CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- boldgrid total upkeep – wordpress backup plugin plus restore & migrate by boldgrid, total upkeep +1 moreTotal Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.10 - Authenticated (Admin+) Command Injection7.2 High
- hcl software sx, hcltech hcl sx +1 moreHCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerability5.5 Medium
- huawei yutufz-5651s1, yutufz-5651s1 senaryaudio +1 moreHuawei PCs have a vulnerability that allows low-privilege users to bypass SDDL permission checks ...5.5 Medium
- fs-code bookneticBooknetic < 4.1.5 - Staff Creation via CSRF8.8 High
- brijeshk89 smart maintenance modeSmart Maintenance Mode < 1.5.2 - Admin+ Stored XSS3.5 Low
- unknown wp-svg-upload, wp svg upload project wp svg upload +1 moreWP SVG Upload <= 1.0.0 - Author+ Stored XSS via SVG4.8 Medium
- brainstormforce spectra gutenberg blocks – website builder for the block editorSpectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- samhoamt sh email alertSH Email Alert <= 1.0 - Reflected Cross-Site Scripting6.1 Medium
- brijeshk89 smart maintenance modeSmart Maintenance Mode <= 1.5.2 - Reflected Cross-Site Scripting via setstatus Parameter6.1 Medium
- themerox ayyash studio — the kick-start kitAyyash Studio <= 1.0.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- zia420 amazing service box addons for wpbakery page builder (formerly visual composer)Amazing service box Addons For WPBakery Page Builder <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- atop project atopatop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and...2.9 Low
- pizhenwei atophttpdhttpd.c in atophttpd 2.8.0 has an off-by-one error and resultant out-of-bounds read because a...5.3 Medium
- eximA use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to...8.1 High
- icinga web 2, icingaweb2 +1 moreIcinga Web 2 has open redirect on login page4.1 Medium
- No product listedAn issue was discovered in OPC cardsystems Webapp Aufwertung 2.1.0. The reference assigned to...7.5 High
- No product listedA cross-site scripting (XSS) vulnerability in ScriptCase before v1.0.003 - Build 3 allows...4.6 Medium
- telesquare tlr-2005ksh firmwareUnauthorized stack overflow vulnerability in Telesquare TLR-2005KSH v.1.1.4 allows a remote...7.5 High
- icinga web 2, icingaweb2 +1 moreIcinga Web 2 Vulnerable to Reflected XSS1.1 Low
- icinga web 2, icingaweb2 +1 moreIcinga Web 2 has XSS in embedded content7.7 High
- icinga web 2, icingaweb2 +1 moreIcinga Web 2 DOM-based XSS vulnerability7.7 High
- telesquare tlr-2005ksh firmwareTelesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the...9.8 Critical
- telesquare tlr-2005ksh firmwareTelesquare TLR-2005KSH 1.1.4 allows unauthorized password modification when requesting the admin...9.8 Critical
- telesquare tlr-2005ksh firmwareTelesquare TLR-2005KSH 1.1.4 has an Information Disclosure vulnerability when requesting...7.5 High
- telesquare tlr-2005ksh firmwareIn Telesquare TLR-2005KSH 1.1.4, an unauthorized stack overflow vulnerability exists when...9.8 Critical
- telesquare tlr-2005ksh firmwareTelesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login...9.8 Critical
- telesquare tlr-2005ksh firmwareTelesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the...9.8 Critical
- telesquare tlr-2005ksh firmwareTelesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack overflow vulnerability when...9.8 Critical
- telesquare tlr-2005ksh firmwareTelesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack buffer overflow vulnerability...9.8 Critical
- telesquare tlr-2005ksh firmwareTelesquare TLR-2005KSH 1.1.4 is affected by an unauthorized command execution vulnerability when...9.8 Critical
- telesquare tlr-2005ksh firmwareTelesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when...9.8 Critical
- telesquare tlr-2005ksh firmwareTelesquare TLR-2005KSH 1.1.4 is vulnerable to Information Disclosure via the parameter...7.5 High
- No product listedHTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 allows a remote attacker to escalate...9.8 Critical
- appsmithAn issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacke…9.8 Critical
- appsmithAn issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a server restart. This is still within the Apps…6.5 Medium
- No product listedAn issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary...6.8 Medium
- davidvongries ultimate dashboard – custom wordpress dashboardUltimate Dashboard <= 3.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation4.3 Medium
- mihail-barinov advanced woo search – product search for woocommerceAdvanced Woo Search <= 3.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via aws_search_terms Shortcode6.4 Medium
pagureDebianPagure: argument injection in pagurerepo.log()9.8 Critical- ericcornelissen shescapeShescape has potential environment variable exposure on Windows with CMD2.1 Low
- rabbitmq rabbitmq-serverRabbitMQ has XSS Vulnerability in an Error Message in Management UI6.1 Medium
- open-emr openemrOpenEMR Has Directory Traversal in Load Code feature4.6 Medium
- nasa cryptolibCryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length9.4 Critical
- ibm spss statisticsIBM SPSS Statistics information disclosure5.9 Medium
- wp01WordPress WP01 plugin <= 2.6.2 - Arbitrary File Download Vulnerability7.5 High
- shamalli web directory freeWordPress Web Directory Free plugin <= 1.7.6 - SQL Injection vulnerability9.3 Critical
- cifs-utilscifs.upcall makes an upcall to the wrong namespace in containerized environments5.9 Medium
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could...7.3 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could...7.3 High
- elated-themes frappeFrappe vulnerable to information disclosure leading to account takeover8.0 High
- Show moreLoading…