CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- saloonSaloon has a Fixture Name Path Traversal Vulnerability8.0 High
- saloonSaloon is vulnerable to SSRF and credential leakage via absolute URL in endpoint overriding base URL6.6 Medium
- openhandsOpenHands is Vulnerable to Command Injection through its Git Diff Handler7.6 High
- enter software iperius backupEnter Software Iperius Backup Backup Job Configuration File privileges management7.3 High
- enter software iperius backupEnter Software Iperius Backup NTLM2 information disclosure2.0 Low
- linuxfoundation opentelemetry instrumentation for java, open-telemetry opentelemetry-java-instrumentation, red hat jboss enterprise application platform 8 +1 more +3 moreOpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution9.3 Critical
- ibm knowledge catalog standard cartridge, knowledge catalog +1 moreMultiple Security vulnerabilities affecting IBM Knowledge Catalog Standard Cartridge4.4 Medium
- ibm maximo application suite - monitor component, maximo application suite +1 moreIBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to .4.0 Medium
- snowflake streamlitStreamlit on Windows has Unauthenticated SSRF Vulnerability (NTLM Credential Exposure)4.7 Medium
- jonschlinkert picomatchPicomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching5.3 Medium
- jonschlinkert picomatchPicomatch has a ReDoS vulnerability via extglob quantifiers7.5 High
- sonarrSonarr Path Traversal vulnerability8.6 High
- sonarrSonarr Authentication Bypass vulnerability8.1 High
- rubyonrails rails, rails activestorage +1 moreRails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests2.3 Low
- squirrelchat smol-tomlsmol-toml: Denial of Service via malformed TOML documents8.2 High
- protocol buffers protobuf-php (pecl)Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input7.1 High
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable to HTTP header injection6.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable to server-side request forgery5.4 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information6.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server Cross-Site Scripting5.4 Medium
- ibm concertMultiple Vulnerabilities in IBM Concert Software5.9 Medium
- ibm concertMultiple Vulnerabilities in IBM Concert Software5.9 Medium
- ibm infosphere information serverIBM InfoSphere Information Server Information Disclosure4.3 Medium
- ibm concertMultiple Vulnerabilities in IBM Concert Software6.2 Medium
- ibm concertMultiple Vulnerabilities in IBM Concert Software5.1 Medium
- enter software iperius backupEnter Software Iperius Backup Backup Service temp file7.3 High
- ibm concertMultiple Vulnerabilities in IBM Concert Software5.1 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable to cross-site request forgery4.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable due to plaintext storage of a password7.1 High
- lemmynet lemmyLemmy's Activitypub-Federation has SSRF via 0.0.0.0 bypass in activitypub-federation-rust v4_is_invalid()6.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server Cross-Site Scripting4.8 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable due to Insecure Direct Object Reference5.7 Medium
- ibm infosphere information serverIBM InfoSphere Information Server Information Disclosure4.3 Medium
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty could provide weaker than expected security6.7 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable to server-side request forgery5.4 Medium
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability6.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable due to insufficient session expiration6.3 Medium
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty Server-Side Request Forgery5.4 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information3.1 Low
- eemeli yamlyaml is vulnerable to Stack Overflow via deeply nested YAML collections4.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable to disclosure of sensitive information6.5 Medium
- py-pdf pypdfpypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream4.6 Medium
- tobychui zoraxyZoraxy: Authenticated Path Traversal in Config Import leads to RCE3.3 Low
- ibm concertMultiple Vulnerabilities in IBM Concert Software6.2 Medium
- code16 sharpSharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtil8.8 High
- code16 sharpSharp has Unrestricted File Upload via Client-Controlled Validation Rules8.8 High
wwbn/avideoPackagistAVideo: Full-Read SSRF Through Unvalidated statsURL Parameter in plugin/Live/test.php4.9 Medium- prestashopPrestaShop has multiple stored XSS vulnerabilities via unprotected Template variables7.7 High
- prestashopPrestaShop: Improper Use of Validation Framework2.0 Low
- b3log siyuanSiYuan has directory traversal within its publishing service9.8 Critical
- Show moreLoading…