CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- acrel environmental monitoring cloud platformAcrel Environmental Monitoring Cloud Platform unrestricted upload6.9 Medium
- tenda fh451, fh451 firmware +1 moreTenda FH451 WrlclientSet stack-based overflow8.7 High
- tenda fh451, fh451 firmware +1 moreTenda FH451 WrlExtraSet formWrlExtraSet stack-based overflow8.7 High
- yoast seo – advanced seo with real-time guidance and built-in aiYoast SEO <= 27.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute6.4 Medium
- wpextended the ultimate wordpress toolkit – wp extendedThe Ultimate WordPress Toolkit – WP Extended <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation via Menu Editor Module8.8 High
- alinto sogoSOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short...2.0 Low
- alinto sogoSOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories.6.4 Medium
- code-projects simple food ordering system, carmelo simple food order system +1 morecode-projects Simple Food Ordering System all-tickets.php sql injection5.3 Medium
- code-projects simple food ordering system, carmelo simple food order system +1 morecode-projects Simple Food Ordering System Database Backup food.sql file access6.9 Medium
- free5gcFree5GC AMF handler.go HandleRegistrationComplete denial of service6.9 Medium
- emtec zoc, zoc terminal +1 moreZOC Terminal 7.23.4 Buffer Overflow Denial of Service6.9 Medium
- bpftpserver bulletproof ftp serverBulletProof FTP Server 2019.0.0.50 Denial of Service via DNS Address6.9 Medium
- bpftpserver bulletproof ftp serverBulletProof FTP Server 2019.0.0.50 Storage-Path Denial of Service6.9 Medium
- deluge-torrent delugeDeluge 1.3.15 Denial of Service via URL Field6.9 Medium
- deluge-torrent delugeDeluge 1.3.15 Denial of Service via Webseeds Field6.9 Medium
- raimersoft rarmaradioRarmaRadio 2.72.3 Server Field Buffer Overflow Denial of Service6.9 Medium
- raimersoft rarmaradioRarmaRadio 2.72.3 Username Field Denial of Service6.9 Medium
- spipSPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator...6.7 Medium
- apconw aix-dbapconw Aix-DB terminology_retriever.py sql injection4.8 Medium
- d-link dhp-1320, dlink dhp-1320 firmware +1 moreD-Link DHP-1320 SOAP redirect_count_down_page stack-based overflow8.7 High
- carazo import and export users and customersImport and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fields8.1 High
- trueleaf apiflowtrueleaf ApiFlow URL Validation http_proxy.service.ts validateUrlSecurity server-side request forgery6.9 Medium
- omnipemf neorhythmOmniPEMF NeoRhythm BLE missing authentication2.3 Low
- i-doit doit cmdb, i-doit +1 morei-doit CMDB 1.12 Arbitrary File Download via file_manager Parameter7.1 High
- i-doit doit cmdb, i-doit +1 morei-doit CMDB 1.12 SQL Injection via objGroupID Parameter8.8 High
- owndmsownDMS 4.7 SQL Injection via pdfstream.php imagestream.php8.8 High
- codnloc phptransformerphpTransformer 2016.9 Directory Traversal via jQueryFileUpload8.7 High
- codnloc phptransformerphpTransformer 2016.9 SQL Injection via GeneratePDF.php8.8 High
- seotoaster, seotoaster ecommerce +1 moreSeoToaster Ecommerce 3.0.0 Local File Inclusion via backend_theme6.8 Medium
- keplerwallpapers kepler wallpaper scriptKepler Wallpaper Script 1.1 SQL Injection via category8.8 High
- simplepresscms simplepress cmsSimplePress CMS 1.0.7 SQL Injection via p and s Parameters8.8 High
- greencms green cms, njtech greencms +1 moreGreen CMS 2.x Path Traversal Arbitrary File Download7.1 High
- greencms green cms, njtech greencms +1 moreGreen CMS 2.x SQL Injection via cat Parameter7.1 High
- deepwisdom metagptFoundation Agents MetaGPT DataInterpreter write_analysis_code.py injection5.3 Medium
- nordvpnNordVPN 6.19.6 Denial of Service via Email Field Buffer Overflow6.9 Medium
- mediamonkeyMediaMonkey 4.1.23 Denial of Service via Malformed URL6.9 Medium
- crun realterm, realterm realterm: serial terminal +1 moreRealTerm Serial Terminal 2.0.0.70 Denial of Service via Port Field6.8 Medium
- crun realterm, realterm realterm: serial terminal +1 moreRealTerm Serial Terminal 2.0.0.70 SEH Overflow Crash6.9 Medium
- memuplay memu play, microvirt memu +1 moreMemu Play 6.0.7 Privilege Escalation via Insecure File Permissions9.3 Critical
- valentina-db studio, valentina studio +1 moreValentina Studio 9.0.5 Linux Buffer Overflow via Host Field6.9 Medium
- acutesystems transmacTransMac 12.3 Denial of Service via Volume Name Field6.9 Medium
- magiciso magic iso makerMagic Iso Maker 5.5 Buffer Overflow Denial of Service6.9 Medium
- uvnc pchelpwarev2PCHelpWareV2 1.0.0.5 Denial of Service via Group Field6.8 Medium
- uvnc pchelpwarev2PCHelpWareV2 1.0.0.5 Denial of Service via SC Creation6.9 Medium
- jetaudio, jetaudio convert video jetaudio +1 morejetAudio 8.1.7 Denial of Service via File Naming Buffer Overflow6.8 Medium
- jetaudio lyric makerLyric Maker 2.0.1.0 Denial of Service via Buffer Overflow6.9 Medium
- lyricvideocreator lyric video creatorLyric Video Creator 2.1 Denial of Service via MP3 File8.7 High
- nsasoft spotpaltalkSpotPaltalk 1.1.5 Name/Key Field Denial of Service6.8 Medium
- pixarra selfie studioSelfie Studio 2.17 Denial of Service via Resize Image6.9 Medium
- pixarra twistedbrush pro studioTwistedBrush Pro Studio 24.06 Denial of Service via srp File6.9 Medium
- Show moreLoading…