CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- netskope endpoint dlp module for netskope clientEndpoint DLP Driver DLL6.7 Medium
- wwbn avideoUnauthenticated Reflected XSS via innerHTML in AVideo5.3 Medium
- langflowLangflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint9.3 Critical
- borewit music-metadatamusic-metadata has an infinite loop vulnerability in ASF parser7.5 High
- wwbn avideoAVideo affected by Session Hijacking via Unauthenticated Session ID Disclosure with Permissive CORS8.1 High
- parse-community parse-serverParse Server affected by empty authData bypassing credential requirement on signup6.9 Medium
- wwbn avideoAVideo has an Unauthenticated Password Hash Oracle via encryptPass.json.php5.3 Medium
- wwbn avideoAVideo affected by unauthenticated application takeover via exposed web installer on uninitialized deployments8.1 High
- linuxfoundation tekton pipelines, tektoncd pipeline +1 moreTekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRun6.5 Medium
- naturalintelligence fast-xml-parserfast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)7.5 High
- tillitis tkey client, tkeyclient +1 moreTillitis: TKey Client has an Error in Protocol Implementation4.7 Medium
- mongodb c driverHeap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer2.0 Low
- glpi-project glpiGLPI Vulnerable to Authenticated SQL Injection6.5 Medium
- anyscale ray, red hat ai inference server 3.2, enterprise linux ai (rhel ai) 3 +3 more +5 moreRay Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure8.7 High
- devolutions powershell universalImproper input validation in the apps and endpoints configuration in PowerShell Universal before...5.5 Medium
- devolutions powershell universalMissing authorization checks on multiple gRPC service endpoints in PowerShell Universal before...8.3 High
- aws kiro ideArbitrary code execution via crafted project files in Kiro IDE8.5 High
- mackron dr libs, dr libs dr flac.h +1 moremackron / dr_libs dr_flac.h Excessive Memory Allocation in PICTURE Metadata Parsing6.9 Medium
- mackron miniaudiomackron / miniaudio Out-of-Bounds Read in BEXT Coding History Parsing5.1 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMemory safety issues in slot-based execution hash table spill6.1 Medium
- netskope endpoint dlp module for netskope clientEndpoint DLP Driver Filter Communication Port Integer Overflow6.8 Medium
- canva affinityA type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially...7.8 High
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. By using...7.8 High
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
- canva affinityAn out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a...6.1 Medium
linux-firmwareTuxCare,iwl1000-firmwareTuxCare,iwl100-firmwareTuxCare +21 more +23 moreUpdate of linux-firmwareNo score- wazuhWazuh has Stack-Based Buffer Overflow in Security Configuration Assessment JSON Parser4.9 Medium
- objectcomputing micronaut, micronaut-projects micronaut-core +1 moreMicronaut Framework vulnerable to a Denial of Service in HTML error response caching7.5 High
- nestjs nestNest Fastify HEAD Request Middleware Bypass8.7 High
- step-security harden-runnerEgress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)4.6 Medium
- step-security harden-runnerEgress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)4.6 Medium
- parse-community parse-serverParse Server: LiveQuery subscription with invalid regular expression crashes server5.9 Medium
- parse-community parse-serverParse Server session creation endpoint allows overwriting server-generated session fields4.3 Medium
- parse-community parse-serverParse Server vulnerable to schema poisoning via prototype pollution in deep copy5.3 Medium
- tibco bpm enterpriseTIBCO BPM Enterprise Remote Code Execution (RCE) Vulnerability8.7 High
- Show moreLoading…