CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- elated-themes frappeFrappe has Possibility of Remote Code Execution due to improper validation6.3 Medium
- ghozylab gallery for social photoWordPress Gallery for Social Photo plugin <= 1.0.0.35 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- glpi-project glpi-inventory-pluginGLPI Inventory plugin has Improper Access Control Vulnerability8.2 High
- elated-themes frappeFrappe has possibility of SQL injection due to improper validations6.6 Medium
- luxion keyshotLuxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- luxion keyshotLuxion KeyShot DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- luxion keyshotLuxion KeyShot DAE File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability7.8 High
- appsmithAn issue was discovered in Appsmith before 1.51. Users invited as "App Viewer" incorrectly have...6.5 Medium
- appsmithAppsmith's Broken Access Control Allows Viewer Role User to Query Datasources4.8 Medium
- No product listedAuthentication bypass vulnerability7.8 High
govulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo score- hitachi energy trmtrackerThe TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an...6.5 Medium
- jetbrains golandIn JetBrains GoLand before 2025.1 an XXE during debugging was possible4.1 Medium
- hitachi energy trmtrackerThe TRMTracker web application is vulnerable to reflected Cross-site scripting attack. The...6.1 Medium
- hitachi energy rtu500A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the...8.7 High
- hitachi energy trmtrackerA Host Header Injection vulnerability in TRMTracker application may allow an attacker by...6.1 Medium
- hitachi energy rtu500A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850...8.7 High
- hitachi energy rtu500A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an...6.9 Medium
- hitachi energy rtu500A vulnerability exists in the RTU500 web server component that can cause a denial of service to...5.9 Medium
- aresit wp compress – instant performance & speed optimization, wpcompress wp compress +1 moreWP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function5.8 Medium
- apache vclApache VCL: XSS vulnerability in User Lookup impacting user privileges8.4 High
- apache vclApache VCL: SQL injection vulnerability in New Block Allocation form5.1 Medium
- assimpOpen Asset Import Library Assimp MD5 File MD5Parser.cpp AI_MD5_PARSE_STRING_IN_QUOTATION heap-based overflow5.3 Medium
- assimpOpen Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow5.3 Medium
- codeverve digital license managerDigital License Manager <= 1.7.3 - Reflected Cross-Site Scripting via remove_query_arg Function6.1 Medium
- obbdpu your simple svg supportYour Simple SVG Support <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- assimpOpen Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection out-of-bounds5.3 Medium
- assimpOpen Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow5.3 Medium
- assimpOpen Asset Import Library Assimp LWS File LWSLoader.cpp MergeScenes out-of-bounds5.3 Medium
- scheeeli ez sql reports shortcode widget and db backupEZ SQL Reports Shortcode Widget and DB Backup 4.11.13 - 5.25.08 - Cross-Site Request Forgery to Remote Code Execution8.8 High
- ashishajani wp church donationWP Church Donation <= 1.7 - Unauthenticated Stored Cross-Site Scripting7.2 High
- bplugins alert box block – display custom alerts and messagesAlert Box Block – Display notice/alerts in the front end <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Alert Box Block6.4 Medium
- estatebud – properties & listingsEstatebud – Properties & Listings <= 5.5.0 - Cross-Site Request Forgery to Settings Update4.3 Medium
- bittokazi frndzk expandable bottom barFrndzk Expandable Bottom Bar <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via text Parameter5.5 Medium
- red hat build of keycloak, build of keycloak 26.0, single sign-on 7 +2 moreOrg.keycloak/keycloak-services: jwt token cache exhaustion leading to denial of service (dos) in keycloak4.9 Medium
- assimpOpen Asset Import Library Assimp CSM File fast_atof.h fast_atoreal_move out-of-bounds5.3 Medium
- assimpOpen Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds5.3 Medium
- assimpOpen Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds write5.3 Medium
- mtrv teachpressteachPress <= 9.0.9 - Cross-Site Request Forgery to Import Delete4.3 Medium
- ivmartel dicom supportDICOM Support <= 0.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- awesomemotive easy digital downloads, smub easy digital downloads – ecommerce payments and subscriptions made easy +1 moreEasy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.3.6.1 - Unauthenticated Private Post Title Disclosure5.3 Medium
- iocoder ruoyi-vue-prozhijiantianya ruoyi-vue-pro Material Upload Interface upload-news-image path traversal5.3 Medium
- iocoder ruoyi-vue-prozhijiantianya ruoyi-vue-pro Material Upload Interface upload-temporary path traversal5.3 Medium
- iocoder ruoyi-vue-prozhijiantianya ruoyi-vue-pro Material Upload Interface upload-permanent path traversal5.3 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System eligibility.php sql injection6.9 Medium
- italia design comuni italia, unknown design-comuni-wordpress-theme +1 moreDesign Comuni Italia < 1.1.2 - Unauthenticated Stored XSS6.1 Medium
- favoriteposts favoritesFavorites < 2.3.5 - Admin+ Stored XSS3.5 Low
- unknown social slider feed, cm-wp social slider widget +1 moreSocial Slider Feed < 2.2.9 - Admin+ Stored XSS3.5 Low
- plechevandrey wp-recallWP-Recall < 16.26.12 - Admin+ SQL Injection4.7 Medium
- unknown stylish google sheet reader 4.0, wppluginbox stylish google sheet reader +1 moreStylish Google Sheet Reader < 4.1 - Reflected XSS7.1 High
- Show moreLoading…