CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- nothings stbNothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double free4.8 Medium
- nothings stb imageNothings stb_image Multi-frame GIF File stb_image.h stbi__gif_load_next heap-based overflow4.8 Medium
- trendnet tew-713re, tew-713re firmware +1 moreTRENDnet TEW-713RE setSysAdm command injection5.3 Medium
- unknown performance monitorPerformance Monitor <= 1.0.6 - Unauthenticated Blind SSRF5.8 Medium
- trendnet tew-713re, tew-713re firmware +1 moreTRENDnet TEW-713RE addRouting sub_421494 command injection5.3 Medium
- sourcecodester teacher record systemSourceCodester Teacher Record System Parameter sql injection6.9 Medium
- openstack glance, red hat openstack platform 16.2, openstack platform 17.1 +1 more +3 moreOpenStack Glance is affected by Server-Side Request Forgery (SSRF)5.0 Medium
- johnh10 auto post schedulerAuto Post Scheduler <= 1.84 - Cross-Site Request Forgery to Stored Cross-Site Scripting via aps_options_page6.1 Medium
- vowelweb ibtana – wordpress website builderIbtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- sourcecodester simple doctors appointment systemSourceCodester Simple Doctors Appointment System ajax.php unrestricted upload5.3 Medium
- timwhitlock loco translateLoco Translate <= 2.8.2 - Reflected Cross-Site Scripting via 'update_href' Parameter6.1 Medium
- woocommerce woopayments: integrated woocommerce paymentsWooPayments <= 10.5.1 - Missing Authorization to Unauthenticated Plugin Settings Update via save_upe_appearance_ajax6.5 Medium
- themetechmount truebooker – appointment booking and scheduler systemTruebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Files5.3 Medium
- sourcecodester simple doctors appointment systemSourceCodester Simple Doctors Appointment System ajax.php sql injection6.9 Medium
- sourcecodester simple doctors appointment systemSourceCodester Simple Doctors Appointment System login.php sql injection6.9 Medium
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R cstecgi.cgi setIptvCfg command injection5.3 Medium
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R cstecgi.cgi setWiFiBasicCfg command injection5.3 Medium
- microsoft vcpkgopenssl on Windows built with openssldir set from the build machine (Uncontrolled Search Path Element)7.8 High
- scitokens, scitokens library +1 moreSciTokens: Authorization Bypass via Path Traversal in Scope Validation8.1 High
- scitokens, scitokens library +1 moreSciTokens: Authorization Bypass via Incorrect Scope Path Prefix Checking8.1 High
- scitokens, scitokens library +1 moreSciTokens vulnerable to SQL Injection in KeyCache9.8 Critical
- rocketgenius gravity smtpGravity SMTP <= 2.1.4 - Unauthenticated Sensitive Information Exposure via REST API7.5 High
- wpeverest everest forms proEverest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field9.8 Critical
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R cstecgi.cgi setSyslogCfg command injection6.9 Medium
- papercut ng/mf, mf, mf konica minolta +2 moreSession hijacking in PaperCut NG/MF embedded application for Konica Minolta devices3.6 Low
- basercmsbaserCMS: Multiple vulnerabilities in baserCMS7.1 High
- basercmsbaserCMS: Cross-site scripting vulnerability in blog post6.9 Medium
- basercmsbaserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCE7.2 High
- basercmsbaserCMS: Mail Form Acceptance Bypass via Public API5.3 Medium
- basercmsbaserCMS: OS Command Injection in the baserCMS Update Functionality9.1 Critical
- basercmsbaserCMS: OS command injection vulnerability in installer9.2 Critical
- basercmsbaserCMS: SQL injection vulnerability in blog post6.9 Medium
- basercmsbaserCMS: OS Command Injection Leading to Remote Code Execution (RCE)9.1 Critical
- basercmsbaserCMS: unsafe File Upload Leading to Remote Code Execution (RCE)8.7 High
- papercut ng/mf, mf, ng +2 moreMultiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF2.1 Low
- oretnom23 loan management systemA Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to...6.5 Medium
- oretnom23 loan management systemA Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The...5.4 Medium
- ridvay auto-approval moduleRidvay Code's command auto-approval module contains a critical OS command injection vulnerability...9.8 Critical
- No product listedDSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability...9.8 Critical
- ridvay auto-approval moduleRidvay Code's command auto-approval module contains a critical OS command injection vulnerability...9.8 Critical
- No product listedIn its design for automatic terminal command execution, Sixth offers two options: Execute safe...9.8 Critical
- tokfinity infcodeInfCode's terminal auto-execution module contains a critical command filtering vulnerability that...7.8 High
- intouchapp intouch contacts \& caller idAn arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows...8.4 High
- funambol zefiroAn arbitrary file overwrite vulnerability in Funambol, Inc. Zefiro Cloud v32.0.2026011614 allows...9.8 Critical
- zoraAn arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows...9.8 Critical
- uxgroupllc voice recorderAn arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to...8.6 High
- peaksel animal sounds and ringtonesAn arbitrary file overwrite vulnerability in PEAKSEL D.O.O. NIS Animal Sounds and Ringtones v1.3...9.8 Critical
- uxgroupllc cast to tvAn arbitrary file overwrite vulnerability in UXGROUP LLC Cast to TV Screen Mirroring v2.2.77...9.0 Critical
- maru neo.maruAn arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite...9.8 Critical
- rareprob video playerAn arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play...5.3 Medium
- Show moreLoading…