CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- nickemanarin screentogifDLL Sideloading in ScreenToGif7.8 High
- libfuse, red hat enterprise linux 7, enterprise linux 8 +2 moreUse After Free in libfuse7.8 High
- libfuselibfuse: NULL Pointer Dereference and Memory Leak in io_uring Queue Initialization5.5 Medium
- generic-mapping-tools gmtGMT: Stack-based Buffer Overflow in gmt_remote_dataset_id7.3 High
- gpacGPAC MP4Box Heap Buffer Overflow Write in gf_xml_parse_bit_sequence_bs (NHML BS Parsing)5.8 Medium
- eosphoros-ai db-gpteosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted upload5.3 Medium
- eosphoros-ai db-gpteosphoros-ai db-gpt Incomplete Fix editor sql injection6.9 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moregethostbyaddr and gethostbyaddr_r return invalid DNS hostnames5.4 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moregethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response7.5 High
- blakeblackshear frigateFrigate has SSRF vulnerability in /ffprobe endpoint5.0 Medium
- ruby zlibzlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption1.7 Low
- bagofwords1 bagofwordsbagofwords1 bagofwords code_execution.py generate_df injection5.3 Medium
- d-link dir-820lw, dlink dir-820lw firmware +1 moreD-Link DIR-820LW SSDP ssdpcgi_main os command injection6.9 Medium
- totolink wa300, wa300 firmware +1 moreTotolink WA300 cstecgi.cgi recvUpgradeNewFw os command injection6.9 Medium
- sigmade git-mcp-serversigmade Git-MCP-Server gitUtils.ts child_process.exec os command injection4.8 Medium
- devolutions server, mariadb +1 moreHeap-based Buffer Overflow in MariaDB8.6 High
- cryptomator android, cryptomator +1 moreCryptomator for Android: Tampered vault configuration allows MITM attack on Hub API7.6 High
- cisco ios, cryptomator +1 moreCryptomator for IOS: Tampered vault configuration allows MITM attack on Hub API7.6 High
- cryptomatorCryptomator: Unverified masterkeyfile key IDs can access arbitrary local or UNC paths4.1 Medium
- cryptomatorCryptomator: Hub unlocking accepts plaintext HTTP and unvalidated endpoint schemes8.7 High
dockeropenSUSESecurity update for dockerNo scoreruncopenSUSESecurity update for runcNo scorehelmopenSUSESecurity update for helmNo score- atjiu pybbsatjiu pybbs CommentApiController.java create cross site scripting5.1 Medium
- cryptomatorCryptomator: Tampered vault configuration allows MITM attack on Hub API7.6 High
- bluewave-labs checkmateMass Assignment Privilege Escalation in Checkmate8.1 High
postgresql11TuxCare,postgresql11-contribTuxCare,postgresql11-develTuxCare +12 more +14 moreUpdate of postgresql11No score- atjiu pybbsatjiu pybbs TopicApiController.java create cross site scripting5.1 Medium
- tenda a18 proTenda A18 Pro MAC Filtering Configuration Endpoint setMacFilterCfg sub_423B50 stack-based overflow8.7 High
- xinliangcoder php api docXinLiangCoder / php_api_doc Reflected XSS via list_method.php5.1 Medium
- middleapi orpcoRPC: Stored XSS in OpenAPI Reference Plugin via unescaped JSON.stringify8.2 High
- go-vikunja vikunjaVikunja’s Improper Access Control Enables Bypass of Administrator-Imposed Account Disablement8.1 High
- go-vikunja vikunjaVikunja has a 2FA Bypass via Caldav Basic Auth6.9 Medium
- go-vikunja vikunjaVikunja has an IDOR in Task Comments Allows Reading Arbitrary Comments5.3 Medium
- tenda a18 proTenda A18 Pro formSetQosBand set_qosMib_list stack-based overflow8.7 High
- tenda a18 proTenda A18 Pro SetIpMacBind fromSetIpMacBind stack-based overflow8.7 High
- tenda a18 proTenda A18 Pro openSchedWifi setSchedWifi stack-based overflow8.7 High
- tp-link systems inc. ax53 v1, ax55 v4, ax55 v4.6 +1 more +3 moreBuffer Overflow in Network Probe Handling Function of TP-Link Archer AX53 + Archer AX557.7 High
- tp-link systems inc. ax53 v1, tp-link archer ax53 firmware +1 moreAuthenticated Command Injection in mcsd Service of TP-Link Archer AX537.3 High
linux-firmwareTuxCare,iwl1000-firmwareTuxCare,iwl100-firmwareTuxCare +21 more +23 moreUpdate of linux-firmwareNo score- qnap media streaming add-onMedia Streaming Add-on2.7 Low
- qnap qurouterQuRouter0.9 Low
- qnap qurouterQuRouter4.0 Medium
- qnap qurouterQuRouter5.6 Medium
- qnap qurouterQuRouter7.3 High
- qnap quftp, qnap systems inc. quftp service +1 moreQuFTP Service6.2 Medium
- qnap qunetswitchQuNetSwitch8.1 High
- qnap qvr proQVR Pro9.3 Critical
- qnap qunetswitchQuNetSwitch6.8 Medium
- qnap qunetswitchQuNetSwitch6.3 Medium
- Show moreLoading…