CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- linux, linux kernel +1 moreusbnet: gl620a: fix endpoint checking in genelink_bind()5.5 Medium
- linux, linux kernel +1 moreiommu/vt-d: Fix suspicious RCU usage8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremptcp: always handle address removal under msk socket lock7.8 High
- linux, linux kernel +1 moredm-integrity: Avoid divide by zero in table status in Inline mode5.5 Medium
- linux, linux kernel +1 morescsi: ufs: core: bsg: Fix crash when arpmb command fails5.5 Medium
- linux, linux kernel +1 moreefi: Don't map the entire mokvar table to determine its size5.5 Medium
- linux, linux kernel +1 moredrm/fbdev-dma: Add shadow buffering for deferred I/O7.8 High
- linux, linux kernel +1 moresched/core: Prevent rescheduling when interrupts are disabled5.5 Medium
- mesop-dev mesopMesop Class Pollution vulnerability leads to DoS and Jailbreak attacks8.1 High
- shopify pitchforkPitchfork HTTP Request/Response Splitting vulnerability4.3 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure5.5 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection5.4 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication6.3 Medium
- code-projects payroll management systemcode-projects Payroll Management System update_employee.php sql injection5.3 Medium
- kingsoft wps office, wps office +1 moreUse of a weak cryptographic key in the signature verification process in WPS Office9.5 Critical
- wolfgang include mastodon feedWordPress Include Mastodon Feed plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- shakeeb sadikeen rapidloadWordPress RapidLoad plugin <= 2.4.4 - Broken Access Control vulnerability4.3 Medium
- creative werk designs export order, product, customer & coupon for woocommerce to google sheetsWordPress Export Order, Product, Customer & Coupon for WooCommerce to Google Sheets plugin <= 1.8.2 - Broken Access Control vulnerability4.3 Medium
- awesometogi awesome event bookingWordPress Awesome Event Booking plugin <= 2.7.2 - Broken Access Control vulnerability6.5 Medium
- awesometogi awesome event bookingWordPress Awesome Event Booking plugin <= 2.7.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- e4jvikwp vikbooking hotel booking engine & pmsWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.7.2 - CSRF to Settings Change vulnerability6.5 Medium
- leap13 disable elementor editor translationWordPress Disable Elementor Editor Translation plugin <= 1.0.2 - Broken Access Control vulnerability4.3 Medium
- wpfactory ean for woocommerceWordPress EAN Barcode Generator <= 5.3.5 - Broken Access Control vulnerability4.3 Medium
- suiteplugins video & photo gallery for ultimate memberWordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.2 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- envothemes envo multipurposeWordPress Envo Multipurpose theme <= 1.1.6 - Broken Access Control vulnerability5.4 Medium
- wpdeveloper secret metaWordPress Secret Meta plugin <= 1.2.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- vegaVega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace]5.3 Medium
- codetrendy power magWordPress Power Mag theme <= 1.1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- victoracano cazambaWordPress Cazamba plugin <= 1.2 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLab4.4 Medium
- repute infosystems arpriceWordPress ARPrice plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System view_menu.php sql injection5.1 Medium
- burgersoftware storebizWordPress StoreBiz plugin <= 1.0.32 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- peregrinethemes hesterWordPress Hester plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- victortihai morningtime liteWordPress MorningTime Lite theme <= 1.3.2 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- yudleethemes city storeWordPress City Store theme <= 1.4.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aerin quick interest sliderWordPress Quick Interest Slider plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- vega, vega-functions project vega-functions +1 moreVega Cross-Site Scripting (XSS) via event filter when not using CSP mode `expressionInterpeter`5.3 Medium
- linux, linux kernel +1 moretee: optee: Fix supplicant wait loop5.5 Medium
- linux, linux kernel +1 moreASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers7.8 High
- linux, linux kernel +1 morepowerpc/code-patching: Disable KASAN report during patching via temporary mm7.8 High
- linux, linux kernel +1 morenet: allow small head cache usage with large MAX_SKB_FRAGS values7.5 High
- upxUPX p_lx_elf.cpp un_DT_INIT heap-based overflow4.8 Medium
- mozilla firefoxIncorrect handle could lead to sandbox escapes10.0 Critical
- code-projects gym management systemCodezips Gym Management System over_month.php sql injection5.3 Medium
- gitlabImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab3.7 Low
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7 High
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop Registration Users.php registration sql injection6.9 Medium
- gitlabIncorrect Authorization in GitLab7.5 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7 High
- Show moreLoading…