR Dashcam Video Stream hard-coded credentials5.3 Medium
- audi universal traffic recorder appAudi Universal Traffic Recorder App FTP Credentials hard-coded password2.1 Low
- kcp-dev kcpkcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace9.6 Critical
- corazawaf corazaOWASP Coraza WAF has parser confusion which leads to wrong URI in `REQUEST_FILENAME`5.4 Medium
- d-link dir-605l, dir-618, dlink dir-605l firmware +1 more +3 moreD-Link DIR-618/DIR-605L formVirtualServ access control5.3 Medium
- d-link dir-605l, dir-618, dlink dir-605l firmware +1 more +3 moreD-Link DIR-618/DIR-605L formTcpipSetup access control5.3 Medium
- d-link dir-605l, dir-618, dlink dir-605l firmware +1 more +3 moreD-Link DIR-618/DIR-605L formSetPortTr access control5.3 Medium
- kubernetes kube-apiserverNetwork restriction bypass via race condition during namespace termination3.1 Low
- santesoft dicom viewer pro, sante dicom viewer pro +1 moreSantesoft Sante DICOM Viewer Pro Out-of-bounds Write8.4 High
- d-link dir-605l, dir-618, dlink dir-605l firmware +1 more +3 moreD-Link DIR-618/DIR-605L DDNS Service formSetDDNS access control5.3 Medium
- d-link dir-605l, dir-618, dlink dir-605l firmware +1 more +3 moreD-Link DIR-618/DIR-605L formSetPassword access control5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Reveals Data via Forms5.1 Medium
- d-link dir-605l, dir-618, dlink dir-605l firmware +1 more +3 moreD-Link DIR-618/DIR-605L formSetDomainFilter access control5.3 Medium
- d-link dir-605l, dir-618, dlink dir-605l firmware +1 more +3 moreD-Link DIR-618/DIR-605L formAdvNetwork access control5.3 Medium
- veeam backup and recovery, backup \& replication +1 moreA vulnerability allowing remote code execution (RCE) for domain users.9.9 Critical
- d-link dir-605l, dir-618, dlink dir-605l firmware +1 more +3 moreD-Link DIR-618/DIR-605L Firewall Service formAdvFirewall access control5.3 Medium
- hcl software digital experienceHCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226.5.9 Medium
- Show moreLoading…