CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection6.5 Medium
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealer, Classifieds & Listing <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation4.3 Medium
wamrOSS-FuzzHeap-buffer-overflow in wasm_loader_prepare_bytecodeNo score- corosyncCorosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a...9.0 Critical
- magnussolution magnusbillingMagnusBilling Stored Cross-Site Scripting in Login Logs8.2 High
- magnussolution magnusbillingMagnusBilling Stored Cross-Site Scripting in Alarm Module7.6 High
- httpbingo go-httpbinReflected XSS in go-httpbin due to unrestricted client control over Content-Type6.1 Medium
- wind river systems vxworks 7VxWorks 7 USB Failure4.6 Medium
- golang-jwt jwtjwt-go allows excessive memory allocation during header parsing7.5 High
- phpgurukul banquet booking system, online banquet booking system +1 morePHPGurukul Banquet Booking System view-user-queries.php sql injection5.3 Medium
- phplaozhang lzcms-laozhangbokexitongphplaozhang LzCMS-LaoZhangBoKeXiTong HTTP POST Request upimage.html unrestricted upload5.3 Medium
- mayurik best church management softwareSourceCodester Best Church Management Software soulwinning_crud.php unrestricted upload5.3 Medium
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System edit_act.php sql injection5.3 Medium
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System deactivate.php sql injection5.3 Medium
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System deactivate_reg.php sql injection5.3 Medium
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System activate_reg.php sql injection5.3 Medium
- jalios jplatformJalios JPlatform 10 Authenticated XML External Entity Injection (XXE)6.8 Medium
- jalios jplatformJalios JPlatform 10 Multiple Cross-Site Scripting (XSS)7.3 High
opensamlUbuntu,opensaml2Ubuntu +1 moreopensaml vulnerabilityNo score- fortinet fortiosAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS...4.7 Medium
- ibm storage virtualize vsphere remote plug-in, storage virtualize plugin for vsphere +1 moreIBM Storage Virtualize vSphere Remote Plug-in information disclosure6.8 Medium
- parse-community parse-serverParse Server has an OAuth login vulnerability6.9 Medium
- envoyproxy envoyEnvoy crashes when HTTP ext_proc processes local replies6.5 Medium
- vercel next.jsAuthorization Bypass in Next.js Middleware9.1 Critical
- xjd2020 fastcmsFastCMS list sql injection5.3 Medium
- youki-dev youkiLibcontainer is affected by capabilities elevation5.9 Medium
- amazon aws cloud development kit, aws cloud development kit command line interface +1 moreAWS CDK CLI prints AWS credentials retrieved by custom credential plugins5.7 Medium
- tenable nessus agentWhen installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions...7.8 High
- assimpOpen Asset Import Library Assimp CSMLoader.cpp InternReadFile heap-based overflow5.3 Medium
- assimpOpen Asset Import Library Assimp MDLLoader.cpp InternReadFile_Quake1 divide by zero5.3 Medium
- code-projects human resource management system, human resource management +1 morecode-projects Human Resource Management System recruitment.go UpdateRecruitmentById cross site scripting4.8 Medium
- code-projects human resource management system, human resource management +1 morecode-projects Human Resource Management System Account.go Index improper authorization5.1 Medium
- augeasHercules Augeas fa.c re_case_expand null pointer dereference4.8 Medium
- jinher oa c6Jinher OA C6 IncentivePlanFulfillAppprove.aspx sql injection5.3 Medium
- impact technologies itium 6050, itechno itium 6050 firmware +1 moreReflected Cross-Site Scripting (XSS) vulnerability in ITIUM 60505.1 Medium
- mattermost, mattermost server +1 moreBypassing MFA Enforcement on Plugin Endpoints7.5 High
- mattermost, mattermost server +1 moreUnauthorized Bookmark Creation and Modification in Archived Channels4.3 Medium
- mattermost, mattermost server +1 moreMFA Enforcement Bypass in Search APIs4.3 Medium
- mattermost, mattermost server +1 moreUnauthorized Command Execution in Archived Channels4.3 Medium
- mattermost, mattermost server +1 moreUnauthorized Private-to-Public Channel Conversion5.4 Medium
- mattermost, mattermost server +1 moreAuto-Enrollment of Team Admins into Private Channels without explicit consent3.3 Low
- webassembly wabtWebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow2.3 Low
- quickjs-ng quickjsquickjs-ng QuickJS qjs quickjs.c JS_GetRuntime stack-based overflow5.3 Medium
- free5gc smf, simplemachines simple machines forum +1 moreSimpleMachines SMF ManageNews.php cross site scripting5.1 Medium
- free5gc smf, simplemachines simple machines forum +1 moreSimpleMachines SMF ManageAttachments.php cross site scripting5.1 Medium
- manageengine servicedesk plus, servicedesk plus msp, supportcentre plus +3 more +5 moreStored XSS6.3 Medium
- xmedcon project xmedconxmedcon DICOM File malloc integer underflow5.3 Medium
- dell chassis management controller for poweredge fx2 firmware, chassis management controller for poweredge vrtx firmware, chassis management controller (cmc) for dell poweredge fx2 +1 more +3 moreDell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200...8.3 High
- ebm technologies maintenance centerEBM Technologies EBM Maintenance Center - SQL injection8.8 High
- microsoft partner centerMicrosoft Partner Center Elevation of Privilege Vulnerability9.3 Critical
- Show moreLoading…