CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an URL Redirection to Untrusted Site ('Open...8.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- fractal string::compare::constanttime, string\ +1 moreString::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string7.5 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...7.3 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...7.3 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...9.8 Critical
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...9.1 Critical
- zefram data::entropyData::Entropy for Perl uses insecure rand() function for cryptographic functions7.7 High
powsybl-javaOSS-FuzzSecurity exception in com.powsybl.commons.xml.XmlUtil.lambda$skipSubElements$0No score- totolink a3100r firmwareAn issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary...9.8 Critical
- tenda w6-s firmwareTenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the set_local_time function, which...7.5 High
- tenda w6-s firmwareTenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the setcfm function, which allows...7.5 High
- netgear dc112a firmwareNetgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which...9.8 Critical
- onenavOneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers.5.5 Medium
- onenavOneNav 1.1.0 is vulnerable to Server-Side Request Forgery (SSRF) in custom headers.5.4 Medium
- shopxoShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)6.5 Medium
- shopxoShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings6.3 Medium
- shopxoShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload6.3 Medium
- maccmsmaccms10 v2025.1000.4047 has a Server-Side Request Forgery (SSRF) vulnerability via Add Article.9.1 Critical
- maccmsmaccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) in the Collection...9.1 Critical
- maccmsmaccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled...9.1 Critical
- nayem-howlader online exam systemSourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php.9.8 Critical
- totolink a3002r firmwareTOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.9.8 Critical
- epicor human capital managementA SQL injection vulnerability exists in the Epicor HCM 2021 1.9, specifically in the filter...9.8 Critical
- mispIn app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have...7.2 High
- mispIn MISP before 2.4.193, menu_custom_right_link_html parameters can be set via the UI (i.e.,...5.5 Medium
- mispIn MISP before 2.4.193, menu_custom_right_link parameters can be set via the UI (i.e., without...5.5 Medium
- redocly redocRedoc Prototype Pollution via `Module.mergeObjects` Component7.5 High
- invoiceplaneInvoicePlane (all versions tested as of December 2024) v.1.6.11 and before contains a remote code...9.8 Critical
- libarchiveNull Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program...7.5 High
- alizeait unflattoDuplicate Advisory: @alizeait/unflatto Prototype Pollution via `exports.unflatto` Method9.8 Critical
- janrywang depathdepath and cool-path vulnerable to Prototype Pollution via `set()` Method9.8 Critical
- aliconnect software development kitA Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows an attacker to execute arbitrary...9.8 Critical
- ninja team click to chat – wp support all-in-one floating widgetWordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kentico cmsKentico CMS Additional Database Installation Wizard install.aspx cross site scripting4.8 Medium
- vault group pty ltd vaultre contact form 7WordPress VaultRE Contact Form 7 plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- amazon toughImproper timestamp caching during snapshot rollback in tough5.7 Medium
- amazon toughFailure to detect delegated target rollback in tough5.7 Medium
- amazon toughTerminating targets role delegations are not respected in tough5.7 Medium
- amazon toughRoot metadata version not validated in tough5.7 Medium
- astoundify job colors for wp job managerWordPress Job Colors for WP Job Manager plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- Show moreLoading…