CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- on24 q&a chatAuthorization Bypass in ON24 Q&A chat8.7 High
- watchguard fireware, fireware os +1 moreWatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI7.1 High
- watchguard fireware, fireware os +1 moreWatchGuard Firebox Insecure Deserialization in Fireware Access Portal8.4 High
intagliocrates.ioSymbol confusion after hasher panic in `intaglio` internersNo score- hdd device monitoring studioDevice Monitoring Studio 8.10.00.8925 Denial of Service6.9 Medium
- coreftp core ftp/sftp server, core ftp +1 moreCore FTP/SFTP Server 1.2 Denial of Service via Buffer Overflow8.7 High
- navicat for oracleNavicat for Oracle 12.1.15 Password Field Denial of Service6.9 Medium
- networkactiv web serverNetworkActiv Web Server 4.0 Username Field Buffer Overflow DoS6.9 Medium
- smartftp, smartftp client +1 moreSmartFTP Client 9.0.2615.0 Denial of Service via Host Field6.9 Medium
- southrivertech webdriveWebDrive 18.00.5057 Denial of Service via Secure WebDAV6.9 Medium
- messenger softros lan messenger, softros lan messenger +1 moreSoftros LAN Messenger 9.2 Denial of Service via Log Files Location6.8 Medium
- heidisqlHeidiSQL 9.5.0.5196 Denial of Service via Preferences6.9 Medium
- eusing free ip switcherFree IP Switcher 3.1 Denial of Service via Computer Name6.8 Medium
- bpftpserver bulletproof ftp serverBulletProof FTP Server 2019.0.0.50 Denial of Service via SMTP6.8 Medium
- netsetmanNetSetMan 4.7.1 Workgroup Buffer Overflow Denial of Service6.9 Medium
- valentina-db studio, valentina studio +1 moreValentina Studio 9.0.4 Denial of Service via Host Parameter6.9 Medium
- ftpshell serverFTPShell Server 6.83 Denial of Service via Account Name6.9 Medium
- al-ko robolinho update softwareHard-coded AWS Key in AL-KO Robolinho Update Software6.9 Medium
- gigabyte performance libraryGIGABYTE｜Performance Library - Insecure Deserialization8.5 High
- libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 moreLibarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing7.5 High
- pop-os cosmic-greeterIncomplete privilege drop for com.system76.CosmicGreeter.GetUserData5.8 Medium
- gigabyte control centerGIGABYTE｜Gigabyte Control Center - Arbitrary File Write9.2 Critical
- eset, spol. s.r.o eset protect (on-prem)User enumeration in ESET Protect (on-prem)5.3 Medium
- lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 moreCommand Injection in mlflow/mlflow10.0 Critical
- tinyproxytinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of Service8.7 High
- wago device sphere, solution builder +1 moreBackend Access Due to Insufficient Input Validation7.5 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 moreLibsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment5.9 Medium
- frrouting frr, frrouting +1 moreFRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control2.3 Low
- code-projects exam form submissioncode-projects Exam Form Submission update_fst.php cross site scripting4.8 Medium
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R Parameter cstecgi.cgi setVpnPassCfg command injection5.3 Medium
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R cstecgi.cgi setStaticRoute command injection5.3 Medium
- wp chill download monitorDownload Monitor <= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 morePath Traversal Vulnerability in mlflow/mlflow9.6 Critical
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R cstecgi.cgi setUPnPCfg command injection5.3 Medium
- yokogawa electric corporation centum vpHardcoded Password Vulnerability have been found in CENTUM. Affected products contain a hardcoded...2.1 Low
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R Parameter cstecgi.cgi setSmartQosCfg command injection5.3 Medium
roundcubeDebianroundcube - security updateNo score- zte zxhn h188a firmwareUnauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and...7.1 High
- schemaheroSQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the...7.4 High
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A Cross-Site Request Forgery...8.8 High
- ahsanriaz26gmailcom sales and inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory...6.1 Medium
- ahsanriaz26gmailcom sales and inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory...6.1 Medium
- ahsanriaz26gmailcom sales and inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory...6.1 Medium
- ahsanriaz26gmailcom sales and inventory systemA Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory...6.1 Medium
- ahsanriaz26gmailcom sales and inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory...9.3 Critical
- ahsanriaz26gmailcom sales and inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory...6.1 Medium
- ahsanriaz26gmailcom sales and inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory...6.1 Medium
- ahsanriaz26gmailcom sales and inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory...6.1 Medium
- ahsanriaz26gmailcom sales and inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory...6.1 Medium
- ahsanriaz26gmailcom sales and inventory systemA Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory...6.1 Medium
- Show moreLoading…