CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- osslsigncode project osslsigncodeAn issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to...9.8 Critical
- ralphje signifySignify allows a remote attacker to escalate privileges via the signed_data.py and the context.py components8.8 High
- codehaus-plexus plexus-utils, red hat cryostat 4, openshift developer tools and services +49 more +51 morePlexus-Utils has a Directory Traversal vulnerability in its extractFile method8.8 High
- n2ws n2wIn N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account...9.8 Critical
- n2ws n2wIn N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables...9.8 Critical
- n2w backup\& recoveryIn N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in...9.0 Critical
- No product listedA stack-based buffer overflow vulnerability in the P2P API service in BS Producten Petcam with...8.8 High
- No product listedA buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32. The...7.2 High
- No product listedAn issue in Eufy Homebase 2 version 3.3.4.1h allows a local attacker to obtain sensitive...7.7 High
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP GET Parameter update_purchase.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP GET Parameter update_out_standing.php sql injection5.3 Medium
- ech0Ech0 authenticated user-list exposed data via public `/api/allusers` endpoint5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP GET Parameter update_customer_details.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP GET Parameter update_category.php sql injection5.3 Medium
- scribanScriban before 7.0.0 Denial of Service via Unbounded Resource Consumption7.1 High
- scribanScriban before 7.0.0 Denial of Service via Unbounded Template Output7.1 High
- scribanScriban before 7.0.0 Uncontrolled Recursion via object.to_json8.7 High
- scribanScriban before 7.0.0 Denial of Service via string.pad_left/pad_right8.7 High
- scribanScriban before 7.0.0 LoopLimit Bypass via Built-in Operations8.7 High
- scribanScriban before 7.0.0 MemberFilter Bypass via TemplateContext Cache9.3 Critical
- scribanScriban before 7.0.0 Authorization Bypass via Stale Include Cache9.2 Critical
- scribanScriban before 7.0.0 Stack Overflow via nested array initializers8.7 High
- linuxfoundation nats-serverNATS has mTLS verify_and_map authentication bypass via incorrect Subject DN matching4.2 Medium
- linuxfoundation nats-serverNATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers6.4 Medium
- linuxfoundation nats-serverNATS Server: Incomplete Stripping of Nats-Request-Info Header Allows Identity Spoofing6.4 Medium
- linuxfoundation nats-serverNATS JetStream has an authorization bypass through its Management API4.9 Medium
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS is vulnerable to pre-auth DoS through WebSockets client service5.3 Medium
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS has pre-auth server panic via leafnode handling7.5 High
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS allows MQTT clients to bypass ACL checks7.1 High
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System POST Parameter view_supplier.php sql injection5.3 Medium
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS has MQTT plaintext password disclosure8.6 High
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS Server panic via malicious compression on leafnode port7.5 High
- linuxfoundation nats-serverNATS is vulnerable to MQTT hijacking via Client ID6.5 Medium
- tibco activematrix businessworks, enterprise administrator +1 moreTIBCO ActiveMatrix BusinessWorks Injection Vulnerability8.7 High
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS credentials are exposed in monitoring port via command-line argv7.4 High
- invoiceninja invoice ninja, invoiceninja +1 moreInvoice Ninja Denylist Bypass may Lead to Stored XSS via Invoice Line Items5.4 Medium
- linuxfoundation nats-serverNATS: Message tracing can be redirected to arbitrary subject4.3 Medium
kernel-livepatch-SLE16_Update_6SUSESecurity update for the initial kernel livepatchNo scorekernel-livepatch-SLE16-RT_Update_6SUSE,kernel-livepatch-SLE16_Update_6SUSE +1 moreSecurity update for the initial kernel livepatchNo score- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution7.8 High
- mozilla thunderbird, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreOut of bounds read in IMAP parsing7.4 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading7.8 High
- mozilla thunderbirdSpoofing issue in Thunderbird6.5 Medium
- nvidia model optimizerNVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization...7.8 High
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker...7.5 High
- tenable operational technology exposure, tenable, inc. tenable operation technology +1 moreAn SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket,...1.9 Low
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal...7.5 High
- nvidia triton inference serverNVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker...7.5 High
- nvidia apexNVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a...9.0 Critical
- nvidia megatron-lm, megatron lm +1 moreNVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an...7.8 High
- Show moreLoading…