CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- lb-link bl-wr9000, bl-wr9000 firmware +1 moreLB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflow8.7 High
- cmsmadesimple cms made simpleCMS Made Simple User Management listusers.php cross site scripting4.8 Medium
- thermalright tr-vision homeDLL Injection Privilege Escalation8.4 High
- openatom openharmonyability_ability_runtime an improper input validation vulnerability5.0 Medium
- openatom openharmonycommunication_ipc an improper input validation vulnerability3.3 Low
- openatom openharmonyarkcompiler_ets_runtime has an out-of-bounds write vulnerability5.5 Medium
- openatom openharmonyarkcompiler_ets_runtime has an out-of-bounds write vulnerability5.5 Medium
- openatom openharmonyarkcompiler_ets_runtime has a type confusion vulnerability6.3 Medium
- openatom openharmonymultimedia_audio_standard has an insecure storage of sensitive information vulnerability6.5 Medium
- openatom openharmonyliteos_a has a missing release of memory vulnerability3.3 Low
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after...2.9 Low
- angeljudesuarez payroll management systemitsourcecode Payroll Management System manage_employee.php sql injection6.9 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.7.5 allows an infinite loop while parsing DTD content.4.0 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity...4.0 Medium
- growi, inc. growiGROWI OpenAI thread/message API endpoints do not perform authorization. Affected are v7.4.5 and...8.7 High
- siteserver sscmsSSCMS download PathUtils.RemoveParentPath path traversal5.1 Medium
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform Endpoint uploadLedImage unrestricted upload6.9 Medium
- libexif project libexiflibexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value...7.4 High
- mumbleMumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of...3.7 Low
- technologies integrated management platformTechnologies Integrated Management Platform SetWebpagePic.jsp unrestricted upload6.9 Medium
- index conferences & exhibitions organization ywf bpof apgcs appINDEX Conferences & Exhibitions Organization YWF BPOF APGCS App ae.index.apgcs BuildConfig.java hard-coded credentials4.8 Medium
- No product listedmyAEDES App aedes.me.beta EngageBayUtils.java information disclosure2.0 Low
- litespeed technologies lsws enterprise, openlitespeed, litespeedtech litespeed web server +2 moreOpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command...8.6 High
- xreal nebula appXREAL Nebula App ai.nreal.nebula.universal CloudStoragePlugin.java credentials storage2.0 Low
- i-sens smartlog appi-SENS SmartLog App air.SmartLog.android hard-coded credentials4.8 Medium
- samsung smart switchPath traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite...7.1 High
- samsung smart switchImproper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to...6.9 Medium
- flowci flow-core-xFlowCI flow-core-x SMTP Host ConfigServiceImpl.java save server-side request forgery5.3 Medium
- samsung galaxy storeImproper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows...5.9 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow8.7 High
- samsung galaxy storePath traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file...5.9 Medium
- samsung galaxy storeImproper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create...7.0 High
- samsung smart switchAuthentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote...7.1 High
- samsung smart switchImproper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to...7.1 High
- samsung smart switchImproper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15...5.3 Medium
- samsung smart switchUse of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15...7.1 High
- samsung smart switchExposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7...5.3 Medium
- samsung accountURL redirection in Samsung Account prior to version 15.5.01.1 allows remote attackers to...6.9 Medium
- samsung assistantImproper export of android application components in Samsung Assistant prior to version 9.3.10.7...4.8 Medium
- samsung android, samsung mobile devices +1 moreImproper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to...4.8 Medium
- samsung android, samsung mobile devices +1 moreImproper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local...6.7 Medium
- samsung android, samsung mobile devices +1 moreImproper export of android application components in Secure Folder prior to SMR Mar-2026 Release...8.4 High
- samsung android, samsung mobile devices +1 moreImproper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1...5.1 Medium
- samsung android, samsung mobile devices +1 moreImproper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1...6.8 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow8.7 High
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow8.7 High
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow8.7 High
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection5.3 Medium
- Show moreLoading…