CVE-2025 records published in March 2025

This page lists the 2,921 CVE-2025 records published in March 2025, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 24 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2025 list filters these records by severity or signal.

Critical
45315.5% of these records
Listed in CISA KEV
240.8% of these records
Reported exploited
50.2% of these records
Detection signal
692.4% of these records
Exploit code
772.6% of these records
Actionable vendor fix
1,53952.7% of these records

Figures as of 2026-10-24 13:47 UTC. Records published in March 2025 have had from about 19 months to about 20 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2025 records published in March 2025, newest first: records 1 to 1,000 of 2,921
CVE Summary CVSS EPSS Published Signals
CVE-2025-31697Formatter Suite Moderately critical cross-site scripting SA-CONTRIB-2025-0266.1CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-31696RapiDoc OAS Field Formatter Moderately critical cross-site scripting SA-CONTRIB-2025-0256.1CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-31695Link field display mode formatter Moderately critical cross-site scripting SA-CONTRIB-2025-0246.1CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-31694Two-factor Authentication (TFA) Moderately critical Access bypass SA-CONTRIB-2025-0238.1CISA ADP v3.10.4%2025-03-31Fix
CVE-2025-31693AI (Artificial Intelligence) Moderately critical Gadget Chain SA-CONTRIB-2025-0226.6CISA ADP v3.10.7%2025-03-31Fix
CVE-2025-31692AI (Artificial Intelligence) Critical remote code execution SA-CONTRIB-2025-0217.5CISA ADP v3.10.8%2025-03-31Fix
CVE-2025-31691OAuth2 Server Moderately critical Access bypass SA-CONTRIB-2025-0209.8CISA ADP v3.10.4%2025-03-31Fix
CVE-2025-31690Cache Utility Moderately critical cross-site request forgery SA-CONTRIB-2025-0198.8CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-31689Drupal General Data Protection Regulation cross-site request forgery (CSRF)8.1CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-31688Configuration Split Moderately critical cross-site request forgery SA-CONTRIB-2025-0176.8CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-31687SpamSpan filter Moderately critical cross-site scripting SA-CONTRIB-2025-0166.1CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-31686Open Social Less critical Access bypass, information disclosure SA-CONTRIB-2025-0158.1CISA ADP v3.10.4%2025-03-31Fix
CVE-2025-31685Open Social Moderately critical Access bypass SA-CONTRIB-2025-0149.1CISA ADP v3.10.4%2025-03-31Fix
CVE-2025-31684OAuth2 Client Moderately critical cross-site request forgery SA-CONTRIB-2025-0136.8CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-31683Google Tag Moderately critical cross-site request forgery SA-CONTRIB-2025-0126.8CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-31682Google Tag Moderately critical cross-site scripting SA-CONTRIB-2025-0114.8CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-31681Authenticator Login Critical Access bypass SA-CONTRIB-2025-0099.8CISA ADP v3.10.4%2025-03-31Fix
CVE-2025-31680Matomo Analytics Moderately critical cross-site request forgery SA-CONTRIB-2025-0086.8CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-31679Ignition Error Pages Critical cross-site scripting SA-CONTRIB-2025-0076.1CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-31678AI Moderately critical Access bypass, information disclosure SA-CONTRIB-2025-0048.2CISA ADP v3.10.4%2025-03-31Fix
CVE-2025-31677AI (Artificial Intelligence) Critical cross-site request forgery SA-CONTRIB-2025-0038.8CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-31676Email TFA Moderately critical Access bypass SA-CONTRIB-2025-0018.8CISA ADP v3.10.6%2025-03-31Fix
CVE-2025-31675Drupal core Moderately critical cross-site scripting SA-CORE-2025-0045.4CISA ADP v3.10.5%2025-03-31Fix
CVE-2025-31674Drupal core Moderately critical Gadget Chain SA-CORE-2025-0037.5CISA ADP v3.10.6%2025-03-31Fix
CVE-2025-31673Drupal core Moderately critical Access bypass SA-CORE-2025-0024.6CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-31629Infusionsoft Web Form JavaScript WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31
CVE-2025-31627Media Library Assistant WordPress plugin stored cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-31Fix
CVE-2025-31625Useinfluence WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-03-31
CVE-2025-31624Processing Projects WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31
CVE-2025-31623Rich Text Editor WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-03-31
CVE-2025-31621byBrick Accordion WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31
CVE-2025-31620CoverManager WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31
CVE-2025-31618Connector to CiviCRM with CiviMcRestFace WordPress plugin broken access control5.3CNA v3.10.3%2025-03-31Fix
CVE-2025-31617PostmarkApp Email Integrator WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-03-31Fix
CVE-2025-31616Varnish WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-03-31
CVE-2025-31615Simple Contact Forms WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-31
CVE-2025-31614Terms Before Download WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31
CVE-2025-31613AB Google Map Travel WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-03-31
CVE-2025-31611Auto Post After Image Upload WordPress plugin broken access control4.3CNA v3.10.2%2025-03-31
CVE-2025-31610gingerplugins Notification Bar stored cross-site scripting5.9CNA v3.10.2%2025-03-31
CVE-2025-31609WPCargo Track and Trace WordPress plugin insecure direct object references (IDOR)4.3CNA v3.10.2%2025-03-31
CVE-2025-31608CookieHint WP WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31
CVE-2025-31607Simple-Audioplayer WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31
CVE-2025-31606SP Blog Designer WordPress plugin arbitrary shortcode execution vulnerability4.8CNA v3.10.2%2025-03-31
CVE-2025-31605Welcome Popup WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-31
CVE-2025-31604Cal.com WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31Fix
CVE-2025-31603CF7 Spreadsheets WordPress plugin settings Change vulnerability5.4CNA v3.10.3%2025-03-31
CVE-2025-31602Apimo Connector WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-03-31
CVE-2025-31601Appointy Appointment Scheduler WordPress plugin CSRF to settings Change6.5CNA v3.10.2%2025-03-31
CVE-2025-31600DesignO WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-03-31
CVE-2025-31598WPFactory Quantity Dynamic Pricing and Bulk Discounts for WooCommerce stored cross-site scripting6.5CNA v3.10.3%2025-03-31Fix
CVE-2025-31597Ultimate Live Cricket WordPress Lite plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31
CVE-2025-31596Chat by Chatwee WordPress plugin broken access control4.3CNA v3.10.3%2025-03-31
CVE-2025-31595Timeline Event History WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31
CVE-2025-31593OpenMenu WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31
CVE-2025-31592Send E-mail WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31
CVE-2025-31591Exit Popup Free WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-31
CVE-2025-31590WP Date and Time Shortcode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31Fix
CVE-2025-31589Ethiopian Calendar WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31
CVE-2025-31588Elfsight Testimonials Slider WordPress plugin cross-site request forgery (CSRF) to settings Change5.4CNA v3.10.2%2025-03-31
CVE-2025-31587Elfsight Testimonials Slider WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-31
CVE-2025-31586Gallery Photo Albums WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31
CVE-2025-31585Leadfox for WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-03-31Fix
CVE-2025-31584Elfsight Testimonials Slider WordPress plugin broken access control5.4CNA v3.10.3%2025-03-31
CVE-2025-31583WP Copy Media URL WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-03-31
CVE-2025-31577Appointify WordPress plugin arbitrary file upload6.6CNA v3.10.3%2025-03-31
CVE-2025-31576PostmarkApp Email Integrator WordPress plugin broken access control4.3CNA v3.10.3%2025-03-31Fix
CVE-2025-31575Flag Icons WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-31
CVE-2025-31574Custom Content Scrollbar WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31
CVE-2025-31572Multi Days Events and Multi Events in One Day Calendar WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-03-31
CVE-2025-31570Related Posts Widget with Thumbnails WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-03-31Fix
CVE-2025-31569wordpress related Posts with thumbnails plugin CSRF to stored XSS7.1CNA v3.10.1%2025-03-31
CVE-2025-31567Themesflat Addons For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31Fix
CVE-2025-31566Rio Video Gallery WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-03-31
CVE-2025-31562Uptime Robot Plugin for WordPress cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31
CVE-2025-31559Custom Database Applications by Caspio WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31
CVE-2025-31557OSM WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31Fix
CVE-2025-31556IMPress for IDX Broker WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31Fix
CVE-2025-31555ContentMX Content Publisher WordPress plugin broken access control5.4CNA v3.10.3%2025-03-31Fix
CVE-2025-31549Fusion WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31
CVE-2025-31547Uptime Robot Plugin for WordPress SQL injection8.5CNA v3.10.3%2025-03-31
CVE-2025-31546Swiss Toolkit For WP WordPress plugin broken access control4.3CNA v3.10.4%2025-03-31Fix
CVE-2025-31545Safe Ai Malware Protection for WP WordPress plugin broken access control5.4CNA v3.10.3%2025-03-31
CVE-2025-31544Swiss Toolkit For WP WordPress plugin broken access control4.3CNA v3.10.3%2025-03-31
CVE-2025-31543Twice Commerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31Fix
CVE-2025-31542My auctions allegro WordPress plugin SQL injection8.5CNA v3.10.3%2025-03-31Fix
CVE-2025-31540ACME Divi Modules WordPress plugin broken access control4.3CNA v3.10.3%2025-03-31
CVE-2025-31539Cryptocurrency Widgets Pack WordPress plugin broken access control6.5CNA v3.10.4%2025-03-31
CVE-2025-31538Checklist WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31
CVE-2025-31535Simple Owl Carousel WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31
CVE-2025-31533Salesmate Add-On for Gravity Forms WordPress plugin broken access control5.3CNA v3.10.4%2025-03-31Fix
CVE-2025-31532AtomChat WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-31
CVE-2025-31530Google SEO Pressor Snippet WordPress plugin broken access control4.3CNA v3.10.3%2025-03-31
CVE-2025-31529Slider Path for Elementor WordPress plugin broken access control4.3CNA v3.10.3%2025-03-31
CVE-2025-31528StaticPress WordPress plugin broken access control4.3CNA v3.10.3%2025-03-31
CVE-2025-31527WP Link Preview WordPress plugin server side request forgery (SSRF)6.4CNA v3.10.3%2025-03-31
CVE-2025-31526Behance Portfolio Manager WordPress plugin SQL injection8.5CNA v3.10.3%2025-03-31Fix
CVE-2025-31419Churel WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31
CVE-2025-31417WP Docs WordPress plugin broken access control4.3CNA v3.10.2%2025-03-31Fix
CVE-2025-31414Cost Calculator Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31Fix
CVE-2025-31412JetProductGallery WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31Fix
CVE-2025-31410WP Church Donation WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-03-31
CVE-2025-31406ELEX WooCommerce Request a Quote WordPress plugin broken access control4.3CNA v3.10.3%2025-03-31Fix
CVE-2025-31387InstaWP Connect WordPress plugin local file inclusion7.5CNA v3.10.5%2025-03-31Fix
CVE-2025-31386Simple:Press WordPress plugin broken access control5.3CNA v3.10.3%2025-03-31Fix
CVE-2025-31376NanoSupport WordPress plugin broken access control4.3CNA v3.10.2%2025-03-31
CVE-2025-31194Apple macOS missing authorization9.8CISA ADP v3.11.0%2025-03-31Fix
CVE-2025-31192Apple Safari authentication bypass6.7CISA ADP v3.10.6%2025-03-31Fix
CVE-2025-31191Apple macOS information disclosure5.5CISA ADP v3.10.5%2025-03-31Fix
CVE-2025-31188Apple macOS race condition7.8CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-31187Apple macOS improper access control5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-31184Apple Safari improper preservation of permissions7.8CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-31183Apple macOS information disclosure9.8CISA ADP v3.11.2%2025-03-31Fix
CVE-2025-31182Apple macOS missing authorization9.8CISA ADP v3.11.2%2025-03-31Fix
CVE-2025-31129jooby jooby-pac4j: Deserialization of untrusted data8.8CNA v3.10.7%2025-03-31Fix
CVE-2025-31128rubentd gifplayer cross-site scripting6.9CNA v4.00.5%2025-03-31Fix
CVE-2025-31125Vite Vitejs improper access control5.3CNA v3.165.8%2025-03-31KEVNucleiExploit codeKCVFix
CVE-2025-31124Zitadel allows User Enumeration by loginname attribute normalization5.3CNA v3.10.5%2025-03-31Fix
CVE-2025-31123Zitadel Expired JWT Keys Usable for Authorization Grants8.7CNA v3.10.4%2025-03-31Fix
CVE-2025-31122Scratch-Coding-Hut Scratch-Coding-Hut.github.io Login Links Generation vulnerability9.0CNA v4.00.4%2025-03-31
CVE-2025-31117OpenEMR Out-of-Band server-side request forgery (OOB SSRF)6.9CNA v4.00.5%2025-03-31Fix
CVE-2025-31116Mobile Security Framework has a SSRF vulnerability fix bypass on assetlinks_check with DNS Rebinding4.4CNA v3.10.5%2025-03-31Fix
CVE-2025-31103appleple a-blog cms Ver.3.1.x series Untrusted data deserialization of untrusted data7.5v3.10.5%2025-03-31Fix
CVE-2025-31043JetSearch WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31Fix
CVE-2025-31016JetWooBuilder WordPress plugin local file inclusion7.5CNA v3.10.6%2025-03-31Fix
CVE-2025-30987JetBlocks For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31Fix
CVE-2025-30963JetSmartFilters WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31Fix
CVE-2025-30961Trackserver WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-31Fix
CVE-2025-30855Ads by WPQuads WordPress plugin broken access control7.5CNA v3.10.3%2025-03-31Fix
CVE-2025-30835Accounting for WooCommerce WordPress plugin local file inclusion7.5CNA v3.10.5%2025-03-31Fix
CVE-2025-30471Apple iPadOS denial of service7.5CISA ADP v3.11.5%2025-03-31Fix
CVE-2025-30470Apple macOS path traversal5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30469Apple iOS and iPadOS incorrect authorization2.4CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30467Apple Safari UI misrepresentation4.3CISA ADP v3.10.5%2025-03-31Fix
CVE-2025-30465Apple iPadOS incorrect default permissions9.8CISA ADP v3.11.1%2025-03-31Fix
CVE-2025-30464Apple macOS out-of-bounds write7.8CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30463Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30462Apple macOS injection9.8CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-30461Apple macOS missing authorization9.8CISA ADP v3.10.7%2025-03-31Fix
CVE-2025-30460Apple macOS insecure permissions7.4CISA ADP v3.10.8%2025-03-31Fix
CVE-2025-30458Apple macOS out-of-bounds read9.8CISA ADP v3.10.7%2025-03-31Fix
CVE-2025-30457Apple macOS link following9.8CISA ADP v3.11.2%2025-03-31Fix
CVE-2025-30456Apple macOS improper preservation of permissions7.8CISA ADP v3.11.0%2025-03-31Fix
CVE-2025-30455Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30454Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30452Apple macOS improper input validation9.8CISA ADP v3.11.1%2025-03-31Fix
CVE-2025-30451Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-30450Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30449Apple macOS improper preservation of permissions7.8CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30447Apple iPadOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30446Apple macOS out-of-bounds write6.5CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-30444Apple macOS race condition9.8CISA ADP v3.10.8%2025-03-31Fix
CVE-2025-30443Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30441Apple Xcode out-of-bounds write5.5CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-30439Apple macOS information disclosure4.6CISA ADP v3.10.4%2025-03-31Fix
CVE-2025-30438Apple macOS improper access control5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30437Apple macOS memory corruption7.4CISA ADP v3.10.5%2025-03-31Fix
CVE-2025-30435Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30434Apple iOS and iPadOS cross-site scripting5.0CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30433Apple iPadOS improper access control9.8CISA ADP v3.11.3%2025-03-31Fix
CVE-2025-30432Apple iPadOS improper authentication6.4CISA ADP v3.10.8%2025-03-31Fix
CVE-2025-30430Apple macOS improper authentication9.8CISA ADP v3.11.2%2025-03-31Fix
CVE-2025-30429Apple iPadOS sandbox escape6.3CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30428Apple iPadOS authentication bypass5.4CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-30427Apple Safari use-after-free4.3CISA ADP v3.10.8%2025-03-31Fix
CVE-2025-30426Apple iPadOS information disclosure9.8CISA ADP v3.11.2%2025-03-31Fix
CVE-2025-30425Apple Safari improper access control4.3CISA ADP v3.10.8%2025-03-31Fix
CVE-2025-30424Apple macOS information disclosure9.8CISA ADP v3.11.0%2025-03-31Fix
CVE-2025-30369Zulip allows the deletion of Custom profile fields by administrators of a different organization2.7CNA v3.10.3%2025-03-31Fix
CVE-2025-30368Zulip allows the deletion of organization by administrators of a different organization2.7CNA v3.10.3%2025-03-31Fix
CVE-2025-30223Beego allows Reflected/stored XSS in Beego's RenderForm function due to Unescaped User Input9.3CNA v3.10.6%2025-03-31Fix
CVE-2025-30209Enalean Tuleap FRS plugin incorrect authorization5.3CNA v3.10.4%2025-03-31Fix
CVE-2025-30203Tuleap allows XSS via the content of RSS feeds in the RSS widgets4.8CNA v3.10.3%2025-03-31Fix
CVE-2025-30161OpenEMR stored XSS in OpenEMR Bronchitis form8.4CNA v4.010.9%2025-03-31Fix
CVE-2025-30155Tuleap does not enforce read permissions on parent trackers in the REST API4.3CNA v3.10.3%2025-03-31Fix
CVE-2025-30149OpenEMR reflected XSS in AJAX script6.4CNA v3.10.3%2025-03-31Fix
CVE-2025-30095VyOS hard-coded cryptographic key9.0CNA v3.10.5%2025-03-31Fix
CVE-2025-30006Xorcom CompletePBX reflected cross-site scripting6.1CNA v3.10.2%2025-03-31Fix
CVE-2025-30005Xorcom CompletePBX authenticated path traversal and file deletion8.3v3.11.8%2025-03-31MetasploitExploit codeFix
CVE-2025-30004Xorcom CompletePBX Task Scheduler Authenticated command injection8.8v3.14.2%2025-03-31MetasploitExploit codeFix
CVE-2025-29929Tuleap is missing CSRF protection on tracker hierarchy administration4.6CNA v3.10.2%2025-03-31Fix
CVE-2025-29908Netty QUIC hash collision DoS attack5.3CNA v3.10.6%2025-03-31Fix
CVE-2025-29772OpenEMR allows reflected XSS in CAMOS new.php7.2CNA v4.00.3%2025-03-31Fix
CVE-2025-29766Tuleap has missing CSRF protections on artifact submission and edition from the tracker view4.6CNA v3.10.2%2025-03-31Fix
CVE-2025-29266Unraid authentication bypass9.6CNA v3.10.4%2025-03-31Fix
CVE-2025-27149Zulip exports can leak private data4.6CNA v4.00.3%2025-03-31Fix
CVE-2025-27095JumpServer has a Kubernetes token leak4.3CNA v3.10.3%2025-03-31Fix
CVE-2025-26689Inaba Denki Sangyo CHOCO TEI WATCHER mini (IB-MCT001) forced browsing9.8CNA v3.11.1%2025-03-31
CVE-2025-26683Microsoft Azure Playwright elevation of privilege8.1CNA v3.10.7%2025-03-31Fix
CVE-2025-25211Inaba Denki Sangyo CHOCO TEI WATCHER mini (IB-MCT001) weak password requirements9.8CNA v3.10.8%2025-03-31
CVE-2025-24852Inaba Denki Sangyo CHOCO TEI WATCHER mini (IB-MCT001) recoverable password storage4.6CNA v3.10.3%2025-03-31
CVE-2025-24517Inaba Denki Sangyo CHOCO TEI WATCHER mini (IB-MCT001) client-side authentication7.5CNA v3.10.8%2025-03-31
CVE-2025-24283Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24282Apple macOS injection5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24281Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24280Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24279Apple macOS information disclosure4.3CISA ADP v3.10.5%2025-03-31Fix
CVE-2025-24278Apple macOS link following5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24277Apple macOS incorrect default permissions7.8CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24276Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-24273Apple macOS out-of-bounds write9.8CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-24272Apple macOS improper access control6.8CISA ADP v3.10.6%2025-03-31Fix
CVE-2025-24269Apple macOS denial of service9.8CISA ADP v3.10.8%2025-03-31Fix
CVE-2025-24267Apple macOS incorrect default permissions7.8CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-24266Apple macOS buffer overflow9.8CISA ADP v3.11.1%2025-03-31Fix
CVE-2025-24265Apple macOS out-of-bounds read9.8CISA ADP v3.11.0%2025-03-31Fix
CVE-2025-24264Apple Safari crash9.8CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-24263Apple macOS information disclosure9.8CISA ADP v3.10.5%2025-03-31Fix
CVE-2025-24262Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24261Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24260Apple macOS denial of service9.8CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-24259Apple iPadOS improper access control9.8CISA ADP v3.10.8%2025-03-31Fix
CVE-2025-24257Apple macOS out-of-bounds write7.1CISA ADP v3.10.3%2025-03-31Exploit codeFix
CVE-2025-24256Apple macOS out-of-bounds read9.8CISA ADP v3.11.2%2025-03-31Fix
CVE-2025-24255Apple macOS sandbox escape8.4CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24254Apple macOS improper privilege management8.8CISA ADP v3.10.8%2025-03-31Fix
CVE-2025-24253Apple macOS information disclosure9.8CISA ADP v3.11.0%2025-03-31Fix
CVE-2025-24250Apple macOS information disclosure9.8CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-24249Apple macOS missing authorization9.8CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-24248Apple macOS insecure permissions5.0CISA ADP v3.10.4%2025-03-31Fix
CVE-2025-24247Apple macOS type confusion9.8CISA ADP v3.11.0%2025-03-31Fix
CVE-2025-24246Apple macOS injection9.8CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-24245Apple macOS missing authorization9.8CISA ADP v3.10.7%2025-03-31Fix
CVE-2025-24244Apple iPadOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24243Apple iPadOS code injection7.8CISA ADP v3.10.5%2025-03-31Fix
CVE-2025-24242Apple macOS link following4.4CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24241Apple macOS improper access control9.8CISA ADP v3.11.0%2025-03-31Fix
CVE-2025-24240Apple macOS race condition4.7CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-24239Apple macOS information disclosure6.5CISA ADP v3.10.5%2025-03-31Fix
CVE-2025-24238Apple macOS incorrect default permissions9.8CISA ADP v3.11.1%2025-03-31Fix
CVE-2025-24237Apple iPadOS buffer overflow9.8CISA ADP v3.11.6%2025-03-31Fix
CVE-2025-24236Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24235Apple macOS resource exhaustion5.5CISA ADP v3.10.5%2025-03-31Fix
CVE-2025-24234Apple macOS incorrect default permissions7.8CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24233Apple macOS incorrect authorization9.8CISA ADP v3.11.0%2025-03-31Fix
CVE-2025-24232Apple macOS information disclosure9.8CISA ADP v3.11.1%2025-03-31Fix
CVE-2025-24231Apple macOS out-of-bounds write9.8CISA ADP v3.11.1%2025-03-31Fix
CVE-2025-24230Apple iPadOS out-of-bounds read9.8CISA ADP v3.11.9%2025-03-31Fix
CVE-2025-24229Apple macOS logic flaw7.4CISA ADP v3.10.8%2025-03-31Fix
CVE-2025-24228Apple macOS out-of-bounds read7.8CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24226Apple Xcode information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24221Apple iPadOS incorrect authorization7.5CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-24218Apple macOS improper access control5.5CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-24217Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24216Apple Safari memory corruption4.3CISA ADP v3.10.8%2025-03-31Fix
CVE-2025-24215Apple iPadOS improper access control5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24214Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24213Apple Safari type confusion7.8CISA ADP v3.10.4%2025-03-31Fix
CVE-2025-24212Apple iPadOS sandbox escape6.3CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24211Apple iPadOS resource exhaustion9.8CISA ADP v3.11.9%2025-03-31Fix
CVE-2025-24210Apple iPadOS logic flaw5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24209Apple Safari buffer overflow7.0CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-24208Apple Safari cross-site scripting6.1CISA ADP v3.10.6%2025-03-31Fix
CVE-2025-24207Apple macOS incorrect default permissions9.8CISA ADP v3.11.0%2025-03-31Fix
CVE-2025-24205Apple iPadOS improper access control5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24204Apple macOS information disclosure9.8CISA ADP v3.11.5%2025-03-31Exploit codeFix
CVE-2025-24203The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to modify protected parts of the file system.5.0CISA ADP v3.10.6%2025-03-31Exploit codeFix
CVE-2025-24202Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24199Apple macOS format string5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24198Apple iPadOS information disclosure6.6CISA ADP v3.10.4%2025-03-31Fix
CVE-2025-24196Apple macOS out-of-bounds read8.8CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-24195Apple macOS incorrect default permissions9.8CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-24194Apple macOS logic flaw6.5CISA ADP v3.10.7%2025-03-31Fix
CVE-2025-24193Apple iOS and iPadOS improper access control2.4CISA ADP v3.10.5%2025-03-31Fix
CVE-2025-24192Apple Safari information disclosure6.5CISA ADP v3.10.8%2025-03-31Fix
CVE-2025-24191Apple macOS improper input validation5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24190Apple iPadOS resource exhaustion9.8CISA ADP v3.11.9%2025-03-31Fix
CVE-2025-24182Apple macOS out-of-bounds read5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24181Apple macOS missing authorization9.8CISA ADP v3.11.0%2025-03-31Fix
CVE-2025-24180Apple Safari open redirect8.1CISA ADP v3.11.0%2025-03-31Fix
CVE-2025-24178Apple iPadOS sandbox escape9.8CISA ADP v3.11.6%2025-03-31Fix
CVE-2025-24173Apple iPadOS sandbox escape7.8CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24172Apple macOS incorrect default permissions9.8CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-24170Apple macOS incorrect default permissions7.8CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24167Apple Safari downloads vulnerability9.8CISA ADP v3.10.9%2025-03-31Fix
CVE-2025-24164Apple macOS logic flaw5.5CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-24157Apple macOS buffer overflow5.6CISA ADP v3.10.7%2025-03-31Fix
CVE-2025-24148Apple macOS improper integrity check validation5.5CISA ADP v3.10.2%2025-03-31Fix
CVE-2025-24097Apple iPadOS out-of-bounds read5.0CISA ADP v3.10.4%2025-03-31Fix
CVE-2025-24095Apple visionOS authentication bypass7.6CISA ADP v3.10.7%2025-03-31Fix
CVE-2025-23995Tantyyellow WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-31
CVE-2025-22941Adtran 411 web interface command injection9.8CISA ADP v3.12.2%2025-03-31
CVE-2025-22940Adtran 411 improper access control9.1CISA ADP v3.10.5%2025-03-31
CVE-2025-22939Adtran 411 telnet service command injection9.8CISA ADP v3.12.6%2025-03-31
CVE-2025-22938Adtran 411 default password9.8CISA ADP v3.10.6%2025-03-31
CVE-2025-22937Adtran 411 improper privilege management9.8CISA ADP v3.10.6%2025-03-31
CVE-2025-21893Linux kernel key reference counting use-after-free7.8CNA v3.10.2%2025-03-31Fix
CVE-2025-3062Drupal Admin LTE theme Critical Unsupported SA-CONTRIB-2025-0106.6CISA ADP v3.10.5%2025-03-31
CVE-2025-3061Material Admin Critical Unsupported SA-CONTRIB-2025-0066.6CISA ADP v3.10.5%2025-03-31
CVE-2025-3060Flattern Multipurpose Bootstrap Business Profile Critical Unsupported SA-CONTRIB-2025-0056.6CISA ADP v3.10.5%2025-03-31
CVE-2025-3059Profile Private Critical Unsupported SA-CONTRIB-2025-0025.3CISA ADP v3.10.5%2025-03-31
CVE-2025-3057Drupal core Critical cross-site scripting SA-CORE-2025-0016.1CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-3048Path traversal in AWS SAM CLI allows file copy to local cache6.9CNA v4.00.7%2025-03-31Fix
CVE-2025-3047Path traversal in AWS SAM CLI allows file copy to build container6.9CNA v4.00.8%2025-03-31Fix
CVE-2025-3040Project Worlds Online Time Table Generator add_student.php unrestricted upload9.8v3.10.6%2025-03-31
CVE-2025-3039code-projects Payroll Management System add_employee.php SQL injection8.8v3.10.7%2025-03-31
CVE-2025-3038code-projects Payroll Management System view_account.php SQL injection8.8v3.10.7%2025-03-31
CVE-2025-3037yzk2356911358 StudentServlet-JSP cross-site request forgery5.3CNA v4.00.3%2025-03-31
CVE-2025-3036yzk2356911358 StudentServlet-JSP Student Management cross-site scripting6.1v3.10.3%2025-03-31
CVE-2025-3027Open redirect vulnerability in EJBCA6.1v3.10.2%2025-03-31Fix
CVE-2025-3026Improper neutralization of Special Elements vulnerability in EJBCA6.1v3.10.2%2025-03-31Fix
CVE-2025-3022OS command injection vulnerability in e-management of e-solutions9.3CNA v4.01.0%2025-03-31
CVE-2025-3021Path traversal vulnerability in e-management of e-solutions8.7CNA v4.00.5%2025-03-31
CVE-2025-3019Cross-site scripting vulnerabilities in KNIME Business Hub web pages5.3CNA v4.00.3%2025-03-31Fix
CVE-2025-3018SourceCodester Online Eyewear Shop Users.php SQL injection7.5v3.10.5%2025-03-31
CVE-2025-3017TA-Lib ta_regtest test_minmax.c setInputBuffer out-of-bounds write4.8CNA v4.00.2%2025-03-31
CVE-2025-3016Open Asset Import Library MDL file handler resource exhaustion6.5v3.10.6%2025-03-31Fix
CVE-2025-3015Open Asset Import Library Assimp ASE File ASELoader.cpp BuildUniqueRepresentation out-of-bounds8.8v3.10.5%2025-03-31Fix
CVE-2025-3014Insecure direct object references (IDOR) in NightWolf Penetration Platform8.3CNA v4.00.3%2025-03-31
CVE-2025-3013Insecure direct object references (IDOR) in NightWolf Penetration Platform8.3CNA v4.00.3%2025-03-31
CVE-2025-3011PiExtract SOOP-CLM SQL injection9.8CNA v3.10.5%2025-03-31Fix
CVE-2025-3010Khronos Group glslang Intermediate.cpp isConversionAllowed null pointer dereference4.8CNA v4.00.2%2025-03-31Fix
CVE-2025-3009Jinher Network OA NetDiskProperty.aspx SQL injection5.3CNA v4.00.3%2025-03-31
CVE-2025-3008Novastar CX40 NetFilter utility netconfig popen command injection5.1CNA v4.01.0%2025-03-31
CVE-2025-3007Novastar CX40 NetFilter utility netconfig getopt stack-based overflow5.1CNA v4.00.3%2025-03-31
CVE-2025-3006PHPGurukul e-Diary Management System edit-category.php SQL injection9.8v3.10.6%2025-03-31
CVE-2025-3005Sayski ForestBlog Friend Link cross-site scripting5.4v3.10.3%2025-03-31
CVE-2025-3004Sayski ForestBlog search cross-site scripting5.4v3.10.3%2025-03-31
CVE-2025-3003ESAFENET CDG UserAjax SQL injection5.3CNA v4.00.3%2025-03-31
CVE-2025-3002Digital China DCME-520 mon_merge_stat_hist.php os command injection6.9CNA v4.020.0%2025-03-31
CVE-2025-3001PyTorch torch.lstm_cell memory corruption4.8CNA v4.00.2%2025-03-31Fix
CVE-2025-3000PyTorch torch.jit.script memory corruption4.8CNA v4.00.2%2025-03-31Fix
CVE-2025-2999PyTorch torch.nn.utils.rnn.unpack_sequence memory corruption4.8CNA v4.00.2%2025-03-31Fix
CVE-2025-2998PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption4.8CNA v4.00.2%2025-03-31Fix
CVE-2025-2997zhangyanbo2007 youkefu URL server-side request forgery8.8v3.10.5%2025-03-31
CVE-2025-2996Tenda FH1202 Web Management Interface SysToolDDNS access control5.3v3.10.8%2025-03-31
CVE-2025-2995Tenda FH1202 Web Management Interface SysToolChangePwd access control6.9CNA v4.00.8%2025-03-31
CVE-2025-2994Tenda FH1202 Web Management interface qossetting access control6.9CNA v4.00.7%2025-03-31
CVE-2025-2993Tenda FH1202 default.cfg access control6.9CNA v4.010.9%2025-03-31Emerging Threats
CVE-2025-2992Tenda FH1202 Web Management Interface AdvSetWrlsafeset access control6.9CNA v4.00.7%2025-03-31
CVE-2025-2991Tenda FH1202 Web Management Interface AdvSetWrlmacfilter access control6.9CNA v4.00.6%2025-03-31
CVE-2025-2990Tenda FH1202 Web Management Interface AdvSetWrlGstset access control6.9CNA v4.00.7%2025-03-31
CVE-2025-2989Tenda FH1202 Web Management Interface AdvSetWrl access control6.9CNA v4.00.7%2025-03-31
CVE-2025-2985code-projects Payroll Management System update_account.php SQL injection8.8v3.10.5%2025-03-31
CVE-2025-2984code-projects Payroll Management System delete.php SQL injection8.8v3.10.5%2025-03-31
CVE-2025-2983Legrand SMS PowerView os command injection5.1CNA v4.00.8%2025-03-31
CVE-2025-2982Legrand SMS PowerView file inclusion5.3CNA v4.00.3%2025-03-31
CVE-2025-2981Legrand SMS PowerView cross-site scripting5.1CNA v4.00.2%2025-03-31
CVE-2025-2980Legrand SMS PowerView redirect parameter open redirect5.1CNA v4.00.3%2025-03-31
CVE-2025-2979Wcms Registration setregister cross-site scripting5.4v3.10.4%2025-03-31
CVE-2025-2978Wcms Article Publishing Page CKEditor unrestricted upload9.8v3.10.5%2025-03-31
CVE-2025-2977GFI KerioConnect PDF file cross-site scripting5.4v3.10.3%2025-03-31
CVE-2025-2976GFI KerioConnect file upload cross-site scripting5.4v3.10.3%2025-03-31
CVE-2025-2975GFI KerioConnect Signature EditHtmlSource cross-site scripting5.4v3.10.3%2025-03-31
CVE-2025-2974CodeCanyon Perfex CRM Contracts contract cross-site scripting5.4v3.10.4%2025-03-31
CVE-2025-2973code-projects College Management System student.php unrestricted upload9.8v3.10.5%2025-03-31
CVE-2025-2794Kentico Xperience unsafe reflection8.7CNA v4.00.5%2025-03-31Fix
CVE-2025-2586Ols: Unauthenticated metrics flooding in OpenShift Lightspeed service leading to resource exhaustion7.5CNA v3.10.5%2025-03-31
CVE-2025-2402Hard-coded password for object store of KNIME Business Hub8.8CNA v4.00.4%2025-03-31Fix
CVE-2025-2292Xorcom CompletePBX Authenticated File Disclosure6.5v3.11.7%2025-03-31MetasploitExploit codeFix
CVE-2025-2072Reflected cross-site scripting (XSS) vulnerability in FAST LTA Silent Brick WebUI5.1CNA v4.00.4%2025-03-31Fix
CVE-2025-2071OS command injection vulnerability in FAST LTA Silent Brick WebUI10.0CNA v4.01.0%2025-03-31Fix
CVE-2025-1449Admin Shell Access vulnerability in Rockwell Automation Verve Asset Manager7.5CNA v4.00.7%2025-03-31Fix
CVE-2025-1268Canon Generic Plus PCL6 Printer Driver out-of-bounds write9.4CNA v3.10.8%2025-03-31Fix
CVE-2025-0613Photo Gallery WordPress plugin unauthenticated stored XSS6.1CISA ADP v3.10.3%2025-03-31Fix
CVE-2025-2961opensolon org.noear.solon.core.handle.RenderManager aa render_mav path traversal5.3CNA v4.00.5%2025-03-30
CVE-2025-2960TRENDnet TEW-637AP/TEW-638APB HTTP request goahead sub_41DED0 null pointer dereference7.1CNA v4.00.8%2025-03-30
CVE-2025-2959TRENDnet TEW-410APB HTTP request httpd sub_4019A0 null pointer dereference7.1CNA v4.00.8%2025-03-30
CVE-2025-2958TRENDnet TEW-818DRU HTTP request httpd denial of service7.1CNA v4.00.8%2025-03-30
CVE-2025-2957TRENDnet TEW-411BRP+ HTTP request httpd sub_401DB0 null pointer dereference7.1CNA v4.00.4%2025-03-30
CVE-2025-2956TRENDnet TI-G102i HTTP request lighttpd plugins_call_handle_uri_raw null pointer dereference7.1CNA v4.00.4%2025-03-30
CVE-2025-2955TOTOLINK A3000RU IBMS Configuration File ExportIbmsConfig.sh access control6.9CNA v4.00.7%2025-03-30
CVE-2025-2954mannaandpoem OpenManus file file_saver.py execute access control5.5v3.10.2%2025-03-30
CVE-2025-2953PyTorch torch.mkldnn_max_pool2d denial of service5.5v3.10.3%2025-03-30Fix
CVE-2025-2952Bluestar Micro Mall api.php unrestricted upload9.8v3.10.4%2025-03-30
CVE-2025-2951Bluestar Micro Mall data.php SQL injection9.8v3.10.5%2025-03-30
CVE-2025-1861PHP stream HTTP wrapper truncates redirect location to 1024 bytes6.3CNA v4.00.8%2025-03-30Fix
CVE-2025-1736PHP stream HTTP wrapper header check might omit basic auth header6.3CNA v4.00.5%2025-03-30Fix
CVE-2025-1734PHP streams HTTP wrapper does not fail for headers with invalid name and no colon6.3CNA v4.00.5%2025-03-30Fix
CVE-2025-1219PHP libxml streams use wrong content-type header when requesting a redirected resource6.3CNA v4.00.7%2025-03-30Fix
CVE-2025-2840DAP to Autoresponders Email Syncing WordPress plugin unauthenticated information exposure5.3CNA v3.10.4%2025-03-29
CVE-2025-2803So-Called Air Quotes WordPress plugin unauthenticated arbitrary shortcode execution7.3CNA v3.10.5%2025-03-29
CVE-2025-2266Checkout Mestres do WP for WooCommerce - Unauthenticated arbitrary Options Update9.8CNA v3.10.7%2025-03-29Exploit code
CVE-2025-2249SoJ Soundslides WordPress plugin authenticated (Contributor+) arbitrary file upload8.8CNA v3.10.8%2025-03-29Exploit code
CVE-2025-2006Inline Image Upload for BBPress WordPress plugin authenticated (Subscriber+) arbitrary file upload8.8CNA v3.10.9%2025-03-29Fix
CVE-2025-1217PHP header parser of HTTP stream wrapper does not handle folded headers6.3CNA v4.00.6%2025-03-29Fix
CVE-2025-31474WP Database Optimizer WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-03-28
CVE-2025-31473WP Database Optimizer WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-28
CVE-2025-31472Flatty WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-28
CVE-2025-31471Duplicate Page and Post WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-28
CVE-2025-31470Page Takeover WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-28Fix
CVE-2025-31469webrangers Clear Sucuri Cache missing authorization5.3CNA v3.10.3%2025-03-28
CVE-2025-31466Duplicate Page and Post WordPress plugin SQL injection8.5CNA v3.10.3%2025-03-28
CVE-2025-31465Better Section Navigation Widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28Fix
CVE-2025-31464Text Selection Color WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-28
CVE-2025-31463TGG WP Optimizer WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-28Fix
CVE-2025-31460OmniLeads Scripts and Tags Manager WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-03-28
CVE-2025-31459Login Alert WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-03-28
CVE-2025-31458Video Embedder WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-03-28Fix
CVE-2025-31457LWS SMS WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2025-03-28
CVE-2025-31456Ultimate Security Checker WordPress plugin cross-site request forgery (CSRF) to security Rescan4.3CNA v3.10.1%2025-03-28
CVE-2025-31453YouTube SimpleGallery WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28
CVE-2025-31452WP Ultimate Search WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28
CVE-2025-31451wBounce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28
CVE-2025-31450Toggle Box WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28
CVE-2025-31449The Visitor Counter WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-03-28
CVE-2025-31448Simple Trackback Disabler WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-03-28
CVE-2025-31447NertWorks All in One Social Share Tools WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-03-28
CVE-2025-31444ShowTime Slideshow WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-03-28
CVE-2025-31443KK I Like It WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-03-28
CVE-2025-31440Terms of Use WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-03-28
CVE-2025-31439WordPress Browser Caching with .htaccess cross-site request forgery (CSRF)5.4CNA v3.10.1%2025-03-28
CVE-2025-31438WP Supersized WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-03-28
CVE-2025-31437WP-OGP WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-28
CVE-2025-31435Microblog Poster WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-03-28
CVE-2025-31434FormLift for Infusionsoft Web Forms WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28Fix
CVE-2025-31433Magic Embeds WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28
CVE-2025-31432Pop-Up Chop Chop WordPress plugin local file inclusion7.5CNA v3.10.6%2025-03-28
CVE-2025-31335Shibboleth OpenSAML C++ library improper signature verification4.0CNA v3.10.2%2025-03-28Fix
CVE-2025-31164fig2dev heap-buffer overflow6.6CNA v3.10.2%2025-03-28Fix
CVE-2025-31163xfig fig2dev put_patternarc function null pointer dereference6.6CNA v3.10.2%2025-03-28Fix
CVE-2025-31162fig2dev float point exception6.6CNA v3.10.2%2025-03-28Fix
CVE-2025-31102Hostel WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-28Fix
CVE-2025-31099Slider by BestWebSoft WordPress plugin SQL injection7.6CNA v3.10.3%2025-03-28Fix
CVE-2025-31096PostX WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28Fix
CVE-2025-31094WP Posts Carousel WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28Fix
CVE-2025-31093RPS Include Content WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28Fix
CVE-2025-31092Click to Chat WP Support All-in-One Floating Widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28Fix
CVE-2025-31090Dropdown Multisite selector WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28Fix
CVE-2025-31088Paid Member Subscriptions WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28Fix
CVE-2025-31083Leaky Paywall WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28Fix
CVE-2025-31079Usermaven WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-03-28Fix
CVE-2025-31077Ultimate Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28Fix
CVE-2025-31076WP Compress for MainWP WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2025-03-28Fix
CVE-2025-31075MicroPayments WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28Fix
CVE-2025-31073Unlimited WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-28Fix
CVE-2025-31010SimplyRETS Real Estate IDX WordPress plugin CSRF to Multiple admin actions4.3CNA v3.10.2%2025-03-28Fix
CVE-2025-30372Emlog Pro contains an SQL injection7.7CNA v4.00.5%2025-03-28
CVE-2025-30371Metabase vulnerable to circumvention of local link access protection in GeoJson endpoint2.1CNA v4.00.4%2025-03-28Fix
CVE-2025-30232Exim A use-after-free7.8v3.10.5%2025-03-28Fix
CVE-2025-30211Erlang OTP KEX init error results with excessive memory usage7.5CNA v3.10.5%2025-03-28Fix
CVE-2025-29928Authentik's deletion of sessions did not revoke sessions when using database session storage8.0CNA v3.10.4%2025-03-28Fix
CVE-2025-28256TOTOLINK A3100R OS command injection9.8CISA ADP v3.11.0%2025-03-28
CVE-2025-28254Leantime affected by improper neutralization of HTML Tags5.4CISA ADP v3.10.3%2025-03-28Fix
CVE-2025-28221Tenda W6-S buffer overflow7.5CISA ADP v3.10.5%2025-03-28
CVE-2025-28220Tenda W6-S buffer overflow7.5CISA ADP v3.10.5%2025-03-28
CVE-2025-28219NETGEAR DC112A OS command injection9.8CISA ADP v3.112.8%2025-03-28
CVE-2025-28097OneNav cross-site scripting5.5CISA ADP v3.10.2%2025-03-28
CVE-2025-28096OneNav server-side request forgery5.4CISA ADP v3.10.2%2025-03-28
CVE-2025-28094ShopXO vulnerable to server-side request forgery (SSRF) and cross-site scripting (XSS)6.5CISA ADP v3.10.2%2025-03-28
CVE-2025-28093ShopXO vulnerable to server-side request forgery (SSRF) via Email settings6.3CISA ADP v3.10.3%2025-03-28
CVE-2025-28092ShopXO vulnerable to server-side request forgery (SSRF) via Image upload6.3CISA ADP v3.10.3%2025-03-28
CVE-2025-28091MacCMS server-side request forgery9.1CISA ADP v3.10.4%2025-03-28
CVE-2025-28090MacCMS server-side request forgery9.1CISA ADP v3.10.4%2025-03-28
CVE-2025-28089MacCMS server-side request forgery9.1CISA ADP v3.10.4%2025-03-28Fix
CVE-2025-28087Nayem-howlader Online Exam System SQL injection9.8CISA ADP v3.10.5%2025-03-28
CVE-2025-27932KDDI HGW-BL1500HM path traversal8.1CNA v3.00.5%2025-03-28
CVE-2025-27726KDDI HGW-BL1500HM path traversal2.1CNA v3.00.3%2025-03-28
CVE-2025-27718KDDI HGW-BL1500HM path traversal8.8CNA v3.01.0%2025-03-28
CVE-2025-27716KDDI HGW-BL1500HM path traversal6.5CNA v3.00.7%2025-03-28
CVE-2025-27574KDDI HGW-BL1500HM USB storage file-sharing function cross-site scripting3.6CNA v3.00.2%2025-03-28
CVE-2025-27567KDDI HGW-BL1500HM NickName registration screen cross-site scripting5.4CNA v3.00.3%2025-03-28
CVE-2025-27001Shipmondo WordPress plugin information disclosure6.5CNA v3.10.3%2025-03-28Fix
CVE-2025-25579TOTOLINK A3002R OS command injection9.8CISA ADP v3.110.4%2025-03-28
CVE-2025-24386Dell Unity OS command injection7.8CNA v3.10.6%2025-03-28Fix
CVE-2025-24385Dell Unity OS command injection7.8CNA v3.10.5%2025-03-28Fix
CVE-2025-24383Dell Unity OS command injection9.1CNA v3.11.1%2025-03-28Fix
CVE-2025-24382Dell Unity OS command injection7.3CNA v3.11.3%2025-03-28Fix
CVE-2025-24381Dell Unity open redirect8.8CNA v3.11.4%2025-03-28Fix
CVE-2025-24380Dell Unity OS command injection7.8CNA v3.10.6%2025-03-28Fix
CVE-2025-24379Dell Unity OS command injection7.8CNA v3.10.6%2025-03-28Fix
CVE-2025-24378Dell Unity OS command injection7.8CNA v3.10.6%2025-03-28Fix
CVE-2025-24377Dell Unity OS command injection7.8CNA v3.10.5%2025-03-28Fix
CVE-2025-23383Dell Unity OS command injection7.8CNA v3.10.6%2025-03-28Fix
CVE-2025-22953Epicor Human Capital Management SQL injection9.8CISA ADP v3.11.8%2025-03-28Exploit code
CVE-2025-22767GlobalPayments WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-28Fix
CVE-2025-22575SUPER RESPONSIVE SLIDER WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-28
CVE-2025-22566ULTIMATE VIDEO GALLERY WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-28
CVE-2025-22526PHP/MySQL CPU performance statistics WordPress plugin PHP object injection9.8CNA v3.10.5%2025-03-28
CVE-2025-22523Schedule WordPress plugin SQL injection9.3CNA v3.10.4%2025-03-28
CVE-2025-22501Improve My City WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-28
CVE-2025-22398Dell Unity OS command injection9.8CNA v3.12.0%2025-03-28Fix
CVE-2025-22360WP Azure offload WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-28
CVE-2025-22356Stencies WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-28
CVE-2025-2927ESAFENET CDG getFileTypeList.jsp SQL injection9.8v3.10.6%2025-03-28
CVE-2025-2926HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference5.5v3.10.3%2025-03-28Fix
CVE-2025-2925HDF5 H5MM.c H5MM_realloc double free5.5v3.10.3%2025-03-28Fix
CVE-2025-2924HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow5.5v3.10.3%2025-03-28Fix
CVE-2025-2923HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow4.8CNA v4.00.3%2025-03-28Fix
CVE-2025-2922Netis WF-2404 BusyBox Shell cleartext storage1.0CNA v4.00.1%2025-03-28
CVE-2025-2921Netis WF-2404 passwd default password5.4CNA v4.00.3%2025-03-28
CVE-2025-2920Netis WF-2404 passwd weak hash1.0CNA v4.00.1%2025-03-28
CVE-2025-2919Netis WF-2404 UART hardware allows activation of test or debug logic at runtime7.0CNA v4.00.4%2025-03-28
CVE-2025-2917ChestnutCMS read readFile path traversal7.5v3.10.8%2025-03-28
CVE-2025-2916Aishida Call Center System amr2mp3 command injection5.3CNA v4.01.5%2025-03-28
CVE-2025-2915HDF5 H5Faccum.c H5F__accum_free heap-based overflow5.5v3.10.3%2025-03-28Fix
CVE-2025-2914HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow4.8CNA v4.00.3%2025-03-28Fix
CVE-2025-2913HDF5 H5FL.c H5FL__blk_gc_list use-after-free5.3v3.10.2%2025-03-28Fix
CVE-2025-2912HDF5 H5Omessage.c H5O_msg_flush heap-based overflow5.3v3.10.3%2025-03-28Fix
CVE-2025-2911Improper restriction of excessive authentication attempts vulnerability in MeetMe products5.3CNA v4.00.3%2025-03-28Fix
CVE-2025-2910User enumeration vulnerability in MeetMe products6.9CNA v4.00.4%2025-03-28Fix
CVE-2025-2909Fermax DuoxMe iOS application cleartext storage of sensitive information6.9CNA v4.00.1%2025-03-28Fix
CVE-2025-2908Insufficiently protected credentials vulnerability in MeetMe products8.5CNA v4.00.2%2025-03-28Fix
CVE-2025-2894Unitree Go1 Robot Dog backdoor Control Channel6.6CNA v3.10.9%2025-03-28
CVE-2025-2877Red Hat Ansible Automation Platform Event-Driven Ansible information disclosure6.5CNA v3.10.4%2025-03-28Fix
CVE-2025-2870Reflected cross-site scripting (XSS) vulnerability in Clinic Queuing System6.1v3.10.2%2025-03-28
CVE-2025-2869Reflected cross-site scripting (XSS) vulnerability in Clinic Queuing System6.1v3.10.2%2025-03-28
CVE-2025-2868Reflected cross-site scripting (XSS) vulnerability in Clinic Queuing System6.1v3.10.2%2025-03-28
CVE-2025-2865Reflected cross-site scripting (XSS) vulnerability in saTECH BCU6.1v3.10.2%2025-03-28Fix
CVE-2025-2864Reflected cross-site scripting (XSS) vulnerability in saTECH BCU6.1v3.10.2%2025-03-28Fix
CVE-2025-2863Cross-site request forgery (CSRF) vulnerability in saTECH BCU7.8v3.10.1%2025-03-28Fix
CVE-2025-2862Weak encoding for password vulnerability in saTECH BCU7.5v3.10.2%2025-03-28Fix
CVE-2025-2861Cleartext transmission of sensitive information vulnerability in saTECH BCU7.5v3.10.2%2025-03-28Fix
CVE-2025-2860Exposure of sensitive information vulnerability in saTECH BCU5.3v3.10.3%2025-03-28Fix
CVE-2025-2859Improper authentication vulnerability in saTECH BCU9.8v3.10.4%2025-03-28Fix
CVE-2025-2858Privilege escalation vulnerability in saTECH BCU8.8v3.10.3%2025-03-28Fix
CVE-2025-2815Administrator Z WordPress plugin missing authorization authenticated arbitrary options update8.8CNA v3.10.4%2025-03-28Fix
CVE-2025-2804tagDiv Composer WordPress plugin reflected cross-site scripting via account_id and account_username6.1CNA v3.10.3%2025-03-28Fix
CVE-2025-2782WatchGuard Terminal Services Agent local privilege escalation6.3CNA v4.00.1%2025-03-28Fix
CVE-2025-2781WatchGuard Mobile VPN with SSL local privilege escalation via Non-Standard Installation Directory6.3CNA v4.00.1%2025-03-28Fix
CVE-2025-2713Improper File Permission Handling in Google gVisor runsc6.8CNA v4.00.1%2025-03-28Fix
CVE-2025-2578Booking for Appointments and Events Calendar WordPress plugin information disclosure5.3CNA v3.10.4%2025-03-28Fix
CVE-2025-2485Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin PHP object injection8.8v3.10.6%2025-03-28Fix
CVE-2025-2328Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin arbitrary file deletion8.8CNA v3.11.1%2025-03-28Fix
CVE-2025-2294Kubio AI Page Builder WordPress plugin unauthenticated local file inclusion9.8CNA v3.178.4%2025-03-28NucleiExploit codeFix
CVE-2025-2074Advanced Google reCAPTCHA WordPress plugin limited SQL injection5.3CNA v3.10.4%2025-03-28Fix
CVE-2025-2027ASUS ASCI double free5.9CNA v4.00.2%2025-03-28Fix
CVE-2025-1860Data::Entropy for Perl uses insecure rand function for cryptographic functions7.7CISA ADP v3.10.2%2025-03-28Fix
CVE-2025-1781w3c CSS Validator XML external entity injection6.5NVD v3.10.4%2025-03-28
CVE-2025-1762Event Tickets with Ticket Scanner WordPress plugin arbitrary Tickets deletion via CSRF4.3CISA ADP v3.10.2%2025-03-28Fix
CVE-2025-1705tagDiv Composer WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.4%2025-03-28Fix
CVE-2025-0986IBM PowerVM Hypervisor gzip hardware acceleration vulnerability4.5CNA v3.10.1%2025-03-28Fix
CVE-2025-31181Gnuplot: Gnuplot segmentation fault on x11_graphics6.2CNA v3.10.2%2025-03-27Fix
CVE-2025-31180Gnuplot: Gnuplot segmentation fault on canvas_text6.2CNA v3.10.2%2025-03-27Fix
CVE-2025-31179Gnuplot: Gnuplot segmentation fault on xstrftime6.2CNA v3.10.2%2025-03-27Fix
CVE-2025-31178Gnuplot: Gnuplot segmentation fault on getannotatestring6.2CNA v3.10.2%2025-03-27Fix
CVE-2025-31176Gnuplot: Gnuplot segmentation fault on plot3d_points6.2CNA v3.10.2%2025-03-27Fix
CVE-2025-31165Cross-site scripting in NightWolf Penetration Platform6.9CNA v4.00.4%2025-03-27
CVE-2025-31141JetBrains TeamCity information disclosure through error messages2.7CNA v3.10.4%2025-03-27Fix
CVE-2025-31140JetBrains TeamCity cross-site scripting4.6CNA v3.128.0%2025-03-27Fix
CVE-2025-31139JetBrains TeamCity sensitive information in log files4.3CNA v3.11.0%2025-03-27Fix
CVE-2025-31101VaultRE Contact Form 7 WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-27
CVE-2025-31031Job Colors for WP Job Manager WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-27Fix
CVE-2025-30925The Pack Elementor addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-27Fix
CVE-2025-30923Gift Message for WooCommerce WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30922Simplebooklet PDF Viewer and Embedder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-27Fix
CVE-2025-30921Newsletters WordPress plugin SQL injection7.6CNA v3.10.5%2025-03-27Exploit codeFix
CVE-2025-30920WP Posts Carousel WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-27Fix
CVE-2025-30919Store Locator Widget WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-27Fix
CVE-2025-30918Structured Content WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-27Fix
CVE-2025-30914Metform Elementor Contact Form Builder WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.3%2025-03-27Fix
CVE-2025-30912Float menu WordPress plugin cross-site request forgery (CSRF) to settings Change5.4CNA v3.10.2%2025-03-27Fix
CVE-2025-30909Conversios.io WordPress plugin broken access control4.3CNA v3.10.3%2025-03-27Fix
CVE-2025-30907SecuPress Free WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-03-27Fix
CVE-2025-30904Chartify WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-27Fix
CVE-2025-30903SyntaxHighlighter Evolved WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-27Fix
CVE-2025-30900Zoho Billing Embed Payment Form WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-27Fix
CVE-2025-30899User Registration WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2025-03-27Fix
CVE-2025-30898افزونه حمل و نقل ووکامرس WordPress plugin cross-site scripting6.5CNA v3.10.3%2025-03-27Fix
CVE-2025-30897Analytify WordPress plugin settings Change vulnerability4.3CNA v3.10.3%2025-03-27Fix
CVE-2025-30896WP ERP WordPress plugin broken access control5.4CNA v3.10.4%2025-03-27Fix
CVE-2025-30895WpEvently WordPress plugin PHP object injection7.5CNA v3.10.8%2025-03-27Fix
CVE-2025-30894WP Fast Total Search WordPress plugin broken access control4.3CNA v3.10.3%2025-03-27Fix
CVE-2025-30893LeadConnector WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-27Fix
CVE-2025-30891WpTravelly WordPress plugin local file inclusion8.8CNA v3.10.7%2025-03-27Fix
CVE-2025-30890Login Widget for Ultimate Member WordPress plugin local file inclusion7.5CNA v3.10.8%2025-03-27Fix
CVE-2025-30888Custom Fields Account Registration For Woocommerce WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30887WpEvently WordPress plugin broken access control5.3CNA v3.10.4%2025-03-27Fix
CVE-2025-30885Bit Form WordPress plugin open redirection4.7CNA v3.10.4%2025-03-27Fix
CVE-2025-30884Bit Integrations WordPress plugin open redirection4.7CNA v3.10.4%2025-03-27Fix
CVE-2025-30883Trust.Reviews WordPress plugin broken access control4.3CNA v3.10.4%2025-03-27Fix
CVE-2025-30881Big Store WordPress theme broken access control5.4v3.10.3%2025-03-27Fix
CVE-2025-30879MC Woocommerce Wishlist WordPress plugin SQL injection7.6CNA v3.10.6%2025-03-27Fix
CVE-2025-30877Quiz Cat WordPress plugin broken access control2.7CNA v3.10.5%2025-03-27Fix
CVE-2025-30874Specific Content For Mobile WordPress plugin broken access control4.3CNA v3.10.4%2025-03-27Fix
CVE-2025-30873Greenshift WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2025-03-27Fix
CVE-2025-30872Product Author for WooCommerce WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30871WP Travel Engine WordPress plugin local file inclusion7.5CNA v3.11.0%2025-03-27Fix
CVE-2025-30868Maidul Team Manager local file inclusion7.5CNA v3.11.1%2025-03-27Fix
CVE-2025-30867SearchIQ WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2025-03-27Fix
CVE-2025-30866Terms and Conditions Per Product WordPress plugin broken access control5.3CNA v3.10.5%2025-03-27Fix
CVE-2025-308653DPrint Lite WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30864Exchange Rates WordPress plugin broken access control4.3CNA v3.10.4%2025-03-27Fix
CVE-2025-30863CRM Perks Integration for Google Sheets and Contact Form 7 cross-site request forgery4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30862reCAPTCHA for all WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30861Five Star Restaurant Reservations WordPress plugin broken access control4.9CNA v3.10.6%2025-03-27Fix
CVE-2025-30860Off-Canvas Sidebars and Menus (Slidebars) WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30859AliNext WordPress plugin open redirection4.7CNA v3.10.4%2025-03-27Fix
CVE-2025-30857Currency Switcher for WooCommerce WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-27Fix
CVE-2025-30856Custom Field For WP Job Manager WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30854Vollstart Serial Codes Generator and Validator with WooCommerce Support cross-site request forgery4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30851Tickera WordPress plugin broken access control4.3CNA v3.10.3%2025-03-27Fix
CVE-2025-30850Dr. Flex WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30847Novelist WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-03-27Fix
CVE-2025-30846Restaurant Menu by MotoPress WordPress plugin local file inclusion8.8CNA v3.10.8%2025-03-27Fix
CVE-2025-30845The Pack Elementor addons WordPress plugin local file inclusion7.5CNA v3.11.1%2025-03-27Fix
CVE-2025-30843BizCalendar Web WordPress plugin SQL command improper neutralization7.6CNA v3.10.6%2025-03-27Fix
CVE-2025-30842Christmas Panda WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30839Taxi Booking Manager for WooCommerce WordPress plugin broken access control5.3CNA v3.10.5%2025-03-27Fix
CVE-2025-30838Cozy Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30836LatePoint WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30833Verge3D Publishing and E-Commerce WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30832Themify Event Post WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30831Themify Event Post WordPress plugin local file inclusion7.5CNA v3.11.1%2025-03-27Fix
CVE-2025-30830Cool Author Box WordPress plugin broken access control5.3CNA v3.10.5%2025-03-27Fix
CVE-2025-30829WPCafe WordPress plugin local file inclusion7.5CNA v3.11.1%2025-03-27Fix
CVE-2025-30828Timetics WordPress plugin broken access control5.3CNA v3.10.4%2025-03-27Fix
CVE-2025-30826IP Locator WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30824Textmetrics WordPress plugin broken access control5.4CNA v3.10.5%2025-03-27Fix
CVE-2025-30823Anthologize WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30822Custom Login Logo WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30821SNORDIAN's H5PxAPIkatchu WordPress plugin broken access control5.3CNA v3.10.6%2025-03-27Fix
CVE-2025-30820WishSuite WordPress plugin local file inclusion7.5CNA v3.11.1%2025-03-27Fix
CVE-2025-30819Simple Giveaways WordPress plugin SQL injection8.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30818jAlbum Bridge WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30817Z Companion WordPress plugin broken access control5.4CNA v3.10.5%2025-03-27Fix
CVE-2025-30816publish post email notification WordPress plugin cross-site request forgery to settings Change4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30815Hesabfa Accounting WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30814The Post Grid WordPress plugin local file inclusion7.5CNA v3.11.1%2025-03-27Fix
CVE-2025-30813Listamester WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30812SKT Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30811ValidateCertify WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30810Lead Form Data Collection to CRM WordPress plugin SQL injection8.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30809WordPress Contact Form, Drag and Drop Form Builder Plugin Live Forms settings Change vulnerability5.4CNA v3.10.5%2025-03-27Fix
CVE-2025-30806Vimeotheque WordPress plugin SQL injection8.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30805Flexible Cookies WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30804wpShopGermany IT-RECHT KANZLEI WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30803Just Writing Statistics WordPress plugin broken access control4.3CNA v3.10.4%2025-03-27Fix
CVE-2025-30801TWB Woocommerce Reviews WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30800Gum Elementor Addon WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-27Fix
CVE-2025-30799WP Google Street View WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-27Fix
CVE-2025-30795FunnelKit Automations WordPress plugin Aman open redirect4.7CNA v3.10.4%2025-03-27Fix
CVE-2025-30792Comment Approved Notifier Extended WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-27Fix
CVE-2025-30791Cart tracking for WooCommerce WordPress plugin SQL injection7.6CNA v3.10.6%2025-03-27Fix
CVE-2025-30790Chatbox Manager WordPress plugin broken access control5.3CNA v3.10.5%2025-03-27Fix
CVE-2025-30789Clearout Email Validator WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-27Fix
CVE-2025-30788EZ SQL Reports Shortcode Widget and DB Backup WordPress plugin CSRF to SQL injection8.2CNA v3.10.2%2025-03-27Fix
CVE-2025-30787EZ SQL Reports Shortcode Widget and DB Backup WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-27Fix
CVE-2025-30786Quotes llama WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-27Fix
CVE-2025-30785Subscribe to Download Lite WordPress plugin local file inclusion7.5CNA v3.11.0%2025-03-27Fix
CVE-2025-30784WP Subscription Forms WordPress plugin SQL injection8.5CNA v3.10.5%2025-03-27Fix
CVE-2025-30783WP Google Review Slider WordPress plugin CSRF to SQL injection8.2CNA v3.10.2%2025-03-27Fix
CVE-2025-30781Scheduled and Automatic Order Status Controller for WooCommerce WordPress plugin open redirection4.7CNA v3.10.5%2025-03-27Fix
CVE-2025-30780Audio Album WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30779Doneren met Mollie WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30777Support Genix WordPress plugin insecure direct object references (IDOR)4.3CNA v3.10.5%2025-03-27Fix
CVE-2025-30776Sitekit WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30775WPGuppy WordPress plugin SQL injection8.5CNA v3.10.5%2025-03-27Fix
CVE-2025-30773TranslatePress WordPress plugin PHP object injection7.2CNA v3.10.8%2025-03-27Fix
CVE-2025-30772WPC Smart Upsell Funnel for WooCommerce WordPress plugin WPClever missing authorization8.8CNA v3.10.6%2025-03-27Exploit codeFix
CVE-2025-30771WP Cassify WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30770Charitable WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30769WIP WooCarousel Lite WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.2%2025-03-27Fix
CVE-2025-30768jAlbum Bridge WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30767PDF for WPForms WordPress plugin arbitrary shortcode execution vulnerability5.4CNA v3.10.4%2025-03-27Fix
CVE-2025-30766Happy Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-30765FlexStock WordPress plugin SQL injection7.6CNA v3.10.6%2025-03-27Fix
CVE-2025-30764Football Pool WordPress plugin cross-site request forgery (CSRF) to settings Change4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-30763EO4WP WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-27Fix
CVE-2025-30367WeGIA SQL injection vulnerability in nextPage parameter on control.php endpoint10.0CNA v4.00.5%2025-03-27Fix
CVE-2025-30366WeGIA vulnerable to stored XSS in personalizacao.php6.2CNA v4.00.3%2025-03-27Fix
CVE-2025-30365LabRedesCefetRJ WeGIA SQL injection in query_geracao_auto.php9.4CNA v4.00.7%2025-03-27Fix
CVE-2025-30364WeGIA vulnerable to SQL injection (Blind Time-Based) in remuneracao.php parameter id_funcionario10.0CNA v4.00.7%2025-03-27Fix
CVE-2025-30363WeGIA vulnerable to stored XSS in documentos_funcionario.php parameter dados_addInfo6.4CNA v4.00.3%2025-03-27Fix
CVE-2025-30362WeGIA vulnerable to stored XSS in documentos_funcionario.php parameter id6.4CNA v4.00.3%2025-03-27Fix
CVE-2025-30361WeGIA vulnerable to broken authentication Old Password Validation9.3CNA v4.00.6%2025-03-27Fix
CVE-2025-30358Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks8.1CNA v3.10.7%2025-03-27Fix
CVE-2025-30355Synapse vulnerable to federation denial of service via malformed events7.1CNA v3.11.2%2025-03-27Fix
CVE-2025-30221Pitchfork HTTP Request/Response Splitting vulnerability4.3CNA v3.00.3%2025-03-27Fix
CVE-2025-30093wisc HTCondor incorrect authorization8.1CISA ADP v3.10.4%2025-03-27Fix
CVE-2025-30067Apache Kylin: The remote code execution via jdbc URL7.2CISA ADP v3.10.9%2025-03-27Fix
CVE-2025-29993Alfasado PowerCMS 6.x series HTTP header injection5.3CNA v3.00.3%2025-03-27
CVE-2025-29497Libming parseSWF_MORPHFILLSTYLES function memory leak6.5CISA ADP v3.10.3%2025-03-27
CVE-2025-29496Libming denial of service6.5CISA ADP v3.10.3%2025-03-27
CVE-2025-29494Libming denial of service6.5CISA ADP v3.10.3%2025-03-27
CVE-2025-29493Libming denial of service6.5CISA ADP v3.10.3%2025-03-27
CVE-2025-29492Libming memory corruption6.5CISA ADP v3.10.3%2025-03-27
CVE-2025-29491Libming excessive memory allocation6.5CISA ADP v3.10.3%2025-03-27
CVE-2025-29490Libming denial of service6.5CISA ADP v3.10.3%2025-03-27
CVE-2025-29489Libming parseSWF_MORPHLINESTYLES function memory leak6.5CISA ADP v3.10.3%2025-03-27
CVE-2025-29488Libming parseSWF_INITACTION function memory leak6.5CISA ADP v3.10.3%2025-03-27
CVE-2025-29487Libming denial of service7.5CISA ADP v3.10.5%2025-03-27
CVE-2025-29486Libming parseSWF_PLACEOBJECT3 function memory leak6.5CISA ADP v3.10.4%2025-03-27
CVE-2025-29485Libming denial of service6.5CISA ADP v3.10.4%2025-03-27
CVE-2025-29484Libming denial of service7.5CISA ADP v3.10.5%2025-03-27
CVE-2025-29483Libming parseSWF_ENABLEDEBUGGER2 function memory leak6.5CISA ADP v3.10.3%2025-03-27
CVE-2025-29306FoxCMS code injection9.8CISA ADP v3.146.6%2025-03-27NucleiEmerging ThreatsExploit code
CVE-2025-29072Nethermind Juno potential denial of service (DoS) via integer overflow7.5CISA ADP v3.10.5%2025-03-27Fix
CVE-2025-28138TOTOLINK A800R OS command injection9.8CISA ADP v3.11.1%2025-03-27
CVE-2025-28135TOTOLINK A810R stack-based buffer overflow7.5CISA ADP v3.10.5%2025-03-27
CVE-2025-27793Vega vulnerable to cross-site scripting via RegExp.prototype[@@replace]5.3CNA v4.00.5%2025-03-27Fix
CVE-2025-26956Traveler WordPress theme broken access control7.6CNA v3.10.3%2025-03-27Fix
CVE-2025-26909Hide My WP Ghost WordPress plugin local file inclusion to RCE9.8v3.10.7%2025-03-27Fix
CVE-2025-26898Traveler WordPress theme SQL injection9.3CNA v3.10.3%2025-03-27Fix
CVE-2025-26890HUSKY WordPress plugin local file inclusion7.5CNA v3.10.6%2025-03-27Fix
CVE-2025-26874MemberSpace WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-27Fix
CVE-2025-26873Traveler WordPress theme PHP object injection9.0CNA v3.10.4%2025-03-27Fix
CVE-2025-26762WooCommerce WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-27Fix
CVE-2025-26738Quick Interest Slider WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-27Fix
CVE-2025-26737City Store WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-27
CVE-2025-26736MorningTime Lite WordPress theme stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-27
CVE-2025-26734Hester WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-27
CVE-2025-26733Traveler WordPress theme broken access control8.2CNA v3.10.4%2025-03-27Fix
CVE-2025-26732StoreBiz WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-27
CVE-2025-26731ARPrice WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-27
CVE-2025-26619Vega cross-site scripting (XSS) via event filter when not using CSP mode `expressionInterpeter`5.3CNA v4.00.3%2025-03-27Fix
CVE-2025-26265Openairinterface5g denial of service6.5CISA ADP v3.10.5%2025-03-27
CVE-2025-25686SEMCMS SQL injection9.8CISA ADP v3.10.5%2025-03-27
CVE-2025-25100Cazamba WordPress plugin CSRF to reflected cross-site scripting (XSS)7.1CNA v3.10.1%2025-03-27
CVE-2025-25086Secret Meta WordPress plugin CSRF to reflected cross-site scripting (XSS)7.1CNA v3.10.1%2025-03-27
CVE-2025-22816Power Mag WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-27
CVE-2025-22783SEO Plugin by Squirrly SEO WordPress plugin SQL injection8.8v3.10.6%2025-03-27Exploit codeFix
CVE-2025-22770Envo Multipurpose WordPress theme broken access control5.4CNA v3.10.3%2025-03-27
CVE-2025-22740Sensei LMS WordPress plugin broken access control5.3CNA v3.10.3%2025-03-27Fix
CVE-2025-22739LearnPress WordPress plugin broken access control5.3CNA v3.10.3%2025-03-27Fix
CVE-2025-22673WordPress EAN Barcode Generator plugin broken access control4.3CNA v3.10.3%2025-03-27Fix
CVE-2025-22672Video and Photo Gallery for Ultimate Member WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2025-03-27Fix
CVE-2025-22671leap13 Disable Elementor Editor Translation missing authorization4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-22670VikBooking Hotel Booking Engine and PMS WordPress plugin CSRF to settings Change6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-22669Awesome Event Booking WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-27Fix
CVE-2025-22668Awesome Event Booking WordPress plugin broken access control6.5CNA v3.10.4%2025-03-27Fix
CVE-2025-22667Export Order WordPress plugin Creative Werk Designs missing authorization4.3CNA v3.10.3%2025-03-27Fix
CVE-2025-22665RapidLoad WordPress plugin broken access control4.3CNA v3.10.3%2025-03-27Fix
CVE-2025-22660Include Mastodon Feed WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-27Fix
CVE-2025-22659Orbit Fox by ThemeIsle WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-03-27Fix
CVE-2025-22658Listings for Appfolio WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-03-27Fix
CVE-2025-22652Payment Forms for Paystack WordPress plugin SQL injection7.6CNA v3.10.9%2025-03-27Exploit codeFix
CVE-2025-22649WP Project Manager WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2025-03-27Fix
CVE-2025-22648Blog, Posts and Category Filter for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-27Fix
CVE-2025-22647AIO Performance Profiler WordPress plugin broken access control4.3CNA v3.10.3%2025-03-27Fix
CVE-2025-22646aThemes Addons for Elementor WordPress plugin stored cross-site scripting (XSS)5.4v3.10.2%2025-03-27Fix
CVE-2025-22644Vayu Blocks Gutenberg Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-27
CVE-2025-22640Paytm Payment Donation WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-27
CVE-2025-22638Product Table For WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-27Fix
CVE-2025-22637Print PDF Generator and Publisher WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-03-27Fix
CVE-2025-22634Easy Booked WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2025-03-27Fix
CVE-2025-22629iNET Webkit WordPress plugin broken access control5.3CNA v3.10.3%2025-03-27Fix
CVE-2025-22628Filled In WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-27Fix
CVE-2025-22497Simple Google Calendar Outlook Events Block Widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-27Fix
CVE-2025-22496Notif Bell WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-03-27Fix
CVE-2025-22278Whitish Lite WordPress theme stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-27
CVE-2025-21892Linux kernel mlx5 UMR queue pair recovery race condition4.7NVD v3.10.1%2025-03-27Fix
CVE-2025-21891Linux kernel ipvlan outbound header handling vulnerability5.5v3.10.2%2025-03-27Fix
CVE-2025-21890In the Linux kernel, the following vulnerability has been resolved: idpf: fix checksums set in idpf_rx_rsc() idpf_rx_rsc() uses skb_transport_offset(skb) while the transport header is not set yet. This triggers the following warning for CONFIG_DEBUG_NET=y builds. DEBUG_NET_WARN_ON_ONCE(!skb_tran8.2CNA v3.10.4%2025-03-27Fix
CVE-2025-21889Linux kernel perf event context iteration vulnerability7.8CNA v3.10.2%2025-03-27Fix
CVE-2025-21888Linux kernel mlx5 memory region deregistration vulnerability5.5NVD v3.10.2%2025-03-27Fix
CVE-2025-21887Linux kernel overlayfs dentry revalidation use-after-free7.8CNA v3.10.2%2025-03-27Fix
CVE-2025-21886Linux kernel mlx5 implicit ODP vulnerability5.5NVD v3.10.2%2025-03-27Fix
CVE-2025-21885Linux kernel bnxt_re SRQ page handling vulnerability7.5CNA v3.10.5%2025-03-27Fix
CVE-2025-21884Linux kernel kernel socket lifetime tracking vulnerability7.8CNA v3.10.2%2025-03-27Fix
CVE-2025-21883Linux kernel ice VF deinitialization use-after-free7.8v3.10.2%2025-03-27Fix
CVE-2025-21882Linux kernel mlx5 vport QoS memory leak7.8CNA v3.10.2%2025-03-27Fix
CVE-2025-21881Linux kernel uprobes opcode writing vulnerability5.5v3.10.2%2025-03-27Fix
CVE-2025-21880Linux kernel Xe userptr handling vulnerability5.5v3.10.2%2025-03-27Fix
CVE-2025-21879Linux kernel Btrfs root scanning during extent map shrinking use-after-free7.8CNA v3.10.2%2025-03-27Fix
CVE-2025-21878Linux kernel NPCM I2C driver improper locking5.5v3.10.2%2025-03-27Fix
CVE-2025-21877In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix endpoint checking in genelink_bind() Syzbot reports [1] a warning in usb_submit_urb() triggered by inconsistencies between expected and actually present endpoints in gl620a driver. Since genelink_bind() does no5.5v3.10.2%2025-03-27Fix
CVE-2025-21876In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit ("iommu/vt-d: Allocate DMAR fault interrupts locally") moved the call to enable_drhd_fault_handling() to a code path that does not hold any lock while traversing the drhd list. Fix it by8.8CNA v3.10.2%2025-03-27Fix
CVE-2025-21875Linux kernel MPTCP address removal vulnerability7.8CNA v3.10.2%2025-03-27Fix
CVE-2025-21874Linux kernel dm-integrity inline mode table status divide by zero5.5v3.10.2%2025-03-27Fix
CVE-2025-21873Linux kernel UFS ARPMB BSG handler vulnerability5.5v3.10.2%2025-03-27Fix
CVE-2025-21872Linux kernel EFI mokvar table handling vulnerability5.5v3.10.2%2025-03-27Fix
CVE-2025-21871Linux kernel OP-TEE supplicant infinite loop5.5v3.10.2%2025-03-27Fix
CVE-2025-21870Linux kernel SOF ALH copier topology null pointer dereference7.8CNA v3.10.2%2025-03-27Fix
CVE-2025-21869Linux kernel powerpc code patching out-of-bounds write7.8v3.10.2%2025-03-27Fix
CVE-2025-21868Linux kernel networking core vulnerability7.5CNA v3.10.4%2025-03-27Fix
CVE-2025-21867Linux kernel BPF test_run XDP use-after-free7.8CNA v3.10.2%2025-03-27Fix
CVE-2025-2888Improper timestamp caching during snapshot rollback in tough5.7CNA v4.00.3%2025-03-27Fix
CVE-2025-2887Failure to detect delegated target rollback in tough5.7CNA v4.00.3%2025-03-27Fix
CVE-2025-2886Terminating targets role delegations are not respected in tough5.7CNA v4.00.3%2025-03-27Fix
CVE-2025-2885Root metadata version not validated in tough5.7CNA v4.00.3%2025-03-27Fix
CVE-2025-2878Kentico CMS Additional Database Installation Wizard install.aspx cross-site scripting4.8CNA v4.00.3%2025-03-27Fix
CVE-2025-2867Improper control of generation of code (code injection) in GitLab4.4CNA v3.10.2%2025-03-27Fix
CVE-2025-2857Mozilla Firefox incorrect handle could lead to sandbox escapes10.0CISA ADP v3.11.9%2025-03-27Fix
CVE-2025-2855elunez Eladmin upload checkFile deserialization7.2v3.10.5%2025-03-27
CVE-2025-2854code-projects Payroll Management System update_employee.php SQL injection8.8v3.10.5%2025-03-27
CVE-2025-2852SourceCodester Food Ordering Management System view_menu.php SQL injection5.1CNA v4.00.4%2025-03-27
CVE-2025-2849Upx p_lx_elf.cpp un_DT_INIT heap-based overflow5.5v3.10.3%2025-03-27Fix
CVE-2025-2847Codezips Gym Management System over_month.php SQL injection8.8v3.10.5%2025-03-27
CVE-2025-2846SourceCodester Online Eyewear Shop Registration Users.php registration SQL injection9.8v3.10.6%2025-03-27
CVE-2025-2835zhangyd-c OneBlog RestApiController.java autoLink server-side request forgery5.3CNA v4.00.3%2025-03-27
CVE-2025-2833zhangyd-c OneBlog HTTP header redos6.9CNA v4.00.7%2025-03-27
CVE-2025-2832mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 cross-site request forgery5.3CNA v4.00.3%2025-03-27
CVE-2025-2831mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 bookList getBookList SQL injection9.8v3.10.4%2025-03-27
CVE-2025-2685TablePress Tables in WordPress made easy plugin authenticated (Author+) stored cross-site scripting5.4v3.10.3%2025-03-27Fix
CVE-2025-2516Kingsoft WPS Office signature verification process weak cryptography9.5CNA v4.00.1%2025-03-27
CVE-2025-2481MediaView WordPress plugin reflected cross-site scripting via id parameter6.1CNA v3.10.3%2025-03-27Fix
CVE-2025-2332Export All Posts WordPress plugin PHP object injection9.8CNA v3.10.8%2025-03-27Fix
CVE-2025-2255Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.3%2025-03-27Fix
CVE-2025-2242Incorrect authorization in GitLab7.5CNA v3.10.4%2025-03-27Fix
CVE-2025-1998IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosure5.5CNA v3.10.2%2025-03-27Fix
CVE-2025-1997IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injection5.4CNA v3.10.3%2025-03-27Fix
CVE-2025-0811Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.3%2025-03-27Fix
CVE-2025-0273HCL DevOps Deploy / HCL Launch is susceptible to insertion of sensitive information into log file5.5CNA v3.10.2%2025-03-27Fix
CVE-2025-31160atop reachable assertion2.9CNA v3.10.2%2025-03-26Fix
CVE-2025-30742pizhenwei atophttpd off-by-one error5.3CNA v3.10.4%2025-03-26
CVE-2025-30524Product Catalog WordPress plugin SQL injection9.3CNA v3.10.6%2025-03-26
CVE-2025-30407Acronis Cyber Protect Cloud Agent untrusted search path6.3CNA v3.00.1%2025-03-26Fix
CVE-2025-30353Directus's webhook trigger flows can leak sensitive data8.6CNA v3.10.5%2025-03-26Fix
CVE-2025-30352Directus `search` query parameter allows enumeration of non permitted fields5.3CNA v3.10.4%2025-03-26Fix
CVE-2025-30351Suspended Directus user can continue to use session token to access API3.5CNA v3.10.4%2025-03-26Fix
CVE-2025-30350Directus's S3 assets become unavailable after a burst of HEAD requests5.3CNA v3.10.4%2025-03-26Fix
CVE-2025-30225Directus's S3 assets become unavailable after a burst of malformed transformations5.3CNA v3.10.4%2025-03-26Fix
CVE-2025-30217Frappe has possibility of SQL injection due to improper validations6.6CNA v4.00.4%2025-03-26Fix
CVE-2025-30164Icinga Web 2 has open redirect on login page4.1CNA v3.10.3%2025-03-26Fix
CVE-2025-30073OPC Cardsystems Webapp Aufwertung transaction reference session data exposure7.5CISA ADP v3.10.4%2025-03-26
CVE-2025-29322ScriptCase cross-site scripting4.6CISA ADP v3.10.3%2025-03-26
CVE-2025-28942Trust Payments Gateway for WooCommerce WordPress plugin SQL injection9.3CNA v3.10.6%2025-03-26Fix
CVE-2025-28939WP Google Calendar Manager WordPress plugin SQL injection8.5CNA v3.10.6%2025-03-26
CVE-2025-28935Fancybox Plus WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28934Simple Post Series WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28928Are you robot google recaptcha for Wordpress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28924ZenphotoPress WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28921SpatialMatch IDX WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28917Custom Smilies WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28916Docpro WordPress plugin local file inclusion9.8CNA v3.10.9%2025-03-26
CVE-2025-28911Gravity 2 PDF WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28903Driving Directions WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28899WP Event Ticketing WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28898WP Multistore Locator WordPress plugin SQL injection9.3CNA v3.10.6%2025-03-26
CVE-2025-28893Visual Text Editor WordPress plugin remote code execution (RCE)9.9CNA v3.10.8%2025-03-26
CVE-2025-28890Lightview Plus WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28889Custom Product Stickers for Woocommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28885Fiverr.com Official Search Box WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-26
CVE-2025-28882Omnify WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28880Blue Captcha WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26Fix
CVE-2025-28877Key4ce osTicket Bridge WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28873Shuffle WordPress plugin SQL injection8.5CNA v3.10.6%2025-03-26
CVE-2025-28869NextGEN Gallery Voting WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-28865WP Colorful Tag Cloud WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-28858Arrow Maps WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-28855Teleport WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-28361Telesquare TLR-2005KSH stack-based buffer overflow7.5CISA ADP v3.10.5%2025-03-26
CVE-2025-27609Icinga Web 2 vulnerable to reflected XSS1.1CNA v4.00.2%2025-03-26Fix
CVE-2025-27552WREIS DBIx::Class::EncodedColumn insufficient entropy4.0CISA ADP v3.10.1%2025-03-26Fix
CVE-2025-27551DBIx::Class::EncodedColumn Digest.pm weak random number generator4.0CISA ADP v3.10.1%2025-03-26Fix
CVE-2025-27406Icinga Reporting stored XSS leads to SSRF7.7CNA v3.10.3%2025-03-26Fix
CVE-2025-27405Icinga Web 2 has XSS in embedded content7.7CNA v3.10.3%2025-03-26Fix
CVE-2025-27404Icinga Web 2 DOM-based XSS7.7CNA v3.10.6%2025-03-26Fix
CVE-2025-27267Random Quotes WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-27015Hostiko WordPress theme local file inclusion7.5CNA v3.11.0%2025-03-26Fix
CVE-2025-27014Hostiko WordPress theme cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26Fix
CVE-2025-26986Pearl WordPress theme local file inclusion8.1CNA v3.11.0%2025-03-26Fix
CVE-2025-26941Church Admin WordPress plugin SQL injection9.3CNA v3.10.6%2025-03-26Fix
CVE-2025-26929Accounting for WooCommerce WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-03-26Fix
CVE-2025-26923Event post WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-26Fix
CVE-2025-26922AuraMart WordPress theme cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-26
CVE-2025-26869Build WordPress theme cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-26
CVE-2025-26747RainbowNews WordPress theme cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-26
CVE-2025-26739newseqo WordPress theme stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-26
CVE-2025-26584TBTestimonials WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-26583Video Share VOD WordPress plugin reflected cross-site scripting7.1CNA v3.10.4%2025-03-26Fix
CVE-2025-26581Picture Gallery WordPress plugin CSRF to stored XSS7.1CNA v3.10.4%2025-03-26Fix
CVE-2025-26579MicroPayments Paid Membership WordPress plugin reflected cross-site scripting7.1CNA v3.10.4%2025-03-26Fix
CVE-2025-26576WP Simple Slideshow WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-26575Display Post Meta WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-26573Rizzi Guestbook WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-26566In Stock Mailer for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-26565GNUPress WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-26564GNUCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-26560WP Contact Form III WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-26559Secure Invites WordPress plugin reflected cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-26
CVE-2025-26546Cookies Pro WordPress plugin CSRF to stored XSS7.1CNA v3.10.4%2025-03-26
CVE-2025-26544WordPressUTM tags + Landing page WordPress plugin CSRF to stored XSS7.1CNA v3.10.4%2025-03-26
CVE-2025-26542Zalo Live Chat WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-26541Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin reflected cross-site scripting7.1CNA v3.10.4%2025-03-26
CVE-2025-26537GDPR Tools WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-26
CVE-2025-26536Another Events Calendar WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-26011Telesquare TLR-2005KSH buffer overflow9.8CISA ADP v3.10.4%2025-03-26
CVE-2025-26010Telesquare TLR-2005KSH improper access control9.8CISA ADP v3.10.4%2025-03-26
CVE-2025-26009Telesquare TLR-2005KSH information disclosure7.5CISA ADP v3.10.4%2025-03-26
CVE-2025-26008Telesquare TLR-2005KSH buffer overflow9.8CISA ADP v3.10.4%2025-03-26
CVE-2025-26007Telesquare TLR-2005KSH buffer overflow9.8CISA ADP v3.10.4%2025-03-26
CVE-2025-26006Telesquare TLR-2005KSH buffer overflow9.8CISA ADP v3.10.4%2025-03-26
CVE-2025-26005Telesquare TLR-2005KSH buffer overflow9.8CISA ADP v3.10.4%2025-03-26
CVE-2025-26004Telesquare TLR-2005KSH buffer overflow9.8CISA ADP v3.10.4%2025-03-26
CVE-2025-26003Telesquare TLR-2005KSH code injection9.8CISA ADP v3.10.7%2025-03-26
CVE-2025-26002Telesquare TLR-2005KSH buffer overflow9.8CISA ADP v3.10.5%2025-03-26
CVE-2025-26001Telesquare TLR-2005KSH information disclosure7.5CISA ADP v3.10.4%2025-03-26
CVE-2025-25535HTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 allows a remote attacker to escalate privileges via a crafted request.9.8CISA ADP v3.10.5%2025-03-26
CVE-2025-25134Theme Demo Bar WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-24972Discourse may bypass user preference when adding users to chat groups4.3CNA v3.10.4%2025-03-26Fix
CVE-2025-24808Discourse has race condition when adding users to a group DM4.3CNA v3.10.2%2025-03-26Fix
CVE-2025-24690Formality WordPress plugin local file inclusion8.1CNA v3.11.0%2025-03-26Fix
CVE-2025-23964Google Plus WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23952ntm Custom Field List Widget local file inclusion8.1CNA v3.11.0%2025-03-26
CVE-2025-23937LinkedIn Lite WordPress plugin local file inclusion8.1CNA v3.11.0%2025-03-26
CVE-2025-23735Infugrator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23728AuMenu WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23714AppReview WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23704Your Lightbox WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23680Narnoo Operator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23666Management-screen-droptiles WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23638Frontend Post Submission WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23633WP Database Audit WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23632CG Button WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23612Pixobe Cartography WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23546RDP inGroups+ WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23543FOMO Pay Chinese Payment Solution WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23542RDP Linkedin Login WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-03-26
CVE-2025-23466Site Editor Google Map WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23460RWS Enquiry And Lead Follow-up WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23459NS Simple Intro Loader WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-23203Icinga has rest API endpoints accessible to restricted users5.5CNA v3.10.4%2025-03-26Fix
CVE-2025-22283GetSocial WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-03-26
CVE-2025-20233Splunk App for Lookup File Editing chmod and makedirs functions incorrect permission assignment2.5CNA v3.10.1%2025-03-26Fix
CVE-2025-20232Splunk Enterprise app search endpoint information disclosure5.7CNA v3.10.5%2025-03-26Fix
CVE-2025-20231Sensitive information disclosure in Splunk Secure Gateway App7.1CNA v3.10.5%2025-03-26Fix
CVE-2025-20230Splunk Secure Gateway app KVStore collections improper access control4.3CNA v3.10.3%2025-03-26Fix
CVE-2025-20229Splunk Enterprise apptemp directory file upload remote code execution8.0CNA v3.116.0%2025-03-26Fix
CVE-2025-20228Splunk Enterprise KVStore maintenance mode cross-site request forgery6.5CNA v3.10.2%2025-03-26Fix
CVE-2025-20227Splunk Enterprise Dashboard Studio warning dialog information disclosure4.3CNA v3.10.4%2025-03-26Fix
CVE-2025-20226Splunk Enterprise streams search endpoint information disclosure5.7CNA v3.10.5%2025-03-26Fix
CVE-2025-2838Silicon Labs Gecko OS DNS Response Processing infinite loop denial of service6.5CNA v3.00.3%2025-03-26Fix
CVE-2025-2837Silicon Labs Gecko OS HTTP Request Handling stack-based buffer overflow remote code execution8.8CNA v3.00.5%2025-03-26Fix
CVE-2025-2820Bizerba SE & Co. KG Product family GLx and CWx denial of service6.5CNA v3.10.5%2025-03-26Fix
CVE-2025-2819Bizerba GT-SoftControl file selection process vulnerability6.6CNA v3.10.2%2025-03-26Fix
CVE-2025-2787KNIME Business Hub Ingress-nginx code injection8.7CNA v4.00.5%2025-03-26Fix
CVE-2025-2783Google Chromium Mojo sandbox escape8.3CISA ADP v3.19.2%2025-03-26KEVExploit codeFix
CVE-2025-2600Devolutions Remote Desktop Manager variable component improper authorization6.8CISA ADP v3.10.4%2025-03-26Fix
CVE-2025-2596Checkmk session logout can be overwritten by long lasting request2.3CNA v4.00.2%2025-03-26Fix
CVE-2025-2576Ayyash Studio WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-03-26
CVE-2025-2573Amazing service box Addons For WPBakery Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-03-26
CVE-2025-2562Devolutions Remote Desktop Manager autotyping feature vulnerability5.4CISA ADP v3.10.4%2025-03-26Fix
CVE-2025-2528Devolutions Remote Desktop Manager application password policy improper authorization3.6CISA ADP v3.10.2%2025-03-26Fix
CVE-2025-2499Devolutions Remote Desktop Manager improper access control5.4CISA ADP v3.10.4%2025-03-26Fix
CVE-2025-2302Advanced Woo Search WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-03-26Fix
CVE-2025-2276Ultimate Dashboard WordPress plugin unauthorized access4.3CNA v3.10.2%2025-03-26Fix
CVE-2025-2257Total Upkeep WordPress Backup Plugin plus Restore and Migrate by BoldGrid command injection7.2CNA v3.10.9%2025-03-26Fix
CVE-2025-2228Responsive Addons for Elementor WordPress plugin information disclosure5.7v3.10.4%2025-03-26Fix
CVE-2025-2167Event post WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4CNA v3.10.2%2025-03-26Fix
CVE-2025-2165SH Email Alert WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-03-26
CVE-2025-2110WP Compress WordPress plugin missing authorization8.8CNA v3.10.5%2025-03-26Fix
CVE-2025-2098Beijing Honghu Yuntu Technology Fast CAD Reader privilege escalation8.4CNA v4.00.2%2025-03-26
CVE-2025-2009Newsletters WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2025-03-26Fix
CVE-2025-1913Product Import Export for WooCommerce WordPress plugin PHP object injection7.2CNA v3.10.9%2025-03-26Exploit codeFix
CVE-2025-1912Product Import Export for WooCommerce WordPress plugin server-side request forgery7.6CNA v3.10.4%2025-03-26Fix
CVE-2025-1911Product Import Export for WooCommerce WordPress plugin arbitrary file deletion6.5v3.10.4%2025-03-26Fix
CVE-2025-1784Spectra WordPress Gutenberg Blocks plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-03-26Fix
CVE-2025-1769Product Import Export for WooCommerce WordPress plugin path traversal4.9CNA v3.10.8%2025-03-26Fix
CVE-2025-1703Ultimate Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-03-26Fix
CVE-2025-1542Improper permission control in OXARI ServiceDesk9.3CNA v4.00.4%2025-03-26Fix
CVE-2025-1514Active Products Tables for WooCommerce WordPress plugin unauthenticated arbitrary Filter Call7.3CNA v3.10.4%2025-03-26Fix
CVE-2025-1490Smart Maintenance Mode WordPress plugin reflected cross-site scripting via setstatus parameter6.1CNA v3.10.3%2025-03-26Fix
CVE-2025-1440Advanced iFrame WordPress plugin unauthenticated settings update5.3CNA v3.10.3%2025-03-26Fix
CVE-2025-1439Advanced iFrame WordPress plugin stored cross-site scripting5.4v3.10.2%2025-03-26Fix
CVE-2025-1437Advanced iFrame WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-03-26Fix
CVE-2025-1312Ultimate Blocks WordPress Blocks plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-03-26Fix
CVE-2025-1310Jobs for WordPress WordPress plugin path traversal6.5CNA v3.10.7%2025-03-26Fix
CVE-2025-30741Pixelfed may allow unauthorized actor to view private posts and private users4.3CNA v3.10.3%2025-03-25Fix
CVE-2025-30567WP01 WordPress plugin arbitrary file download7.5CNA v3.12.8%2025-03-25NucleiExploit code
CVE-2025-30222Shescape has potential environment variable exposure on Windows with CMD2.1CNA v4.00.2%2025-03-25Fix
CVE-2025-30219RabbitMQ has XSS vulnerability in an Error message in Management UI6.1CNA v3.10.2%2025-03-25Fix
CVE-2025-30216CryptoLib has heap overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length9.4CNA v3.12.7%2025-03-25Exploit code
CVE-2025-30214Frappe vulnerable to information disclosure leading to account takeover8.0CNA v4.00.4%2025-03-25Fix
CVE-2025-30213Frappe has Possibility of remote code execution due to improper validation6.3CNA v4.00.7%2025-03-25Fix
CVE-2025-30212Frappe has possibility of SQL injection due to improper validations6.6CNA v4.00.4%2025-03-25Fix
CVE-2025-30118Audi Universal Traffic Recorder hard-coded credentials7.5CISA ADP v3.10.4%2025-03-25
CVE-2025-30091Tiny MoxieManager PHP static code injection9.4CNA v4.00.8%2025-03-25Fix
CVE-2025-29932JetBrains GoLand XML external entity injection4.1CNA v3.10.2%2025-03-25Fix
CVE-2025-29789OpenEMR has directory traversal in Load Code feature4.6CNA v4.00.9%2025-03-25Fix
CVE-2025-29635D-Link DIR-823X command injection7.2CISA ADP v3.187.9%2025-03-25KEVNuclei
CVE-2025-28904Web Directory Free WordPress plugin SQL injection9.3CNA v3.10.4%2025-03-25Fix
CVE-2025-27837Artifex Ghostscript path traversal9.8CISA ADP v3.10.6%2025-03-25Fix
CVE-2025-27836Artifex Ghostscript buffer overflow9.8CISA ADP v3.10.6%2025-03-25Fix
CVE-2025-27835Artifex Ghostscript buffer overflow7.8CISA ADP v3.10.3%2025-03-25Fix
CVE-2025-27834Artifex Ghostscript buffer overflow7.8CISA ADP v3.10.3%2025-03-25Fix
CVE-2025-27833Artifex Ghostscript buffer overflow7.8CISA ADP v3.10.2%2025-03-25Fix
CVE-2025-27832Artifex Ghostscript buffer overflow9.8CISA ADP v3.10.8%2025-03-25Fix
CVE-2025-27831Artifex Ghostscript buffer overflow9.8CISA ADP v3.10.6%2025-03-25Fix
CVE-2025-27830Artifex Ghostscript buffer overflow7.8CISA ADP v3.10.3%2025-03-25Fix
CVE-2025-27810mbedtls uninitialized resource use4.8v3.10.3%2025-03-25Fix
CVE-2025-27809mbedtls insecure default initialization5.4CNA v3.10.2%2025-03-25Fix
CVE-2025-27633Hitachi Energy TRMTracker cross-site scripting6.1CNA v3.10.2%2025-03-25Fix
CVE-2025-27632Hitachi Energy TRMTracker host header injection6.1CNA v3.10.2%2025-03-25Fix
CVE-2025-27631Hitachi Energy TRMTracker LDAP injection6.5CNA v3.10.3%2025-03-25Fix
CVE-2025-27147glpi-project glpi-inventory-plugin GLPI Inventory plugin has improper access control8.2CNA v3.10.4%2025-03-25Fix
CVE-2025-26742Gallery for Social Photo WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-25Fix
CVE-2025-25374nasa Core Flight System denial of service7.5CISA ADP v3.10.5%2025-03-25
CVE-2025-25373nasa Core Flight System incorrect permission assignment9.8CISA ADP v3.10.5%2025-03-25
CVE-2025-25372nasa Core Flight System out-of-bounds write7.5CISA ADP v3.10.5%2025-03-25
CVE-2025-25371nasa Core Flight System path traversal7.5CISA ADP v3.10.6%2025-03-25
CVE-2025-24514ingress-nginx controller configuration injection via unsanitized auth-url annotation8.8CNA v3.130.5%2025-03-25NucleiEmerging ThreatsExploit codeKCVFix
CVE-2025-24513ingress-nginx controller auth secret file path traversal4.8CNA v3.13.3%2025-03-25KCVFix
CVE-2025-22230VMware Tools authentication bypass7.8CNA v3.10.3%2025-03-25Fix
CVE-2025-2757Assimp MD5 file handler heap-based buffer overflow8.8v3.10.5%2025-03-25Fix
CVE-2025-2756Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow8.8v3.10.6%2025-03-25Fix
CVE-2025-2755Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection out-of-bounds8.8v3.10.5%2025-03-25
CVE-2025-2754Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow8.8v3.10.5%2025-03-25
CVE-2025-2753Open Asset Import Library Assimp LWS File LWSLoader.cpp MergeScenes out-of-bounds8.8v3.10.5%2025-03-25
CVE-2025-2752Open Asset Import Library Assimp CSM file fast_atof.h fast_atoreal_move out-of-bounds8.8v3.10.7%2025-03-25
CVE-2025-2751Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds8.8v3.10.8%2025-03-25Fix
CVE-2025-2750Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds write8.8v3.10.5%2025-03-25Fix
CVE-2025-2744zhijiantianya ruoyi-vue-pro Material upload interface upload-news-image path traversal5.3CNA v4.00.7%2025-03-25
CVE-2025-2743zhijiantianya ruoyi-vue-pro Material upload interface upload-temporary path traversal8.1v3.10.9%2025-03-25
CVE-2025-2742zhijiantianya ruoyi-vue-pro Material upload interface upload-permanent path traversal8.1v3.10.9%2025-03-25
CVE-2025-2740PHPGurukul Old Age Home Management System eligibility.php SQL injection6.9CNA v4.00.4%2025-03-25
CVE-2025-2739PHPGurukul Old Age Home Management System manage-services.php SQL injection9.8v3.10.5%2025-03-25
CVE-2025-2738PHPGurukul Old Age Home Management System manage-scdetails.php SQL injection9.8v3.10.5%2025-03-25
CVE-2025-2737PHPGurukul Old Age Home Management System contactus.php SQL injection9.8v3.10.5%2025-03-25
CVE-2025-2736PHPGurukul Old Age Home Management System bwdates-report-details.php SQL injection9.8v3.10.5%2025-03-25
CVE-2025-2735PHPGurukul Old Age Home Management System add-services.php SQL injection9.8v3.10.5%2025-03-25
CVE-2025-2734PHPGurukul Old Age Home Management System aboutus.php SQL injection9.8v3.10.5%2025-03-25
CVE-2025-2733mannaandpoem OpenManus Prompt python_execute.py os command injection5.3CNA v4.01.5%2025-03-25
CVE-2025-2732H3C Magic BE18000 HTTP POST request getWifiNeighbour command injection8.6CNA v4.01.0%2025-03-25Fix
CVE-2025-2731H3C Magic BE18000 HTTP POST request getDualbandSync command injection8.6CNA v4.01.0%2025-03-25Fix
CVE-2025-2730H3C Magic BE18000 HTTP POST request getssidname command injection8.6CNA v4.01.0%2025-03-25Fix
CVE-2025-2729H3C Magic BE18000 HTTP POST request networkSetup command injection8.6CNA v4.01.0%2025-03-25Fix
CVE-2025-2728H3C Magic NX30 Pro/Magic NX400 getNetworkConf command injection8.6CNA v4.01.0%2025-03-25Fix
CVE-2025-2727H3C Magic NX30 Pro HTTP POST request getNetworkStatus command injection8.6CNA v4.01.0%2025-03-25Fix