CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- knime business hubHard-coded password for object store of KNIME Business Hub8.8 High
- stylemix cost calculator builderWordPress Cost Calculator Builder plugin <= 3.2.65 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- crocoblock jetproductgalleryWordPress JetProductGallery plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- instawp connectWordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerability7.5 High
- crocoblock jetwoobuilderWordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerability7.5 High
- crocoblock jetblocks for elementorWordPress JetBlocks For Elementor plugin <= 1.3.16 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ads by wpquads by wpquadsWordPress Ads by WPQuads plugin <= 2.0.87.1 - Broken Access Control Vulnerability7.5 High
- bastien ho accounting for woocommerceWordPress Accounting for WooCommerce plugin <= 1.6.8 - Local File Inclusion vulnerability7.5 High
- fahad mahmood wp docsWordPress WP Docs plugin < 2.2.7 - Broken Access Control vulnerability4.3 Medium
- crocoblock jetsearchWordPress JetSearch plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wcmsWCMS Registration setregister cross site scripting4.8 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery < 1.8.34 - Unauthenticated Stored XSS6.1 Medium
- wcmsWCMS Article Publishing Page CKEditor unrestricted upload5.3 Medium
- gfi kerioconnect, kerio connect +1 moreGFI KerioConnect PDF File cross site scripting5.1 Medium
- appleple a-blog cms, appleple inc. a-blog cms (ver. 2.8.x series), a-blog cms (ver.2.10.x series) +4 more +6 moreUntrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted...7.5 High
- inaba denki sangyo co., ltd. choco tei watcher mini (ib-mct001)Direct request ('Forced Browsing') issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all...9.8 Critical
- inaba denki sangyo co., ltd. choco tei watcher mini (ib-mct001)Weak password requirements issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If...9.8 Critical
- inaba denki sangyo co., ltd. choco tei watcher mini (ib-mct001)Storing passwords in a recoverable format issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all...4.6 Medium
- inaba denki sangyo co., ltd. choco tei watcher mini (ib-mct001)Use of client-side authentication issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions...7.5 High
- gfi kerioconnect, kerio connect +1 moreGFI KerioConnect File Upload cross site scripting5.1 Medium
- gfi kerioconnect, kerio connect +1 moreGFI KerioConnect Signature EditHtmlSource cross site scripting5.1 Medium
- fpt software nightwolf penetration platformInsecure direct object references (IDOR) in NightWolf Penetration Platform8.3 High
- fpt software nightwolf penetration platformInsecure direct object references (IDOR) in NightWolf Penetration Platform8.3 High
- codecanyon perfex crmCodeCanyon Perfex CRM Contracts contract cross site scripting5.1 Medium
- piextract soop-clmPiExtract SOOP-CLM - SQL Injection9.8 Critical
- code-projects college management systemcode-projects College Management System student.php unrestricted upload5.3 Medium
- canon inc. carps2 printer driver, generic fax printer driver, generic plus lips4 printer driver +11 more +13 moreOut-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver /...9.4 Critical
- vyosVyOS 1.3 through 1.5 or any Debian-based system using dropbear in combination with live-build has...9.0 Critical
- oisf suricataSuricata pcre: negated pcr can cause infinite loop6.2 Medium
- unraidUnraid 7.0.0 before 7.0.1 allows remote users to access the Unraid WebGUI and web console as root...9.6 Critical
- adtran 411 firmwareA command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows...9.8 Critical
- adtran 411 firmwareIncorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to...9.1 Critical
- adtran 411 firmwareA command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows...9.8 Critical
- adtran 411 firmwareAdtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.9.8 Critical
- adtran 411 firmwareAn issue in Adtran 411 ONT vL80.00.0011.M2 allows attackers to escalate privileges via...9.8 Critical
- phpipamphpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install...5.4 Medium
- netgear wnr854t firmwareNetgear Inc WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in...9.8 Critical
- netgear wnr854t firmwareNetgear WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in the...9.8 Critical
- netgear wnr854t firmwareIn Netgear WNR854T 1.5.2 (North America), the UPNP service is vulnerable to command injection in...9.8 Critical
- netgear wnr854t firmwareNetgear WNR854T 1.5.2 (North America) is vulnerable to Arbitrary command execution in cmd.cgi...9.8 Critical
- netgear wnr854t firmwareNetgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection. An attacker can send a...9.8 Critical
- netgear wnr854t firmwareNetgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection. An attacker can send a...9.8 Critical
- netgear wnr854t firmwareNetgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection. An attacker can send a...9.8 Critical
- netgear wnr854t firmwareIn Netgear WNR854T 1.5.2 (North America), the UPNP service (/usr/sbin/upnp) is vulnerable to...9.8 Critical
org.noear:solon-viewMavenopensolon org.noear.solon.core.handle.RenderManager aa render_mav path traversal5.3 Medium- hewlett packard enterprise hpe insight cluster management utility (cmu)Vulnerability in Hewlett Packard Enterprise HPE Insight Cluster Management Utility (CMU).This...9.8 Critical
- trendnet tew-637ap, tew-638apb, tew-637ap firmware +1 more +3 moreTRENDnet TEW-637AP/TEW-638APB HTTP Request goahead sub_41DED0 null pointer dereference7.1 High
- trendnet tew-410apb, tew-410apb firmware +1 moreTRENDnet TEW-410APB HTTP Request httpd sub_4019A0 null pointer dereference7.1 High
- trendnet tew-818dru, tew-818dru firmware +1 moreTRENDnet TEW-818DRU HTTP Request httpd denial of service7.1 High
- trendnet tew-411brp+TRENDnet TEW-411BRP+ HTTP Request httpd sub_401DB0 null pointer dereference7.1 High
- Show moreLoading…