CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- d-link dir-513, dlink dir-513 firmware +1 moreD-Link DIR-513 formEasySetupWizard3 stack-based overflow8.7 High
- projectsendprojectsend AJAX Endpoints authorization5.3 Medium
- tenda w3, w3 firmware +1 moreTenda W3 POST Parameter WifiMacFilterSet formWifiMacFilterSet stack-based overflow8.7 High
- tenda w3, w3 firmware +1 moreTenda W3 POST Parameter WifiMacFilterGet formWifiMacFilterGet stack-based overflow8.7 High
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Notification Triggering4.3 Medium
- premio my sticky bar – floating notification bar & sticky header (formerly mystickymenu)My Sticky Bar <= 2.8.6 - Unauthenticated SQL Injection via 'stickymenu_contact_lead_form' Action7.5 High
- asus business system control interfaceAn Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver....6.9 Medium
- asus driver( headset ), driver( keyboard & mouse ) +1 moreAn Insufficient Integrity Verification vulnerability in the ASUS ROG peripheral driver...5.4 Medium
- tenda w3, w3 firmware +1 moreTenda W3 HTTP exeCommand formexeCommand stack-based overflow8.7 High
- asus business system control interfaceAn Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control...6.8 Medium
- qnap hyper data protectorHyper Data Protector6.6 Medium
- gitlabImproper Removal of Sensitive Information Before Storage or Transfer in GitLab4.3 Medium
- tenda w3, w3 firmware +1 moreTenda W3 POST Parameter setAutoPing formSetAutoPing stack-based overflow8.7 High
- tenda w3, w3 firmware +1 moreTenda W3 HTTP setcfm formSetCfm stack-based overflow8.7 High
- tenda i3, i3 firmware +1 moreTenda i3 wifiSSIDset formwrlSSIDset stack-based overflow8.7 High
- tenda i3, i3 firmware +1 moreTenda i3 wifiSSIDget formwrlSSIDget stack-based overflow8.7 High
- feminer wmsFeMiner wms Basic Organizational Structure depart_add_bg.php sql injection6.9 Medium
- autohomecorp frostmourneAutohomeCorp frostmourne Oracle Nashorn JavaScript ExpressionRule.java scriptEngine.eval code injection5.3 Medium
apache-poiOSS-FuzzSecurity exception in org.apache.poi.ss.formula.FormulaParser.parseSheetRangeNo scorepcapplusplusOSS-FuzzUse-of-uninitialized-value in pcpp::byteArrayToHexStringNo score- alfresco activitiAlfresco Activiti Process Variable Serialization System SerializableType.java createObjectInputStream deserialization5.3 Medium
- 648540858 wvp-gb28181-pro648540858 wvp-GB28181-pro IP Address ABLMediaNodeServerService.java getDownloadFilePath server-side request forgery5.3 Medium
- defnull multipart, red hat lightspeed core, openshift lightspeed +8 more +10 moreReDoS in multipart 1.3.0 - `parse_options_header()`7.5 High
- gl-inet ar300m16 firmwareGL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the...9.8 Critical
- gl-inet ar300m16 firmwareGL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the...8.8 High
- gl-inet ar300m16 firmwareGL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the...9.8 Critical
- gl-inet ar300m16 firmwareGL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities...9.8 Critical
- gl-inet ar300m16 firmwareGL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the...9.8 Critical
- No product listedHMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and...9.8 Critical
- No product listedHMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and...7.5 High
- No product listedHMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and...9.1 Critical
- No product listedHMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and...8.8 High
- sqlite, siemens ruggedcom crossbow station access controller (sac) +1 moreAn information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite...7.5 High
- dlink dir-513 firmwareStack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform...9.8 Critical
- asseco liveLocal File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0...6.5 Medium
- gnu libredwgHeap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a...6.5 Medium
- whyour qinglongwhyour qinglong API express.ts protection mechanism5.3 Medium
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to arbitrary file reads through the vault kubernetes authentication provider6.8 Medium
- No product listedOpenAkita Chat API Endpoint shell.py run os command injection4.8 Medium
- perfree go-fastdfs-webperfree go-fastdfs-web Apache Shiro RememberMe ShiroConfig.java rememberMeManager hard-coded key6.3 Medium
- thejoshwolfe yauzlyauzl 3.2.0 - Denial of Service via Off-by-One Error in NTFS Timestamp Parser6.9 Medium
- jcharis machine-learning-web-appsJcharis Machine-Learning-Web-Apps Jinja2 Template app.py render_template cross site scripting5.3 Medium
- tornadoweb tornadoTornado has incomplete validation of cookie attributes7.2 High
- google chromeIncorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a...4.3 Medium
- google chromeInsufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a...4.3 Medium
- google chromeInsufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a...5.3 Medium
- google chromeInsufficient policy enforcement in PDF in Google Chrome prior to 146.0.7680.71 allowed a remote...5.3 Medium
- google chromeInsufficient policy enforcement in Clipboard in Google Chrome prior to 146.0.7680.71 allowed a...4.3 Medium
- google chromeIncorrect security UI in Downloads in Google Chrome on Android prior to 146.0.7680.71 allowed a...6.5 Medium
- google chromeUse after free in WebView in Google Chrome on Android prior to 146.0.7680.71 allowed a remote...8.8 High
- Show moreLoading…