CVE-2025 records published in March 2025
This page lists the 2,921 CVE-2025 records published in March 2025, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 24 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2025 list filters these records by severity or signal.
- Critical
- 45315.5% of these records
- Listed in CISA KEV
- 240.8% of these records
- Reported exploited
- 50.2% of these records
- Detection signal
- 692.4% of these records
- Exploit code
- 772.6% of these records
- Actionable vendor fix
- 1,53952.7% of these records
Figures as of 2026-10-24 13:47 UTC. Records published in March 2025 have had from about 19 months to about 20 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2025-31697 | Formatter Suite Moderately critical cross-site scripting SA-CONTRIB-2025-026 | 6.1CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31696 | RapiDoc OAS Field Formatter Moderately critical cross-site scripting SA-CONTRIB-2025-025 | 6.1CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31695 | Link field display mode formatter Moderately critical cross-site scripting SA-CONTRIB-2025-024 | 6.1CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31694 | Two-factor Authentication (TFA) Moderately critical Access bypass SA-CONTRIB-2025-023 | 8.1CISA ADP v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-31693 | AI (Artificial Intelligence) Moderately critical Gadget Chain SA-CONTRIB-2025-022 | 6.6CISA ADP v3.1 | 0.7% | 2025-03-31 | Fix |
| CVE-2025-31692 | AI (Artificial Intelligence) Critical remote code execution SA-CONTRIB-2025-021 | 7.5CISA ADP v3.1 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-31691 | OAuth2 Server Moderately critical Access bypass SA-CONTRIB-2025-020 | 9.8CISA ADP v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-31690 | Cache Utility Moderately critical cross-site request forgery SA-CONTRIB-2025-019 | 8.8CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31689 | Drupal General Data Protection Regulation cross-site request forgery (CSRF) | 8.1CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31688 | Configuration Split Moderately critical cross-site request forgery SA-CONTRIB-2025-017 | 6.8CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31687 | SpamSpan filter Moderately critical cross-site scripting SA-CONTRIB-2025-016 | 6.1CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31686 | Open Social Less critical Access bypass, information disclosure SA-CONTRIB-2025-015 | 8.1CISA ADP v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-31685 | Open Social Moderately critical Access bypass SA-CONTRIB-2025-014 | 9.1CISA ADP v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-31684 | OAuth2 Client Moderately critical cross-site request forgery SA-CONTRIB-2025-013 | 6.8CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31683 | Google Tag Moderately critical cross-site request forgery SA-CONTRIB-2025-012 | 6.8CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31682 | Google Tag Moderately critical cross-site scripting SA-CONTRIB-2025-011 | 4.8CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31681 | Authenticator Login Critical Access bypass SA-CONTRIB-2025-009 | 9.8CISA ADP v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-31680 | Matomo Analytics Moderately critical cross-site request forgery SA-CONTRIB-2025-008 | 6.8CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31679 | Ignition Error Pages Critical cross-site scripting SA-CONTRIB-2025-007 | 6.1CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31678 | AI Moderately critical Access bypass, information disclosure SA-CONTRIB-2025-004 | 8.2CISA ADP v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-31677 | AI (Artificial Intelligence) Critical cross-site request forgery SA-CONTRIB-2025-003 | 8.8CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31676 | Email TFA Moderately critical Access bypass SA-CONTRIB-2025-001 | 8.8CISA ADP v3.1 | 0.6% | 2025-03-31 | Fix |
| CVE-2025-31675 | Drupal core Moderately critical cross-site scripting SA-CORE-2025-004 | 5.4CISA ADP v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-31674 | Drupal core Moderately critical Gadget Chain SA-CORE-2025-003 | 7.5CISA ADP v3.1 | 0.6% | 2025-03-31 | Fix |
| CVE-2025-31673 | Drupal core Moderately critical Access bypass SA-CORE-2025-002 | 4.6CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31629 | Infusionsoft Web Form JavaScript WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31627 | Media Library Assistant WordPress plugin stored cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31625 | Useinfluence WordPress plugin cross-site request forgery (CSRF) | 7.1CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31624 | Processing Projects WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31623 | Rich Text Editor WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-31 | |
| CVE-2025-31621 | byBrick Accordion WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31620 | CoverManager WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31618 | Connector to CiviCRM with CiviMcRestFace WordPress plugin broken access control | 5.3CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31617 | PostmarkApp Email Integrator WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-31 | Fix |
| CVE-2025-31616 | Varnish WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-31 | |
| CVE-2025-31615 | Simple Contact Forms WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31614 | Terms Before Download WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31613 | AB Google Map Travel WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-31 | |
| CVE-2025-31611 | Auto Post After Image Upload WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31610 | gingerplugins Notification Bar stored cross-site scripting | 5.9CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31609 | WPCargo Track and Trace WordPress plugin insecure direct object references (IDOR) | 4.3CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31608 | CookieHint WP WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31607 | Simple-Audioplayer WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31606 | SP Blog Designer WordPress plugin arbitrary shortcode execution vulnerability | 4.8CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31605 | Welcome Popup WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31604 | Cal.com WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31603 | CF7 Spreadsheets WordPress plugin settings Change vulnerability | 5.4CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31602 | Apimo Connector WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-03-31 | |
| CVE-2025-31601 | Appointy Appointment Scheduler WordPress plugin CSRF to settings Change | 6.5CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31600 | DesignO WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-03-31 | |
| CVE-2025-31598 | WPFactory Quantity Dynamic Pricing and Bulk Discounts for WooCommerce stored cross-site scripting | 6.5CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31597 | Ultimate Live Cricket WordPress Lite plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31596 | Chat by Chatwee WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31595 | Timeline Event History WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31593 | OpenMenu WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31592 | Send E-mail WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31591 | Exit Popup Free WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31590 | WP Date and Time Shortcode WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31589 | Ethiopian Calendar WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31588 | Elfsight Testimonials Slider WordPress plugin cross-site request forgery (CSRF) to settings Change | 5.4CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31587 | Elfsight Testimonials Slider WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31586 | Gallery Photo Albums WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31585 | Leadfox for WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-31 | Fix |
| CVE-2025-31584 | Elfsight Testimonials Slider WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31583 | WP Copy Media URL WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-31 | |
| CVE-2025-31577 | Appointify WordPress plugin arbitrary file upload | 6.6CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31576 | PostmarkApp Email Integrator WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31575 | Flag Icons WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31574 | Custom Content Scrollbar WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31572 | Multi Days Events and Multi Events in One Day Calendar WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31570 | Related Posts Widget with Thumbnails WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-31 | Fix |
| CVE-2025-31569 | wordpress related Posts with thumbnails plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-31 | |
| CVE-2025-31567 | Themesflat Addons For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31566 | Rio Video Gallery WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-31 | |
| CVE-2025-31562 | Uptime Robot Plugin for WordPress cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31559 | Custom Database Applications by Caspio WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31557 | OSM WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31556 | IMPress for IDX Broker WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31555 | ContentMX Content Publisher WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31549 | Fusion WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31547 | Uptime Robot Plugin for WordPress SQL injection | 8.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31546 | Swiss Toolkit For WP WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-31545 | Safe Ai Malware Protection for WP WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31544 | Swiss Toolkit For WP WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31543 | Twice Commerce WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31542 | My auctions allegro WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31540 | ACME Divi Modules WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31539 | Cryptocurrency Widgets Pack WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2025-03-31 | |
| CVE-2025-31538 | Checklist WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31535 | Simple Owl Carousel WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31533 | Salesmate Add-On for Gravity Forms WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-31532 | AtomChat WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31530 | Google SEO Pressor Snippet WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31529 | Slider Path for Elementor WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31528 | StaticPress WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31527 | WP Link Preview WordPress plugin server side request forgery (SSRF) | 6.4CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-31526 | Behance Portfolio Manager WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31419 | Churel WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31417 | WP Docs WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31414 | Cost Calculator Builder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31412 | JetProductGallery WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31410 | WP Church Donation WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-03-31 | |
| CVE-2025-31406 | ELEX WooCommerce Request a Quote WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31387 | InstaWP Connect WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-31386 | Simple:Press WordPress plugin broken access control | 5.3CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31376 | NanoSupport WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-31194 | Apple macOS missing authorization | 9.8CISA ADP v3.1 | 1.0% | 2025-03-31 | Fix |
| CVE-2025-31192 | Apple Safari authentication bypass | 6.7CISA ADP v3.1 | 0.6% | 2025-03-31 | Fix |
| CVE-2025-31191 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-31188 | Apple macOS race condition | 7.8CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31187 | Apple macOS improper access control | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31184 | Apple Safari improper preservation of permissions | 7.8CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-31183 | Apple macOS information disclosure | 9.8CISA ADP v3.1 | 1.2% | 2025-03-31 | Fix |
| CVE-2025-31182 | Apple macOS missing authorization | 9.8CISA ADP v3.1 | 1.2% | 2025-03-31 | Fix |
| CVE-2025-31129 | jooby jooby-pac4j: Deserialization of untrusted data | 8.8CNA v3.1 | 0.7% | 2025-03-31 | Fix |
| CVE-2025-31128 | rubentd gifplayer cross-site scripting | 6.9CNA v4.0 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-31125 | Vite Vitejs improper access control | 5.3CNA v3.1 | 65.8% | 2025-03-31 | KEVNucleiExploit codeKCVFix |
| CVE-2025-31124 | Zitadel allows User Enumeration by loginname attribute normalization | 5.3CNA v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-31123 | Zitadel Expired JWT Keys Usable for Authorization Grants | 8.7CNA v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-31122 | Scratch-Coding-Hut Scratch-Coding-Hut.github.io Login Links Generation vulnerability | 9.0CNA v4.0 | 0.4% | 2025-03-31 | |
| CVE-2025-31117 | OpenEMR Out-of-Band server-side request forgery (OOB SSRF) | 6.9CNA v4.0 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-31116 | Mobile Security Framework has a SSRF vulnerability fix bypass on assetlinks_check with DNS Rebinding | 4.4CNA v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-31103 | appleple a-blog cms Ver.3.1.x series Untrusted data deserialization of untrusted data | 7.5v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-31043 | JetSearch WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-31016 | JetWooBuilder WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-03-31 | Fix |
| CVE-2025-30987 | JetBlocks For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-30963 | JetSmartFilters WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-30961 | Trackserver WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-30855 | Ads by WPQuads WordPress plugin broken access control | 7.5CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30835 | Accounting for WooCommerce WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-30471 | Apple iPadOS denial of service | 7.5CISA ADP v3.1 | 1.5% | 2025-03-31 | Fix |
| CVE-2025-30470 | Apple macOS path traversal | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30469 | Apple iOS and iPadOS incorrect authorization | 2.4CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30467 | Apple Safari UI misrepresentation | 4.3CISA ADP v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-30465 | Apple iPadOS incorrect default permissions | 9.8CISA ADP v3.1 | 1.1% | 2025-03-31 | Fix |
| CVE-2025-30464 | Apple macOS out-of-bounds write | 7.8CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30463 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30462 | Apple macOS injection | 9.8CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-30461 | Apple macOS missing authorization | 9.8CISA ADP v3.1 | 0.7% | 2025-03-31 | Fix |
| CVE-2025-30460 | Apple macOS insecure permissions | 7.4CISA ADP v3.1 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-30458 | Apple macOS out-of-bounds read | 9.8CISA ADP v3.1 | 0.7% | 2025-03-31 | Fix |
| CVE-2025-30457 | Apple macOS link following | 9.8CISA ADP v3.1 | 1.2% | 2025-03-31 | Fix |
| CVE-2025-30456 | Apple macOS improper preservation of permissions | 7.8CISA ADP v3.1 | 1.0% | 2025-03-31 | Fix |
| CVE-2025-30455 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30454 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30452 | Apple macOS improper input validation | 9.8CISA ADP v3.1 | 1.1% | 2025-03-31 | Fix |
| CVE-2025-30451 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-30450 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30449 | Apple macOS improper preservation of permissions | 7.8CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30447 | Apple iPadOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30446 | Apple macOS out-of-bounds write | 6.5CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-30444 | Apple macOS race condition | 9.8CISA ADP v3.1 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-30443 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30441 | Apple Xcode out-of-bounds write | 5.5CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-30439 | Apple macOS information disclosure | 4.6CISA ADP v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-30438 | Apple macOS improper access control | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30437 | Apple macOS memory corruption | 7.4CISA ADP v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-30435 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30434 | Apple iOS and iPadOS cross-site scripting | 5.0CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30433 | Apple iPadOS improper access control | 9.8CISA ADP v3.1 | 1.3% | 2025-03-31 | Fix |
| CVE-2025-30432 | Apple iPadOS improper authentication | 6.4CISA ADP v3.1 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-30430 | Apple macOS improper authentication | 9.8CISA ADP v3.1 | 1.2% | 2025-03-31 | Fix |
| CVE-2025-30429 | Apple iPadOS sandbox escape | 6.3CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30428 | Apple iPadOS authentication bypass | 5.4CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30427 | Apple Safari use-after-free | 4.3CISA ADP v3.1 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-30426 | Apple iPadOS information disclosure | 9.8CISA ADP v3.1 | 1.2% | 2025-03-31 | Fix |
| CVE-2025-30425 | Apple Safari improper access control | 4.3CISA ADP v3.1 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-30424 | Apple macOS information disclosure | 9.8CISA ADP v3.1 | 1.0% | 2025-03-31 | Fix |
| CVE-2025-30369 | Zulip allows the deletion of Custom profile fields by administrators of a different organization | 2.7CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30368 | Zulip allows the deletion of organization by administrators of a different organization | 2.7CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30223 | Beego allows Reflected/stored XSS in Beego's RenderForm function due to Unescaped User Input | 9.3CNA v3.1 | 0.6% | 2025-03-31 | Fix |
| CVE-2025-30209 | Enalean Tuleap FRS plugin incorrect authorization | 5.3CNA v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-30203 | Tuleap allows XSS via the content of RSS feeds in the RSS widgets | 4.8CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30161 | OpenEMR stored XSS in OpenEMR Bronchitis form | 8.4CNA v4.0 | 10.9% | 2025-03-31 | Fix |
| CVE-2025-30155 | Tuleap does not enforce read permissions on parent trackers in the REST API | 4.3CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30149 | OpenEMR reflected XSS in AJAX script | 6.4CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-30095 | VyOS hard-coded cryptographic key | 9.0CNA v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-30006 | Xorcom CompletePBX reflected cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-30005 | Xorcom CompletePBX authenticated path traversal and file deletion | 8.3v3.1 | 1.8% | 2025-03-31 | MetasploitExploit codeFix |
| CVE-2025-30004 | Xorcom CompletePBX Task Scheduler Authenticated command injection | 8.8v3.1 | 4.2% | 2025-03-31 | MetasploitExploit codeFix |
| CVE-2025-29929 | Tuleap is missing CSRF protection on tracker hierarchy administration | 4.6CNA v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-29908 | Netty QUIC hash collision DoS attack | 5.3CNA v3.1 | 0.6% | 2025-03-31 | Fix |
| CVE-2025-29772 | OpenEMR allows reflected XSS in CAMOS new.php | 7.2CNA v4.0 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-29766 | Tuleap has missing CSRF protections on artifact submission and edition from the tracker view | 4.6CNA v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-29266 | Unraid authentication bypass | 9.6CNA v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-27149 | Zulip exports can leak private data | 4.6CNA v4.0 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-27095 | JumpServer has a Kubernetes token leak | 4.3CNA v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-26689 | Inaba Denki Sangyo CHOCO TEI WATCHER mini (IB-MCT001) forced browsing | 9.8CNA v3.1 | 1.1% | 2025-03-31 | |
| CVE-2025-26683 | Microsoft Azure Playwright elevation of privilege | 8.1CNA v3.1 | 0.7% | 2025-03-31 | Fix |
| CVE-2025-25211 | Inaba Denki Sangyo CHOCO TEI WATCHER mini (IB-MCT001) weak password requirements | 9.8CNA v3.1 | 0.8% | 2025-03-31 | |
| CVE-2025-24852 | Inaba Denki Sangyo CHOCO TEI WATCHER mini (IB-MCT001) recoverable password storage | 4.6CNA v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-24517 | Inaba Denki Sangyo CHOCO TEI WATCHER mini (IB-MCT001) client-side authentication | 7.5CNA v3.1 | 0.8% | 2025-03-31 | |
| CVE-2025-24283 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24282 | Apple macOS injection | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24281 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24280 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24279 | Apple macOS information disclosure | 4.3CISA ADP v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-24278 | Apple macOS link following | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24277 | Apple macOS incorrect default permissions | 7.8CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24276 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-24273 | Apple macOS out-of-bounds write | 9.8CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-24272 | Apple macOS improper access control | 6.8CISA ADP v3.1 | 0.6% | 2025-03-31 | Fix |
| CVE-2025-24269 | Apple macOS denial of service | 9.8CISA ADP v3.1 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-24267 | Apple macOS incorrect default permissions | 7.8CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-24266 | Apple macOS buffer overflow | 9.8CISA ADP v3.1 | 1.1% | 2025-03-31 | Fix |
| CVE-2025-24265 | Apple macOS out-of-bounds read | 9.8CISA ADP v3.1 | 1.0% | 2025-03-31 | Fix |
| CVE-2025-24264 | Apple Safari crash | 9.8CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-24263 | Apple macOS information disclosure | 9.8CISA ADP v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-24262 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24261 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24260 | Apple macOS denial of service | 9.8CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-24259 | Apple iPadOS improper access control | 9.8CISA ADP v3.1 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-24257 | Apple macOS out-of-bounds write | 7.1CISA ADP v3.1 | 0.3% | 2025-03-31 | Exploit codeFix |
| CVE-2025-24256 | Apple macOS out-of-bounds read | 9.8CISA ADP v3.1 | 1.2% | 2025-03-31 | Fix |
| CVE-2025-24255 | Apple macOS sandbox escape | 8.4CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24254 | Apple macOS improper privilege management | 8.8CISA ADP v3.1 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-24253 | Apple macOS information disclosure | 9.8CISA ADP v3.1 | 1.0% | 2025-03-31 | Fix |
| CVE-2025-24250 | Apple macOS information disclosure | 9.8CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-24249 | Apple macOS missing authorization | 9.8CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-24248 | Apple macOS insecure permissions | 5.0CISA ADP v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-24247 | Apple macOS type confusion | 9.8CISA ADP v3.1 | 1.0% | 2025-03-31 | Fix |
| CVE-2025-24246 | Apple macOS injection | 9.8CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-24245 | Apple macOS missing authorization | 9.8CISA ADP v3.1 | 0.7% | 2025-03-31 | Fix |
| CVE-2025-24244 | Apple iPadOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24243 | Apple iPadOS code injection | 7.8CISA ADP v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-24242 | Apple macOS link following | 4.4CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24241 | Apple macOS improper access control | 9.8CISA ADP v3.1 | 1.0% | 2025-03-31 | Fix |
| CVE-2025-24240 | Apple macOS race condition | 4.7CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-24239 | Apple macOS information disclosure | 6.5CISA ADP v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-24238 | Apple macOS incorrect default permissions | 9.8CISA ADP v3.1 | 1.1% | 2025-03-31 | Fix |
| CVE-2025-24237 | Apple iPadOS buffer overflow | 9.8CISA ADP v3.1 | 1.6% | 2025-03-31 | Fix |
| CVE-2025-24236 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24235 | Apple macOS resource exhaustion | 5.5CISA ADP v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-24234 | Apple macOS incorrect default permissions | 7.8CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24233 | Apple macOS incorrect authorization | 9.8CISA ADP v3.1 | 1.0% | 2025-03-31 | Fix |
| CVE-2025-24232 | Apple macOS information disclosure | 9.8CISA ADP v3.1 | 1.1% | 2025-03-31 | Fix |
| CVE-2025-24231 | Apple macOS out-of-bounds write | 9.8CISA ADP v3.1 | 1.1% | 2025-03-31 | Fix |
| CVE-2025-24230 | Apple iPadOS out-of-bounds read | 9.8CISA ADP v3.1 | 1.9% | 2025-03-31 | Fix |
| CVE-2025-24229 | Apple macOS logic flaw | 7.4CISA ADP v3.1 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-24228 | Apple macOS out-of-bounds read | 7.8CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24226 | Apple Xcode information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24221 | Apple iPadOS incorrect authorization | 7.5CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-24218 | Apple macOS improper access control | 5.5CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-24217 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24216 | Apple Safari memory corruption | 4.3CISA ADP v3.1 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-24215 | Apple iPadOS improper access control | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24214 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24213 | Apple Safari type confusion | 7.8CISA ADP v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-24212 | Apple iPadOS sandbox escape | 6.3CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24211 | Apple iPadOS resource exhaustion | 9.8CISA ADP v3.1 | 1.9% | 2025-03-31 | Fix |
| CVE-2025-24210 | Apple iPadOS logic flaw | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24209 | Apple Safari buffer overflow | 7.0CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-24208 | Apple Safari cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2025-03-31 | Fix |
| CVE-2025-24207 | Apple macOS incorrect default permissions | 9.8CISA ADP v3.1 | 1.0% | 2025-03-31 | Fix |
| CVE-2025-24205 | Apple iPadOS improper access control | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24204 | Apple macOS information disclosure | 9.8CISA ADP v3.1 | 1.5% | 2025-03-31 | Exploit codeFix |
| CVE-2025-24203 | The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to modify protected parts of the file system. | 5.0CISA ADP v3.1 | 0.6% | 2025-03-31 | Exploit codeFix |
| CVE-2025-24202 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24199 | Apple macOS format string | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24198 | Apple iPadOS information disclosure | 6.6CISA ADP v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-24196 | Apple macOS out-of-bounds read | 8.8CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-24195 | Apple macOS incorrect default permissions | 9.8CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-24194 | Apple macOS logic flaw | 6.5CISA ADP v3.1 | 0.7% | 2025-03-31 | Fix |
| CVE-2025-24193 | Apple iOS and iPadOS improper access control | 2.4CISA ADP v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-24192 | Apple Safari information disclosure | 6.5CISA ADP v3.1 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-24191 | Apple macOS improper input validation | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24190 | Apple iPadOS resource exhaustion | 9.8CISA ADP v3.1 | 1.9% | 2025-03-31 | Fix |
| CVE-2025-24182 | Apple macOS out-of-bounds read | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24181 | Apple macOS missing authorization | 9.8CISA ADP v3.1 | 1.0% | 2025-03-31 | Fix |
| CVE-2025-24180 | Apple Safari open redirect | 8.1CISA ADP v3.1 | 1.0% | 2025-03-31 | Fix |
| CVE-2025-24178 | Apple iPadOS sandbox escape | 9.8CISA ADP v3.1 | 1.6% | 2025-03-31 | Fix |
| CVE-2025-24173 | Apple iPadOS sandbox escape | 7.8CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24172 | Apple macOS incorrect default permissions | 9.8CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-24170 | Apple macOS incorrect default permissions | 7.8CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24167 | Apple Safari downloads vulnerability | 9.8CISA ADP v3.1 | 0.9% | 2025-03-31 | Fix |
| CVE-2025-24164 | Apple macOS logic flaw | 5.5CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-24157 | Apple macOS buffer overflow | 5.6CISA ADP v3.1 | 0.7% | 2025-03-31 | Fix |
| CVE-2025-24148 | Apple macOS improper integrity check validation | 5.5CISA ADP v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-24097 | Apple iPadOS out-of-bounds read | 5.0CISA ADP v3.1 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-24095 | Apple visionOS authentication bypass | 7.6CISA ADP v3.1 | 0.7% | 2025-03-31 | Fix |
| CVE-2025-23995 | Tantyyellow WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-31 | |
| CVE-2025-22941 | Adtran 411 web interface command injection | 9.8CISA ADP v3.1 | 2.2% | 2025-03-31 | |
| CVE-2025-22940 | Adtran 411 improper access control | 9.1CISA ADP v3.1 | 0.5% | 2025-03-31 | |
| CVE-2025-22939 | Adtran 411 telnet service command injection | 9.8CISA ADP v3.1 | 2.6% | 2025-03-31 | |
| CVE-2025-22938 | Adtran 411 default password | 9.8CISA ADP v3.1 | 0.6% | 2025-03-31 | |
| CVE-2025-22937 | Adtran 411 improper privilege management | 9.8CISA ADP v3.1 | 0.6% | 2025-03-31 | |
| CVE-2025-21893 | Linux kernel key reference counting use-after-free | 7.8CNA v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-3062 | Drupal Admin LTE theme Critical Unsupported SA-CONTRIB-2025-010 | 6.6CISA ADP v3.1 | 0.5% | 2025-03-31 | |
| CVE-2025-3061 | Material Admin Critical Unsupported SA-CONTRIB-2025-006 | 6.6CISA ADP v3.1 | 0.5% | 2025-03-31 | |
| CVE-2025-3060 | Flattern Multipurpose Bootstrap Business Profile Critical Unsupported SA-CONTRIB-2025-005 | 6.6CISA ADP v3.1 | 0.5% | 2025-03-31 | |
| CVE-2025-3059 | Profile Private Critical Unsupported SA-CONTRIB-2025-002 | 5.3CISA ADP v3.1 | 0.5% | 2025-03-31 | |
| CVE-2025-3057 | Drupal core Critical cross-site scripting SA-CORE-2025-001 | 6.1CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-3048 | Path traversal in AWS SAM CLI allows file copy to local cache | 6.9CNA v4.0 | 0.7% | 2025-03-31 | Fix |
| CVE-2025-3047 | Path traversal in AWS SAM CLI allows file copy to build container | 6.9CNA v4.0 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-3040 | Project Worlds Online Time Table Generator add_student.php unrestricted upload | 9.8v3.1 | 0.6% | 2025-03-31 | |
| CVE-2025-3039 | code-projects Payroll Management System add_employee.php SQL injection | 8.8v3.1 | 0.7% | 2025-03-31 | |
| CVE-2025-3038 | code-projects Payroll Management System view_account.php SQL injection | 8.8v3.1 | 0.7% | 2025-03-31 | |
| CVE-2025-3037 | yzk2356911358 StudentServlet-JSP cross-site request forgery | 5.3CNA v4.0 | 0.3% | 2025-03-31 | |
| CVE-2025-3036 | yzk2356911358 StudentServlet-JSP Student Management cross-site scripting | 6.1v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-3027 | Open redirect vulnerability in EJBCA | 6.1v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-3026 | Improper neutralization of Special Elements vulnerability in EJBCA | 6.1v3.1 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-3022 | OS command injection vulnerability in e-management of e-solutions | 9.3CNA v4.0 | 1.0% | 2025-03-31 | |
| CVE-2025-3021 | Path traversal vulnerability in e-management of e-solutions | 8.7CNA v4.0 | 0.5% | 2025-03-31 | |
| CVE-2025-3019 | Cross-site scripting vulnerabilities in KNIME Business Hub web pages | 5.3CNA v4.0 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-3018 | SourceCodester Online Eyewear Shop Users.php SQL injection | 7.5v3.1 | 0.5% | 2025-03-31 | |
| CVE-2025-3017 | TA-Lib ta_regtest test_minmax.c setInputBuffer out-of-bounds write | 4.8CNA v4.0 | 0.2% | 2025-03-31 | |
| CVE-2025-3016 | Open Asset Import Library MDL file handler resource exhaustion | 6.5v3.1 | 0.6% | 2025-03-31 | Fix |
| CVE-2025-3015 | Open Asset Import Library Assimp ASE File ASELoader.cpp BuildUniqueRepresentation out-of-bounds | 8.8v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-3014 | Insecure direct object references (IDOR) in NightWolf Penetration Platform | 8.3CNA v4.0 | 0.3% | 2025-03-31 | |
| CVE-2025-3013 | Insecure direct object references (IDOR) in NightWolf Penetration Platform | 8.3CNA v4.0 | 0.3% | 2025-03-31 | |
| CVE-2025-3011 | PiExtract SOOP-CLM SQL injection | 9.8CNA v3.1 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-3010 | Khronos Group glslang Intermediate.cpp isConversionAllowed null pointer dereference | 4.8CNA v4.0 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-3009 | Jinher Network OA NetDiskProperty.aspx SQL injection | 5.3CNA v4.0 | 0.3% | 2025-03-31 | |
| CVE-2025-3008 | Novastar CX40 NetFilter utility netconfig popen command injection | 5.1CNA v4.0 | 1.0% | 2025-03-31 | |
| CVE-2025-3007 | Novastar CX40 NetFilter utility netconfig getopt stack-based overflow | 5.1CNA v4.0 | 0.3% | 2025-03-31 | |
| CVE-2025-3006 | PHPGurukul e-Diary Management System edit-category.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-31 | |
| CVE-2025-3005 | Sayski ForestBlog Friend Link cross-site scripting | 5.4v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-3004 | Sayski ForestBlog search cross-site scripting | 5.4v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-3003 | ESAFENET CDG UserAjax SQL injection | 5.3CNA v4.0 | 0.3% | 2025-03-31 | |
| CVE-2025-3002 | Digital China DCME-520 mon_merge_stat_hist.php os command injection | 6.9CNA v4.0 | 20.0% | 2025-03-31 | |
| CVE-2025-3001 | PyTorch torch.lstm_cell memory corruption | 4.8CNA v4.0 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-3000 | PyTorch torch.jit.script memory corruption | 4.8CNA v4.0 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-2999 | PyTorch torch.nn.utils.rnn.unpack_sequence memory corruption | 4.8CNA v4.0 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-2998 | PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption | 4.8CNA v4.0 | 0.2% | 2025-03-31 | Fix |
| CVE-2025-2997 | zhangyanbo2007 youkefu URL server-side request forgery | 8.8v3.1 | 0.5% | 2025-03-31 | |
| CVE-2025-2996 | Tenda FH1202 Web Management Interface SysToolDDNS access control | 5.3v3.1 | 0.8% | 2025-03-31 | |
| CVE-2025-2995 | Tenda FH1202 Web Management Interface SysToolChangePwd access control | 6.9CNA v4.0 | 0.8% | 2025-03-31 | |
| CVE-2025-2994 | Tenda FH1202 Web Management interface qossetting access control | 6.9CNA v4.0 | 0.7% | 2025-03-31 | |
| CVE-2025-2993 | Tenda FH1202 default.cfg access control | 6.9CNA v4.0 | 10.9% | 2025-03-31 | Emerging Threats |
| CVE-2025-2992 | Tenda FH1202 Web Management Interface AdvSetWrlsafeset access control | 6.9CNA v4.0 | 0.7% | 2025-03-31 | |
| CVE-2025-2991 | Tenda FH1202 Web Management Interface AdvSetWrlmacfilter access control | 6.9CNA v4.0 | 0.6% | 2025-03-31 | |
| CVE-2025-2990 | Tenda FH1202 Web Management Interface AdvSetWrlGstset access control | 6.9CNA v4.0 | 0.7% | 2025-03-31 | |
| CVE-2025-2989 | Tenda FH1202 Web Management Interface AdvSetWrl access control | 6.9CNA v4.0 | 0.7% | 2025-03-31 | |
| CVE-2025-2985 | code-projects Payroll Management System update_account.php SQL injection | 8.8v3.1 | 0.5% | 2025-03-31 | |
| CVE-2025-2984 | code-projects Payroll Management System delete.php SQL injection | 8.8v3.1 | 0.5% | 2025-03-31 | |
| CVE-2025-2983 | Legrand SMS PowerView os command injection | 5.1CNA v4.0 | 0.8% | 2025-03-31 | |
| CVE-2025-2982 | Legrand SMS PowerView file inclusion | 5.3CNA v4.0 | 0.3% | 2025-03-31 | |
| CVE-2025-2981 | Legrand SMS PowerView cross-site scripting | 5.1CNA v4.0 | 0.2% | 2025-03-31 | |
| CVE-2025-2980 | Legrand SMS PowerView redirect parameter open redirect | 5.1CNA v4.0 | 0.3% | 2025-03-31 | |
| CVE-2025-2979 | Wcms Registration setregister cross-site scripting | 5.4v3.1 | 0.4% | 2025-03-31 | |
| CVE-2025-2978 | Wcms Article Publishing Page CKEditor unrestricted upload | 9.8v3.1 | 0.5% | 2025-03-31 | |
| CVE-2025-2977 | GFI KerioConnect PDF file cross-site scripting | 5.4v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-2976 | GFI KerioConnect file upload cross-site scripting | 5.4v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-2975 | GFI KerioConnect Signature EditHtmlSource cross-site scripting | 5.4v3.1 | 0.3% | 2025-03-31 | |
| CVE-2025-2974 | CodeCanyon Perfex CRM Contracts contract cross-site scripting | 5.4v3.1 | 0.4% | 2025-03-31 | |
| CVE-2025-2973 | code-projects College Management System student.php unrestricted upload | 9.8v3.1 | 0.5% | 2025-03-31 | |
| CVE-2025-2794 | Kentico Xperience unsafe reflection | 8.7CNA v4.0 | 0.5% | 2025-03-31 | Fix |
| CVE-2025-2586 | Ols: Unauthenticated metrics flooding in OpenShift Lightspeed service leading to resource exhaustion | 7.5CNA v3.1 | 0.5% | 2025-03-31 | |
| CVE-2025-2402 | Hard-coded password for object store of KNIME Business Hub | 8.8CNA v4.0 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-2292 | Xorcom CompletePBX Authenticated File Disclosure | 6.5v3.1 | 1.7% | 2025-03-31 | MetasploitExploit codeFix |
| CVE-2025-2072 | Reflected cross-site scripting (XSS) vulnerability in FAST LTA Silent Brick WebUI | 5.1CNA v4.0 | 0.4% | 2025-03-31 | Fix |
| CVE-2025-2071 | OS command injection vulnerability in FAST LTA Silent Brick WebUI | 10.0CNA v4.0 | 1.0% | 2025-03-31 | Fix |
| CVE-2025-1449 | Admin Shell Access vulnerability in Rockwell Automation Verve Asset Manager | 7.5CNA v4.0 | 0.7% | 2025-03-31 | Fix |
| CVE-2025-1268 | Canon Generic Plus PCL6 Printer Driver out-of-bounds write | 9.4CNA v3.1 | 0.8% | 2025-03-31 | Fix |
| CVE-2025-0613 | Photo Gallery WordPress plugin unauthenticated stored XSS | 6.1CISA ADP v3.1 | 0.3% | 2025-03-31 | Fix |
| CVE-2025-2961 | opensolon org.noear.solon.core.handle.RenderManager aa render_mav path traversal | 5.3CNA v4.0 | 0.5% | 2025-03-30 | |
| CVE-2025-2960 | TRENDnet TEW-637AP/TEW-638APB HTTP request goahead sub_41DED0 null pointer dereference | 7.1CNA v4.0 | 0.8% | 2025-03-30 | |
| CVE-2025-2959 | TRENDnet TEW-410APB HTTP request httpd sub_4019A0 null pointer dereference | 7.1CNA v4.0 | 0.8% | 2025-03-30 | |
| CVE-2025-2958 | TRENDnet TEW-818DRU HTTP request httpd denial of service | 7.1CNA v4.0 | 0.8% | 2025-03-30 | |
| CVE-2025-2957 | TRENDnet TEW-411BRP+ HTTP request httpd sub_401DB0 null pointer dereference | 7.1CNA v4.0 | 0.4% | 2025-03-30 | |
| CVE-2025-2956 | TRENDnet TI-G102i HTTP request lighttpd plugins_call_handle_uri_raw null pointer dereference | 7.1CNA v4.0 | 0.4% | 2025-03-30 | |
| CVE-2025-2955 | TOTOLINK A3000RU IBMS Configuration File ExportIbmsConfig.sh access control | 6.9CNA v4.0 | 0.7% | 2025-03-30 | |
| CVE-2025-2954 | mannaandpoem OpenManus file file_saver.py execute access control | 5.5v3.1 | 0.2% | 2025-03-30 | |
| CVE-2025-2953 | PyTorch torch.mkldnn_max_pool2d denial of service | 5.5v3.1 | 0.3% | 2025-03-30 | Fix |
| CVE-2025-2952 | Bluestar Micro Mall api.php unrestricted upload | 9.8v3.1 | 0.4% | 2025-03-30 | |
| CVE-2025-2951 | Bluestar Micro Mall data.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-30 | |
| CVE-2025-1861 | PHP stream HTTP wrapper truncates redirect location to 1024 bytes | 6.3CNA v4.0 | 0.8% | 2025-03-30 | Fix |
| CVE-2025-1736 | PHP stream HTTP wrapper header check might omit basic auth header | 6.3CNA v4.0 | 0.5% | 2025-03-30 | Fix |
| CVE-2025-1734 | PHP streams HTTP wrapper does not fail for headers with invalid name and no colon | 6.3CNA v4.0 | 0.5% | 2025-03-30 | Fix |
| CVE-2025-1219 | PHP libxml streams use wrong content-type header when requesting a redirected resource | 6.3CNA v4.0 | 0.7% | 2025-03-30 | Fix |
| CVE-2025-2840 | DAP to Autoresponders Email Syncing WordPress plugin unauthenticated information exposure | 5.3CNA v3.1 | 0.4% | 2025-03-29 | |
| CVE-2025-2803 | So-Called Air Quotes WordPress plugin unauthenticated arbitrary shortcode execution | 7.3CNA v3.1 | 0.5% | 2025-03-29 | |
| CVE-2025-2266 | Checkout Mestres do WP for WooCommerce - Unauthenticated arbitrary Options Update | 9.8CNA v3.1 | 0.7% | 2025-03-29 | Exploit code |
| CVE-2025-2249 | SoJ Soundslides WordPress plugin authenticated (Contributor+) arbitrary file upload | 8.8CNA v3.1 | 0.8% | 2025-03-29 | Exploit code |
| CVE-2025-2006 | Inline Image Upload for BBPress WordPress plugin authenticated (Subscriber+) arbitrary file upload | 8.8CNA v3.1 | 0.9% | 2025-03-29 | Fix |
| CVE-2025-1217 | PHP header parser of HTTP stream wrapper does not handle folded headers | 6.3CNA v4.0 | 0.6% | 2025-03-29 | Fix |
| CVE-2025-31474 | WP Database Optimizer WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-03-28 | |
| CVE-2025-31473 | WP Database Optimizer WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-31472 | Flatty WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-31471 | Duplicate Page and Post WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-31470 | Page Takeover WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31469 | webrangers Clear Sucuri Cache missing authorization | 5.3CNA v3.1 | 0.3% | 2025-03-28 | |
| CVE-2025-31466 | Duplicate Page and Post WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-03-28 | |
| CVE-2025-31465 | Better Section Navigation Widget WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31464 | Text Selection Color WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-31463 | TGG WP Optimizer WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31460 | OmniLeads Scripts and Tags Manager WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-28 | |
| CVE-2025-31459 | Login Alert WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-28 | |
| CVE-2025-31458 | Video Embedder WordPress plugin cross-site request forgery (CSRF) to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-28 | Fix |
| CVE-2025-31457 | LWS SMS WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.1% | 2025-03-28 | |
| CVE-2025-31456 | Ultimate Security Checker WordPress plugin cross-site request forgery (CSRF) to security Rescan | 4.3CNA v3.1 | 0.1% | 2025-03-28 | |
| CVE-2025-31453 | YouTube SimpleGallery WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-31452 | WP Ultimate Search WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-31451 | wBounce WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-31450 | Toggle Box WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-31449 | The Visitor Counter WordPress plugin cross-site request forgery (CSRF) to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-28 | |
| CVE-2025-31448 | Simple Trackback Disabler WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-31447 | NertWorks All in One Social Share Tools WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-31444 | ShowTime Slideshow WordPress plugin cross-site request forgery (CSRF) to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-28 | |
| CVE-2025-31443 | KK I Like It WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-28 | |
| CVE-2025-31440 | Terms of Use WordPress plugin cross-site request forgery (CSRF) to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-28 | |
| CVE-2025-31439 | WordPress Browser Caching with .htaccess cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.1% | 2025-03-28 | |
| CVE-2025-31438 | WP Supersized WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-03-28 | |
| CVE-2025-31437 | WP-OGP WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-31435 | Microblog Poster WordPress plugin cross-site request forgery (CSRF) to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-28 | |
| CVE-2025-31434 | FormLift for Infusionsoft Web Forms WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31433 | Magic Embeds WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-31432 | Pop-Up Chop Chop WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-03-28 | |
| CVE-2025-31335 | Shibboleth OpenSAML C++ library improper signature verification | 4.0CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31164 | fig2dev heap-buffer overflow | 6.6CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31163 | xfig fig2dev put_patternarc function null pointer dereference | 6.6CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31162 | fig2dev float point exception | 6.6CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31102 | Hostel WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31099 | Slider by BestWebSoft WordPress plugin SQL injection | 7.6CNA v3.1 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-31096 | PostX WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31094 | WP Posts Carousel WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31093 | RPS Include Content WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31092 | Click to Chat WP Support All-in-One Floating Widget WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31090 | Dropdown Multisite selector WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31088 | Paid Member Subscriptions WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31083 | Leaky Paywall WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31079 | Usermaven WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-03-28 | Fix |
| CVE-2025-31077 | Ultimate Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31076 | WP Compress for MainWP WordPress plugin server side request forgery (SSRF) | 4.9CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31075 | MicroPayments WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31073 | Unlimited WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-31010 | SimplyRETS Real Estate IDX WordPress plugin CSRF to Multiple admin actions | 4.3CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-30372 | Emlog Pro contains an SQL injection | 7.7CNA v4.0 | 0.5% | 2025-03-28 | |
| CVE-2025-30371 | Metabase vulnerable to circumvention of local link access protection in GeoJson endpoint | 2.1CNA v4.0 | 0.4% | 2025-03-28 | Fix |
| CVE-2025-30232 | Exim A use-after-free | 7.8v3.1 | 0.5% | 2025-03-28 | Fix |
| CVE-2025-30211 | Erlang OTP KEX init error results with excessive memory usage | 7.5CNA v3.1 | 0.5% | 2025-03-28 | Fix |
| CVE-2025-29928 | Authentik's deletion of sessions did not revoke sessions when using database session storage | 8.0CNA v3.1 | 0.4% | 2025-03-28 | Fix |
| CVE-2025-28256 | TOTOLINK A3100R OS command injection | 9.8CISA ADP v3.1 | 1.0% | 2025-03-28 | |
| CVE-2025-28254 | Leantime affected by improper neutralization of HTML Tags | 5.4CISA ADP v3.1 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-28221 | Tenda W6-S buffer overflow | 7.5CISA ADP v3.1 | 0.5% | 2025-03-28 | |
| CVE-2025-28220 | Tenda W6-S buffer overflow | 7.5CISA ADP v3.1 | 0.5% | 2025-03-28 | |
| CVE-2025-28219 | NETGEAR DC112A OS command injection | 9.8CISA ADP v3.1 | 12.8% | 2025-03-28 | |
| CVE-2025-28097 | OneNav cross-site scripting | 5.5CISA ADP v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-28096 | OneNav server-side request forgery | 5.4CISA ADP v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-28094 | ShopXO vulnerable to server-side request forgery (SSRF) and cross-site scripting (XSS) | 6.5CISA ADP v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-28093 | ShopXO vulnerable to server-side request forgery (SSRF) via Email settings | 6.3CISA ADP v3.1 | 0.3% | 2025-03-28 | |
| CVE-2025-28092 | ShopXO vulnerable to server-side request forgery (SSRF) via Image upload | 6.3CISA ADP v3.1 | 0.3% | 2025-03-28 | |
| CVE-2025-28091 | MacCMS server-side request forgery | 9.1CISA ADP v3.1 | 0.4% | 2025-03-28 | |
| CVE-2025-28090 | MacCMS server-side request forgery | 9.1CISA ADP v3.1 | 0.4% | 2025-03-28 | |
| CVE-2025-28089 | MacCMS server-side request forgery | 9.1CISA ADP v3.1 | 0.4% | 2025-03-28 | Fix |
| CVE-2025-28087 | Nayem-howlader Online Exam System SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2025-03-28 | |
| CVE-2025-27932 | KDDI HGW-BL1500HM path traversal | 8.1CNA v3.0 | 0.5% | 2025-03-28 | |
| CVE-2025-27726 | KDDI HGW-BL1500HM path traversal | 2.1CNA v3.0 | 0.3% | 2025-03-28 | |
| CVE-2025-27718 | KDDI HGW-BL1500HM path traversal | 8.8CNA v3.0 | 1.0% | 2025-03-28 | |
| CVE-2025-27716 | KDDI HGW-BL1500HM path traversal | 6.5CNA v3.0 | 0.7% | 2025-03-28 | |
| CVE-2025-27574 | KDDI HGW-BL1500HM USB storage file-sharing function cross-site scripting | 3.6CNA v3.0 | 0.2% | 2025-03-28 | |
| CVE-2025-27567 | KDDI HGW-BL1500HM NickName registration screen cross-site scripting | 5.4CNA v3.0 | 0.3% | 2025-03-28 | |
| CVE-2025-27001 | Shipmondo WordPress plugin information disclosure | 6.5CNA v3.1 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-25579 | TOTOLINK A3002R OS command injection | 9.8CISA ADP v3.1 | 10.4% | 2025-03-28 | |
| CVE-2025-24386 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.6% | 2025-03-28 | Fix |
| CVE-2025-24385 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.5% | 2025-03-28 | Fix |
| CVE-2025-24383 | Dell Unity OS command injection | 9.1CNA v3.1 | 1.1% | 2025-03-28 | Fix |
| CVE-2025-24382 | Dell Unity OS command injection | 7.3CNA v3.1 | 1.3% | 2025-03-28 | Fix |
| CVE-2025-24381 | Dell Unity open redirect | 8.8CNA v3.1 | 1.4% | 2025-03-28 | Fix |
| CVE-2025-24380 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.6% | 2025-03-28 | Fix |
| CVE-2025-24379 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.6% | 2025-03-28 | Fix |
| CVE-2025-24378 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.6% | 2025-03-28 | Fix |
| CVE-2025-24377 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.5% | 2025-03-28 | Fix |
| CVE-2025-23383 | Dell Unity OS command injection | 7.8CNA v3.1 | 0.6% | 2025-03-28 | Fix |
| CVE-2025-22953 | Epicor Human Capital Management SQL injection | 9.8CISA ADP v3.1 | 1.8% | 2025-03-28 | Exploit code |
| CVE-2025-22767 | GlobalPayments WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-22575 | SUPER RESPONSIVE SLIDER WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-22566 | ULTIMATE VIDEO GALLERY WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-22526 | PHP/MySQL CPU performance statistics WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2025-03-28 | |
| CVE-2025-22523 | Schedule WordPress plugin SQL injection | 9.3CNA v3.1 | 0.4% | 2025-03-28 | |
| CVE-2025-22501 | Improve My City WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-22398 | Dell Unity OS command injection | 9.8CNA v3.1 | 2.0% | 2025-03-28 | Fix |
| CVE-2025-22360 | WP Azure offload WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-22356 | Stencies WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-2927 | ESAFENET CDG getFileTypeList.jsp SQL injection | 9.8v3.1 | 0.6% | 2025-03-28 | |
| CVE-2025-2926 | HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference | 5.5v3.1 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-2925 | HDF5 H5MM.c H5MM_realloc double free | 5.5v3.1 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-2924 | HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow | 5.5v3.1 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-2923 | HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow | 4.8CNA v4.0 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-2922 | Netis WF-2404 BusyBox Shell cleartext storage | 1.0CNA v4.0 | 0.1% | 2025-03-28 | |
| CVE-2025-2921 | Netis WF-2404 passwd default password | 5.4CNA v4.0 | 0.3% | 2025-03-28 | |
| CVE-2025-2920 | Netis WF-2404 passwd weak hash | 1.0CNA v4.0 | 0.1% | 2025-03-28 | |
| CVE-2025-2919 | Netis WF-2404 UART hardware allows activation of test or debug logic at runtime | 7.0CNA v4.0 | 0.4% | 2025-03-28 | |
| CVE-2025-2917 | ChestnutCMS read readFile path traversal | 7.5v3.1 | 0.8% | 2025-03-28 | |
| CVE-2025-2916 | Aishida Call Center System amr2mp3 command injection | 5.3CNA v4.0 | 1.5% | 2025-03-28 | |
| CVE-2025-2915 | HDF5 H5Faccum.c H5F__accum_free heap-based overflow | 5.5v3.1 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-2914 | HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow | 4.8CNA v4.0 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-2913 | HDF5 H5FL.c H5FL__blk_gc_list use-after-free | 5.3v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-2912 | HDF5 H5Omessage.c H5O_msg_flush heap-based overflow | 5.3v3.1 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-2911 | Improper restriction of excessive authentication attempts vulnerability in MeetMe products | 5.3CNA v4.0 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-2910 | User enumeration vulnerability in MeetMe products | 6.9CNA v4.0 | 0.4% | 2025-03-28 | Fix |
| CVE-2025-2909 | Fermax DuoxMe iOS application cleartext storage of sensitive information | 6.9CNA v4.0 | 0.1% | 2025-03-28 | Fix |
| CVE-2025-2908 | Insufficiently protected credentials vulnerability in MeetMe products | 8.5CNA v4.0 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-2894 | Unitree Go1 Robot Dog backdoor Control Channel | 6.6CNA v3.1 | 0.9% | 2025-03-28 | |
| CVE-2025-2877 | Red Hat Ansible Automation Platform Event-Driven Ansible information disclosure | 6.5CNA v3.1 | 0.4% | 2025-03-28 | Fix |
| CVE-2025-2870 | Reflected cross-site scripting (XSS) vulnerability in Clinic Queuing System | 6.1v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-2869 | Reflected cross-site scripting (XSS) vulnerability in Clinic Queuing System | 6.1v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-2868 | Reflected cross-site scripting (XSS) vulnerability in Clinic Queuing System | 6.1v3.1 | 0.2% | 2025-03-28 | |
| CVE-2025-2865 | Reflected cross-site scripting (XSS) vulnerability in saTECH BCU | 6.1v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-2864 | Reflected cross-site scripting (XSS) vulnerability in saTECH BCU | 6.1v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-2863 | Cross-site request forgery (CSRF) vulnerability in saTECH BCU | 7.8v3.1 | 0.1% | 2025-03-28 | Fix |
| CVE-2025-2862 | Weak encoding for password vulnerability in saTECH BCU | 7.5v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-2861 | Cleartext transmission of sensitive information vulnerability in saTECH BCU | 7.5v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-2860 | Exposure of sensitive information vulnerability in saTECH BCU | 5.3v3.1 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-2859 | Improper authentication vulnerability in saTECH BCU | 9.8v3.1 | 0.4% | 2025-03-28 | Fix |
| CVE-2025-2858 | Privilege escalation vulnerability in saTECH BCU | 8.8v3.1 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-2815 | Administrator Z WordPress plugin missing authorization authenticated arbitrary options update | 8.8CNA v3.1 | 0.4% | 2025-03-28 | Fix |
| CVE-2025-2804 | tagDiv Composer WordPress plugin reflected cross-site scripting via account_id and account_username | 6.1CNA v3.1 | 0.3% | 2025-03-28 | Fix |
| CVE-2025-2782 | WatchGuard Terminal Services Agent local privilege escalation | 6.3CNA v4.0 | 0.1% | 2025-03-28 | Fix |
| CVE-2025-2781 | WatchGuard Mobile VPN with SSL local privilege escalation via Non-Standard Installation Directory | 6.3CNA v4.0 | 0.1% | 2025-03-28 | Fix |
| CVE-2025-2713 | Improper File Permission Handling in Google gVisor runsc | 6.8CNA v4.0 | 0.1% | 2025-03-28 | Fix |
| CVE-2025-2578 | Booking for Appointments and Events Calendar WordPress plugin information disclosure | 5.3CNA v3.1 | 0.4% | 2025-03-28 | Fix |
| CVE-2025-2485 | Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin PHP object injection | 8.8v3.1 | 0.6% | 2025-03-28 | Fix |
| CVE-2025-2328 | Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin arbitrary file deletion | 8.8CNA v3.1 | 1.1% | 2025-03-28 | Fix |
| CVE-2025-2294 | Kubio AI Page Builder WordPress plugin unauthenticated local file inclusion | 9.8CNA v3.1 | 78.4% | 2025-03-28 | NucleiExploit codeFix |
| CVE-2025-2074 | Advanced Google reCAPTCHA WordPress plugin limited SQL injection | 5.3CNA v3.1 | 0.4% | 2025-03-28 | Fix |
| CVE-2025-2027 | ASUS ASCI double free | 5.9CNA v4.0 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-1860 | Data::Entropy for Perl uses insecure rand function for cryptographic functions | 7.7CISA ADP v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-1781 | w3c CSS Validator XML external entity injection | 6.5NVD v3.1 | 0.4% | 2025-03-28 | |
| CVE-2025-1762 | Event Tickets with Ticket Scanner WordPress plugin arbitrary Tickets deletion via CSRF | 4.3CISA ADP v3.1 | 0.2% | 2025-03-28 | Fix |
| CVE-2025-1705 | tagDiv Composer WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-03-28 | Fix |
| CVE-2025-0986 | IBM PowerVM Hypervisor gzip hardware acceleration vulnerability | 4.5CNA v3.1 | 0.1% | 2025-03-28 | Fix |
| CVE-2025-31181 | Gnuplot: Gnuplot segmentation fault on x11_graphics | 6.2CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-31180 | Gnuplot: Gnuplot segmentation fault on canvas_text | 6.2CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-31179 | Gnuplot: Gnuplot segmentation fault on xstrftime | 6.2CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-31178 | Gnuplot: Gnuplot segmentation fault on getannotatestring | 6.2CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-31176 | Gnuplot: Gnuplot segmentation fault on plot3d_points | 6.2CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-31165 | Cross-site scripting in NightWolf Penetration Platform | 6.9CNA v4.0 | 0.4% | 2025-03-27 | |
| CVE-2025-31141 | JetBrains TeamCity information disclosure through error messages | 2.7CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-31140 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 28.0% | 2025-03-27 | Fix |
| CVE-2025-31139 | JetBrains TeamCity sensitive information in log files | 4.3CNA v3.1 | 1.0% | 2025-03-27 | Fix |
| CVE-2025-31101 | VaultRE Contact Form 7 WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-27 | |
| CVE-2025-31031 | Job Colors for WP Job Manager WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30925 | The Pack Elementor addons WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30923 | Gift Message for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30922 | Simplebooklet PDF Viewer and Embedder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30921 | Newsletters WordPress plugin SQL injection | 7.6CNA v3.1 | 0.5% | 2025-03-27 | Exploit codeFix |
| CVE-2025-30920 | WP Posts Carousel WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30919 | Store Locator Widget WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30918 | Structured Content WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30914 | Metform Elementor Contact Form Builder WordPress plugin server side request forgery (SSRF) | 4.4CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30912 | Float menu WordPress plugin cross-site request forgery (CSRF) to settings Change | 5.4CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30909 | Conversios.io WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30907 | SecuPress Free WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30904 | Chartify WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30903 | SyntaxHighlighter Evolved WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30900 | Zoho Billing Embed Payment Form WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30899 | User Registration WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30898 | افزونه حمل و نقل ووکامرس WordPress plugin cross-site scripting | 6.5CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30897 | Analytify WordPress plugin settings Change vulnerability | 4.3CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30896 | WP ERP WordPress plugin broken access control | 5.4CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30895 | WpEvently WordPress plugin PHP object injection | 7.5CNA v3.1 | 0.8% | 2025-03-27 | Fix |
| CVE-2025-30894 | WP Fast Total Search WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30893 | LeadConnector WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30891 | WpTravelly WordPress plugin local file inclusion | 8.8CNA v3.1 | 0.7% | 2025-03-27 | Fix |
| CVE-2025-30890 | Login Widget for Ultimate Member WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.8% | 2025-03-27 | Fix |
| CVE-2025-30888 | Custom Fields Account Registration For Woocommerce WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30887 | WpEvently WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30885 | Bit Form WordPress plugin open redirection | 4.7CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30884 | Bit Integrations WordPress plugin open redirection | 4.7CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30883 | Trust.Reviews WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30881 | Big Store WordPress theme broken access control | 5.4v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30879 | MC Woocommerce Wishlist WordPress plugin SQL injection | 7.6CNA v3.1 | 0.6% | 2025-03-27 | Fix |
| CVE-2025-30877 | Quiz Cat WordPress plugin broken access control | 2.7CNA v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-30874 | Specific Content For Mobile WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30873 | Greenshift WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30872 | Product Author for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30871 | WP Travel Engine WordPress plugin local file inclusion | 7.5CNA v3.1 | 1.0% | 2025-03-27 | Fix |
| CVE-2025-30868 | Maidul Team Manager local file inclusion | 7.5CNA v3.1 | 1.1% | 2025-03-27 | Fix |
| CVE-2025-30867 | SearchIQ WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30866 | Terms and Conditions Per Product WordPress plugin broken access control | 5.3CNA v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-30865 | 3DPrint Lite WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30864 | Exchange Rates WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30863 | CRM Perks Integration for Google Sheets and Contact Form 7 cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30862 | reCAPTCHA for all WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30861 | Five Star Restaurant Reservations WordPress plugin broken access control | 4.9CNA v3.1 | 0.6% | 2025-03-27 | Fix |
| CVE-2025-30860 | Off-Canvas Sidebars and Menus (Slidebars) WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30859 | AliNext WordPress plugin open redirection | 4.7CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30857 | Currency Switcher for WooCommerce WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30856 | Custom Field For WP Job Manager WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30854 | Vollstart Serial Codes Generator and Validator with WooCommerce Support cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30851 | Tickera WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30850 | Dr. Flex WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30847 | Novelist WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30846 | Restaurant Menu by MotoPress WordPress plugin local file inclusion | 8.8CNA v3.1 | 0.8% | 2025-03-27 | Fix |
| CVE-2025-30845 | The Pack Elementor addons WordPress plugin local file inclusion | 7.5CNA v3.1 | 1.1% | 2025-03-27 | Fix |
| CVE-2025-30843 | BizCalendar Web WordPress plugin SQL command improper neutralization | 7.6CNA v3.1 | 0.6% | 2025-03-27 | Fix |
| CVE-2025-30842 | Christmas Panda WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30839 | Taxi Booking Manager for WooCommerce WordPress plugin broken access control | 5.3CNA v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-30838 | Cozy Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30836 | LatePoint WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30833 | Verge3D Publishing and E-Commerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30832 | Themify Event Post WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30831 | Themify Event Post WordPress plugin local file inclusion | 7.5CNA v3.1 | 1.1% | 2025-03-27 | Fix |
| CVE-2025-30830 | Cool Author Box WordPress plugin broken access control | 5.3CNA v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-30829 | WPCafe WordPress plugin local file inclusion | 7.5CNA v3.1 | 1.1% | 2025-03-27 | Fix |
| CVE-2025-30828 | Timetics WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30826 | IP Locator WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30824 | Textmetrics WordPress plugin broken access control | 5.4CNA v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-30823 | Anthologize WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30822 | Custom Login Logo WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30821 | SNORDIAN's H5PxAPIkatchu WordPress plugin broken access control | 5.3CNA v3.1 | 0.6% | 2025-03-27 | Fix |
| CVE-2025-30820 | WishSuite WordPress plugin local file inclusion | 7.5CNA v3.1 | 1.1% | 2025-03-27 | Fix |
| CVE-2025-30819 | Simple Giveaways WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30818 | jAlbum Bridge WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30817 | Z Companion WordPress plugin broken access control | 5.4CNA v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-30816 | publish post email notification WordPress plugin cross-site request forgery to settings Change | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30815 | Hesabfa Accounting WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30814 | The Post Grid WordPress plugin local file inclusion | 7.5CNA v3.1 | 1.1% | 2025-03-27 | Fix |
| CVE-2025-30813 | Listamester WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30812 | SKT Addons for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30811 | ValidateCertify WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30810 | Lead Form Data Collection to CRM WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30809 | WordPress Contact Form, Drag and Drop Form Builder Plugin Live Forms settings Change vulnerability | 5.4CNA v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-30806 | Vimeotheque WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30805 | Flexible Cookies WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30804 | wpShopGermany IT-RECHT KANZLEI WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30803 | Just Writing Statistics WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30801 | TWB Woocommerce Reviews WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30800 | Gum Elementor Addon WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30799 | WP Google Street View WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30795 | FunnelKit Automations WordPress plugin Aman open redirect | 4.7CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30792 | Comment Approved Notifier Extended WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30791 | Cart tracking for WooCommerce WordPress plugin SQL injection | 7.6CNA v3.1 | 0.6% | 2025-03-27 | Fix |
| CVE-2025-30790 | Chatbox Manager WordPress plugin broken access control | 5.3CNA v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-30789 | Clearout Email Validator WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30788 | EZ SQL Reports Shortcode Widget and DB Backup WordPress plugin CSRF to SQL injection | 8.2CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30787 | EZ SQL Reports Shortcode Widget and DB Backup WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30786 | Quotes llama WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30785 | Subscribe to Download Lite WordPress plugin local file inclusion | 7.5CNA v3.1 | 1.0% | 2025-03-27 | Fix |
| CVE-2025-30784 | WP Subscription Forms WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-30783 | WP Google Review Slider WordPress plugin CSRF to SQL injection | 8.2CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30781 | Scheduled and Automatic Order Status Controller for WooCommerce WordPress plugin open redirection | 4.7CNA v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-30780 | Audio Album WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30779 | Doneren met Mollie WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30777 | Support Genix WordPress plugin insecure direct object references (IDOR) | 4.3CNA v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-30776 | Sitekit WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30775 | WPGuppy WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-30773 | TranslatePress WordPress plugin PHP object injection | 7.2CNA v3.1 | 0.8% | 2025-03-27 | Fix |
| CVE-2025-30772 | WPC Smart Upsell Funnel for WooCommerce WordPress plugin WPClever missing authorization | 8.8CNA v3.1 | 0.6% | 2025-03-27 | Exploit codeFix |
| CVE-2025-30771 | WP Cassify WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30770 | Charitable WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30769 | WIP WooCarousel Lite WordPress plugin cross-site request forgery (CSRF) to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30768 | jAlbum Bridge WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30767 | PDF for WPForms WordPress plugin arbitrary shortcode execution vulnerability | 5.4CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30766 | Happy Addons for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30765 | FlexStock WordPress plugin SQL injection | 7.6CNA v3.1 | 0.6% | 2025-03-27 | Fix |
| CVE-2025-30764 | Football Pool WordPress plugin cross-site request forgery (CSRF) to settings Change | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-30763 | EO4WP WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30367 | WeGIA SQL injection vulnerability in nextPage parameter on control.php endpoint | 10.0CNA v4.0 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-30366 | WeGIA vulnerable to stored XSS in personalizacao.php | 6.2CNA v4.0 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30365 | LabRedesCefetRJ WeGIA SQL injection in query_geracao_auto.php | 9.4CNA v4.0 | 0.7% | 2025-03-27 | Fix |
| CVE-2025-30364 | WeGIA vulnerable to SQL injection (Blind Time-Based) in remuneracao.php parameter id_funcionario | 10.0CNA v4.0 | 0.7% | 2025-03-27 | Fix |
| CVE-2025-30363 | WeGIA vulnerable to stored XSS in documentos_funcionario.php parameter dados_addInfo | 6.4CNA v4.0 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30362 | WeGIA vulnerable to stored XSS in documentos_funcionario.php parameter id | 6.4CNA v4.0 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30361 | WeGIA vulnerable to broken authentication Old Password Validation | 9.3CNA v4.0 | 0.6% | 2025-03-27 | Fix |
| CVE-2025-30358 | Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks | 8.1CNA v3.1 | 0.7% | 2025-03-27 | Fix |
| CVE-2025-30355 | Synapse vulnerable to federation denial of service via malformed events | 7.1CNA v3.1 | 1.2% | 2025-03-27 | Fix |
| CVE-2025-30221 | Pitchfork HTTP Request/Response Splitting vulnerability | 4.3CNA v3.0 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-30093 | wisc HTCondor incorrect authorization | 8.1CISA ADP v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-30067 | Apache Kylin: The remote code execution via jdbc URL | 7.2CISA ADP v3.1 | 0.9% | 2025-03-27 | Fix |
| CVE-2025-29993 | Alfasado PowerCMS 6.x series HTTP header injection | 5.3CNA v3.0 | 0.3% | 2025-03-27 | |
| CVE-2025-29497 | Libming parseSWF_MORPHFILLSTYLES function memory leak | 6.5CISA ADP v3.1 | 0.3% | 2025-03-27 | |
| CVE-2025-29496 | Libming denial of service | 6.5CISA ADP v3.1 | 0.3% | 2025-03-27 | |
| CVE-2025-29494 | Libming denial of service | 6.5CISA ADP v3.1 | 0.3% | 2025-03-27 | |
| CVE-2025-29493 | Libming denial of service | 6.5CISA ADP v3.1 | 0.3% | 2025-03-27 | |
| CVE-2025-29492 | Libming memory corruption | 6.5CISA ADP v3.1 | 0.3% | 2025-03-27 | |
| CVE-2025-29491 | Libming excessive memory allocation | 6.5CISA ADP v3.1 | 0.3% | 2025-03-27 | |
| CVE-2025-29490 | Libming denial of service | 6.5CISA ADP v3.1 | 0.3% | 2025-03-27 | |
| CVE-2025-29489 | Libming parseSWF_MORPHLINESTYLES function memory leak | 6.5CISA ADP v3.1 | 0.3% | 2025-03-27 | |
| CVE-2025-29488 | Libming parseSWF_INITACTION function memory leak | 6.5CISA ADP v3.1 | 0.3% | 2025-03-27 | |
| CVE-2025-29487 | Libming denial of service | 7.5CISA ADP v3.1 | 0.5% | 2025-03-27 | |
| CVE-2025-29486 | Libming parseSWF_PLACEOBJECT3 function memory leak | 6.5CISA ADP v3.1 | 0.4% | 2025-03-27 | |
| CVE-2025-29485 | Libming denial of service | 6.5CISA ADP v3.1 | 0.4% | 2025-03-27 | |
| CVE-2025-29484 | Libming denial of service | 7.5CISA ADP v3.1 | 0.5% | 2025-03-27 | |
| CVE-2025-29483 | Libming parseSWF_ENABLEDEBUGGER2 function memory leak | 6.5CISA ADP v3.1 | 0.3% | 2025-03-27 | |
| CVE-2025-29306 | FoxCMS code injection | 9.8CISA ADP v3.1 | 46.6% | 2025-03-27 | NucleiEmerging ThreatsExploit code |
| CVE-2025-29072 | Nethermind Juno potential denial of service (DoS) via integer overflow | 7.5CISA ADP v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-28138 | TOTOLINK A800R OS command injection | 9.8CISA ADP v3.1 | 1.1% | 2025-03-27 | |
| CVE-2025-28135 | TOTOLINK A810R stack-based buffer overflow | 7.5CISA ADP v3.1 | 0.5% | 2025-03-27 | |
| CVE-2025-27793 | Vega vulnerable to cross-site scripting via RegExp.prototype[@@replace] | 5.3CNA v4.0 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-26956 | Traveler WordPress theme broken access control | 7.6CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-26909 | Hide My WP Ghost WordPress plugin local file inclusion to RCE | 9.8v3.1 | 0.7% | 2025-03-27 | Fix |
| CVE-2025-26898 | Traveler WordPress theme SQL injection | 9.3CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-26890 | HUSKY WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-03-27 | Fix |
| CVE-2025-26874 | MemberSpace WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-26873 | Traveler WordPress theme PHP object injection | 9.0CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-26762 | WooCommerce WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-26738 | Quick Interest Slider WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-26737 | City Store WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-27 | |
| CVE-2025-26736 | MorningTime Lite WordPress theme stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-27 | |
| CVE-2025-26734 | Hester WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-27 | |
| CVE-2025-26733 | Traveler WordPress theme broken access control | 8.2CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-26732 | StoreBiz WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-27 | |
| CVE-2025-26731 | ARPrice WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-27 | |
| CVE-2025-26619 | Vega cross-site scripting (XSS) via event filter when not using CSP mode `expressionInterpeter` | 5.3CNA v4.0 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-26265 | Openairinterface5g denial of service | 6.5CISA ADP v3.1 | 0.5% | 2025-03-27 | |
| CVE-2025-25686 | SEMCMS SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2025-03-27 | |
| CVE-2025-25100 | Cazamba WordPress plugin CSRF to reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.1% | 2025-03-27 | |
| CVE-2025-25086 | Secret Meta WordPress plugin CSRF to reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.1% | 2025-03-27 | |
| CVE-2025-22816 | Power Mag WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-27 | |
| CVE-2025-22783 | SEO Plugin by Squirrly SEO WordPress plugin SQL injection | 8.8v3.1 | 0.6% | 2025-03-27 | Exploit codeFix |
| CVE-2025-22770 | Envo Multipurpose WordPress theme broken access control | 5.4CNA v3.1 | 0.3% | 2025-03-27 | |
| CVE-2025-22740 | Sensei LMS WordPress plugin broken access control | 5.3CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-22739 | LearnPress WordPress plugin broken access control | 5.3CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-22673 | WordPress EAN Barcode Generator plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-22672 | Video and Photo Gallery for Ultimate Member WordPress plugin server side request forgery (SSRF) | 4.9CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-22671 | leap13 Disable Elementor Editor Translation missing authorization | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-22670 | VikBooking Hotel Booking Engine and PMS WordPress plugin CSRF to settings Change | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-22669 | Awesome Event Booking WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-22668 | Awesome Event Booking WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-22667 | Export Order WordPress plugin Creative Werk Designs missing authorization | 4.3CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-22665 | RapidLoad WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-22660 | Include Mastodon Feed WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-22659 | Orbit Fox by ThemeIsle WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-22658 | Listings for Appfolio WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-27 | Fix |
| CVE-2025-22652 | Payment Forms for Paystack WordPress plugin SQL injection | 7.6CNA v3.1 | 0.9% | 2025-03-27 | Exploit codeFix |
| CVE-2025-22649 | WP Project Manager WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-22648 | Blog, Posts and Category Filter for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-22647 | AIO Performance Profiler WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-22646 | aThemes Addons for Elementor WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-22644 | Vayu Blocks Gutenberg Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-27 | |
| CVE-2025-22640 | Paytm Payment Donation WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-27 | |
| CVE-2025-22638 | Product Table For WooCommerce WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-22637 | Print PDF Generator and Publisher WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-03-27 | Fix |
| CVE-2025-22634 | Easy Booked WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.1% | 2025-03-27 | Fix |
| CVE-2025-22629 | iNET Webkit WordPress plugin broken access control | 5.3CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-22628 | Filled In WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-22497 | Simple Google Calendar Outlook Events Block Widget WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-22496 | Notif Bell WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-22278 | Whitish Lite WordPress theme stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-27 | |
| CVE-2025-21892 | Linux kernel mlx5 UMR queue pair recovery race condition | 4.7NVD v3.1 | 0.1% | 2025-03-27 | Fix |
| CVE-2025-21891 | Linux kernel ipvlan outbound header handling vulnerability | 5.5v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21890 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix checksums set in idpf_rx_rsc() idpf_rx_rsc() uses skb_transport_offset(skb) while the transport header is not set yet. This triggers the following warning for CONFIG_DEBUG_NET=y builds. DEBUG_NET_WARN_ON_ONCE(!skb_tran | 8.2CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-21889 | Linux kernel perf event context iteration vulnerability | 7.8CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21888 | Linux kernel mlx5 memory region deregistration vulnerability | 5.5NVD v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21887 | Linux kernel overlayfs dentry revalidation use-after-free | 7.8CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21886 | Linux kernel mlx5 implicit ODP vulnerability | 5.5NVD v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21885 | Linux kernel bnxt_re SRQ page handling vulnerability | 7.5CNA v3.1 | 0.5% | 2025-03-27 | Fix |
| CVE-2025-21884 | Linux kernel kernel socket lifetime tracking vulnerability | 7.8CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21883 | Linux kernel ice VF deinitialization use-after-free | 7.8v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21882 | Linux kernel mlx5 vport QoS memory leak | 7.8CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21881 | Linux kernel uprobes opcode writing vulnerability | 5.5v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21880 | Linux kernel Xe userptr handling vulnerability | 5.5v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21879 | Linux kernel Btrfs root scanning during extent map shrinking use-after-free | 7.8CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21878 | Linux kernel NPCM I2C driver improper locking | 5.5v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21877 | In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix endpoint checking in genelink_bind() Syzbot reports [1] a warning in usb_submit_urb() triggered by inconsistencies between expected and actually present endpoints in gl620a driver. Since genelink_bind() does no | 5.5v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21876 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit ("iommu/vt-d: Allocate DMAR fault interrupts locally") moved the call to enable_drhd_fault_handling() to a code path that does not hold any lock while traversing the drhd list. Fix it by | 8.8CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21875 | Linux kernel MPTCP address removal vulnerability | 7.8CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21874 | Linux kernel dm-integrity inline mode table status divide by zero | 5.5v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21873 | Linux kernel UFS ARPMB BSG handler vulnerability | 5.5v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21872 | Linux kernel EFI mokvar table handling vulnerability | 5.5v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21871 | Linux kernel OP-TEE supplicant infinite loop | 5.5v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21870 | Linux kernel SOF ALH copier topology null pointer dereference | 7.8CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21869 | Linux kernel powerpc code patching out-of-bounds write | 7.8v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-21868 | Linux kernel networking core vulnerability | 7.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-21867 | Linux kernel BPF test_run XDP use-after-free | 7.8CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-2888 | Improper timestamp caching during snapshot rollback in tough | 5.7CNA v4.0 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-2887 | Failure to detect delegated target rollback in tough | 5.7CNA v4.0 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-2886 | Terminating targets role delegations are not respected in tough | 5.7CNA v4.0 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-2885 | Root metadata version not validated in tough | 5.7CNA v4.0 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-2878 | Kentico CMS Additional Database Installation Wizard install.aspx cross-site scripting | 4.8CNA v4.0 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-2867 | Improper control of generation of code (code injection) in GitLab | 4.4CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-2857 | Mozilla Firefox incorrect handle could lead to sandbox escapes | 10.0CISA ADP v3.1 | 1.9% | 2025-03-27 | Fix |
| CVE-2025-2855 | elunez Eladmin upload checkFile deserialization | 7.2v3.1 | 0.5% | 2025-03-27 | |
| CVE-2025-2854 | code-projects Payroll Management System update_employee.php SQL injection | 8.8v3.1 | 0.5% | 2025-03-27 | |
| CVE-2025-2852 | SourceCodester Food Ordering Management System view_menu.php SQL injection | 5.1CNA v4.0 | 0.4% | 2025-03-27 | |
| CVE-2025-2849 | Upx p_lx_elf.cpp un_DT_INIT heap-based overflow | 5.5v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-2847 | Codezips Gym Management System over_month.php SQL injection | 8.8v3.1 | 0.5% | 2025-03-27 | |
| CVE-2025-2846 | SourceCodester Online Eyewear Shop Registration Users.php registration SQL injection | 9.8v3.1 | 0.6% | 2025-03-27 | |
| CVE-2025-2835 | zhangyd-c OneBlog RestApiController.java autoLink server-side request forgery | 5.3CNA v4.0 | 0.3% | 2025-03-27 | |
| CVE-2025-2833 | zhangyd-c OneBlog HTTP header redos | 6.9CNA v4.0 | 0.7% | 2025-03-27 | |
| CVE-2025-2832 | mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 cross-site request forgery | 5.3CNA v4.0 | 0.3% | 2025-03-27 | |
| CVE-2025-2831 | mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 bookList getBookList SQL injection | 9.8v3.1 | 0.4% | 2025-03-27 | |
| CVE-2025-2685 | TablePress Tables in WordPress made easy plugin authenticated (Author+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-2516 | Kingsoft WPS Office signature verification process weak cryptography | 9.5CNA v4.0 | 0.1% | 2025-03-27 | |
| CVE-2025-2481 | MediaView WordPress plugin reflected cross-site scripting via id parameter | 6.1CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-2332 | Export All Posts WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.8% | 2025-03-27 | Fix |
| CVE-2025-2255 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 8.7CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-2242 | Incorrect authorization in GitLab | 7.5CNA v3.1 | 0.4% | 2025-03-27 | Fix |
| CVE-2025-1998 | IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure | 5.5CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-1997 | IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection | 5.4CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-0811 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 8.7CNA v3.1 | 0.3% | 2025-03-27 | Fix |
| CVE-2025-0273 | HCL DevOps Deploy / HCL Launch is susceptible to insertion of sensitive information into log file | 5.5CNA v3.1 | 0.2% | 2025-03-27 | Fix |
| CVE-2025-31160 | atop reachable assertion | 2.9CNA v3.1 | 0.2% | 2025-03-26 | Fix |
| CVE-2025-30742 | pizhenwei atophttpd off-by-one error | 5.3CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-30524 | Product Catalog WordPress plugin SQL injection | 9.3CNA v3.1 | 0.6% | 2025-03-26 | |
| CVE-2025-30407 | Acronis Cyber Protect Cloud Agent untrusted search path | 6.3CNA v3.0 | 0.1% | 2025-03-26 | Fix |
| CVE-2025-30353 | Directus's webhook trigger flows can leak sensitive data | 8.6CNA v3.1 | 0.5% | 2025-03-26 | Fix |
| CVE-2025-30352 | Directus `search` query parameter allows enumeration of non permitted fields | 5.3CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-30351 | Suspended Directus user can continue to use session token to access API | 3.5CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-30350 | Directus's S3 assets become unavailable after a burst of HEAD requests | 5.3CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-30225 | Directus's S3 assets become unavailable after a burst of malformed transformations | 5.3CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-30217 | Frappe has possibility of SQL injection due to improper validations | 6.6CNA v4.0 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-30164 | Icinga Web 2 has open redirect on login page | 4.1CNA v3.1 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-30073 | OPC Cardsystems Webapp Aufwertung transaction reference session data exposure | 7.5CISA ADP v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-29322 | ScriptCase cross-site scripting | 4.6CISA ADP v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28942 | Trust Payments Gateway for WooCommerce WordPress plugin SQL injection | 9.3CNA v3.1 | 0.6% | 2025-03-26 | Fix |
| CVE-2025-28939 | WP Google Calendar Manager WordPress plugin SQL injection | 8.5CNA v3.1 | 0.6% | 2025-03-26 | |
| CVE-2025-28935 | Fancybox Plus WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28934 | Simple Post Series WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28928 | Are you robot google recaptcha for Wordpress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28924 | ZenphotoPress WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28921 | SpatialMatch IDX WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28917 | Custom Smilies WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28916 | Docpro WordPress plugin local file inclusion | 9.8CNA v3.1 | 0.9% | 2025-03-26 | |
| CVE-2025-28911 | Gravity 2 PDF WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28903 | Driving Directions WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28899 | WP Event Ticketing WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28898 | WP Multistore Locator WordPress plugin SQL injection | 9.3CNA v3.1 | 0.6% | 2025-03-26 | |
| CVE-2025-28893 | Visual Text Editor WordPress plugin remote code execution (RCE) | 9.9CNA v3.1 | 0.8% | 2025-03-26 | |
| CVE-2025-28890 | Lightview Plus WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28889 | Custom Product Stickers for Woocommerce WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28885 | Fiverr.com Official Search Box WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28882 | Omnify WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28880 | Blue Captcha WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-28877 | Key4ce osTicket Bridge WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28873 | Shuffle WordPress plugin SQL injection | 8.5CNA v3.1 | 0.6% | 2025-03-26 | |
| CVE-2025-28869 | NextGEN Gallery Voting WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-28865 | WP Colorful Tag Cloud WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-28858 | Arrow Maps WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-28855 | Teleport WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-28361 | Telesquare TLR-2005KSH stack-based buffer overflow | 7.5CISA ADP v3.1 | 0.5% | 2025-03-26 | |
| CVE-2025-27609 | Icinga Web 2 vulnerable to reflected XSS | 1.1CNA v4.0 | 0.2% | 2025-03-26 | Fix |
| CVE-2025-27552 | WREIS DBIx::Class::EncodedColumn insufficient entropy | 4.0CISA ADP v3.1 | 0.1% | 2025-03-26 | Fix |
| CVE-2025-27551 | DBIx::Class::EncodedColumn Digest.pm weak random number generator | 4.0CISA ADP v3.1 | 0.1% | 2025-03-26 | Fix |
| CVE-2025-27406 | Icinga Reporting stored XSS leads to SSRF | 7.7CNA v3.1 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-27405 | Icinga Web 2 has XSS in embedded content | 7.7CNA v3.1 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-27404 | Icinga Web 2 DOM-based XSS | 7.7CNA v3.1 | 0.6% | 2025-03-26 | Fix |
| CVE-2025-27267 | Random Quotes WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-27015 | Hostiko WordPress theme local file inclusion | 7.5CNA v3.1 | 1.0% | 2025-03-26 | Fix |
| CVE-2025-27014 | Hostiko WordPress theme cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-26986 | Pearl WordPress theme local file inclusion | 8.1CNA v3.1 | 1.0% | 2025-03-26 | Fix |
| CVE-2025-26941 | Church Admin WordPress plugin SQL injection | 9.3CNA v3.1 | 0.6% | 2025-03-26 | Fix |
| CVE-2025-26929 | Accounting for WooCommerce WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-26923 | Event post WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-26922 | AuraMart WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26869 | Build WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26747 | RainbowNews WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26739 | newseqo WordPress theme stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26584 | TBTestimonials WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26583 | Video Share VOD WordPress plugin reflected cross-site scripting | 7.1CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-26581 | Picture Gallery WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-26579 | MicroPayments Paid Membership WordPress plugin reflected cross-site scripting | 7.1CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-26576 | WP Simple Slideshow WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26575 | Display Post Meta WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26573 | Rizzi Guestbook WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26566 | In Stock Mailer for WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26565 | GNUPress WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26564 | GNUCommerce WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26560 | WP Contact Form III WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26559 | Secure Invites WordPress plugin reflected cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26546 | Cookies Pro WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26544 | WordPressUTM tags + Landing page WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26542 | Zalo Live Chat WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26541 | Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin reflected cross-site scripting | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26537 | GDPR Tools WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26536 | Another Events Calendar WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26011 | Telesquare TLR-2005KSH buffer overflow | 9.8CISA ADP v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26010 | Telesquare TLR-2005KSH improper access control | 9.8CISA ADP v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26009 | Telesquare TLR-2005KSH information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26008 | Telesquare TLR-2005KSH buffer overflow | 9.8CISA ADP v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26007 | Telesquare TLR-2005KSH buffer overflow | 9.8CISA ADP v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26006 | Telesquare TLR-2005KSH buffer overflow | 9.8CISA ADP v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26005 | Telesquare TLR-2005KSH buffer overflow | 9.8CISA ADP v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26004 | Telesquare TLR-2005KSH buffer overflow | 9.8CISA ADP v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-26003 | Telesquare TLR-2005KSH code injection | 9.8CISA ADP v3.1 | 0.7% | 2025-03-26 | |
| CVE-2025-26002 | Telesquare TLR-2005KSH buffer overflow | 9.8CISA ADP v3.1 | 0.5% | 2025-03-26 | |
| CVE-2025-26001 | Telesquare TLR-2005KSH information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-25535 | HTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 allows a remote attacker to escalate privileges via a crafted request. | 9.8CISA ADP v3.1 | 0.5% | 2025-03-26 | |
| CVE-2025-25134 | Theme Demo Bar WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-24972 | Discourse may bypass user preference when adding users to chat groups | 4.3CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-24808 | Discourse has race condition when adding users to a group DM | 4.3CNA v3.1 | 0.2% | 2025-03-26 | Fix |
| CVE-2025-24690 | Formality WordPress plugin local file inclusion | 8.1CNA v3.1 | 1.0% | 2025-03-26 | Fix |
| CVE-2025-23964 | Google Plus WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23952 | ntm Custom Field List Widget local file inclusion | 8.1CNA v3.1 | 1.0% | 2025-03-26 | |
| CVE-2025-23937 | LinkedIn Lite WordPress plugin local file inclusion | 8.1CNA v3.1 | 1.0% | 2025-03-26 | |
| CVE-2025-23735 | Infugrator WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23728 | AuMenu WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23714 | AppReview WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23704 | Your Lightbox WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23680 | Narnoo Operator WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23666 | Management-screen-droptiles WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23638 | Frontend Post Submission WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23633 | WP Database Audit WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23632 | CG Button WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23612 | Pixobe Cartography WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23546 | RDP inGroups+ WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23543 | FOMO Pay Chinese Payment Solution WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23542 | RDP Linkedin Login WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-23466 | Site Editor Google Map WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23460 | RWS Enquiry And Lead Follow-up WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23459 | NS Simple Intro Loader WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-23203 | Icinga has rest API endpoints accessible to restricted users | 5.5CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-22283 | GetSocial WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-26 | |
| CVE-2025-20233 | Splunk App for Lookup File Editing chmod and makedirs functions incorrect permission assignment | 2.5CNA v3.1 | 0.1% | 2025-03-26 | Fix |
| CVE-2025-20232 | Splunk Enterprise app search endpoint information disclosure | 5.7CNA v3.1 | 0.5% | 2025-03-26 | Fix |
| CVE-2025-20231 | Sensitive information disclosure in Splunk Secure Gateway App | 7.1CNA v3.1 | 0.5% | 2025-03-26 | Fix |
| CVE-2025-20230 | Splunk Secure Gateway app KVStore collections improper access control | 4.3CNA v3.1 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-20229 | Splunk Enterprise apptemp directory file upload remote code execution | 8.0CNA v3.1 | 16.0% | 2025-03-26 | Fix |
| CVE-2025-20228 | Splunk Enterprise KVStore maintenance mode cross-site request forgery | 6.5CNA v3.1 | 0.2% | 2025-03-26 | Fix |
| CVE-2025-20227 | Splunk Enterprise Dashboard Studio warning dialog information disclosure | 4.3CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-20226 | Splunk Enterprise streams search endpoint information disclosure | 5.7CNA v3.1 | 0.5% | 2025-03-26 | Fix |
| CVE-2025-2838 | Silicon Labs Gecko OS DNS Response Processing infinite loop denial of service | 6.5CNA v3.0 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-2837 | Silicon Labs Gecko OS HTTP Request Handling stack-based buffer overflow remote code execution | 8.8CNA v3.0 | 0.5% | 2025-03-26 | Fix |
| CVE-2025-2820 | Bizerba SE & Co. KG Product family GLx and CWx denial of service | 6.5CNA v3.1 | 0.5% | 2025-03-26 | Fix |
| CVE-2025-2819 | Bizerba GT-SoftControl file selection process vulnerability | 6.6CNA v3.1 | 0.2% | 2025-03-26 | Fix |
| CVE-2025-2787 | KNIME Business Hub Ingress-nginx code injection | 8.7CNA v4.0 | 0.5% | 2025-03-26 | Fix |
| CVE-2025-2783 | Google Chromium Mojo sandbox escape | 8.3CISA ADP v3.1 | 9.2% | 2025-03-26 | KEVExploit codeFix |
| CVE-2025-2600 | Devolutions Remote Desktop Manager variable component improper authorization | 6.8CISA ADP v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-2596 | Checkmk session logout can be overwritten by long lasting request | 2.3CNA v4.0 | 0.2% | 2025-03-26 | Fix |
| CVE-2025-2576 | Ayyash Studio WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-2573 | Amazing service box Addons For WPBakery Page Builder WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-2562 | Devolutions Remote Desktop Manager autotyping feature vulnerability | 5.4CISA ADP v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-2528 | Devolutions Remote Desktop Manager application password policy improper authorization | 3.6CISA ADP v3.1 | 0.2% | 2025-03-26 | Fix |
| CVE-2025-2499 | Devolutions Remote Desktop Manager improper access control | 5.4CISA ADP v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-2302 | Advanced Woo Search WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-2276 | Ultimate Dashboard WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.2% | 2025-03-26 | Fix |
| CVE-2025-2257 | Total Upkeep WordPress Backup Plugin plus Restore and Migrate by BoldGrid command injection | 7.2CNA v3.1 | 0.9% | 2025-03-26 | Fix |
| CVE-2025-2228 | Responsive Addons for Elementor WordPress plugin information disclosure | 5.7v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-2167 | Event post WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4CNA v3.1 | 0.2% | 2025-03-26 | Fix |
| CVE-2025-2165 | SH Email Alert WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-03-26 | |
| CVE-2025-2110 | WP Compress WordPress plugin missing authorization | 8.8CNA v3.1 | 0.5% | 2025-03-26 | Fix |
| CVE-2025-2098 | Beijing Honghu Yuntu Technology Fast CAD Reader privilege escalation | 8.4CNA v4.0 | 0.2% | 2025-03-26 | |
| CVE-2025-2009 | Newsletters WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-1913 | Product Import Export for WooCommerce WordPress plugin PHP object injection | 7.2CNA v3.1 | 0.9% | 2025-03-26 | Exploit codeFix |
| CVE-2025-1912 | Product Import Export for WooCommerce WordPress plugin server-side request forgery | 7.6CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-1911 | Product Import Export for WooCommerce WordPress plugin arbitrary file deletion | 6.5v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-1784 | Spectra WordPress Gutenberg Blocks plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-1769 | Product Import Export for WooCommerce WordPress plugin path traversal | 4.9CNA v3.1 | 0.8% | 2025-03-26 | Fix |
| CVE-2025-1703 | Ultimate Blocks WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-1542 | Improper permission control in OXARI ServiceDesk | 9.3CNA v4.0 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-1514 | Active Products Tables for WooCommerce WordPress plugin unauthenticated arbitrary Filter Call | 7.3CNA v3.1 | 0.4% | 2025-03-26 | Fix |
| CVE-2025-1490 | Smart Maintenance Mode WordPress plugin reflected cross-site scripting via setstatus parameter | 6.1CNA v3.1 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-1440 | Advanced iFrame WordPress plugin unauthenticated settings update | 5.3CNA v3.1 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-1439 | Advanced iFrame WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-03-26 | Fix |
| CVE-2025-1437 | Advanced iFrame WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-1312 | Ultimate Blocks WordPress Blocks plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-03-26 | Fix |
| CVE-2025-1310 | Jobs for WordPress WordPress plugin path traversal | 6.5CNA v3.1 | 0.7% | 2025-03-26 | Fix |
| CVE-2025-30741 | Pixelfed may allow unauthorized actor to view private posts and private users | 4.3CNA v3.1 | 0.3% | 2025-03-25 | Fix |
| CVE-2025-30567 | WP01 WordPress plugin arbitrary file download | 7.5CNA v3.1 | 2.8% | 2025-03-25 | NucleiExploit code |
| CVE-2025-30222 | Shescape has potential environment variable exposure on Windows with CMD | 2.1CNA v4.0 | 0.2% | 2025-03-25 | Fix |
| CVE-2025-30219 | RabbitMQ has XSS vulnerability in an Error message in Management UI | 6.1CNA v3.1 | 0.2% | 2025-03-25 | Fix |
| CVE-2025-30216 | CryptoLib has heap overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length | 9.4CNA v3.1 | 2.7% | 2025-03-25 | Exploit code |
| CVE-2025-30214 | Frappe vulnerable to information disclosure leading to account takeover | 8.0CNA v4.0 | 0.4% | 2025-03-25 | Fix |
| CVE-2025-30213 | Frappe has Possibility of remote code execution due to improper validation | 6.3CNA v4.0 | 0.7% | 2025-03-25 | Fix |
| CVE-2025-30212 | Frappe has possibility of SQL injection due to improper validations | 6.6CNA v4.0 | 0.4% | 2025-03-25 | Fix |
| CVE-2025-30118 | Audi Universal Traffic Recorder hard-coded credentials | 7.5CISA ADP v3.1 | 0.4% | 2025-03-25 | |
| CVE-2025-30091 | Tiny MoxieManager PHP static code injection | 9.4CNA v4.0 | 0.8% | 2025-03-25 | Fix |
| CVE-2025-29932 | JetBrains GoLand XML external entity injection | 4.1CNA v3.1 | 0.2% | 2025-03-25 | Fix |
| CVE-2025-29789 | OpenEMR has directory traversal in Load Code feature | 4.6CNA v4.0 | 0.9% | 2025-03-25 | Fix |
| CVE-2025-29635 | D-Link DIR-823X command injection | 7.2CISA ADP v3.1 | 87.9% | 2025-03-25 | KEVNuclei |
| CVE-2025-28904 | Web Directory Free WordPress plugin SQL injection | 9.3CNA v3.1 | 0.4% | 2025-03-25 | Fix |
| CVE-2025-27837 | Artifex Ghostscript path traversal | 9.8CISA ADP v3.1 | 0.6% | 2025-03-25 | Fix |
| CVE-2025-27836 | Artifex Ghostscript buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2025-03-25 | Fix |
| CVE-2025-27835 | Artifex Ghostscript buffer overflow | 7.8CISA ADP v3.1 | 0.3% | 2025-03-25 | Fix |
| CVE-2025-27834 | Artifex Ghostscript buffer overflow | 7.8CISA ADP v3.1 | 0.3% | 2025-03-25 | Fix |
| CVE-2025-27833 | Artifex Ghostscript buffer overflow | 7.8CISA ADP v3.1 | 0.2% | 2025-03-25 | Fix |
| CVE-2025-27832 | Artifex Ghostscript buffer overflow | 9.8CISA ADP v3.1 | 0.8% | 2025-03-25 | Fix |
| CVE-2025-27831 | Artifex Ghostscript buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2025-03-25 | Fix |
| CVE-2025-27830 | Artifex Ghostscript buffer overflow | 7.8CISA ADP v3.1 | 0.3% | 2025-03-25 | Fix |
| CVE-2025-27810 | mbedtls uninitialized resource use | 4.8v3.1 | 0.3% | 2025-03-25 | Fix |
| CVE-2025-27809 | mbedtls insecure default initialization | 5.4CNA v3.1 | 0.2% | 2025-03-25 | Fix |
| CVE-2025-27633 | Hitachi Energy TRMTracker cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-03-25 | Fix |
| CVE-2025-27632 | Hitachi Energy TRMTracker host header injection | 6.1CNA v3.1 | 0.2% | 2025-03-25 | Fix |
| CVE-2025-27631 | Hitachi Energy TRMTracker LDAP injection | 6.5CNA v3.1 | 0.3% | 2025-03-25 | Fix |
| CVE-2025-27147 | glpi-project glpi-inventory-plugin GLPI Inventory plugin has improper access control | 8.2CNA v3.1 | 0.4% | 2025-03-25 | Fix |
| CVE-2025-26742 | Gallery for Social Photo WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-03-25 | Fix |
| CVE-2025-25374 | nasa Core Flight System denial of service | 7.5CISA ADP v3.1 | 0.5% | 2025-03-25 | |
| CVE-2025-25373 | nasa Core Flight System incorrect permission assignment | 9.8CISA ADP v3.1 | 0.5% | 2025-03-25 | |
| CVE-2025-25372 | nasa Core Flight System out-of-bounds write | 7.5CISA ADP v3.1 | 0.5% | 2025-03-25 | |
| CVE-2025-25371 | nasa Core Flight System path traversal | 7.5CISA ADP v3.1 | 0.6% | 2025-03-25 | |
| CVE-2025-24514 | ingress-nginx controller configuration injection via unsanitized auth-url annotation | 8.8CNA v3.1 | 30.5% | 2025-03-25 | NucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2025-24513 | ingress-nginx controller auth secret file path traversal | 4.8CNA v3.1 | 3.3% | 2025-03-25 | KCVFix |
| CVE-2025-22230 | VMware Tools authentication bypass | 7.8CNA v3.1 | 0.3% | 2025-03-25 | Fix |
| CVE-2025-2757 | Assimp MD5 file handler heap-based buffer overflow | 8.8v3.1 | 0.5% | 2025-03-25 | Fix |
| CVE-2025-2756 | Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow | 8.8v3.1 | 0.6% | 2025-03-25 | Fix |
| CVE-2025-2755 | Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection out-of-bounds | 8.8v3.1 | 0.5% | 2025-03-25 | |
| CVE-2025-2754 | Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow | 8.8v3.1 | 0.5% | 2025-03-25 | |
| CVE-2025-2753 | Open Asset Import Library Assimp LWS File LWSLoader.cpp MergeScenes out-of-bounds | 8.8v3.1 | 0.5% | 2025-03-25 | |
| CVE-2025-2752 | Open Asset Import Library Assimp CSM file fast_atof.h fast_atoreal_move out-of-bounds | 8.8v3.1 | 0.7% | 2025-03-25 | |
| CVE-2025-2751 | Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds | 8.8v3.1 | 0.8% | 2025-03-25 | Fix |
| CVE-2025-2750 | Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds write | 8.8v3.1 | 0.5% | 2025-03-25 | Fix |
| CVE-2025-2744 | zhijiantianya ruoyi-vue-pro Material upload interface upload-news-image path traversal | 5.3CNA v4.0 | 0.7% | 2025-03-25 | |
| CVE-2025-2743 | zhijiantianya ruoyi-vue-pro Material upload interface upload-temporary path traversal | 8.1v3.1 | 0.9% | 2025-03-25 | |
| CVE-2025-2742 | zhijiantianya ruoyi-vue-pro Material upload interface upload-permanent path traversal | 8.1v3.1 | 0.9% | 2025-03-25 | |
| CVE-2025-2740 | PHPGurukul Old Age Home Management System eligibility.php SQL injection | 6.9CNA v4.0 | 0.4% | 2025-03-25 | |
| CVE-2025-2739 | PHPGurukul Old Age Home Management System manage-services.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-25 | |
| CVE-2025-2738 | PHPGurukul Old Age Home Management System manage-scdetails.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-25 | |
| CVE-2025-2737 | PHPGurukul Old Age Home Management System contactus.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-25 | |
| CVE-2025-2736 | PHPGurukul Old Age Home Management System bwdates-report-details.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-25 | |
| CVE-2025-2735 | PHPGurukul Old Age Home Management System add-services.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-25 | |
| CVE-2025-2734 | PHPGurukul Old Age Home Management System aboutus.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-25 | |
| CVE-2025-2733 | mannaandpoem OpenManus Prompt python_execute.py os command injection | 5.3CNA v4.0 | 1.5% | 2025-03-25 | |
| CVE-2025-2732 | H3C Magic BE18000 HTTP POST request getWifiNeighbour command injection | 8.6CNA v4.0 | 1.0% | 2025-03-25 | Fix |
| CVE-2025-2731 | H3C Magic BE18000 HTTP POST request getDualbandSync command injection | 8.6CNA v4.0 | 1.0% | 2025-03-25 | Fix |
| CVE-2025-2730 | H3C Magic BE18000 HTTP POST request getssidname command injection | 8.6CNA v4.0 | 1.0% | 2025-03-25 | Fix |
| CVE-2025-2729 | H3C Magic BE18000 HTTP POST request networkSetup command injection | 8.6CNA v4.0 | 1.0% | 2025-03-25 | Fix |
| CVE-2025-2728 | H3C Magic NX30 Pro/Magic NX400 getNetworkConf command injection | 8.6CNA v4.0 | 1.0% | 2025-03-25 | Fix |
| CVE-2025-2727 | H3C Magic NX30 Pro HTTP POST request getNetworkStatus command injection | 8.6CNA v4.0 | 1.0% | 2025-03-25 | Fix |