CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- hackerbay oneuptimeOneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe10.0 Critical
- complianz – gdpr/ccpa cookie consentComplianz – GDPR/CCPA Cookie Consent <= 7.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Filter4.9 Medium
- techjewel fluent booking – the ultimate appointments scheduling, events booking, events calendar solutionFluent Booking <= 2.0.01 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters7.2 High
- themifyme conditional menusConditional Menus <= 1.2.6 - Cross-Site Request Forgery to Menu Options Update4.3 Medium
- rabilal js help desk – ai-powered support & ticketing systemJS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter7.5 High
- riverpast river past camdoRiver Past CamDo 3.7.6 Structured Exception Handler Buffer Overflow8.6 High
- riverpast river past audio converterRiver Past Audio Converter 7.7.16 Local Buffer Overflow DoS6.8 Medium
- ivideogo myvideoconverter proMyVideoConverter Pro 3.14 Denial of Service Buffer Overflow6.9 Medium
- passfab excel password recoveryPassFab Excel Password Recovery 8.3.1 SEH Buffer Overflow8.6 High
- passfab rar password recoveryPassFab RAR Password Recovery 9.3.2 SEH Buffer Overflow8.6 High
- rttsoftware pdf explorerPDF Explorer 1.5.66.2 Structured Exception Handler Local Code Execution8.6 High
- anyburnAnyBurn 4.3 Denial of Service Local Buffer Overflow6.9 Medium
- passfab excel password recovery, recoverlostpassword excel password recovery professional +1 moreExcel Password Recovery Professional 8.2.0.0 Local Buffer Overflow DoS6.8 Medium
- magnetosoft megapingMegaPing Local Buffer Overflow Denial of Service6.9 Medium
- nsasoft nsauditor, nsauditor local seh buffer overflow +1 moreNsauditor 3.0.28.0 Local SEH Buffer Overflow8.6 High
- boxoft wav to wma converterBoxoft wav-wma Converter 1.0 Local Buffer Overflow SEH8.6 High
- alloksoft splitter, video splitter +1 moreAllok Video Splitter 3.1.1217 Buffer Overflow via License Name8.5 High
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Missing Functional Level Access Control8.1 High
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by SQL Injection8.3 High
- itsourcecode payroll management systemitsourcecode Payroll Management System index.php cross site scripting5.3 Medium
- itsourcecode free hotel reservation systemitsourcecode Free Hotel Reservation System index.php sql injection5.3 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Hardcoded Sensitive Data7.3 High
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change5.5 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by File Discovery6.5 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Session Fixation5.9 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability5.7 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Spamming Vulnerability4.3 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Weak Password Policy vulnerability4.2 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Improper Input Validation3.5 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability3.1 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Banner Disclosure vulnerability3.1 Low
- theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +4 more +6 moreForman: foreman: remote code execution via command injection in websocket proxy8.0 High
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability4.3 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability2.6 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability3.7 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability3.1 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability2.6 Low
- gdtallerMultiple vulnerabilities in GDTaller5.1 Medium
- gdtallerMultiple vulnerabilities in GDTaller5.1 Medium
- itsourcecode free hotel reservation systemitsourcecode Free Hotel Reservation System index.php unrestricted upload5.1 Medium
- smallsrv small http, small http server +1 moreMultiple vulnerabilities in Small HTTP server by Smallsrv8.5 High
- gimp, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGimp: gimp:memory disclosure and denial of service via specially crafted pcx image6.1 Medium
- web-ofisi e-ticaret, ticaret v4 +1 moreWebOfisi E-Ticaret 4.0 SQL Injection via urun Parameter8.8 High
- sourceforge openbiz cubi liteOpenBiz Cubi Lite 3.0.8 SQL Injection via username Parameter8.8 High
- qdpmqdPM 9.1 SQL Injection via filter_by Parameters8.8 High
- hscripts online quiz makerOnline Quiz Maker 1.0 SQL Injection via catid Parameter7.1 High
- sitemakin komseo cartKomSeo Cart 1.3 SQL Injection via edit.php8.8 High
- mediasoftpro asp.net jvideo kitASP.NET jVideo Kit 1.0 SQL Injection via query Parameter8.8 High
- wecodex library cmsLibrary CMS 1.0 SQL Injection via admin login8.8 High
- wecodex online store system cmsOnline Store System CMS 1.0 SQL Injection via clientaccess8.8 High
- Show moreLoading…