CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- pydicompydicom: Path traversal in FileSet/DICOMDIR ReferencedFileID allows file access outside the File-set root7.8 High
- churchcrm, churchcrm crm +1 moreChurchCRM is vulnerable to Stored XSS through JSON handling in SystemSettings.php6.4 Medium
pcapplusplusOSS-FuzzUse-of-uninitialized-value in pcpp::IDnsResource::decodeNameNo score- apereo xerte online toolkits, xerte online toolkits +1 moreXerte Online Toolkits <= 3.14 Unauthenticated Template Import Arbitrary File Upload Leading to Remote Code Execution9.3 Critical
libvirtDebianlibvirt - security updateNo score- google chromeInteger overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker...8.8 High
- google chromeOut of bounds read in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote...8.8 High
- google chromeOut of bounds read in Skia in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeOut of bounds read and write in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a...8.8 High
- google chromeUse after free in Extensions in Google Chrome prior to 146.0.7680.153 allowed an attacker who...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeUse after free in Digital Credentials API in Google Chrome prior to 146.0.7680.153 allowed a...8.8 High
- google chromeHeap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker...8.8 High
- google chromeUse after free in Network in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote...4.3 Medium
- google chromeInteger overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a remote...8.8 High
- google chromeInsufficient validation of untrusted input in Navigation in Google Chrome prior to 146.0.7680.153...8.8 High
- google chromeOut of bounds write in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeUse after free in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker...8.8 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeStack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote...8.8 High
- google chromeHeap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote...8.8 High
- google chromeHeap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeUse after free in Base in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeOut of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote...8.8 High
- google chromeOut of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed...8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write7.8 High
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A cross-site request forgery...5.4 Medium
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. An XML External Entity (XXE)...4.3 Medium
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A stored cross-site...6.1 Medium
- synacor zimbra collaboration suiteZimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox...4.3 Medium
- synacor zimbra collaboration suiteZimbra Collaboration Suite (ZCS) 10.0 and 10.1 contains a reflected cross-site scripting (XSS)...6.1 Medium
- leefish file thingieFile Thingie 2.5.7 is vulnerable to Directory Traversal. A malicious user can leverage the ...4.3 Medium
- leefish file thingieFile Thingie 2.5.7 is vulnerable to Cross Site Scripting (XSS). A malicious user can leverage the...6.5 Medium
- leefish file thingieFile Thinghie 2.5.7 is vulnerable to Cross Site Scripting (XSS). A malicious user can leverage...6.5 Medium
- dootaskDooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/<id> page...6.1 Medium
- aster-te terrapack tkservercgi, terrapack tkwebcoreng, terrapack tpkwebgis +2 moreThe Terrapack software, from ASTER TEC / ASTER S.p.A., with the indicated components and versions...8.8 High
- awstats, debian linux +1 moreAWStats 8.0 is vulnerable to Command Injection via the open function7.8 High
- syncfusionSyncFusion 30.1.37 is vulnerable to Cross Site Scripting (XSS) via the Document-Editor reply to...5.4 Medium
- dreamfactory coreDreamFactory has a directory traversal7.2 High
- bitcoin coreBitcoin Core through 29.0 allows a denial of service via a crafted transaction.5.3 Medium
- bitcoin coreBitcoin Core 0.13.0 through 29.x has an integer overflow.7.5 High
- anolis sysakSysAK v2.0 and before is vulnerable to command execution via aaa;cat /etc/passwd.9.8 Critical
- spring framework, vmware spring framework +1 moreSpring Framework Improper Path Limitation with Script View Templates5.9 Medium
- spring foundation, vmware spring framework +1 moreServer Sent Event stream corruption2.6 Low
- Show moreLoading…