CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- spring ai, vmware spring ai +1 moreSpring AI Redis Store has TAG Field Query Injection Through Improper Neutralization of Special Characters7.5 High
- spring ai, vmware spring ai +1 moreServer-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore7.5 High
- firewalld, red hat enterprise linux 10, enterprise linux 10.0 extended update support +6 more +8 moreFirewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization5.5 Medium
- spring ai, vmware spring ai +1 moreServer-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching8.6 High
- buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 moreMissing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may...6.9 Medium
- buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 moreHidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker...8.6 High
- buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 moreAuthentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker...8.7 High
- buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 moreCode injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is...8.7 High
- buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 moreOS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability...8.6 High
- spring ai, vmware spring ai +1 moreSpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution9.8 Critical
- mika openstreetmapWordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability....5.1 Medium
- ocamlIn OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of...5.9 Medium
- nextendweb smart slider 3Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAll6.5 Medium
- shenzhen ruiming technology streamax crocusShenzhen Ruiming Technology Streamax Crocus Endpoint RemoteFormat.do sql injection6.9 Medium
- code-projects exam form submissioncode-projects Exam Form Submission update_s7.php cross site scripting4.8 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System Parameter modstaffinfo.php sql injection6.9 Medium
- page-replica page replicaPage-Replica Page Replica Endpoint sitemap sitemap.fetch server-side request forgery5.3 Medium
- tenda ac5, ac5 firmware +1 moreTenda AC5 POST Request WizardHandle decodePwd stack-based overflow8.7 High
- yhirose cpp-httplibcpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirect7.4 High
- franklioxygen mytubeMyTube has Unauthenticated Account Lockout via Shared Login Attempt State7.7 High
- franklioxygen mytubeMyTube has an Unauthenticated Admin Privilege Escalation via Passkey Registration8.9 High
- franklioxygen mytubeMyTube has an Improper Access Control that Allows Complete Application Takeover7.4 High
- opensourcepos open source point of sale, opensourcepos +1 moreOpen Source Point of Sale has an IDOR in Password Change (Home)6.5 Medium
- metabaseMetabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import7.2 High
- mapserverMapServer has heap buffer overflow in SLD `Categorize` Threshold parsing5.3 Medium
- traefik, red hat openshift dev spaces 3.27 +1 moreTraefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass6.3 Medium
- oisf suricataSuricata dcerpc: quadratic complexity in dcerpc buffering7.5 High
- oisf suricataSuricata http2: unbounded resource consumption7.5 High
- oisf suricataSuricata smtp/mine: quadratic complexity in extracting urls7.5 High
- oisf suricataSuricata stream: quadratic complexity in stream inspection7.5 High
- oisf suricataSuricata krb5: quadratic complexity in krb5 buffering7.5 High
- oisf suricataSuricata tls: null dereference in tls.alpn rule keyword7.5 High
- anjoy8 blog.admin, blog.core +1 moreA blog.admin v.8.0 and before system's getinfobytoken API interface contains an improper access...4.3 Medium
- otcmsServer-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read...7.5 High
- senior-walter web-based pharmacy product management systemA Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in...7.5 High
- senior-walter web-based pharmacy product management systemA Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in...7.5 High
- senior-walter web-based pharmacy product management systemA Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in...7.5 High
- ahsanriaz26gmailcom inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Inventory System 1...6.1 Medium
- ahsanriaz26gmailcom inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Inventory System 1...6.1 Medium
- ahsanriaz26gmailcom inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Inventory System 1...6.1 Medium
- ahsanriaz26gmailcom inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Inventory System 1...4.8 Medium
- ahsanriaz26gmailcom inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Inventory System 1...6.1 Medium
- oretnom23 online food ordering systemA SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin...8.3 High
- oretnom23 online food ordering systemA SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the...9.8 Critical
- oretnom23 online food ordering systemA SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the...9.8 Critical
- oretnom23 online food ordering systemA SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the...8.8 High
- oretnom23 online food ordering systemA SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the...9.8 Critical
- oretnom23 online food ordering systemA SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the...8.8 High
- oretnom23 online food ordering systemA Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering...5.4 Medium
- tianguaduizhang ai codeIn its design for automatic terminal command execution, AI Code offers two options: Execute safe...9.6 Critical
- Show moreLoading…