CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- zeeways jobsite cmsZeeways Jobsite CMS Lastest SQL Injection via id Parameter8.8 High
- zeeways matrimony cmsZeeways Matrimony CMS Lastest SQL Injection via profile_list8.8 High
- 4mhz base64 decoderBase64 Decoder 1.1.2 Local Buffer Overflow SEH Egghunter8.6 High
- aida64, aida64 extreme +1 moreAIDA64 Extreme 5.99.4900 SEH Buffer Overflow via EggHunter8.6 High
- dulldusk phpfilemanagerphpFileManager 1.7.8 Local File Inclusion via index.php6.9 Medium
- aida64, aida64 business +1 moreAIDA64 Business 5.99.4900 SEH Buffer Overflow via EggHunter8.6 High
- phreesoft phreebooks erp, phreebookserp +1 morePhreeBooks ERP 5.2.3 Arbitrary File Upload via Image Manager8.7 High
- aida64, aida64 extreme +1 moreAIDA64 Extreme 5.99.4900 SEH Buffer Overflow via Logging8.6 High
- speedbit download accelerator plus dapDownload Accelerator Plus DAP 10.0.6.0 SEH Buffer Overflow9.3 Critical
- flexhexFlexHEX 2.71 Local Buffer Overflow via SEH Unicode8.6 High
- flexhex river past cam do, river past cam do project past cam do +1 moreRiver Past Cam Do 3.7.6 Local Buffer Overflow in Activation Code8.6 High
- checkmkSession hijacking via exposed session signing secret in distributed Checkmk setups7.3 High
- knime business hubAuth bypass in Apache Artemis allows reading all internal messages5.3 Medium
- apache artemis, apache software foundation activemq artemis +1 moreApache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission2.3 Low
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +12 more +14 moreCODESYS Control Audit Log Format String DoS7.5 High
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +13 more +15 moreCODESYS Control Boot Application Replacement Enables Code Execution8.8 High
- molotovcherry android-imagemagick7Out-of-bounds Write in MolotovCherry Android-ImageMagick77.8 High
- molotovcherry android-imagemagick7CWE-20 in MolotovCherry Android-ImageMagick79.8 Critical
- molotovcherry android-imagemagick7CWE-79 in MolotovCherry Android-ImageMagick76.1 Medium
- molotovcherry android-imagemagick7Missing Release of Memory after Effective Lifetime in MolotovCherry Android-ImageMagick77.5 High
- molotovcherry android-imagemagick7Missing Release of Memory after Effective Lifetime in MolotovCherry Android-ImageMagick77.5 High
- molotovcherry android-imagemagick7Integer Overflow or Wraparound in MolotovCherry Android-ImageMagick75.5 Medium
- molotovcherry android-imagemagick7Out-of-bounds Write in MolotovCherry Android-ImageMagick78.8 High
- molotovcherry android-imagemagick7NULL Pointer Dereference in MolotovCherry Android-ImageMagick75.5 Medium
- linkingvision rapidvmsImproper Restriction of Operations within the Bounds of a Memory Buffer in linkingvision rapidvms7.8 High
- linkingvision rapidvmsImproper Restriction of Operations within the Bounds of a Memory Buffer in linkingvision rapidvms8.8 High
- linkingvision rapidvmsImproper Restriction of Operations within the Bounds of a Memory Buffer in linkingvision rapidvms8.8 High
- joncampbell123 doslibImproper Restriction of Operations within the Bounds of a Memory Buffer in joncampbell123 doslib7.8 High
- wujekfoliarz dualsensey-v2Out-of-bounds Write in WujekFoliarz DualSenseY-v27.8 High
- slajerek retrodebuggerOut-of-bounds Read in slajerek RetroDebugger9.1 Critical
- no-chicken echo-mateUse After Free in No-Chicken Echo-Mate6.4 Medium
- tmate-io tmateNULL Pointer Dereference in tmate-io tmate5.3 Medium
- fabiangreffrath woofOut-of-bounds Read in fabiangreffrath woof9.1 Critical
- albfan miraclecastNVD-CWE-noinfo in albfan miraclecast6.5 Medium
- crocoblock jetengineJetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter7.5 High
- legalweb wp dsgvo tools (gdpr)WP DSGVO Tools (GDPR) <= 3.1.38 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users9.1 Critical
- unknown product filter for woocommerce by wbwProduct Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE6.5 Medium
- galaxy software services vitals esp, gss vitalsesp +1 moreGalaxy Software Services｜Vitals ESP - Missing Authentication8.7 High
- galaxy software services vitals esp, gss vitalsesp +1 moreGalaxy Software Services｜Vitals ESP - Incorrect Authorization8.7 High
- itsourcecode online enrollment systemitsourcecode Online Enrollment System Parameter index.php sql injection6.9 Medium
- d-link dir-825, dir-825r +1 moreD-Link DIR-825/DIR-825R NTP Service libdeuteron_modules.so handler_update_system_time os command injection8.6 High
- timeplus-io protonHeap Buffer Over-Write Vulenrabilty in timeplus-io/proton10.0 Critical
- dendibakh perf-ninjaArbitrary Code Execution via Crafted Bytecode in dendibakh/perf-ninja10.0 Critical
- rizone soft notepad3Notepad3 Bundled Oniguruma compile_string_node() Heap Buffer Overflow via Crafted Regex Pattern Allows Arbitrary Code Execution9.3 Critical
- taurusxin ncmdumpNull-Pointer Dereference Vulnerability in taurusxin/ncmdump5.2 Medium
- visualfc liteideHTTP Request Smuggling in visualfc/liteide2.9 Low
- teamjcd joycondroidPath Traversal Vulnerability in TeamJCD/JoyConDroid8.6 High
- insightsoftwareconsortium itkInteger overflow vulnerabilities in InsightSoftwareConsortium/ITK9.4 Critical
- osgeo gdalGDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code Execution9.4 Critical
- no-chicken echo-mateUse-After-Free Vulnerability in No-Chicken/Echo-Mate7.3 High
- Show moreLoading…