CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- libmingAn out-of-memory error in the parseABC_STRING_INFO function of libming v0.4.8 allows attackers to...7.5 High
- libminglibming v0.4.8 was discovered to contain a memory leak via the parseSWF_PLACEOBJECT3 function.6.5 Medium
- libminglibming v0.4.8 was discovered to contain a segmentation fault via the decompileRETURN function....6.5 Medium
- libmingAn out-of-memory error in the parseABC_NS_SET_INFO function of libming v0.4.8 allows attackers to...7.5 High
- libminglibming v0.4.8 was discovered to contain a memory leak via the parseSWF_ENABLEDEBUGGER2 function.6.5 Medium
- foxcmsAn issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case...9.8 Critical
- nethermind junoNethermind Juno Potential Denial of Service (DoS) via Integer Overflow7.5 High
- totolink a800r firmwareTOTOLINK A800R V4.1.2cu.5137_B20200730 contains a remote command execution vulnerability in the...9.8 Critical
- totolink a810r firmwareTOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in...7.5 High
- openairinterface openairinterface5gA segmentation fault in openairinterface5g v2.1.0 allows attackers to cause a Denial of Service ...6.5 Medium
- sem-cms semcmssemcms <=5.0 is vulnerable to SQL Injection in SEMCMS_Fuction.php.9.8 Critical
- mealieA Broken Object Level Authorization vulnerability in the component /api/users/{user-id} of hay...7.6 High
- mealieA Broken Object Level Authorization vulnerability in the component /api/users/{user-id} of hay...5.4 Medium
- mealieA Broken Object Level Authorization vulnerability in the component /households/permissions of hay...3.1 Low
- splunk, splunk enterprise, secure gateway +2 moreMissing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App4.3 Medium
- splunk app for lookup file editingIncorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File Editing2.5 Low
- splunk, splunk cloud platform, enterprise +2 moreRisky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise5.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreRemote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise8.0 High
- splunk, splunk cloud platform, enterprise +2 moreMaintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise6.5 Medium
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio4.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreRisky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise5.7 Medium
- splunk, splunk enterprise, secure gateway +2 moreSensitive Information Disclosure in Splunk Secure Gateway App7.1 High
- acronis cyber protect cloud agentLocal privilege escalation due to a binary hijacking vulnerability. The following products are...6.3 Medium
- silabs gecko osSilicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability6.5 Medium
- silabs gecko osSilicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- knime business hubIngress-nginx vulnerability in KNIME Business Hub8.7 High
django-tomselectPyPIDjango TomSelect incomplete escaping of dangerous characters in widget attributes1.7 Lowshim-x64TuxCareUpdate of shimNo score- devolutions remote desktop managerImproper authorization in the variable component in Devolutions Remote Desktop Manager on Windows...6.8 Medium
- directusDirectus's webhook trigger flows can leak sensitive data8.6 High
- devolutions remote desktop managerInsufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows...5.4 Medium
- devolutions remote desktop managerImproper authorization in application password policy in Devolutions Remote Desktop Manager on...3.6 Low
- directusDirectus `search` query parameter allows enumeration of non permitted fields5.3 Medium
- devolutions remote desktop managerClient side access control bypass in the permission component in Devolutions Remote Desktop...5.4 Medium
- directusSuspended Directus user can continue to use session token to access API3.5 Low
- directusDirectus's S3 assets become unavailable after a burst of HEAD requests5.3 Medium
- directusDirectus's S3 assets become unavailable after a burst of malformed transformations5.3 Medium
- elated-themes frappeFrappe has possibility of SQL injection due to improper validations6.6 Medium
- google chrome, chromium mojo +1 moreIncorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior...8.3 High
- icinga icingaweb2-module-reportingIcinga Reporting Stored XSS leads to SSRF7.7 High
- beijing honghu yuntu technology fast cad readerDylib Hijacking in Fast CAD Reader8.4 High
- themefunction newseqoWordPress newseqo theme <= 2.1.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- bizerba se & co. kg product family glx and cwxDenial of Service6.5 Medium
- 99colorthemes rainbownewsWordPress RainbowNews theme <= 1.0.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bizerba se & co. kg gt-softcontrolUnrestricted Fileupload6.6 Medium
- buildWordPress Build theme <= 1.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- techthemes auramartWordPress AuraMart theme <= 2.0.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bastien ho event postWordPress Event post plugin <= 5.9.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bastien ho accounting for woocommerceWordPress Accounting for WooCommerce plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- andy moyle church adminWordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability9.3 Critical
- Show moreLoading…