CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- trendnet ti-g102iTRENDnet TI-G102i HTTP Request lighttpd plugins_call_handle_uri_raw null pointer dereference7.1 High
- totolink a3000ru, a3000ru firmware +1 moreTOTOLINK A3000RU IBMS Configuration File ExportIbmsConfig.sh access control6.9 Medium
- mannaandpoem openmanusmannaandpoem OpenManus File file_saver.py execute access control4.8 Medium
- linuxfoundation pytorchPyTorch torch.mkldnn_max_pool2d denial of service4.8 Medium
- bluestar micro mallBluestar Micro Mall api.php unrestricted upload5.3 Medium
- bluestar micro mallBluestar Micro Mall data.php sql injection5.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure2.7 Low
- wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 moreElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- sojweb soj soundslidesSoJ Soundslides <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- aspengrovestudios inline image upload for bbpressInline Image Upload for BBPress <= 1.1.19 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- united themes shortcodes by united themesShortcodes by United Themes <= 5.1.6 - Unauthenticated Arbitrary Shortcode Execution6.5 Medium
- davemacd so-called air quotesSo-Called Air Quotes <= 0.1 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- mestresdowp checkout mestres do wp for woocommerceCheckout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update9.8 Critical
- bhuvnesh dap to autoresponders email syncingDAP to Autoresponders Email Syncing <= 1.0 - Unauthenticated Information Exposure5.3 Medium
go.rgst.io/stencilGo,go.rgst.io/stencil/v2Go +1 morego.rgst.io/stencil/v2 vulnerable to Path Traversal6.0 Medium- ibm infosphere information serverIBM InfoSphere Information Server information disclosure4.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure4.4 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure5.3 Medium
- watchguard sso terminal services agentWatchGuard Terminal Services Agent Local Privilege Escalation via Non-Standard Installation Directory6.3 Medium
- watchguard mobile vpn with ssl clientWatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory6.3 Medium
toughcrates.iotough cyclic delegation graphs are not detected2.7 Low- red hat data grid 8, jboss data grid 7 +1 moreInfinispan: infinispan: rest compare api has buffer leak6.5 Medium
- esafenet cdgESAFENET CDG getFileTypeList.jsp sql injection6.9 Medium
- hdfgroup hdf5HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference4.8 Medium
- hdfgroup hdf5HDF5 H5MM.c H5MM_realloc double free4.8 Medium
- hdfgroup hdf5HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow4.8 Medium
- hdfgroup hdf5HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow4.8 Medium
- netis wf-2404Netis WF-2404 BusyBox Shell cleartext storage1.0 Low
openscUbuntuopensc regressionNo score- fig2dev project fig2devfig2dev float point exception6.6 Medium
- fig2dev project fig2devfig2dev segmentation fault6.6 Medium
- fig2dev project fig2devfig2dev heap-buffer overflow6.6 Medium
- netis wf-2404, netis-systems netis wf-2404 firmware +1 moreNetis WF-2404 passwd default password5.4 Medium
- netis wf-2404Netis WF-2404 passwd weak hash1.0 Low
- netis wf-2404, netis-systems netis wf-2404 firmware +1 moreNetis WF-2404 UART hardware allows activation of test or debug logic at runtime7.0 High
- 1000mz chestnutcmsChestnutCMS read readFile path traversal5.3 Medium
- aishida call center systemAishida Call Center System amr2mp3 command injection5.3 Medium
- hdfgroup hdf5HDF5 H5Faccum.c H5F__accum_free heap-based overflow4.8 Medium
ansibleUbuntuansible regressionNo score- hdfgroup hdf5HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow4.8 Medium
- hdfgroup hdf5HDF5 H5FL.c H5FL__blk_gc_list use after free4.8 Medium
- hdfgroup hdf5HDF5 H5Omessage.c H5O_msg_flush heap-based overflow4.8 Medium
govulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo score- google gvisorImproper File Permission Handling in Google gVisor runsc6.8 Medium
- reichertbrothers simplyrets real estate idxWordPress SimplyRETS Real Estate IDX plugin <= 3.0.5 - CSRF to Multiple Admin Actions vulnerability4.3 Medium
- global payments globalpayments woocommerceWordPress GlobalPayments WooCommerce Plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- extendyourweb super responsive sliderWordPress SUPER RESPONSIVE SLIDER Plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- extendyourweb ultimate video galleryWordPress ULTIMATE VIDEO GALLERY Plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mywebtonet php/mysql cpu performance statisticsWordPress PHP/MySQL CPU performance statistics Plugin <= 1.2.1 - PHP Object Injection vulnerability9.8 Critical
- notfound scheduleWordPress Schedule Plugin <= 1.0.0 - SQL Injection vulnerability9.3 Critical
- Show moreLoading…