CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- no-chicken echo-mateMath Issue in No-Chicken/Echo-Mate7.3 High
- dtstack chunjunA stack overflow and DoS vulnerability in DTStack/chunjun8.7 High
- yoyofr modizerHeap Buffer Overflow in yoyofr/modizer9.4 Critical
- ixray-team ixray-1.6-stcopInformation disclosure in ixray-1.6-stcop5.3 Medium
- tildearrow furnaceOut-of-bounds Read Overflow in tildearrow/furnace8.4 High
- projectworlds lawyer management system, online lawyer management system +1 moreprojectworlds Lawyer Management System lawyer_booking.php cross site scripting5.1 Medium
- projectworlds online admission systemSourceCodester Online Admission System programmes.php sql injection6.9 Medium
- artraweditor artAn Integer Overflow Vulnerability in artraweditor/ART8.5 High
- code-projects online library management systemSourceCodester Online Library Management System Parameter home.php sql injection6.9 Medium
- defaultfuction jeson-customer-relationship-management-systemDefaultFuction Jeson-Customer-Relationship-Management-System API Module System.php server-side request forgery6.9 Medium
- mod gnutls project gnutls, airtower-luna mod gnutls +1 moremod_gnutls missing key purpose check in client certificate verification6.8 Medium
- mod gnutls project gnutls, airtower-luna mod gnutls +1 moremod_gnutils has stack-based buffer overflow caused by a long client certificate chain7.5 High
- stellarwp learndash lmsLearnDash LMS <= 5.0.3 - Authenticated (Contributor+) SQL Injection via 'filters[orderby_order]' Parameter6.5 Medium
- sourcecodester patients waiting area queue management systemSourceCodester Patients Waiting Area Queue Management System Patient Check-In api_patient_checkin.php ValidateToken improper authorization6.9 Medium
- google chromeUse after free in FedCM in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebGPU in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to...8.8 High
- google chromeInappropriate implementation in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a...8.8 High
- google chromeUse after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in WebGL in Google Chrome prior to 146.0.7680.165 allowed a remote attacker...8.8 High
- google chromeOut of bounds read in CSS in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote...8.8 High
- spring cloud, vmware spring cloud config +1 moreSpring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks8.6 High
- No product listedbolo-blog Article Title article cross site scripting4.8 Medium
pcapplusplusOSS-FuzzUse-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntryNo score- ggml llama.cppllama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsing7.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 1499.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMemory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 1499.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: Text component7.5 High
- mozilla firefox, thunderbird +1 moreUndefined behavior in the WebRTC: Signaling component8.1 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor component9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions, uninitialized memory in the JavaScript Engine component9.1 Critical
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: Canvas2D component9.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video component7.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics component7.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Widget: Cocoa component7.5 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Widget: Cocoa component9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video component9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Audio/Video: GMP component7.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics component7.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: Canvas2D component7.5 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: Canvas2D component7.5 High
- mozilla firefox, thunderbird +1 moreUndefined behavior in the WebRTC: Signaling component9.8 Critical
- mozilla firefox, thunderbird +1 moreDenial-of-service in the WebRTC: Signaling component7.5 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine component9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the Networking: HTTP component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Layout: Text and Fonts component7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreJIT miscompilation in the JavaScript Engine: JIT component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Audio/Video: Web Codecs component7.5 High
- Show moreLoading…