CVE-2025 list

CVE-2025 records published in March 2025

Page two of three: records 1,001 to 2,000 of the 2,921 published in March 2025, newest first. The first page carries the figures for March 2025.

CVE-2025 records published in March 2025, newest first: records 1,001 to 2,000 of 2,921
CVE Summary CVSS EPSS Published Signals
CVE-2025-2726H3C Magic BE18000 HTTP POST request esps command injection8.6CNA v4.01.0%2025-03-25Fix
CVE-2025-2725H3C Magic BE18000 HTTP POST request auth command injection8.6CNA v4.08.3%2025-03-25Emerging ThreatsFix
CVE-2025-2717D-Link DIR-823X HTTP POST request diag_nslookup sub_41710C os command injection7.2v3.14.5%2025-03-25
CVE-2025-2635Digital License Manager WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-03-25Fix
CVE-2025-2559Org.keycloak/keycloak-services: Jwt token cache exhaustion leading to denial of service in keycloak4.9CNA v3.10.7%2025-03-25Fix
CVE-2025-2542Your Simple SVG Support WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-03-25Fix
CVE-2025-2532Luxion KeyShot USDC File Parsing use-after-free remote code execution7.8CNA v3.00.3%2025-03-25
CVE-2025-2531Luxion KeyShot DAE File Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.2%2025-03-25
CVE-2025-2530Luxion KeyShot DAE File Parsing access of uninitialized pointer remote code execution7.8CNA v3.00.2%2025-03-25
CVE-2025-2510Frndzk Expandable Bottom Bar WordPress plugin stored cross-site scripting5.5CNA v3.10.2%2025-03-25
CVE-2025-2319EZ SQL Reports Shortcode Widget and DB Backup - cross-site request forgery to remote code execution8.8CNA v3.10.4%2025-03-25Fix
CVE-2025-2312cifs-utils cifs.upcall makes an upcall to the wrong namespace in containerized environments5.9CNA v3.10.2%2025-03-25Fix
CVE-2025-2252Easy Digital Downloads WordPress plugin information disclosure5.3CNA v3.10.4%2025-03-25Fix
CVE-2025-2224Directorist WordPress plugin missing authorization to unauthenticated arbitrary post Publishing5.3CNA v3.10.4%2025-03-25Fix
CVE-2025-2109WP Compress WordPress plugin unauthenticated server-side request forgery via init function5.8CNA v3.10.4%2025-03-25Fix
CVE-2025-1974ingress-nginx admission controller RCE escalation9.8CNA v3.199.4%2025-03-25NucleiExploit codeKCVFix
CVE-2025-1798Design Comuni Italia WordPress theme unauthenticated stored XSS6.1CISA ADP v3.10.2%2025-03-25Fix
CVE-2025-1452Favorites WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-03-25Fix
CVE-2025-1445Hitachi Energy RTU500 IEC 61850 TLS handling vulnerability8.7CNA v4.00.3%2025-03-25Fix
CVE-2025-1320teachPress WordPress plugin cross-site request forgery to import delete4.3CNA v3.10.2%2025-03-25Fix
CVE-2025-1098ingress-nginx controller configuration injection via unsanitized mirror annotations8.8CNA v3.182.3%2025-03-25NucleiEmerging ThreatsExploit codeKCVFix
CVE-2025-1097ingress-nginx controller configuration injection via unsanitized auth-tls-match-cn annotation8.8CNA v3.133.2%2025-03-25NucleiEmerging ThreatsExploit codeKCVFix
CVE-2025-0845DesignThemes Core Features WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-03-25
CVE-2025-0717Social Slider Feed WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-03-25Fix
CVE-2025-30623wA11y The Web Accessibility Toolbox WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-24
CVE-2025-30621Translator WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30620WP Odoo Form Integrator WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30619SpeakPipe WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-03-24
CVE-2025-30617Rewrite WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30615WP e-Commerce Style Email WordPress plugin CSRF to remote code execution9.6CNA v3.10.2%2025-03-24
CVE-2025-30612mandegarweb Replace Default Words stored cross-site scripting7.1CNA v3.10.2%2025-03-24
CVE-2025-30610WP Social Widget WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-03-24Fix
CVE-2025-30609AppExperts WordPress plugin sensitive data exposure5.3CNA v3.10.4%2025-03-24Fix
CVE-2025-30608SQL Backup WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-03-24
CVE-2025-30606Easy Page Transition WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-24
CVE-2025-30605sourceplay-navermap WordPress plugin broken access control4.3CNA v3.10.3%2025-03-24
CVE-2025-30604JiangQie Official Website Mini Program WordPress plugin SQL injection7.6CNA v3.10.4%2025-03-24
CVE-2025-30603CopyLink WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30602Related Posts via Categories WordPress plugin CSRF to stored XSS7.1CNA v3.10.3%2025-03-24
CVE-2025-30601Flipdish Ordering System WordPress plugin cross-site request forgery (CSRF) to settings Change4.3CNA v3.10.2%2025-03-24
CVE-2025-30600WP Hotjar WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-24
CVE-2025-30599WP Parallax Content Slider WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-24
CVE-2025-30598WordPress OSS Upload plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30597WordPress IG Shortcodes plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-24
CVE-2025-30595WordPress include-file plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-24
CVE-2025-30593WordPress Include URL plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-24
CVE-2025-30592WordPress Advanced Dewplayer plugin broken access control5.3CNA v3.10.4%2025-03-24
CVE-2025-30591WordPress Music Press Pro plugin broken access control5.3CNA v3.10.4%2025-03-24
CVE-2025-30590Flickr set slideshows WordPress plugin SQL injection8.5CNA v3.10.4%2025-03-24
CVE-2025-30588Map Contact WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30587LH OGP Meta WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30586cTabs WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30585Generate Post Thumbnails WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30584AlphaOmega Captcha and Anti-Spam Filter WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30583Pro Rank Tracker WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30581Top Bar WordPress plugin broken access control5.3CNA v3.10.4%2025-03-24
CVE-2025-30578AdSense Privacy Policy WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30577Browser Address Bar Color WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.2%2025-03-24Fix
CVE-2025-30576Hacklog Remote Image Autosave WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30575Arefly Login Redirect stored cross-site scripting5.9CNA v3.10.3%2025-03-24
CVE-2025-30574Jenst Mobile Navigation stored cross-site scripting5.9CNA v3.10.3%2025-03-24
CVE-2025-30573mrdenny My Default Post Content stored cross-site scripting5.9CNA v3.10.3%2025-03-24
CVE-2025-30572Simple Rating WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30571STEdb Forms WordPress plugin SQL injection7.6CNA v3.10.5%2025-03-24
CVE-2025-30570دکمه، شبکه اجتماعی خرید WordPress plugin SQL injection7.6CNA v3.10.5%2025-03-24
CVE-2025-30569WP Featured Entries WordPress plugin SQL command improper neutralization8.5CNA v3.10.4%2025-03-24
CVE-2025-30568Super Static Cache WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30566Clink WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-24
CVE-2025-30565banner-manager WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30564Custom Script Integration WordPress plugin wpwox cross-site request forgery7.1CNA v3.10.2%2025-03-24
CVE-2025-30561CAS Maestro WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30560jQuery Dropdown Menu WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30558ANAC XML Render WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30557Easy 301 Redirects WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30556flyaga Fix Rss Feeds cross-site request forgery4.3CNA v3.10.2%2025-03-24
CVE-2025-30555WordPres 同步微博 WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30553GMO Font Agent WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-24
CVE-2025-30552WordPress Admin Bar Improved plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30551Pretty file links WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-03-24
CVE-2025-30550CallPhone'r WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30549Yummly Rich Recipes WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30546Cackle WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30545issuuPress WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-03-24
CVE-2025-30543Menu Duplicator WordPress plugin broken access control4.3CNA v3.10.4%2025-03-24
CVE-2025-30542WP SoundCloud Ultimate WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30541Info Boxes Shortcode And Widgets WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30540AvaiBook WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-03-24
CVE-2025-30539BMo Expo WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-03-24
CVE-2025-30538Simple Optimizer WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30537Upload Quota per User WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-03-24
CVE-2025-30536Beautiful Link Preview WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-03-24
CVE-2025-30535External image replace WordPress plugin cross-site request forgery (CSRF) to settings Change4.3CNA v3.10.2%2025-03-24
CVE-2025-30534Image Captcha WordPress plugin cross-site request forgery (CSRF) to settings Change4.3CNA v3.10.2%2025-03-24
CVE-2025-30533Message ticker WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-03-24
CVE-2025-30532Weather Layer WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-03-24
CVE-2025-30531WP Ride Booking WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30530AI Preloader WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-03-24
CVE-2025-30529Auto Load Next Post WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30528Awesome Logos WordPress plugin CSRF to SQL injection9.3CNA v3.10.3%2025-03-24
CVE-2025-30527My Bootstrap Menu WordPress plugin stored cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-24
CVE-2025-30526Typekit WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30525WP Profitshare WordPress plugin SQL injection7.6CNA v3.10.5%2025-03-24
CVE-2025-30523Super Simple Subscriptions WordPress plugin SQL injection7.6CNA v3.10.5%2025-03-24
CVE-2025-30522Contact Form 7 Material Design WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-24
CVE-2025-30521GP Back To Top WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-24
CVE-2025-30208Vite bypasses server.fs.deny when using `?raw??`5.3CNA v3.174.8%2025-03-24Reported exploitedNucleiEmerging ThreatsExploit codeKCVFix
CVE-2025-30205kanidm-provision leaks provisioned admin credentials into the system log7.6CNA v3.10.3%2025-03-24Fix
CVE-2025-30163cilium node based network policies may incorrectly allow workload traffic3.4CNA v3.10.2%2025-03-24Fix
CVE-2025-30162Cilium Gateway API load balancer egress policy incorrect authorization3.2CNA v3.10.2%2025-03-24Fix
CVE-2025-3011270mai Dash Cam 1S device authorization authentication bypass7.1CISA ADP v3.10.3%2025-03-24
CVE-2025-29778Kyverno ignores subjectRegExp and IssuerRegExp5.8CNA v3.10.3%2025-03-24Fix
CVE-2025-29315OpenDaylight SFC allows Unauthorized Privileged Execution via Crafted request9.8CISA ADP v3.10.4%2025-03-24
CVE-2025-29314OpenDaylight SFC Insecure Shiro Cookie Configuration8.1CISA ADP v3.10.2%2025-03-24
CVE-2025-29313OpenDaylight SFC denial of service (DoS)7.5CISA ADP v3.10.4%2025-03-24
CVE-2025-29312Opennetworking ONOS incorrect control flow9.1CISA ADP v3.10.5%2025-03-24
CVE-2025-29311Opennetworking ONOS insufficient entropy7.5CISA ADP v3.10.4%2025-03-24
CVE-2025-29310Opennetworking ONOS deserialization of untrusted data9.8CISA ADP v3.10.6%2025-03-24
CVE-2025-29135Tenda AC7 stack-based buffer overflow9.8CISA ADP v3.11.1%2025-03-24
CVE-2025-29100Tenda AC8 stack-based buffer overflow9.8CISA ADP v3.10.6%2025-03-24
CVE-2025-26512Privilege escalation vulnerability in SnapCenter9.9CNA v3.10.7%2025-03-24Fix
CVE-2025-23204api-platform core GraphQl securityAfterResolver not called4.4CNA v3.10.3%2025-03-24Fix
CVE-2025-22223Spring Security vulnerable to authorization bypass via Security Annotations5.3CNA v3.10.5%2025-03-24Exploit codeFix
CVE-2025-2749Kentico Xperience path traversal7.2CNA v3.14.1%2025-03-24KEVFix
CVE-2025-2748Kentico Xperience stored cross-site scripting in multiple-file upload functionality6.1v3.160.6%2025-03-24NucleiEmerging ThreatsExploit codeFix
CVE-2025-2747Kentico Xperience CMS authentication bypass using an alternate path or channel9.8CNA v3.197.2%2025-03-24KEVNucleiEmerging ThreatsFix
CVE-2025-2746Kentico Xperience CMS authentication bypass using an alternate path or channel9.8CNA v3.174.1%2025-03-24KEVNucleiEmerging ThreatsFix
CVE-2025-2716China Mobile P22g-CIac Samba Path path traversal5.1CNA v4.00.5%2025-03-24
CVE-2025-2715webERP Confirm Dispatch and Invoice page cross-site scripting5.1CNA v4.00.3%2025-03-24
CVE-2025-2714JoomlaUX JUX Real Estate addagent cross-site scripting5.3CNA v4.00.5%2025-03-24
CVE-2025-2712Yonyou UFIDA ERP-NC top.jsp cross-site scripting6.1v3.10.8%2025-03-24Nuclei
CVE-2025-2711Yonyou UFIDA ERP-NC systop.jsp cross-site scripting6.1v3.10.9%2025-03-24Nuclei
CVE-2025-2710Yonyou UFIDA ERP-NC menu.jsp cross-site scripting6.1v3.10.9%2025-03-24Nuclei
CVE-2025-2709Yonyou UFIDA ERP-NC login.jsp cross-site scripting6.1v3.10.9%2025-03-24Nuclei
CVE-2025-2708zhijiantianya ruoyi-vue-pro Backend file upload interface upload path traversal9.1v3.10.9%2025-03-24
CVE-2025-2707zhijiantianya ruoyi-vue-pro Front-End Store interface upload path traversal9.1v3.10.9%2025-03-24
CVE-2025-2706Digiwin ERP UploadAjaxAPI.ashx unrestricted upload5.3CNA v4.00.3%2025-03-24
CVE-2025-2705Digiwin ERP FileUploadApi.ashx DoWebUpload unrestricted upload6.9CNA v4.00.5%2025-03-24
CVE-2025-2702Softwin WMX3 ImageAdd.ashx ImageAdd unrestricted upload5.3CNA v4.00.3%2025-03-24
CVE-2025-2701AMTT Hotel Broadband Operation System port_setup.php popen os command injection9.8v3.17.3%2025-03-24
CVE-2025-2700michelson Dante Editor Insert Link cross-site scripting5.4v3.10.4%2025-03-24
CVE-2025-2699GetmeUK ContentTools Image cross-site scripting5.4v3.10.4%2025-03-24
CVE-2025-2690yiisoft Yii2 MockClass.php generate deserialization9.8v3.10.7%2025-03-24
CVE-2025-2689yiisoft Yii2 SortableIterator.php getIterator deserialization9.8v3.10.6%2025-03-24
CVE-2025-2688TOTOLINK A3000RU Syslog Configuration File ExportSyslog.sh access control5.3CNA v4.00.5%2025-03-24
CVE-2025-2687PHPGurukul eLearning System Image index.php unrestricted upload9.8v3.10.4%2025-03-24
CVE-2025-2686mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 Backend admin doFilter access control6.9CNA v4.00.5%2025-03-24
CVE-2025-2684PHPGurukul Bank Locker Management System search-report-details.php SQL injection9.8v3.10.5%2025-03-24
CVE-2025-2683PHPGurukul Bank Locker Management System profile.php SQL injection9.8v3.10.5%2025-03-24
CVE-2025-2682PHPGurukul Bank Locker Management System edit-subadmin.php SQL injection9.8v3.10.5%2025-03-24
CVE-2025-2681PHPGurukul Bank Locker Management System edit-locker.php SQL injection9.8v3.10.5%2025-03-24
CVE-2025-2680PHPGurukul Bank Locker Management System edit-assign-locker.php SQL injection9.8v3.10.5%2025-03-24
CVE-2025-2679PHPGurukul Bank Locker Management System contact-us.php SQL injection9.8v3.10.5%2025-03-24
CVE-2025-2678PHPGurukul Bank Locker Management System changeimage1.php SQL injection9.8v3.10.5%2025-03-24
CVE-2025-2677PHPGurukul Bank Locker Management System changeidproof.php SQL injection9.8v3.10.5%2025-03-24
CVE-2025-2676PHPGurukul Bank Locker Management System add-subadmin.php SQL injection9.8v3.10.5%2025-03-24
CVE-2025-2675PHPGurukul Bank Locker Management System add-lockertype.php SQL injection9.8v3.10.5%2025-03-24
CVE-2025-2674PHPGurukul Bank Locker Management System aboutus.php SQL injection9.8v3.10.5%2025-03-24
CVE-2025-2673code-projects Payroll Management System home_employee.php cross-site scripting5.4v3.10.3%2025-03-24
CVE-2025-2231PDF-XChange Editor RTF File Parsing out-of-bounds read remote code execution7.8CNA v3.00.3%2025-03-24Fix
CVE-2025-1558Mattermost denial of service via Malicious GIF6.5CNA v3.10.4%2025-03-24Fix
CVE-2025-1203Slider, Gallery, Carousel by MetaSlider WordPress plugin Editor+ stored XSS3.5CISA ADP v3.10.3%2025-03-24Fix
CVE-2025-1062Slider, Gallery, Carousel by MetaSlider WordPress plugin Editor+ stored XSS3.5CISA ADP v3.10.3%2025-03-24Fix
CVE-2025-0835GPU DDK _WrapExtMemReleasePages called twice if _FlushUMVirtualRange fails7.8CISA ADP v3.10.2%2025-03-24Fix
CVE-2025-0478GPU DDK PMMETA_PROTECT PMR can be exported as dma-buf file / GEM object7.8CISA ADP v3.10.1%2025-03-24Fix
CVE-2025-0256HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure4.3CNA v3.10.3%2025-03-24Fix
CVE-2025-0255HCL DevOps Deploy / HCL Launch is susceptible to command injection7.2CNA v3.10.7%2025-03-24Fix
CVE-2025-30474Apache Commons VFS: Failing to find an FTP file can reveal the URI's password in an error message5.0CISA ADP v3.10.9%2025-03-23Fix
CVE-2025-29806Microsoft Edge (Chromium-based) remote code execution6.5CNA v3.10.9%2025-03-23Fix
CVE-2025-29795Microsoft Edge (Chromium-based) update elevation of privilege7.8CNA v3.10.4%2025-03-23Fix
CVE-2025-27553Apache Commons VFS: Possible path traversal issue when using NameScope.DESCENDENT7.5CISA ADP v3.11.4%2025-03-23Fix
CVE-2025-2691nossrf server-side request forgery (SSRF)9.1v3.10.4%2025-03-23Fix
CVE-2025-2672code-projects Payroll Management System add_deductions.php SQL injection7.5v3.10.4%2025-03-23
CVE-2025-2671Yue Lao Blind Box 月老盲盒 Upload.php base64image unrestricted upload5.3CNA v4.00.3%2025-03-23
CVE-2025-2665PHPGurukul Online Security Guards Hiring System bwdates-reports-details.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2664CodeZips Hospital Management System suadpeted.php SQL injection7.2v3.10.5%2025-03-23
CVE-2025-2663PHPGurukul Bank Locker Management System search-locker-details.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2662Project Worlds Online Time Table Generator studentdashboard.php SQL injection8.8v3.10.6%2025-03-23
CVE-2025-2661Project Worlds Online Time Table Generator index.php SQL injection9.8v3.10.7%2025-03-23
CVE-2025-2660Project Worlds Online Time Table Generator index.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2659Project Worlds Online Time Table Generator index.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2658PHPGurukul Online Security Guards Hiring System search-request.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2657Projectworlds Apartment Visitors Management System front.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2656PHPGurukul Zoo Management System login.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2655SourceCodester AC Repair and Services System Users.php delete_users SQL injection9.8v3.10.6%2025-03-23
CVE-2025-2654SourceCodester AC Repair and Services System manage_service.php SQL injection9.8v3.10.6%2025-03-23
CVE-2025-2653FoxCMS improper authorization5.3CNA v4.00.3%2025-03-23
CVE-2025-2652SourceCodester Employee and Visitor Gate Pass Logging System directory listing7.5v3.10.7%2025-03-23
CVE-2025-2651SourceCodester Online Eyewear Shop admin exposure of information through directory listing6.9CNA v4.00.7%2025-03-23
CVE-2025-2650PHPGurukul Medical Card Generation System download-medical-cards.php cross-site scripting6.1v3.10.3%2025-03-23
CVE-2025-2649PHPGurukul Doctor Appointment Management System check-appointment.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2648PHPGurukul Art Gallery Management System view-enquiry-detail.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2647PHPGurukul Art Gallery Management System search.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2646PHPGurukul Art Gallery Management System admin-profile.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2645PHPGurukul Art Gallery Management System product.php cross-site scripting6.1v3.10.3%2025-03-23
CVE-2025-2644PHPGurukul Art Gallery Management System add-art-product.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2643PHPGurukul Art Gallery Management System edit-art-type-detail.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2642PHPGurukul Art Gallery Management System edit-art-product-detail.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2641PHPGurukul Art Gallery Management System edit-artist-detail.php SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2640PHPGurukul Doctor Appointment Management System appointment reports page SQL injection9.8v3.10.5%2025-03-23
CVE-2025-2639jizhiCMS Article release.html improper authorization5.3v3.10.4%2025-03-23
CVE-2025-2638jizhiCMS Article release.html improper authorization5.3v3.10.4%2025-03-23
CVE-2025-2637jizhiCMS Account Profile page userinfo.html improper authorization5.3v3.10.4%2025-03-23
CVE-2025-1446Pods WordPress plugin Admin+ SQL injection9.8NVD v3.10.4%2025-03-23Fix
CVE-2025-0718Nested Pages WordPress plugin Contributor+ stored XSS4.8CISA ADP v3.10.3%2025-03-23Fix
CVE-2025-30472Corosync stack-based buffer overflow9.8v3.10.4%2025-03-22Fix
CVE-2025-26796Apache Oozie: XSS in Oozie Web console5.4CISA ADP v3.10.5%2025-03-22Fix
CVE-2025-2628PHPGurukul Art Gallery Management System art-enquiry.php SQL injection9.8v3.10.5%2025-03-22
CVE-2025-2627PHPGurukul Art Gallery Management System contactus.php SQL injection9.8v3.10.5%2025-03-22
CVE-2025-2626SourceCodester Kortex Lite Advocate Office Management System edit_case.php SQL injection9.8v3.10.5%2025-03-22
CVE-2025-2625westboy CicadasCMS page SQL injection4.9v3.10.4%2025-03-22
CVE-2025-2624westboy CicadasCMS save SQL injection7.5v3.10.4%2025-03-22
CVE-2025-2623westboy CicadasCMS save cross-site scripting5.4v3.10.3%2025-03-22
CVE-2025-2622aizuda snail-job Workflow-Task Management module check-node-expression getRuntime deserialization8.8v3.10.7%2025-03-22
CVE-2025-2621D-Link DAP-1620 storage check_dws_cookie stack-based overflow9.8v3.12.1%2025-03-22
CVE-2025-2620D-Link DAP-1620 Authentication storage mod_graph_auth_uri_handler stack-based overflow9.3CNA v4.08.7%2025-03-22Exploit code
CVE-2025-2619D-Link DAP-1620 Cookie storage check_dws_cookie stack-based overflow9.3CNA v4.02.0%2025-03-22
CVE-2025-2618D-Link DAP-1620 Path API set_ws_action heap-based overflow9.3CNA v4.02.0%2025-03-22
CVE-2025-2617yangyouwang 杨有旺 crud 简约后台管理系统 Department page cross-site scripting4.8CNA v4.00.3%2025-03-22
CVE-2025-2616yangyouwang 杨有旺 crud 简约后台管理系统 role management page cross-site scripting4.8CNA v4.00.3%2025-03-22
CVE-2025-2577Bitspecter Suite WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-03-22Fix
CVE-2025-2484Multi Video Box WordPress plugin reflected cross-site scripting via video_id and group_id parameters6.1CNA v3.10.3%2025-03-22
CVE-2025-2482Gotcha Gesture-based Captcha WordPress plugin reflected cross-site scripting via menu parameter6.1CNA v3.10.3%2025-03-22
CVE-2025-2479Easy Custom Admin Bar WordPress plugin reflected cross-site scripting via msg parameter6.1CNA v3.10.3%2025-03-22
CVE-2025-2478Code Clone WordPress plugin authenticated (Administrator+) SQL injection via snippetId parameter4.9CNA v3.10.4%2025-03-22
CVE-2025-2477CryoKey WordPress plugin reflected cross-site scripting via ckemail parameter4.7CNA v3.10.3%2025-03-22
CVE-2025-2331GiveWP Donation Plugin and Fundraising Platform WordPress plugin sensitive information exposure6.5v3.10.4%2025-03-22Fix
CVE-2025-2303Block Logic WordPress plugin authenticated (Contributor+) remote code execution8.8CNA v3.10.9%2025-03-22Fix
CVE-2025-2186Recover WooCommerce Cart Abandonment WordPress plugin SQL injection7.5CNA v3.10.4%2025-03-22Fix
CVE-2025-1973Export and Import Users and Customers WordPress plugin path traversal4.9CNA v3.10.7%2025-03-22Fix
CVE-2025-1972Export and Import Users and Customers WordPress plugin arbitrary file deletion6.5v3.10.4%2025-03-22Fix
CVE-2025-1971Export and Import Users and Customers WordPress plugin PHP object injection7.2CNA v3.10.8%2025-03-22Fix
CVE-2025-1970Export and Import Users and Customers WordPress plugin server-side request forgery7.6CNA v3.10.4%2025-03-22Fix
CVE-2025-1408ProfileGrid WordPress plugin unauthorized access4.3CNA v3.10.3%2025-03-22Fix
CVE-2025-1311WooCommerce Multivendor Marketplace WordPress plugin SQL injection6.5CNA v3.10.4%2025-03-22Fix
CVE-2025-0807CITS Support svg WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-03-22
CVE-2025-0724ProfileGrid User Profiles, Groups and Communities WordPress plugin PHP object injection8.8v3.10.6%2025-03-22Fix
CVE-2025-0723ProfileGrid User Profiles, Groups and Communities WordPress plugin SQL injection6.5v3.10.4%2025-03-22Fix
CVE-2025-30349Horde imp cross-site scripting7.2CNA v3.131.3%2025-03-21Exploit code
CVE-2025-30348Qt algorithmic complexity5.3v3.10.4%2025-03-21Fix
CVE-2025-30347varnish-software Varnish Enterprise out-of-bounds read7.5v3.10.3%2025-03-21Fix
CVE-2025-30346varnish-software Varnish Cache HTTP request smuggling4.8v3.10.3%2025-03-21Fix
CVE-2025-30345Intevation OpenSlides improper output encoding4.1v3.10.3%2025-03-21Fix
CVE-2025-30344Intevation OpenSlides timing side channel3.7NVD v3.10.3%2025-03-21Fix
CVE-2025-30343Intevation OpenSlides path traversal6.5v3.10.5%2025-03-21Fix
CVE-2025-30342Intevation OpenSlides An cross-site scripting6.1v3.10.3%2025-03-21Fix
CVE-2025-30204golang-jwt jwt jwt-go allows excessive memory allocation during header parsing7.5CNA v3.10.7%2025-03-21Fix
CVE-2025-30179Mattermost MFA Enforcement Bypass in Search APIs4.3CNA v3.10.3%2025-03-21Fix
CVE-2025-30168parse-community parse-server Parse Server has an OAuth login vulnerability6.9CNA v3.10.4%2025-03-21Fix
CVE-2025-30157Envoy crashes when HTTP ext_proc processes local replies6.5CNA v3.10.4%2025-03-21Fix
CVE-2025-29927Authorization bypass in Next.js Middleware9.1CNA v3.199.2%2025-03-21Reported exploitedNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2025-29814Microsoft Partner Center elevation of privilege9.3CNA v3.12.2%2025-03-21Fix
CVE-2025-29807Microsoft Dataverse remote code execution8.7CNA v3.11.4%2025-03-21Fix
CVE-2025-29641Anujk305 Vehicle Record Management System SQL injection7.3CISA ADP v3.10.3%2025-03-21
CVE-2025-29640Anujk305 Human Metapneumovirus (hmpv) - Testing Management System SQL injection5.4CISA ADP v3.10.2%2025-03-21
CVE-2025-29230Linksys E5600 command injection8.6CISA ADP v3.10.8%2025-03-21
CVE-2025-29227Linksys E5600 command injection6.3CISA ADP v3.10.7%2025-03-21
CVE-2025-29226Linksys E5600 command injection6.3CISA ADP v3.10.7%2025-03-21
CVE-2025-29223Linksys E5600 command injection6.3CISA ADP v3.10.7%2025-03-21
CVE-2025-27933Mattermost Unauthorized Private-to-Public Channel Conversion5.4CNA v3.10.2%2025-03-21Fix
CVE-2025-27715Mattermost Auto-Enrollment of Team Admins into Private Channels without explicit consent3.3CNA v3.10.2%2025-03-21Fix
CVE-2025-27612youki libcontainer is affected by capabilities elevation5.9CNA v3.10.2%2025-03-21Fix
CVE-2025-26500Wind River Systems VxWorks 7 USB packet handling denial of service4.6CNA v3.10.2%2025-03-21
CVE-2025-26336Dell Chassis Management Controller (CMC) for Dell PowerEdge FX2 stack-based buffer overflow8.3CNA v3.10.6%2025-03-21Fix
CVE-2025-25274Mattermost unauthorized command execution in Archived Channels4.3CNA v3.10.4%2025-03-21Fix
CVE-2025-25068Mattermost bypassing MFA Enforcement on plugin endpoints7.5CNA v3.10.3%2025-03-21Fix
CVE-2025-25036Jalios JPlatform 10 authenticated XML external entity injection (XXE)6.8CNA v3.10.4%2025-03-21Fix
CVE-2025-25035Jalios JPlatform 10 multiple cross-site scripting (XSS)7.3CNA v3.10.4%2025-03-21Fix
CVE-2025-24920Mattermost Unauthorized Bookmark Creation and Modification in Archived Channels4.3CNA v3.10.2%2025-03-21Fix
CVE-2025-24915Tenable Nessus Agent incorrect default permissions7.8CNA v3.10.2%2025-03-21Fix
CVE-2025-2610MagnusBilling stored cross-site scripting in Alarm module5.4NVD v3.10.9%2025-03-21Nuclei
CVE-2025-2609MagnusBilling stored cross-site scripting in Login Logs6.1NVD v3.11.1%2025-03-21Nuclei
CVE-2025-2608PHPGurukul Banquet Booking System view-user-queries.php SQL injection8.8v3.10.4%2025-03-21
CVE-2025-2607phplaozhang LzCMS-LaoZhangBoKeXiTong HTTP POST request upimage.html unrestricted upload5.3CNA v4.00.4%2025-03-21
CVE-2025-2606SourceCodester Best Church Management Software soulwinning_crud.php unrestricted upload5.3CNA v4.00.3%2025-03-21
CVE-2025-2604SourceCodester Kortex Lite Advocate Office Management System edit_act.php SQL injection5.3CNA v4.00.3%2025-03-21
CVE-2025-2603SourceCodester Kortex Lite Advocate Office Management System deactivate.php SQL injection5.3CNA v4.00.3%2025-03-21
CVE-2025-2602SourceCodester Kortex Lite Advocate Office Management System deactivate_reg.php SQL injection8.8v3.10.4%2025-03-21
CVE-2025-2601SourceCodester Kortex Lite Advocate Office Management System activate_reg.php SQL injection8.8v3.10.4%2025-03-21
CVE-2025-2598AWS CDK CLI prints AWS credentials retrieved by custom credential plugins5.7CNA v4.00.3%2025-03-21Exploit codeFix
CVE-2025-2597Reflected cross-site scripting (XSS) vulnerability in ITIUM 60506.1v3.10.2%2025-03-21
CVE-2025-2593FastCMS list SQL injection5.3CNA v4.00.3%2025-03-21
CVE-2025-2592Open Asset Import Library Assimp CSMLoader.cpp InternReadFile heap-based overflow8.8v3.10.7%2025-03-21Fix
CVE-2025-2591Open Asset Import Library Assimp MDLLoader.cpp InternReadFile_Quake1 divide by zero5.5v3.10.6%2025-03-21Fix
CVE-2025-2590code-projects Human Resource Management System recruitment management cross-site scripting5.4v3.10.3%2025-03-21
CVE-2025-2589code-projects Human Resource Management System Account.go Index improper authorization9.8v3.10.5%2025-03-21
CVE-2025-2588Hercules Augeas fa.c re_case_expand null pointer dereference3.3NVD v3.10.3%2025-03-21Fix
CVE-2025-2587Jinher OA C6 IncentivePlanFulfillAppprove.aspx SQL injection6.3v3.10.4%2025-03-21
CVE-2025-2585EBM Technologies EBM Maintenance Center SQL injection8.8CNA v3.10.5%2025-03-21Fix
CVE-2025-2584WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow6.8v3.10.5%2025-03-21
CVE-2025-2583SimpleMachines SMF ManageNews.php cross-site scripting6.1v3.10.4%2025-03-21
CVE-2025-2582SimpleMachines SMF ManageAttachments.php cross-site scripting5.4v3.10.4%2025-03-21
CVE-2025-2581xmedcon DICOM file malloc integer underflow7.5v3.10.6%2025-03-21Fix
CVE-2025-30334OpenBSD wg(4) kernel crash7.1CNA v4.00.4%2025-03-20Fix
CVE-2025-30259Meta WhatsApp cloud service PDF sandbox protection vulnerability3.5CNA v3.10.3%2025-03-20Fix
CVE-2025-30160Redlib allows a denial of service via DEFLATE decompression bomb in restore_preferences form8.7CNA v4.00.6%2025-03-20Fix
CVE-2025-29980Blind SQL injection vulnerability in eTRAKiT.Net9.3CNA v4.00.6%2025-03-20
CVE-2025-29923Redis go-redis improper input validation3.7CNA v3.10.7%2025-03-20Fix
CVE-2025-29922kcp-dev kcp APIExport virtual workspace improper authorization9.6CNA v3.10.4%2025-03-20Fix
CVE-2025-29914OWASP Coraza WAF has parser confusion which leads to wrong URI in `REQUEST_FILENAME`5.4CNA v3.10.3%2025-03-20Fix
CVE-2025-29412Martmbithi Ibanking cross-site scripting4.8CISA ADP v3.10.2%2025-03-20
CVE-2025-29411Martmbithi Ibanking arbitrary file upload9.8CISA ADP v3.10.6%2025-03-20
CVE-2025-29410Kishanlal Hospital Management System component /contact.php cross-site scripting6.1CISA ADP v3.10.2%2025-03-20
CVE-2025-29218Tenda W18E stack-based buffer overflow6.5CISA ADP v3.10.5%2025-03-20
CVE-2025-29217Tenda W18E stack-based buffer overflow6.5CISA ADP v3.10.5%2025-03-20
CVE-2025-29215Tenda AX12 stack-based buffer overflow6.5CISA ADP v3.10.8%2025-03-20Emerging Threats
CVE-2025-29214Tenda AX12 stack-based buffer overflow7.5CISA ADP v3.10.6%2025-03-20
CVE-2025-29149Tenda i12 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-03-20
CVE-2025-29121Tenda AC6 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-03-20
CVE-2025-29101Tenda AC8 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-03-20
CVE-2025-27888Apache Druid: Server-side request forgery and cross-site scripting5.8CNA v4.01.8%2025-03-20NucleiFix
CVE-2025-26853Descor Infocad FM incorrect authorization9.8v3.10.4%2025-03-20Fix
CVE-2025-26852Descor Infocad FM SQL injection9.8v3.10.4%2025-03-20Fix
CVE-2025-25758Kukufm cleartext storage of sensitive information7.5CISA ADP v3.10.3%2025-03-20
CVE-2025-23120Veeam Backup and Recovery deserialization of untrusted data8.8NVD v3.124.0%2025-03-20
CVE-2025-22228Spring Security BCryptPasswordEncoder does not enforce maximum password length7.4CNA v3.10.6%2025-03-20Fix
CVE-2025-2574Out-of-bounds array write in Xpdf due to incorrect integer overflow checking2.1CNA v4.00.2%2025-03-20
CVE-2025-2565Liferay Portal and Liferay DXP Reveals Data via forms5.1CNA v4.00.3%2025-03-20Fix
CVE-2025-2557Audi UTR Dashcam Command API access control5.1CNA v4.00.2%2025-03-20
CVE-2025-2556Audi UTR Dashcam Video Stream hard-coded credentials5.3CNA v4.00.3%2025-03-20
CVE-2025-2555Audi Universal Traffic Recorder App FTP Credentials hard-coded password2.1CNA v4.00.2%2025-03-20
CVE-2025-2553D-Link DIR-618/DIR-605L formVirtualServ access control5.3CNA v4.01.3%2025-03-20Emerging Threats
CVE-2025-2552D-Link DIR-618/DIR-605L formTcpipSetup access control5.3CNA v4.00.8%2025-03-20Emerging Threats
CVE-2025-2551D-Link DIR-618/DIR-605L formSetPortTr access control5.3CNA v4.00.8%2025-03-20Emerging Threats
CVE-2025-2550D-Link DIR-618/DIR-605L DDNS service formSetDDNS access control5.3CNA v4.00.8%2025-03-20Emerging Threats
CVE-2025-2549D-Link DIR-618/DIR-605L formSetPassword access control8.8v3.11.0%2025-03-20Emerging Threats
CVE-2025-2548D-Link DIR-618/DIR-605L formSetDomainFilter access control8.8v3.11.0%2025-03-20Emerging Threats
CVE-2025-2547D-Link DIR-618/DIR-605L formAdvNetwork access control5.3CNA v4.00.8%2025-03-20Emerging Threats
CVE-2025-2546D-Link DIR-618/DIR-605L Firewall service formAdvFirewall access control5.3CNA v4.010.8%2025-03-20Emerging Threats
CVE-2025-2539File Away WordPress plugin missing authorization to unauthenticated arbitrary file read7.5CNA v3.11.7%2025-03-20NucleiExploit code
CVE-2025-2538Esri Portal for ArcGIS specific deployment pattern hard-coded credentials9.8CNA v3.10.6%2025-03-20
CVE-2025-2505Age Gate WordPress plugin unauthenticated local PHP file inclusion via lang9.8CNA v3.14.9%2025-03-20NucleiFix
CVE-2025-2480Santesoft Sante DICOM Viewer Pro out-of-bounds write8.4CNA v4.00.2%2025-03-20Fix
CVE-2025-2311Authentication bypass in SecHard Information Technologies' SecHard9.0CNA v3.10.2%2025-03-20Fix
CVE-2025-2108140+ Widgets WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-03-20Fix
CVE-2025-1802HT Mega Absolute Addons For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2025-03-20Fix
CVE-2025-1796langgenius Dify password reset code generator weak random number generator8.8v3.10.6%2025-03-20
CVE-2025-1770Event Manager, Events Calendar, Tickets, Registrations Eventin WordPress plugin local file inclusion8.8CNA v3.10.9%2025-03-20Fix
CVE-2025-1766Event Manager WordPress plugin unauthorized access5.3CNA v3.10.4%2025-03-20Fix
CVE-2025-1496Improper authentication in BG-TEK's Coslat Hotspot6.5CNA v3.10.3%2025-03-20Fix
CVE-2025-1474Weak password requirements in MLflow/MLflow5.5v3.10.4%2025-03-20Fix
CVE-2025-1473CSRF in MLflow/MLflow7.1v3.10.2%2025-03-20Fix
CVE-2025-1451Insufficient Patch leading to DoS in parisneo/lollms-webui7.5v3.10.6%2025-03-20
CVE-2025-1385ClickHouse library bridge vulnerability7.5CNA v4.00.5%2025-03-20Fix
CVE-2025-1314Custom Twitter Feeds WordPress plugin cross-site request forgery to Cache reset4.3CNA v3.10.2%2025-03-20Fix
CVE-2025-1040Server-side template injection (SSTI) in Significant-Gravitas/autogpt8.8v3.11.7%2025-03-20Fix
CVE-2025-0628Improper authorization in BerriAI/litellm8.1CNA v3.00.3%2025-03-20Fix
CVE-2025-0508MD5 Hash Collision in SageMaker Workflow in AWS/sagemaker-python-sdk5.9CNA v3.00.3%2025-03-20Fix
CVE-2025-0454SSRF Check Bypass in requests utility in Significant-Gravitas/autogpt7.5v3.10.6%2025-03-20Fix
CVE-2025-0453Denial of service through Batched Queries in GraphQL in MLflow/MLflow7.5v3.110.4%2025-03-20Fix
CVE-2025-0452Arbitrary file deletion in eosphoros-ai/DB-GPT8.2CNA v3.00.5%2025-03-20
CVE-2025-0330Exposure of sensitive information in BerriAI/LiteLLM7.5CNA v3.00.6%2025-03-20
CVE-2025-0317Divide by zero in Ollama/Ollama7.5v3.113.5%2025-03-20
CVE-2025-0315Allocation of resources without limits or throttling in Ollama/Ollama7.5v3.10.6%2025-03-20
CVE-2025-0312Null pointer dereference in Ollama/Ollama7.5v3.10.6%2025-03-20
CVE-2025-0281Stored cross-site scripting (XSS) in lunary-ai/Lunary5.4NVD v3.10.4%2025-03-20Fix
CVE-2025-0254HCL Digital Experience Ring API and dxclient improper certificate validation5.9CNA v3.10.3%2025-03-20
CVE-2025-0192Stored cross-site scripting (XSS) in wandb/openui5.4CNA v3.00.3%2025-03-20
CVE-2025-0191Denial of service in gaizhenbiao/ChuanhuChatGPT6.5CNA v3.00.6%2025-03-20
CVE-2025-0190Denial of service in aimhubio/aim7.5v3.10.6%2025-03-20
CVE-2025-0189Denial of service in aimhubio/aim7.5v3.10.6%2025-03-20
CVE-2025-0188SSRF in gaizhenbiao/ChuanhuChatGPT6.5CNA v3.00.5%2025-03-20
CVE-2025-0187Denial of service (DoS) by Sending Large Filename at file upload endpoint in gradio-app/Gradio7.5CNA v3.00.7%2025-03-20
CVE-2025-0185Pandas Query injection in langgenius/Dify8.8v3.11.1%2025-03-20
CVE-2025-0184Server-side request forgery (SSRF) in langgenius/dify6.5CNA v3.00.5%2025-03-20Exploit codeFix
CVE-2025-0183Stored XSS in binary-husky/gpt_academic5.4CNA v3.00.4%2025-03-20
CVE-2025-0182Denial of service in danswer-ai/danswer7.5CNA v3.00.7%2025-03-20
CVE-2025-30258GnuPG improper check for exceptional conditions4.7v3.10.2%2025-03-19Fix
CVE-2025-30236SecurEnvoy SecurAccess web parameter tampering8.6CNA v3.10.4%2025-03-19Fix
CVE-2025-30235SecurEnvoy SecurAccess race condition3.5CNA v3.10.2%2025-03-19Fix
CVE-2025-30234MNX SmartOS hard-coded cryptographic key8.3CNA v3.10.3%2025-03-19
CVE-2025-30197Jenkins Zoho QEngine Plugin Displays Unmasked API Keys3.1CISA ADP v3.10.3%2025-03-19Fix
CVE-2025-30196Jenkins AnchorChain Plugin has a cross-site scripting (XSS)6.5CISA ADP v3.10.3%2025-03-19Fix
CVE-2025-30154Reviewdog/action-setup GitHub action embedded malicious code8.6CNA v3.12.4%2025-03-19KEVFix
CVE-2025-30153getkin kin-openapi ZIP file decoder denial of service7.5CNA v3.10.5%2025-03-19Fix
CVE-2025-30152Sylius PayPal plugin has an Order Manipulation vulnerability after PayPal Checkout6.5CNA v3.10.3%2025-03-19Fix
CVE-2025-30144Fast-JWT improperly Validates iss Claims6.5CNA v3.10.6%2025-03-19Fix
CVE-2025-30092Intrexx Portal Server Velocity scripts cross-site scripting6.1CISA ADP v3.10.2%2025-03-19
CVE-2025-29926xwiki-platform the WikiManager REST API allows any user to create wikis7.9CNA v4.00.6%2025-03-19Fix
CVE-2025-29925XWiki allows unregistered users to access private pages information through REST endpoint8.7CNA v4.00.9%2025-03-19NucleiFix
CVE-2025-29924XWiki uses the wrong wiki reference in AuthorizationManager8.7CNA v4.00.4%2025-03-19Fix
CVE-2025-29783vLLM allows remote code execution via Mooncake Integration9.1CNA v3.10.7%2025-03-19Fix
CVE-2025-29770vLLM denial of service via outlines unbounded cache on disk6.5CNA v3.10.5%2025-03-19Fix
CVE-2025-29405emlog component /admin/template.php arbitrary file upload6.3CISA ADP v3.10.4%2025-03-19
CVE-2025-29401emlog component /views/plugin.php arbitrary file upload9.8CISA ADP v3.10.8%2025-03-19
CVE-2025-29137Tenda AC7 buffer overflow9.8CISA ADP v3.10.5%2025-03-19
CVE-2025-29118Tenda AC8 stack-based buffer overflow6.5CISA ADP v3.10.3%2025-03-19
CVE-2025-27787Applio allows a DoS in restart.py7.5NVD v3.10.8%2025-03-19
CVE-2025-27786Applio allows arbitrary file removal in core.py9.1NVD v3.10.5%2025-03-19
CVE-2025-27785Applio allows arbitrary file read in train.py export_index function7.5NVD v3.10.5%2025-03-19
CVE-2025-27784Applio allows arbitrary file read in train.py export_pth function7.5NVD v3.10.6%2025-03-19
CVE-2025-27783Applio allows arbitrary file write in train.py9.8NVD v3.11.1%2025-03-19
CVE-2025-27782Applio allows arbitrary file write in inference.py9.8NVD v3.11.4%2025-03-19
CVE-2025-27781Applio allows unsafe deserialization in inference.py9.8NVD v3.10.9%2025-03-19
CVE-2025-27780Applio allows unsafe deserialization in model_information.py9.8NVD v3.10.9%2025-03-19
CVE-2025-27779Applio allows unsafe deserialization in model_blender.py9.8NVD v3.10.9%2025-03-19
CVE-2025-27778Applio allows unsafe deserialization in infer.py9.8NVD v3.11.0%2025-03-19
CVE-2025-27777Applio allows SSRF and file write in model_download.py7.5NVD v3.10.4%2025-03-19
CVE-2025-27776Applio allows SSRF and file write in model_download.py5.3NVD v3.10.6%2025-03-19
CVE-2025-27775Applio allows SSRF and file write in model_download.py5.3NVD v3.10.6%2025-03-19
CVE-2025-27774Applio allows SSRF and file write in model_download.py5.3NVD v3.10.6%2025-03-19
CVE-2025-27705Absolute Security Secure Access There is a cross-site scripting5.5CNA v4.00.3%2025-03-19
CVE-2025-27704Absolute Security Secure Access There is a cross-site scripting5.5CNA v4.00.3%2025-03-19
CVE-2025-27415Nuxt allows DOS via cache poisoning with payload rendering response7.5CNA v3.10.4%2025-03-19Exploit codeFix
CVE-2025-27018Apache Airflow MySQL Provider: SQL injection in MySQL provider core function6.3CISA ADP v3.10.9%2025-03-19Fix
CVE-2025-26816Intrexx Portal Server information disclosure6.5CISA ADP v3.10.3%2025-03-19
CVE-2025-26486Beta80 Life 1st weak cryptographic algorithm6.0CNA v3.10.1%2025-03-19
CVE-2025-26485Beta80 Life 1st information disclosure5.8CNA v3.10.3%2025-03-19
CVE-2025-26475Dell Secure Connect Gateway (SCG) improper authentication5.5CNA v3.10.2%2025-03-19Fix
CVE-2025-23382Dell Secure Connect Gateway (SCG) system information disclosure5.5CNA v3.10.2%2025-03-19Fix
CVE-2025-2536Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS)5.1CNA v4.00.3%2025-03-19Fix
CVE-2025-2512File Away WordPress plugin missing authorization to unauthenticated file upload via upload function9.8CNA v3.11.0%2025-03-19Exploit codeFix
CVE-2025-2511AHAthat WordPress plugin authenticated (Administrator+) SQL injection via id parameter4.9CNA v3.10.3%2025-03-19
CVE-2025-2476Google Chrome Lens use-after-free8.8CISA ADP v3.11.0%2025-03-19Fix
CVE-2025-2324Progress MOVEit Transfer SFTP shared account permissions privilege escalation5.9CNA v3.10.3%2025-03-19Fix
CVE-2025-2290LifterLMS WordPress plugin missing authorization to unauthenticated post Trashing5.3CNA v3.10.3%2025-03-19Fix
CVE-2025-1758Progress LoadMaster improper input validation4.3CNA v3.14.8%2025-03-19Fix
CVE-2025-1472Mattermost Unauthorized View Access to Site Statistics and Team Statistics4.3CNA v3.10.2%2025-03-19Fix
CVE-2025-1232Site Reviews WordPress plugin unauthenticated stored XSS8.8CISA ADP v3.11.9%2025-03-19NucleiFix
CVE-2025-0431Proofpoint enterprise_protection Enterprise Protection Backslash URL Rewrite Bypass5.8CNA v3.10.4%2025-03-19Fix
CVE-2025-30142Gnetsystem G-onx authentication bypass by spoofing8.1CISA ADP v3.10.3%2025-03-18
CVE-2025-30141Gnetsystem G-onx improper access control7.5CISA ADP v3.10.4%2025-03-18
CVE-2025-30140Gnetsystem G-onx improper access control7.5CISA ADP v3.10.4%2025-03-18
CVE-2025-30139Gnetsystem G-onx default credentials9.8CISA ADP v3.10.4%2025-03-18
CVE-2025-30138Gnetsystem G-onx improper access control4.6CISA ADP v3.10.2%2025-03-18
CVE-2025-30137GNET API endpoints hard-coded credentials9.8CISA ADP v3.10.5%2025-03-18
CVE-2025-30132IROAD Dashcam V domain configuration vulnerability9.1CISA ADP v3.10.4%2025-03-18
CVE-2025-30123ROADCAM X3 companion app hard-coded credentials9.8CISA ADP v3.10.4%2025-03-18
CVE-2025-30122ROADCAM X3 hard-coded credentials9.8CISA ADP v3.10.4%2025-03-18
CVE-2025-30117Hella Dr 820 improper authorization7.3CISA ADP v3.10.4%2025-03-18
CVE-2025-30116Hella Dr 820 improper authentication7.5CISA ADP v3.10.5%2025-03-18
CVE-2025-30115Hella Dr 820 hard-coded password9.8CISA ADP v3.10.4%2025-03-18
CVE-2025-30114Hella Dr 820 improper authentication9.1CISA ADP v3.10.4%2025-03-18
CVE-2025-30113Hella Dr 820 hard-coded credentials9.8CISA ADP v3.10.4%2025-03-18
CVE-2025-30111IROAD v9 video streaming endpoints missing authentication7.5CISA ADP v3.10.4%2025-03-18
CVE-2025-30110IROAD X5 device pairing authentication bypass by spoofing6.5CISA ADP v3.10.3%2025-03-18
CVE-2025-30109IROAD mobile app API endpoints hard-coded credentials6.5CISA ADP v3.10.2%2025-03-18
CVE-2025-30107IROAD V9 configuration management missing authorization7.5CISA ADP v3.10.3%2025-03-18
CVE-2025-30106IROAD v9 hard-coded credentials8.8CISA ADP v3.10.3%2025-03-18
CVE-2025-29930imFAQ allows local file inclusion in seo.php6.9CNA v4.00.4%2025-03-18Fix
CVE-2025-29907jsPDF bypass regular expression denial of service (ReDoS)8.7CNA v4.00.7%2025-03-18Fix
CVE-2025-29790Contao allows cross-site scripting through SVG uploads4.8CNA v4.00.2%2025-03-18Fix
CVE-2025-27688Dell Wyse Proprietary OS (Modern ThinOS) incorrect permission assignment7.8CNA v3.10.1%2025-03-18Fix
CVE-2025-27080Authenticated sensitive information disclosure exposes Credentials in AOS-CX Command Line interface6.0CNA v3.10.2%2025-03-18
CVE-2025-26138Systemic-rm Risk Value improper access control6.5CISA ADP v3.10.3%2025-03-18
CVE-2025-26137Systemic-rm Risk Value remote file inclusion7.5CISA ADP v3.10.4%2025-03-18
CVE-2025-25595Iitb SAFE missing brute-force protection9.8CISA ADP v3.10.5%2025-03-18
CVE-2025-25590R1BBIT Yimioa SQL injection6.1CISA ADP v3.10.2%2025-03-18
CVE-2025-25589component /weixin/aes/XMLParse.java of yimioa An XML external entity injection8.1CISA ADP v3.10.5%2025-03-18
CVE-2025-25586R1BBIT Yimioa sensitive information in an accessible file4.2CISA ADP v3.10.2%2025-03-18
CVE-2025-25585R1BBIT Yimioa improper access control7.3CISA ADP v3.10.3%2025-03-18
CVE-2025-25582R1BBIT Yimioa SQL injection6.1CISA ADP v3.10.2%2025-03-18
CVE-2025-25580R1BBIT Yimioa SQL injection6.1CISA ADP v3.10.2%2025-03-18
CVE-2025-25500CosmWasm allows Bypass of Capability Restrictions in Blockchains7.5CISA ADP v3.10.8%2025-03-18Fix
CVE-2025-25220FUJI SOFT +F FS010M OS command improper neutralization8.8CNA v3.01.0%2025-03-18
CVE-2025-25042HPE AOS-CX REST interface information disclosure4.3CNA v3.10.3%2025-03-18
CVE-2025-25040Failure to properly Enforce Port ACLs on CPU generated packets in CX 9300 Switches3.3CNA v3.10.1%2025-03-18Fix
CVE-2025-24801GLPI allows authenticated remote code execution8.6CNA v3.121.0%2025-03-18Emerging ThreatsExploit codeFix
CVE-2025-24799GLPI allows unauthenticated SQL injection through the inventory endpoint7.5CNA v3.186.7%2025-03-18Reported exploitedNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2025-24306FUJI SOFT +F FS010M OS command improper neutralization7.2CNA v3.01.0%2025-03-18
CVE-2025-21619GLPI allows SQL injection through the rules configuration8.2CNA v4.00.4%2025-03-18Fix
CVE-2025-2495Stored cross-site scripting (XSS) vulnerability in Softdial Contact Center5.4v3.10.2%2025-03-18
CVE-2025-2494Unrestricted file upload vulnerability in Softdial Contact Center9.8v3.10.6%2025-03-18
CVE-2025-2493Path traversal vulnerability in Softdial Contact Center7.5v3.10.5%2025-03-18
CVE-2025-2491Dromara Ujcms Edit template file Page WebFileTemplateController.java update cross-site scripting5.4v3.10.3%2025-03-18
CVE-2025-2490Dromara Ujcms file upload WebFileUploadController.java upload cross-site scripting5.4v3.10.3%2025-03-18
CVE-2025-2489Insecure storage of sensitive information in NTFS Tool6.8CNA v4.00.2%2025-03-18
CVE-2025-2487Red Hat Directory Server 389-ds-base: Null pointer dereference leads to denial of service4.9CNA v3.10.6%2025-03-18Fix
CVE-2025-2473PHPGurukul Company Visitor Management System Sign in index.php SQL injection9.8v3.12.4%2025-03-18Nuclei
CVE-2025-2472PHPGurukul Apartment Visitors Management System Sign in index.php SQL injection9.8v3.10.5%2025-03-18
CVE-2025-2471PHPGurukul Boat Booking System boat-details.php SQL injection8.8v3.10.4%2025-03-18
CVE-2025-2450NI Vision Builder AI VBAI File Processing Missing Warning remote code execution8.8v3.10.5%2025-03-18
CVE-2025-2449NI FlexLogger usiReg URI File Parsing directory traversal remote code execution8.8v3.133.7%2025-03-18
CVE-2025-2262Logo Slider WordPress plugin unauthenticated arbitrary shortcode execution7.3CNA v3.10.5%2025-03-18Fix
CVE-2025-1468CODESYS Control V3 OPC UA server authentication bypass7.5CNA v3.10.6%2025-03-18Fix
CVE-2025-0755MongoDB C driver bson library may be susceptible to buffer overflow8.4CNA v3.10.8%2025-03-18Fix
CVE-2025-0694CODESYS Control V3 removable media path traversal6.6CNA v3.10.3%2025-03-18Fix
CVE-2025-30143Akamai App and API Protector cross-site scripting5.4CNA v3.10.2%2025-03-17Fix
CVE-2025-30089gurk (aka gurk-rs) mishandles ANSI escape sequences5.4CNA v3.10.3%2025-03-17
CVE-2025-29913CryptoLib's Crypto_TC_Prep_AAD has buffer overflow due to integer underflow8.9CNA v4.00.7%2025-03-17
CVE-2025-29912CryptoLib has heap buffer overflow due to Unsigned integer underflow in Crypto_TC_ProcessSecurity8.9CNA v4.01.1%2025-03-17
CVE-2025-29911CryptoLib has heap buffer overflow in Crypto_AOS_ProcessSecurity function8.9CNA v4.00.7%2025-03-17
CVE-2025-29910CryptoLib's crypto_handle_incrementing_nontransmitted_counter function has memory leak5.5CNA v4.00.5%2025-03-17
CVE-2025-29909CryptoLib's Crypto_TC_ApplySecurity has a heap buffer overflow8.9CNA v4.01.1%2025-03-17
CVE-2025-29788Sylius PayPal Plugin Payment Amount Manipulation vulnerability6.5CNA v3.10.5%2025-03-17Fix
CVE-2025-29787zip-rs zip archive extraction path traversal7.3CNA v4.00.6%2025-03-17Fix
CVE-2025-29786Memory exhaustion in Expr parser with Unrestricted Input7.5CNA v3.10.6%2025-03-17Fix
CVE-2025-29781metal3-io Bare Metal Operator BMCEventSubscription information disclosure6.5CNA v3.10.2%2025-03-17Fix
CVE-2025-29431code-projects Online Class and Exam Scheduling System cross-site scripting3.2CISA ADP v3.10.2%2025-03-17
CVE-2025-29430Fabian Online Class and Exam Scheduling System cross-site scripting4.1CISA ADP v3.10.3%2025-03-17
CVE-2025-29429Fabian Online Class and Exam Scheduling System cross-site scripting6.1CISA ADP v3.10.3%2025-03-17
CVE-2025-29427Fabian Online Class and Exam Scheduling System cross-site scripting5.9CISA ADP v3.10.3%2025-03-17
CVE-2025-29426code-projects Online Class and Exam Scheduling System cross-site scripting4.6CISA ADP v3.10.2%2025-03-17
CVE-2025-29425Fabian Online Class and Exam Scheduling System SQL injection5.5CISA ADP v3.10.2%2025-03-17
CVE-2025-27512Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy` and `FinalizeDeployment` methods2.1CNA v4.00.2%2025-03-17Fix
CVE-2025-27102Agate vulnerable to HTML injection in user signup Administrator phishing risk5.4CNA v4.00.5%2025-03-17Fix
CVE-2025-26393SolarWinds Service Desk broken access control5.4CNA v3.10.3%2025-03-17Fix
CVE-2025-26127FileCloud Send for Approval function stored cross-site scripting5.0CISA ADP v3.10.2%2025-03-17
CVE-2025-26125IObit Malware Fighter IMFForceDelete driver ioctl vulnerability7.3CISA ADP v3.10.5%2025-03-17Exploit code
CVE-2025-26042Uptime Kuma notification regular expression denial of service6.0CISA ADP v3.10.4%2025-03-17Fix
CVE-2025-25914Carmelo Online Exam Mastering System SQL injection9.8CISA ADP v3.10.8%2025-03-17
CVE-2025-25685GL-iNet Beryl AX GL-MT3000 Samba share handling path traversal7.5CISA ADP v3.10.5%2025-03-17
CVE-2025-25684GL-iNet Beryl AX GL-MT3000 download endpoint path traversal7.5CISA ADP v3.10.5%2025-03-17
CVE-2025-25650Dorset DG 201 Digital Lock NFC card storage insufficiently protected credentials9.1CISA ADP v3.10.9%2025-03-17Exploit code
CVE-2025-25621changeweb Unifiedtransform improper access control4.3CISA ADP v3.10.4%2025-03-17
CVE-2025-25618changeweb Unifiedtransform privilege escalation3.3CISA ADP v3.10.5%2025-03-17
CVE-2025-25612FS S3150-8T2F time range configuration vulnerability7.1CISA ADP v3.11.0%2025-03-17
CVE-2025-24185Apple macOS out-of-bounds write5.5CISA ADP v3.10.2%2025-03-17Fix
CVE-2025-22474Dell SmartFabric OS10 Software server-side request forgery6.8CNA v3.10.4%2025-03-17Fix
CVE-2025-22473Dell SmartFabric OS10 Software command injection7.8CNA v3.10.7%2025-03-17Fix
CVE-2025-22472Dell SmartFabric OS10 Software command injection7.8CNA v3.10.8%2025-03-17Fix
CVE-2025-2420猫宁i Morning cross-site request forgery5.3CNA v4.00.3%2025-03-17
CVE-2025-2419code-projects Real Estate Property Management System InsertFeedback.php SQL injection7.5v3.10.4%2025-03-17
CVE-2025-2401Buffer overflow in Immunity Debugger5.4CNA v4.00.2%2025-03-17
CVE-2025-2398China Mobile P22g-CIac CLI su command default credentials8.6CNA v4.00.6%2025-03-17
CVE-2025-2397China Mobile P22g-CIac Telnet service improper authorization4.8CNA v4.00.2%2025-03-17
CVE-2025-2396e-Excellence U-Office Force arbitrary file upload8.8CNA v3.10.7%2025-03-17Fix
CVE-2025-2395e-Excellence U-Office Force improper authentication9.8CNA v3.10.6%2025-03-17Fix
CVE-2025-2393code-projects Online Class and Exam Scheduling System salut_del.php SQL injection5.1CNA v4.00.4%2025-03-17
CVE-2025-2392code-projects Online Class and Exam Scheduling System activate.php SQL injection7.2v3.10.5%2025-03-17
CVE-2025-2391code-projects Blood Bank Management System Admin Login page admin_login.php SQL injection9.8v3.10.6%2025-03-17
CVE-2025-2390code-projects Blood Bank Management System add_donor.php SQL injection5.3CNA v4.00.4%2025-03-17
CVE-2025-2389code-projects Blood Bank Management System add_city.php SQL injection7.2v3.10.5%2025-03-17
CVE-2025-2388Keytop 路内停车收费系统 API getParks improper authentication6.9CNA v4.00.5%2025-03-17
CVE-2025-2387SourceCodester Online Food Ordering System ajax.php SQL injection9.8v3.10.5%2025-03-17
CVE-2025-2386PHPGurukul Local Services Search Engine Management System serviceman-search.php SQL injection9.8v3.10.5%2025-03-17
CVE-2025-2385code-projects Modern Bag login.php SQL injection9.8v3.10.5%2025-03-17
CVE-2025-2384code-projects Real Estate Property Management System Parameter InsertCustomer.php SQL injection7.5v3.10.4%2025-03-17
CVE-2025-2383PHPGurukul Doctor Appointment Management System search.php SQL injection9.8v3.10.5%2025-03-17
CVE-2025-2382PHPGurukul Online Banquet Booking System booking-search.php SQL injection9.8v3.10.5%2025-03-17
CVE-2025-2381PHPGurukul Curfew e-Pass Management System search-pass.php SQL injection9.8v3.10.5%2025-03-17
CVE-2025-2380PHPGurukul Apartment Visitors Management System admin-profile.php SQL injection9.8v3.10.5%2025-03-17
CVE-2025-2379PHPGurukul Apartment Visitors Management System create-pass.php SQL injection9.8v3.10.5%2025-03-17
CVE-2025-2378PHPGurukul Medical Card Generation System download-medical-cards.php SQL injection6.9CNA v4.00.6%2025-03-17
CVE-2025-2377SourceCodester Vehicle Management System confirmbooking.php cross-site scripting5.4v3.10.5%2025-03-17
CVE-2025-2376viames Pair Framework PHP Object UserRemember.php getCookieContent deserialization6.9CNA v4.00.5%2025-03-17
CVE-2025-2375PHPGurukul Human Metapneumovirus Testing Management System Admin Profile Page cross-site scripting5.4v3.10.4%2025-03-17
CVE-2025-2374PHPGurukul Human Metapneumovirus Testing Management System profile.php SQL injection8.8v3.10.4%2025-03-17
CVE-2025-2373PHPGurukul Human Metapneumovirus Testing Management System check_availability.php SQL injection8.8v3.10.4%2025-03-17
CVE-2025-2372PHPGurukul Human Metapneumovirus Testing Management System Password Recovery Page SQL injection9.8v3.10.5%2025-03-17
CVE-2025-2371PHPGurukul Human Metapneumovirus Testing Management System cross-site scripting5.4v3.10.4%2025-03-17
CVE-2025-2370TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig stack-based overflow9.8v3.11.1%2025-03-17
CVE-2025-2369TOTOLINK EX1800T cstecgi.cgi setPasswordCfg stack-based overflow9.8v3.11.1%2025-03-17
CVE-2025-2368WebAssembly wabt Malformed file binary-reader-interp.cc OnExport heap-based overflow8.8v3.10.6%2025-03-17
CVE-2025-2367Oiwtech OIW-2431APGN-HP Personal Script Submenu formScript os command injection5.3CNA v4.01.4%2025-03-17
CVE-2025-2366gougucms Add Department page add cross-site scripting4.8CNA v4.00.3%2025-03-17
CVE-2025-2365crmeb_java WeChatMessageController.java webHook XML external entity reference5.3CNA v4.00.4%2025-03-17
CVE-2025-2364lenve VBlog ArticleService.java addNewArticle cross-site scripting5.4v3.10.3%2025-03-17
CVE-2025-2363lenve VBlog ArticleController.java uploadImg path traversal9.8v3.10.6%2025-03-17
CVE-2025-2362PHPGurukul Pre-School Enrollment System contact-us.php SQL injection9.8v3.10.5%2025-03-17
CVE-2025-2361Mercurial SCM web interface cross-site scripting5.3CNA v4.00.5%2025-03-17Fix
CVE-2025-2360D-Link DIR-823G UPnP Service HNAP1 SetUpnpSettings improper authorization9.8v3.14.1%2025-03-17Emerging Threats
CVE-2025-2359D-Link DIR-823G DDNS Service HNAP1 SetDDNSSettings improper authorization9.8v3.115.4%2025-03-17Emerging Threats
CVE-2025-2358Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System SQL injection5.3CNA v4.00.3%2025-03-17
CVE-2025-2357DCMTK dcmjpls JPEG-LS Decoder memory corruption5.3CNA v4.00.4%2025-03-17Fix
CVE-2025-2356BlackVue App API deviceDelete get request method with sensitive query strings6.3CNA v4.00.4%2025-03-17
CVE-2025-2355BlackVue App API endpoint credentials storage4.8CNA v4.00.2%2025-03-17
CVE-2025-2354VAM Virtual Airlines Manager index.php cross-site scripting5.3CNA v4.00.4%2025-03-17
CVE-2025-2353VAM Virtual Airlines Manager HTTP GET parameter index.php SQL injection6.9CNA v4.00.4%2025-03-17
CVE-2025-2241Red Hat Multicluster Engine for Kubernetes Hive ClusterProvision object information disclosure8.2CNA v3.10.5%2025-03-17
CVE-2025-2202Innovación y Cualificación ajax.php plugin missing authorization6.9CNA v4.00.4%2025-03-17
CVE-2025-2201Broken access control vulnerability in the Innovación y Cualificación IcProgreso plugin6.9CNA v4.00.4%2025-03-17
CVE-2025-2200SQL injection vulnerability in the Innovación y Cualificación IcProgreso plugin9.3CNA v4.00.3%2025-03-17
CVE-2025-2199SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php9.3CNA v4.00.3%2025-03-17
CVE-2025-1774NASK-PIB BotSense event logging vulnerability6.3CNA v4.00.5%2025-03-17Fix
CVE-2025-1724Zoho Analytics Plus account takeover7.4CNA v3.11.3%2025-03-17Fix
CVE-2025-1398Mattermost macOS TCC Bypass via code injection3.3CNA v3.10.2%2025-03-17Fix
CVE-2025-0833Dassault Systèmes ENOVIA Collaborative Industry Innovator stored cross-site scripting8.7CNA v3.10.2%2025-03-17
CVE-2025-0832Dassault Systèmes ENOVIA Collaborative Industry Innovator Project Gantt stored cross-site scripting8.7CNA v3.10.2%2025-03-17
CVE-2025-0830Dassault Systèmes ENOVIA Change Manager Meeting Management stored cross-site scripting8.7CNA v3.10.2%2025-03-17
CVE-2025-0829Dassault Systèmes ENOVIA Collaborative Industry Innovator 3D Markup stored cross-site scripting8.7CNA v3.10.2%2025-03-17
CVE-2025-0828Dassault Systèmes ENOVIA Product Engineering Specialist stored cross-site scripting8.7CNA v3.10.2%2025-03-17
CVE-2025-0827Dassault Systèmes 3DSwymer 3DPlay stored cross-site scripting8.7CNA v3.10.3%2025-03-17
CVE-2025-0826Dassault Systèmes ENOVIA Collaborative Industry Innovator 3D Navigate stored cross-site scripting8.7CNA v3.10.2%2025-03-17
CVE-2025-0601Dassault Systèmes ENOVIA Collaborative Industry Innovator stored cross-site scripting8.7CNA v3.10.2%2025-03-17
CVE-2025-0600Dassault Systèmes ENOVIA Collaborative Industry Innovator stored cross-site scripting8.7CNA v3.10.2%2025-03-17
CVE-2025-0599Dassault Systèmes ENOVIA Collaborative Industry Innovator stored cross-site scripting8.7CNA v3.10.2%2025-03-17
CVE-2025-0598Dassault Systèmes ENOVIA Collaborative Industry Innovator Relations stored cross-site scripting8.7CNA v3.10.2%2025-03-17
CVE-2025-0596Dassault Systèmes ENOVIA Collaborative Industry Innovator stored cross-site scripting8.7CNA v3.10.2%2025-03-17
CVE-2025-0595Dassault Systèmes 3DSwymer 3DDashboard stored cross-site scripting8.7CNA v3.10.3%2025-03-17
CVE-2025-0495Secrets leakage to telemetry endpoint via cache backend configuration via buildx4.1CNA v4.00.2%2025-03-17Fix
CVE-2025-30077onos-lib-go allows an index out-of-range panic6.2CNA v3.10.2%2025-03-16
CVE-2025-30076Koha OS command injection7.7CNA v3.10.4%2025-03-16Fix
CVE-2025-30074Parallels Desktop incorrect authorization7.8CNA v3.10.1%2025-03-16Fix
CVE-2025-24856TYPO3-EXT-SA-2025-001: Account takeover in extension OpenID Connect Authentication (oidc)4.2CNA v3.10.2%2025-03-16Fix
CVE-2025-2352StarSea99 starsea-mall Backend save cross-site scripting5.4v3.10.3%2025-03-16
CVE-2025-2351DayCloud StudentManage Login endpoint adminScoreUrl SQL injection6.9CNA v4.00.4%2025-03-16
CVE-2025-2350IROAD Dash Cam FX2 upload_file unrestricted upload7.8v3.10.3%2025-03-16
CVE-2025-2349IROAD Dash Cam FX2 Password Hash passwd weak password hash4.7v3.10.2%2025-03-16
CVE-2025-2348IROAD Dash Cam FX2 HTTP/RTSP event information disclosure5.5v3.10.2%2025-03-16
CVE-2025-2347IROAD Dash Cam FX2 Device Registration default password7.8v3.10.2%2025-03-16
CVE-2025-2346IROAD Dash Cam X5/Dash Cam X6 Domain origin validation6.3CNA v4.00.2%2025-03-16
CVE-2025-2345IROAD Dash Cam X5/Dash Cam X6 improper authorization9.3CNA v4.00.7%2025-03-16
CVE-2025-2344IROAD Dash Cam X5/Dash Cam X6 API endpoint missing authentication6.9CNA v4.00.5%2025-03-16
CVE-2025-2343IROAD Dash Cam X5/Dash Cam X6 Device Pairing hard-coded credentials7.7CNA v4.00.4%2025-03-16
CVE-2025-2342IROAD X5 Mobile App API endpoint hard-coded credentials6.9CNA v4.00.4%2025-03-16
CVE-2025-2341IROAD Dash Cam X5 SSID default credentials2.3CNA v4.00.3%2025-03-16
CVE-2025-2340otale Tale Blog Site settings save saveOptions cross-site scripting4.8v3.10.4%2025-03-16
CVE-2025-2339otale Tale Blog logs improper authentication7.5v3.10.9%2025-03-16
CVE-2025-2338tbeu matio io.c strdup_vprintf heap-based overflow8.1v3.10.6%2025-03-16Fix
CVE-2025-2337tbeu matio mat.c Mat_VarPrint heap-based overflow8.1v3.10.6%2025-03-16Fix
CVE-2025-2335Drivin Soluções API registerSchool cross-site scripting5.1CNA v4.00.3%2025-03-16
CVE-2025-1624GDPR Cookie Compliance WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-03-16Fix
CVE-2025-1623GDPR Cookie Compliance WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-03-16Fix
CVE-2025-1622GDPR Cookie Compliance WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.2%2025-03-16Fix
CVE-2025-1621GDPR Cookie Compliance WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-03-16Fix
CVE-2025-1620GDPR Cookie Compliance WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-03-16Fix
CVE-2025-1619GDPR Cookie Compliance WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-03-16Fix
CVE-2025-30066Tj-actions/changed-files GitHub action embedded malicious code8.6NVD v3.172.1%2025-03-15KEVExploit codeFix
CVE-2025-27281All In Menu WordPress plugin SQL injection8.5CNA v3.10.3%2025-03-15
CVE-2025-26978FS Poster WordPress plugin SQL injection8.5CNA v3.10.3%2025-03-15Fix
CVE-2025-26976PrivateContent WordPress plugin SQL injection8.5CNA v3.10.3%2025-03-15
CVE-2025-26972PrivateContent WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-15
CVE-2025-26969PrivateContent WordPress plugin Subscriber+ site Wide broken access control8.3CNA v3.10.3%2025-03-15
CVE-2025-26961Fresh Framework WordPress plugin unauthenticated broken access control8.6CNA v3.10.3%2025-03-15
CVE-2025-26940Pie Register Premium WordPress plugin path traversal to Non-arbitrary file deletion6.3CNA v3.10.4%2025-03-15Fix
CVE-2025-26924Ohio Theme Extra WordPress plugin shortcode injection6.5CNA v3.10.3%2025-03-15
CVE-2025-26921Booking and Rental Manager WordPress plugin PHP object injection8.8CNA v3.10.5%2025-03-15Fix
CVE-2025-26899Recapture for WooCommerce WordPress plugin CSRF to settings Change6.5CNA v3.10.2%2025-03-15Fix
CVE-2025-26895m1.DownloadList WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-03-15Fix
CVE-2025-26886PublishPress Authors WordPress plugin SQL injection7.6CNA v3.10.4%2025-03-15Fix
CVE-2025-26875Multiple Shipping And Billing Address For Woocommerce WordPress plugin SQL injection9.3CNA v3.10.4%2025-03-15Fix
CVE-2025-26556WP AntiDDOS WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-15
CVE-2025-26555Debug-Bar-Extender WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-15
CVE-2025-26554WP Discord Post WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-15
CVE-2025-26553Pre Order Addon for WooCommerce WordPress plugin reflected cross-site scripting7.1CNA v3.10.2%2025-03-15
CVE-2025-26548Random Image Selector WordPress plugin reflected cross-site scripting7.1CNA v3.10.2%2025-03-15
CVE-2025-25225Extension Hikashop.com privilege escalation vulnerability Hikashop component for Joomla6.5CISA ADP v3.10.2%2025-03-15
CVE-2025-23744Random Posts, Mp3 Player + ShareButton WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-15
CVE-2025-2334274056675 springboot-openai-chatgpt Chat History chat deleteChat access control9.1v3.10.6%2025-03-15
CVE-2025-2325WP Test Email WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.3%2025-03-15Fix
CVE-2025-2323springboot-openai-chatgpt Number of Question handler improper workflow enforcement5.3CNA v4.00.5%2025-03-15
CVE-2025-2322274056675 springboot-openai-chatgpt OpenController.java hard-coded credentials9.8v3.10.7%2025-03-15
CVE-2025-2321274056675 springboot-openai-chatgpt addData logic error6.5v3.10.4%2025-03-15
CVE-2025-2267WP01 Speed, Security, SEO consultant WordPress plugin arbitrary file download6.5v3.10.3%2025-03-15
CVE-2025-2164pixelstats WordPress plugin reflected cross-site scripting6.1v3.10.3%2025-03-15
CVE-2025-2163Zoorum Comments WordPress plugin cross-site request forgery to stored cross-site scripting5.4v3.10.2%2025-03-15
CVE-2025-2157Foreman: Disclosure of executed commands and outputs in foreman / Red Hat satellite3.3CNA v3.10.2%2025-03-15
CVE-2025-2025GiveWP WordPress plugin unauthorized access7.5v3.10.6%2025-03-15Fix
CVE-2025-1773Traveler WordPress theme reflected cross-site scripting6.1v3.10.2%2025-03-15Fix
CVE-2025-1771Traveler WordPress theme unauthenticated local file inclusion via hotel_alone_load_more_post9.8CNA v3.10.7%2025-03-15Fix
CVE-2025-1670School Management System WPSchoolPress WordPress plugin authenticated (Parent+) SQL injection6.5v3.10.4%2025-03-15Fix
CVE-2025-1669School Management System WPSchoolPress WordPress plugin authenticated (Teacher+) SQL injection6.5v3.10.4%2025-03-15Fix
CVE-2025-1668jdsofttech WPSchoolPress user deletion function missing authorization5.4v3.10.3%2025-03-15Fix
CVE-2025-1667School Management System WPSchoolPress WordPress plugin missing authorization privilege escalation4.3NVD v3.10.4%2025-03-15Fix
CVE-2025-1657Directory Listings WordPress plugin WordPress plugin unauthorized access8.8v3.10.4%2025-03-15
CVE-2025-1653Directory Listings WordPress plugin uListing authenticated (Subscriber+) privilege escalation8.8CNA v3.10.5%2025-03-15
CVE-2025-1530Tripetto WordPress plugin cross-site request forgery to arbitrary Results deletion4.3v3.10.2%2025-03-15Fix
CVE-2025-1057Keylime registrar incorrect type conversion4.3CNA v3.10.4%2025-03-15Fix
CVE-2025-30022Cmsol Auto Atendimento SQL injection6.8CISA ADP v3.10.3%2025-03-14
CVE-2025-29782WeGIA cross-site scripting Stored in endpoint `adicionar_tipo_docs_atendido.php` parameter `tipo`6.4CNA v4.00.3%2025-03-14Fix
CVE-2025-29780DavidOsipov PostQuantum-Feldman-VSS matrix operations timing side-channel5.8CNA v4.00.2%2025-03-14
CVE-2025-29779DavidOsipov PostQuantum-Feldman-VSS secure_redundant_execution function vulnerability5.4CNA v4.00.2%2025-03-14
CVE-2025-29776Azle calling `setTimer` causes infinite loop of timers8.7CNA v4.00.4%2025-03-14Fix
CVE-2025-29775xml-crypto vulnerable to XML signature verification Bypass via DigestValue Comment9.3CNA v4.09.5%2025-03-14Emerging ThreatsExploit codeFix
CVE-2025-29774xml-crypto vulnerable to XML signature verification Bypass via multiple SignedInfo References9.3CNA v4.09.1%2025-03-14Emerging ThreatsFix
CVE-2025-29771HtmlSanitizer vulnerable to XSS when used with contentEditable5.3CNA v4.00.4%2025-03-14Fix
CVE-2025-29387Tenda AC9 stack-based buffer overflow7.1v3.10.6%2025-03-14
CVE-2025-29386Tenda AC9 out-of-bounds write9.8v3.10.9%2025-03-14
CVE-2025-29385Tenda AC9 out-of-bounds write9.8v3.10.9%2025-03-14
CVE-2025-29384Tenda AC9 out-of-bounds write9.8v3.11.9%2025-03-14Exploit code
CVE-2025-29032Tendacn AC9 buffer overflow5.9CISA ADP v3.14.2%2025-03-14Emerging Threats
CVE-2025-29031Tenda AC6 out-of-bounds write9.8v3.10.5%2025-03-14
CVE-2025-29030Tenda AC6 out-of-bounds write9.8v3.10.5%2025-03-14
CVE-2025-29029Tenda AC6 out-of-bounds write9.8v3.10.5%2025-03-14
CVE-2025-27606Element Android PIN autologout bypass5.1CNA v3.10.2%2025-03-14Fix
CVE-2025-27595SICK DL100-2xxxxxxx weak hashing alghrythm9.8CNA v3.10.5%2025-03-14
CVE-2025-27594SICK DL100-2xxxxxxx unencrypted transmission of password hash7.5CNA v3.10.4%2025-03-14
CVE-2025-27593SICK DL100-2xxxxxxx RCE due to Device driver9.3CNA v3.10.4%2025-03-14
CVE-2025-26626glpi-project glpi-inventory-plugin cross-site scripting6.5CNA v3.10.3%2025-03-14Fix
CVE-2025-26312SendQuick Entera web parameter tampering5.3CNA v4.00.3%2025-03-14Fix
CVE-2025-26163Cmsol Auto Atendimento SQL injection9.8CISA ADP v3.10.5%2025-03-14
CVE-2025-25873Openpanel Openadmin cross-site request forgery5.5CISA ADP v3.10.2%2025-03-14
CVE-2025-25872openpanel improper privilege management5.5CISA ADP v3.10.3%2025-03-14
CVE-2025-25871openpanel improper preservation of permissions8.0CISA ADP v3.10.4%2025-03-14
CVE-2025-24855libxml2 libxslt use-after-free7.8v3.10.4%2025-03-14Fix
CVE-2025-2320274056675 springboot-openai-chatgpt User submit improper authorization9.8v3.10.7%2025-03-14
CVE-2025-2310HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow7.8v3.10.4%2025-03-14Fix
CVE-2025-2309HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow7.8v3.10.4%2025-03-14Fix
CVE-2025-2308HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow7.8v3.10.4%2025-03-14Fix
CVE-2025-2304owen2345 CamaleonCMS camaleon CMS privilege escalation9.4CNA v4.00.6%2025-03-14Exploit codeFix
CVE-2025-2295TianoCore edk2 potential iSCSI R2T PDU vulnerability3.5CNA v3.10.2%2025-03-14Fix
CVE-2025-2289Zegen - Church WordPress theme missing authorization authenticated theme options Updates8.8v3.10.3%2025-03-14
CVE-2025-2268HP LaserJet MFP M232-M237 Printer Series potential denial of service6.9CNA v4.00.5%2025-03-14Fix
CVE-2025-2232Realteo - Real Estate Plugin by Purethemes WordPress plugin authentication bypass9.8CNA v3.10.5%2025-03-14Fix
CVE-2025-2221WPCOM Member WordPress plugin unauthenticated time-based SQL injection7.5v3.11.7%2025-03-14NucleiFix
CVE-2025-2166CM FAQ WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-03-14Fix
CVE-2025-2103SoundRise Music WordPress plugin authenticated (Subscriber+) arbitrary options update8.8v3.10.3%2025-03-14Fix
CVE-2025-2056WP Ghost WordPress plugin unauthenticated limited file read7.5CNA v3.10.6%2025-03-14Fix
CVE-2025-2000IBM Qiskit SDK code execution9.8CNA v3.10.8%2025-03-14Fix
CVE-2025-1888Reflected cross-site scripting in Aperio Eslide Manager4.6CNA v3.10.2%2025-03-14
CVE-2025-1764LoginPress WordPress plugin cross-site request forgery to arbitrary options update7.5CNA v3.10.2%2025-03-14Fix
CVE-2025-1528Search and filter pro WordPress plugin missing authorization authenticated post Meta exposure4.3CNA v3.10.3%2025-03-14Fix
CVE-2025-1526DethemeKit for Elementor WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-03-14Fix
CVE-2025-1507ShareThis Dashboard for Google Analytics WordPress plugin unauthorized access5.3CNA v3.10.3%2025-03-14Fix
CVE-2025-1285Resido WordPress theme unauthorized access5.3CNA v3.10.3%2025-03-14Fix
CVE-2025-0955VidoRev Extensions WordPress plugin missing authorization to unauthenticated Youtube Video import5.3CNA v3.10.3%2025-03-14Fix
CVE-2025-0952Eco Nature WordPress theme unauthorized access8.1CNA v3.10.3%2025-03-14Fix
CVE-2025-29998Rising Technosoft CAP back office application OTP request endpoint vulnerability8.2CNA v4.00.4%2025-03-13Fix
CVE-2025-29997Improper access control vulnerability in CAP back office application8.2CNA v4.00.4%2025-03-13Fix
CVE-2025-29996Authentication bypass vulnerability in CAP back office application8.2CNA v4.00.4%2025-03-13Fix
CVE-2025-29995Account takeover vulnerability in CAP back office application8.3CNA v4.00.4%2025-03-13Fix
CVE-2025-29994Improper authentication vulnerability in CAP back office application8.2CNA v4.00.4%2025-03-13Fix
CVE-2025-29773Froxlor account creation improper authentication5.8CNA v3.10.3%2025-03-13Fix
CVE-2025-29768Vim vulnerable to potential data loss with zip.Vim and special crafted zip files4.4CNA v3.10.4%2025-03-13Fix
CVE-2025-29363Tenda RX3 buffer overflow7.5CISA ADP v3.10.5%2025-03-13
CVE-2025-29362Tenda RX3 buffer overflow7.5CISA ADP v3.10.5%2025-03-13
CVE-2025-29361Tenda RX3 buffer overflow7.5CISA ADP v3.10.8%2025-03-13Emerging Threats
CVE-2025-29360Tenda RX3 buffer overflow7.5CISA ADP v3.10.5%2025-03-13
CVE-2025-29359Tenda RX3 buffer overflow7.5CISA ADP v3.10.5%2025-03-13
CVE-2025-29358Tenda RX3 buffer overflow7.5CISA ADP v3.10.8%2025-03-13Emerging Threats
CVE-2025-29357Tenda RX3 improper resource release7.5CISA ADP v3.10.5%2025-03-13
CVE-2025-28015PHPGurukul User Registration and Login and User Management System cross-site scripting5.3CISA ADP v3.10.3%2025-03-13
CVE-2025-28011PHPGurukul User Registration and Login and User Management System SQL injection6.1CISA ADP v3.10.3%2025-03-13
CVE-2025-28010Modx allows cross-site scripting (XSS) via an SVG file5.4CISA ADP v3.10.3%2025-03-13
CVE-2025-27496Snowflake JDBC driver client-side encryption key in DEBUG logs3.3CNA v3.10.1%2025-03-13Fix
CVE-2025-27138DataEase has an improper authentication7.7CNA v4.00.6%2025-03-13Fix
CVE-2025-27107CyclopsMC IntegratedScripting integrated Scripting vulnerable to arbitrary code execution8.6CNA v4.00.5%2025-03-13Fix
CVE-2025-27103Dataease Mysql JDBC Connection parameters not being Verified leads to arbitrary file read7.3CNA v4.00.4%2025-03-13Fix
CVE-2025-25625Fs S3150-8t2f FS model stored cross-site scripting5.4CISA ADP v3.10.2%2025-03-13
CVE-2025-25598Inovalogic Customer Monitor privilege escalation8.8CISA ADP v3.10.4%2025-03-13
CVE-2025-25363Thepluginpeople Enterprise Mail Handler stored cross-site scripting6.5CISA ADP v3.10.2%2025-03-13Fix
CVE-2025-25175Siemens Simcenter Femap V2401 memory corruption7.3CNA v4.00.2%2025-03-13Fix
CVE-2025-24974DataEase Mysql JDBC Connection parameters not being Verified leads to arbitrary file read7.3CNA v4.00.4%2025-03-13Fix
CVE-2025-24053Microsoft Dataverse elevation of privilege7.2CNA v3.10.7%2025-03-13Fix
CVE-2025-21104Dell NetWorker open redirect4.3CNA v3.10.3%2025-03-13Fix
CVE-2025-2284Santesoft Sante PACS Server access of uninitialized pointer DoS7.5CNA v3.16.2%2025-03-13
CVE-2025-2280Devolutions Server web extension restriction feature improper access control8.1CISA ADP v3.10.5%2025-03-13Fix
CVE-2025-2278Devolutions Server improper access control6.5CISA ADP v3.10.4%2025-03-13Fix
CVE-2025-2277Devolutions Server information disclosure7.5CISA ADP v3.10.5%2025-03-13Fix
CVE-2025-2271IDOR in Issuetrak NewAuditID parameter via Inv_PopTrakXShow.asp7.7CNA v3.10.3%2025-03-13
CVE-2025-2265Santesoft Sante PACS Server HTTP.db SHA1 Hash Truncation7.8CNA v3.10.1%2025-03-13
CVE-2025-2264Santesoft Sante PACS Server path traversal information disclosure7.5NVD v3.135.4%2025-03-13NucleiMetasploit
CVE-2025-2263Santesoft Sante PACS Server stack-based buffer overflow9.8NVD v3.10.9%2025-03-13
CVE-2025-2250WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins plugin SQL injection4.9CNA v3.10.4%2025-03-13Fix
CVE-2025-2230Philips Intellispace Cardiovascular (ISCV) improper authentication8.5CNA v4.00.2%2025-03-13Fix
CVE-2025-2229Philips Intellispace Cardiovascular (ISCV) use of weak credentials8.5CNA v4.00.1%2025-03-13Fix
CVE-2025-2107Arielbrailovsky-Viralad WordPress plugin unauthenticated SQL injection7.5CNA v3.10.4%2025-03-13
CVE-2025-2106Arielbrailovsky-Viralad WordPress plugin unauthenticated SQL injection7.5CNA v3.10.4%2025-03-13
CVE-2025-2104Pagelayer missing authorization4.3v3.10.3%2025-03-13Fix
CVE-2025-2081Optigo Networks Visual BACnet Capture Tool use of hard-coded, security-relevant constants8.7CNA v4.00.4%2025-03-13Emerging ThreatsFix
CVE-2025-2080Optigo Networks Visual BACnet Capture Tool web management service authentication bypass9.3CNA v4.00.4%2025-03-13Fix
CVE-2025-2079Optigo Networks Visual BACnet Capture Tool hard-coded credentials8.7CNA v4.00.4%2025-03-13Fix
CVE-2025-1785Download Manager WordPress plugin authenticated (Author+) path traversal to limited file Overwrite8.1v3.10.6%2025-03-13Fix
CVE-2025-1767Kubernetes GitRepo Volume Inadvertent Local Repository Access6.5CNA v3.10.7%2025-03-13Fix
CVE-2025-1652Autodesk AutoCAD MODEL File Parsing out-of-bounds read7.8CNA v3.10.2%2025-03-13Fix
CVE-2025-1651Autodesk AutoCAD MODEL File Parsing heap-based buffer overflow7.8CNA v3.10.2%2025-03-13Fix
CVE-2025-1650Autodesk AutoCAD CATPRODUCT File Parsing uninitialized variable7.8CNA v3.10.2%2025-03-13Fix
CVE-2025-1649Autodesk AutoCAD CATPRODUCT File Parsing uninitialized variable7.8CNA v3.10.2%2025-03-13Fix
CVE-2025-1636Devolutions Remote Desktop Manager information disclosure6.5CISA ADP v3.11.7%2025-03-13Fix
CVE-2025-1635Devolutions Remote Desktop Manager hub data source export feature information disclosure6.5CISA ADP v3.11.7%2025-03-13Fix
CVE-2025-1561AppPresser Mobile App Framework WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.3%2025-03-13Fix
CVE-2025-1559CC-IMG-Shortcode WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-03-13
CVE-2025-1503WP Recipe Maker WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-03-13Fix
CVE-2025-1487WoWPth WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-13
CVE-2025-1486WoWPth WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-13
CVE-2025-1436Rivercitygraphix Limit Bio cross-site request forgery7.1CISA ADP v3.10.2%2025-03-13
CVE-2025-1433Autodesk AutoCAD MODEL File Parsing out-of-bounds read7.8CNA v3.10.2%2025-03-13Fix
CVE-2025-1432Autodesk AutoCAD 3DM File Parsing use-after-free7.8CNA v3.10.3%2025-03-13Fix
CVE-2025-1431Autodesk AutoCAD SLDPRT File Parsing out-of-bounds read7.8CNA v3.10.2%2025-03-13Fix
CVE-2025-1430Autodesk AutoCAD SLDPRT File Parsing memory corruption7.8CNA v3.10.2%2025-03-13Fix
CVE-2025-1429Autodesk AutoCAD MODEL File Parsing heap-based buffer overflow7.8CNA v3.10.2%2025-03-13Fix
CVE-2025-1428Autodesk AutoCAD CATPRODUCT File Parsing out-of-bounds read7.8CNA v3.10.3%2025-03-13Fix
CVE-2025-1427Autodesk AutoCAD CATPRODUCT File Parsing uninitialized variable7.8CNA v3.10.2%2025-03-13Fix
CVE-2025-1401WP Click Info WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-13
CVE-2025-1257Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.5%2025-03-13Fix
CVE-2025-1119Appointment Booking Calendar code injection7.3CNA v3.10.5%2025-03-13Fix
CVE-2025-0652Incorrect authorization in GitLab4.3CNA v3.10.4%2025-03-13Fix
CVE-2025-29904JetBrains Ktor HTTP request smuggling5.3CNA v3.10.3%2025-03-12Fix
CVE-2025-29903JetBrains Runtime untrusted search path5.2CNA v3.10.2%2025-03-12Fix
CVE-2025-29891Apache Camel: Camel message header injection through request parameters4.8CISA ADP v3.176.1%2025-03-12Emerging ThreatsFix
CVE-2025-27915Synacor Zimbra Collaboration Suite (ZCS) cross-site scripting5.4CISA ADP v3.14.1%2025-03-12KEVNucleiFix
CVE-2025-27914Zimbra Collaboration cross-site scripting5.4CISA ADP v3.10.3%2025-03-12Fix
CVE-2025-27867Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin5.6CISA ADP v3.10.6%2025-03-12Fix
CVE-2025-27794Flarum vulnerable to session hijacking via Authoritative Subdomain Cookie Overwrite6.8CNA v3.10.5%2025-03-12Fix
CVE-2025-27788Ruby JSON parser has out-of-bounds read7.5CNA v3.10.7%2025-03-12Fix
CVE-2025-27407rmosolgo graphql-ruby remote code execution when loading a crafted GraphQL schema9.1CNA v3.13.1%2025-03-12Fix
CVE-2025-27017Apache NiFi: Potential Insertion of MongoDB Password in Provenance Record6.9CNA v4.01.3%2025-03-12Fix
CVE-2025-26260Plenti code injection Denial of services8.8CISA ADP v3.10.8%2025-03-12Fix
CVE-2025-25975Prototype pollution vulnerability in Parse-git-config7.5CISA ADP v3.10.5%2025-03-12
CVE-2025-25774Open5GS AMF state machine denial of service6.5CISA ADP v3.10.4%2025-03-12
CVE-2025-25711dtp.ae tNexus Airport View updateUser API endpoint privilege escalation8.8CNA v3.10.4%2025-03-12
CVE-2025-25709An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the addUser and updateUser endpoints7.5CNA v3.10.6%2025-03-12
CVE-2025-25683AlekSIS-Core PDF file access improper access control5.6CISA ADP v3.10.3%2025-03-12
CVE-2025-25568Softether VPN use-after-free9.8CISA ADP v3.10.6%2025-03-12
CVE-2025-25567Softether VPN buffer overflow9.8CISA ADP v3.10.6%2025-03-12
CVE-2025-25566Softether VPN memory leak5.6CISA ADP v3.10.3%2025-03-12
CVE-2025-25565Softether VPN buffer overflow9.8CISA ADP v3.10.6%2025-03-12
CVE-2025-25293Ruby-SAML vulnerable to remote denial of service (DoS) with compressed SAML responses7.7CNA v4.01.5%2025-03-12Fix
CVE-2025-25292Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)9.3CNA v4.065.1%2025-03-12Fix
CVE-2025-25291Ruby-SAML vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)9.3CNA v4.021.0%2025-03-12NucleiEmerging ThreatsFix
CVE-2025-24912w1.fi hostapd RADIUS authentication vulnerability3.7CNA v3.00.8%2025-03-12Fix
CVE-2025-22954Koha lateissues-export.pl SQL injection10.0CNA v3.125.6%2025-03-12Exploit codeFix
CVE-2025-22870HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4CISA ADP v3.10.4%2025-03-12Exploit codeFix
CVE-2025-21866Linux kernel powerpc code patching vulnerability5.5v3.10.2%2025-03-12Fix
CVE-2025-21865Linux kernel GTP tunnel driver out-of-bounds write5.5NVD v3.10.3%2025-03-12Fix
CVE-2025-21864Linux kernel TCP secpath handling vulnerability7.8CNA v3.10.3%2025-03-12Fix
CVE-2025-21863Linux kernel io_uring vulnerability7.8NVD v3.10.3%2025-03-12Fix
CVE-2025-21862Linux kernel drop_monitor vulnerability5.5NVD v3.10.2%2025-03-12Fix
CVE-2025-21861Linux kernel device memory migration use-after-free5.5NVD v3.10.2%2025-03-12Fix
CVE-2025-21860Linux kernel zswap vulnerability3.3v3.10.2%2025-03-12Fix
CVE-2025-21859Linux kernel USB MIDI gadget driver deadlock5.5NVD v3.10.2%2025-03-12Fix
CVE-2025-21858Linux kernel geneve tunnel driver use-after-free7.8CNA v3.10.3%2025-03-12Fix
CVE-2025-21857Linux kernel cls_api null pointer dereference5.5v3.10.2%2025-03-12Fix
CVE-2025-21856Linux kernel s390 ISM device driver use-after-free7.8v3.10.2%2025-03-12Fix
CVE-2025-21855Linux kernel ibmvnic use-after-free8.6CNA v3.10.4%2025-03-12Fix
CVE-2025-21854Linux kernel vsock sockmap null pointer dereference5.5v3.10.2%2025-03-12Fix
CVE-2025-21853Linux kernel BPF map mmap handling deadlock5.5NVD v3.10.2%2025-03-12Fix
CVE-2025-21852Linux kernel kfree_skb tracepoint null pointer dereference5.5v3.10.2%2025-03-12Fix
CVE-2025-21851Linux kernel BPF arena allocator denial of service7.8CNA v3.10.2%2025-03-12Fix
CVE-2025-21850Linux kernel NVMe target driver null pointer dereference9.8CNA v3.10.4%2025-03-12Fix
CVE-2025-21849Linux kernel i915 GPU driver deadlock5.5v3.10.2%2025-03-12Fix
CVE-2025-21848Linux kernel NFP BPF driver null pointer dereference5.5NVD v3.10.3%2025-03-12Fix
CVE-2025-21847Linux kernel SOF stream IPC null pointer dereference5.5v3.10.2%2025-03-12Fix
CVE-2025-21846Linux kernel acct null pointer dereference5.5NVD v3.10.3%2025-03-12Fix
CVE-2025-21845Linux kernel SST SPI-NOR flash driver denial of service5.5v3.10.3%2025-03-12Fix
CVE-2025-21844Linux kernel SMB client encrypted transport null pointer dereference7.5CNA v3.10.6%2025-03-12Fix
CVE-2025-21590Juniper Junos OS improper isolation or compartmentalization6.7CNA v4.01.7%2025-03-12KEVFix
CVE-2025-20209Cisco IOS XR Software IKEv2 packet processing resource exhaustion7.5CNA v3.10.5%2025-03-12Fix
CVE-2025-20177Cisco IOS XR Software Image Verification Bypass vulnerability6.7CNA v3.10.2%2025-03-12Fix
CVE-2025-20146Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Routing denial of service8.6CNA v3.10.5%2025-03-12Fix
CVE-2025-20145Cisco IOS XR Software Access Control List Bypass vulnerability5.8CNA v3.10.4%2025-03-12Fix
CVE-2025-20144Cisco IOS XR Software Access Control List Bypass vulnerability4.0CNA v3.10.3%2025-03-12Fix
CVE-2025-20143Cisco IOS XR Software Secure Boot Bypass vulnerability6.7CNA v3.10.1%2025-03-12Fix
CVE-2025-20142Cisco IOS XR Software for ASR 9000 Series Routers L2VPN denial of service8.6CNA v3.10.5%2025-03-12Fix
CVE-2025-20141Cisco IOS XR Software Release denial of service Vulnerabillity7.4CNA v3.10.2%2025-03-12Fix
CVE-2025-20138Cisco IOS XR Software CLI privilege escalation8.8CNA v3.10.2%2025-03-12Fix
CVE-2025-20115Cisco IOS XR Software Border Gateway protocol denial of service8.6CNA v3.10.9%2025-03-12Fix
CVE-2025-2240Red Hat build of Apache Camel smallrye-fault-tolerance: Smallrye fault tolerance7.5CNA v3.11.0%2025-03-12Fix
CVE-2025-2239Absolute path disclosure vulnerability in Hillstone Next Generation FireWall5.3CNA v3.10.4%2025-03-12Fix
CVE-2025-2220Odyssey CMS reCAPTCHA odyssey_contact_form.php key management7.8v3.10.4%2025-03-12
CVE-2025-2219LoveCards LoveCardsV2 image unrestricted upload9.8v3.10.7%2025-03-12
CVE-2025-2218LoveCards LoveCardsV2 setting other access control9.8v3.10.7%2025-03-12
CVE-2025-2217zzskzy Warehouse Refinement Management System getAdyData.ashx ProcessRequest SQL injection9.8v3.10.8%2025-03-12
CVE-2025-2216zzskzy Warehouse Refinement Management System SaveCrash.ashx UploadCrash unrestricted upload9.8v3.10.8%2025-03-12
CVE-2025-2215Doufox s=doudou path traversal5.1CNA v4.00.6%2025-03-12
CVE-2025-2214Microweber settings index.php cross-site scripting6.1v3.10.5%2025-03-12
CVE-2025-2205GDPR Cookie Compliance WordPress plugin authenticated (Admin+) stored cross-site scripting4.8v3.10.4%2025-03-12Fix
CVE-2025-2078BlogBuzzTime for WP WordPress plugin stored cross-site scripting4.8v3.10.2%2025-03-12
CVE-2025-2077Simple Amazon Affiliate WordPress plugin reflected cross-site scripting6.1v3.10.3%2025-03-12
CVE-2025-2076binlayerpress WordPress plugin authenticated (Admin+) stored cross-site scripting4.8v3.10.2%2025-03-12
CVE-2025-2002Schneider Electric EcoStruxure Panel Server sensitive information in log files4.0CNA v4.00.2%2025-03-12Fix
CVE-2025-1984Local privilege escalation on Xerox® Desktop Print Experience®5.2CNA v3.10.1%2025-03-12Fix
CVE-2025-1960Schneider Electric WebHMI insecure default initialization9.8CNA v3.10.5%2025-03-12Fix
CVE-2025-1683Symbolic Link Exploit in 1E Client's Nomad module allows arbitrary file deletion7.8CNA v3.10.2%2025-03-12Fix
CVE-2025-1527ShopLentor WordPress plugin DOM-based cross-site scripting5.4v3.10.3%2025-03-12Fix
CVE-2025-1508WP Crowdfunding WordPress plugin missing authorization authenticated post content download5.3CNA v3.10.4%2025-03-12Fix
CVE-2025-0884Privilege escalation vulnerability has been discovered in OpenText™ Service Manager7.3CNA v4.00.2%2025-03-12
CVE-2025-0883Vulnerability has been discovered in OpenText™ Service Manager2.1CNA v4.00.3%2025-03-12
CVE-2025-0813Schneider Electric EcoStruxure Power Automation System User Interface authentication bypass7.0CNA v4.00.3%2025-03-12Fix
CVE-2025-0118GlobalProtect App: Execution of Unsafe ActiveX Control vulnerability6.0CNA v4.00.5%2025-03-12Fix
CVE-2025-0117GlobalProtect App: Local privilege escalation (PE)7.1CNA v4.00.2%2025-03-12Exploit codeFix
CVE-2025-0116PAN-OS: Firewall denial of service (DoS) using a Specially Crafted LLDP Frame6.8CNA v4.00.2%2025-03-12Fix
CVE-2025-0115PAN-OS: Authenticated Admin File Read vulnerability in PAN-OS CLI6.8CNA v4.00.2%2025-03-12Fix
CVE-2025-0114PAN-OS: Denial of service (DoS) in GlobalProtect8.2CNA v4.00.4%2025-03-12Fix
CVE-2025-28943DP ALTerminator - Missing ALT manager WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-11
CVE-2025-28941Spam Byebye WordPress plugin ohtan cross-site request forgery4.3CNA v3.10.2%2025-03-11
CVE-2025-28940Back To Top WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-11
CVE-2025-28938WP Performance Pack WordPress plugin broken access control4.3CNA v3.10.4%2025-03-11Fix
CVE-2025-28937Lava Ajax Search WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-11
CVE-2025-28936Lunar WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-11
CVE-2025-28933MaxA/B WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-11
CVE-2025-28932Insert Code WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-11
CVE-2025-28931WordPress Hashtags plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-11
CVE-2025-28930List Mixcloud WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-11Fix
CVE-2025-28929Tabbed Login Widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-11
CVE-2025-28927Display Template Name WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-11
CVE-2025-28926Post Read Time WordPress plugin stored cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-11
CVE-2025-28925WATI Chat and Notification WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-11Fix
CVE-2025-28923No Disposable Email WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-11
CVE-2025-28922Go To Top WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-11
CVE-2025-28920Responsive Google Map WordPress plugin broken access control5.3CNA v3.10.3%2025-03-11
CVE-2025-28919Easy Image Display WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-11
CVE-2025-28918Featured Image Thumbnail Grid WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-03-11Fix
CVE-2025-28915ThemeEgg ToolKit WordPress plugin arbitrary file upload9.1CNA v3.11.3%2025-03-11Exploit code
CVE-2025-28914wordpress login form to anywhere plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-11
CVE-2025-28913WP Add Active Class To Menu Item WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-11
CVE-2025-28912Custom Dashboard Page WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-11
CVE-2025-28910WP Hide Admin Bar WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-11
CVE-2025-28909WP No-Bot Question WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-11
CVE-2025-28908pipDisqus WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-11Fix
CVE-2025-28907WP Last Modified WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-03-11
CVE-2025-28906Skitter Slideshow WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.5%2025-03-11Nuclei
CVE-2025-28905Featured Posts Grid WordPress plugin CSRF to stored XSS7.1CNA v3.10.3%2025-03-11
CVE-2025-28902Contact Form 7 Select Box Editor Button WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-11
CVE-2025-28901Members page only for logged in users WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-11
CVE-2025-28900TabGarb Pro WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-11
CVE-2025-28897Domain WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-11
CVE-2025-28896AS English Admin WordPress plugin open redirection4.7CNA v3.10.3%2025-03-11
CVE-2025-28895Custom top bar WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.3%2025-03-11
CVE-2025-28894List of Posts from each Category plugin for WordPress CSRF to stored XSS7.1CNA v3.10.2%2025-03-11
CVE-2025-28892FTP Sync WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-11
CVE-2025-28891price-calc WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-11
CVE-2025-28887Plugins Last Updated Column WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-11Fix
CVE-2025-28886REST API TO MiniProgram WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-11
CVE-2025-28884WP Bulk Post Duplicator WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-11
CVE-2025-28883WP Compare Tables WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-03-11
CVE-2025-28881Mobile Themes WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-03-11
CVE-2025-28879Bee Layer Slider WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-03-11
CVE-2025-28878Awesome Surveys WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2025-03-11
CVE-2025-28876Skrill Official WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2025-03-11Fix
CVE-2025-28875BP Email Assign Templates By shanebp WordPress plugin cross-site scripting4.8v3.10.3%2025-03-11Fix
CVE-2025-28874BP Email Assign Templates By shanebp WordPress plugin arbitrary content deletion vulnerability4.9v3.10.4%2025-03-11Fix
CVE-2025-28872Block Spam By Math Reloaded WordPress plugin broken access control9.8v3.10.5%2025-03-11
CVE-2025-28871Block Spam By Math Reloaded WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2025-03-11
CVE-2025-28870amoCRM WebForm WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-03-11
CVE-2025-28868ZipList Recipe WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2025-03-11
CVE-2025-28867Frontpage category filter WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2025-03-11
CVE-2025-28866Login Logger WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2025-03-11
CVE-2025-28864Builder for Contact Form 7 by Webconstruct WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2025-03-11
CVE-2025-28863Delete Original Image WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2025-03-11
CVE-2025-28862Comment Date and Gravatar remover WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2025-03-11
CVE-2025-28861WP jQuery Persian Datepicker WordPress plugin CSRF to stored XSS6.1NVD v3.10.2%2025-03-11
CVE-2025-28860Google News Editors Picks Feed Generator WordPress plugin CSRF to stored XSS6.1NVD v3.10.2%2025-03-11
CVE-2025-28859Maintenance Notice WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2025-03-11Fix
CVE-2025-28857Rankchecker.io Integration WordPress plugin CSRF to stored cross-site scripting (XSS)6.1NVD v3.10.2%2025-03-11
CVE-2025-28856W3Counter Free Real-Time Web Stats WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2025-03-11
CVE-2025-27912Datalust Seq cross-site request forgery8.8CNA v3.10.2%2025-03-11Fix
CVE-2025-27911Datalust Seq resource exhaustion6.5CNA v3.10.4%2025-03-11Fix
CVE-2025-27893Archer web parameter tampering4.3v3.10.4%2025-03-11Exploit code
CVE-2025-27792Opal vulnerable to CSRF protection bypass7.7CNA v4.00.3%2025-03-11Fix
CVE-2025-27789Babel named capturing group replace polyfill regular expression denial of service6.2CNA v3.10.6%2025-03-11Fix
CVE-2025-27773SimpleSAMLphp SAML2 library has incorrect signature verification for HTTP-Redirect binding8.6CNA v3.10.4%2025-03-11Fix
CVE-2025-27617Pimcore vulnerable to SQL injection in getRelationFilterCondition6.3CNA v4.00.5%2025-03-11Fix
CVE-2025-27602Umbraco allows a Restricted Editor User to Delete Media Item or Access Unauthorized Content4.9CNA v3.10.3%2025-03-11Fix
CVE-2025-27601Umbraco allows Improper API Access Control to Low-Privilege Users to Data Type Functionality4.3CNA v3.10.3%2025-03-11Fix
CVE-2025-27591Below has incorrect permission assignment for critical resource6.8CISA ADP v3.10.4%2025-03-11Exploit codeFix
CVE-2025-27494Siemens SiPass integrated AC5102 (ACC-G2) privilege escalation9.4CNA v4.00.5%2025-03-11Fix
CVE-2025-27493Siemens SiPass integrated AC5102 (ACC-G2) privilege escalation9.3CNA v4.00.2%2025-03-11Fix
CVE-2025-27440Zoom Apps heap-based buffer overflow8.5CNA v3.10.4%2025-03-11Fix
CVE-2025-27439Zoom Apps buffer underflow8.5CNA v3.10.4%2025-03-11Fix
CVE-2025-27438Siemens Teamcenter Visualization out-of-bounds read7.3CNA v4.00.2%2025-03-11Fix
CVE-2025-27436Broken access control vulnerabilities in SAP S/4HANA (Manage Bank Statements)4.3CNA v3.10.2%2025-03-11Fix
CVE-2025-27434Cross-site scripting (XSS) vulnerability in SAP Commerce (Swagger UI)8.8CNA v3.10.5%2025-03-11Fix
CVE-2025-27433Broken access control vulnerabilities in SAP S/4HANA (Manage Bank Statements)4.3CNA v3.10.3%2025-03-11Fix
CVE-2025-27432Missing authorization check in SAP Electronic Invoicing for Brazil (eDocument Cockpit)2.4CNA v3.10.2%2025-03-11Fix
CVE-2025-27431Cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server Java5.4CNA v3.10.2%2025-03-11Fix
CVE-2025-27430Server side request forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)3.5CNA v3.10.3%2025-03-11Fix
CVE-2025-27403Ratify Azure authentication provider improper authentication7.2CNA v4.00.5%2025-03-11Fix
CVE-2025-27398Siemens SCALANCE LPE9403 OS command injection2.1CNA v4.00.3%2025-03-11Fix
CVE-2025-27397Siemens SCALANCE LPE9403 path traversal5.1CNA v4.00.4%2025-03-11Fix
CVE-2025-27396Siemens SCALANCE LPE9403 elevation of privilege8.7CNA v4.00.4%2025-03-11Fix
CVE-2025-27395Siemens SCALANCE LPE9403 path traversal8.6CNA v4.00.7%2025-03-11Fix
CVE-2025-27394Siemens SCALANCE LPE9403 OS command injection8.6CNA v4.00.7%2025-03-11Fix
CVE-2025-27393Siemens SCALANCE LPE9403 OS command injection8.6CNA v4.00.7%2025-03-11Fix
CVE-2025-27392Siemens SCALANCE LPE9403 OS command injection8.6CNA v4.00.7%2025-03-11Fix
CVE-2025-27363FreeType out-of-bounds write8.1NVD v3.127.8%2025-03-11KEVExploit codeFix
CVE-2025-27181Adobe Substance3D Modeler use-after-free7.8CNA v3.10.3%2025-03-11Fix
CVE-2025-27180Adobe Substance3D Modeler out-of-bounds read5.5CNA v3.10.3%2025-03-11Fix
CVE-2025-27179Adobe InDesign Desktop null pointer dereference5.5CNA v3.10.2%2025-03-11Fix
CVE-2025-27178Adobe InDesign Desktop out-of-bounds write7.8CNA v3.10.3%2025-03-11Fix
CVE-2025-27177Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.3%2025-03-11Fix
CVE-2025-27176Adobe InDesign Desktop null pointer dereference5.5CNA v3.10.2%2025-03-11Fix
CVE-2025-27175Adobe InDesign Desktop out-of-bounds write7.8CNA v3.10.3%2025-03-11Fix
CVE-2025-27174Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2025-03-11Fix
CVE-2025-27173Adobe Substance3D Modeler heap-based buffer overflow7.8CNA v3.10.3%2025-03-11Fix
CVE-2025-27172Adobe Substance3D Designer out-of-bounds write7.8CNA v3.10.2%2025-03-11Fix
CVE-2025-27171Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.3%2025-03-11Fix
CVE-2025-27170Adobe Illustrator null pointer dereference5.5CNA v3.10.2%2025-03-11Fix
CVE-2025-27169Adobe Illustrator out-of-bounds write7.8CNA v3.10.2%2025-03-11Fix
CVE-2025-27168Adobe Illustrator stack-based buffer overflow7.8CNA v3.10.3%2025-03-11Fix
CVE-2025-27167Adobe Illustrator untrusted search path7.8CNA v3.10.2%2025-03-11Fix
CVE-2025-27166Adobe InDesign Desktop out-of-bounds write7.8CNA v3.10.3%2025-03-11Fix
CVE-2025-27164Adobe Acrobat Reader out-of-bounds read5.5CNA v3.10.4%2025-03-11Fix
CVE-2025-27163Adobe Acrobat Reader out-of-bounds read5.5CNA v3.10.4%2025-03-11Fix
CVE-2025-27162Adobe Acrobat Reader access of uninitialized pointer7.8CNA v3.10.3%2025-03-11Fix
CVE-2025-27161Adobe Acrobat Reader out-of-bounds read7.8CNA v3.10.3%2025-03-11Fix
CVE-2025-27160Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2025-03-11Fix
CVE-2025-27159Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2025-03-11Fix
CVE-2025-27158Adobe Acrobat Reader access of uninitialized pointer7.8CNA v3.10.4%2025-03-11Fix
CVE-2025-27101Broken access control in Opal filesystem's copy functionality exposes all user data7.3CNA v4.00.6%2025-03-11Fix
CVE-2025-26707ZTE GoldenDB improper privilege management5.3CNA v3.10.3%2025-03-11
CVE-2025-26706ZTE GoldenDB improper privilege management5.4CNA v3.10.2%2025-03-11Fix
CVE-2025-26705ZTE GoldenDB improper privilege management5.3CNA v3.10.3%2025-03-11Fix
CVE-2025-26704ZTE GoldenDB improper privilege management6.4CNA v3.10.2%2025-03-11Fix
CVE-2025-26703ZTE GoldenDB improper privilege management4.3CNA v3.10.3%2025-03-11Fix
CVE-2025-26702ZTE GoldenDB improper input validation4.9CNA v3.10.4%2025-03-11Fix
CVE-2025-26701Percona Monitoring and Management default password10.0CNA v3.10.5%2025-03-11Fix
CVE-2025-26661Missing authorization check in SAP NetWeaver (ABAP Class Builder)8.8CNA v3.10.4%2025-03-11Fix
CVE-2025-26660Broken access control in SAP Fiori apps (Posting library)4.3CNA v3.10.3%2025-03-11Fix
CVE-2025-26659Cross-site scripting vulnerability in SAP NetWeaver Application Server ABAP6.1CNA v3.10.2%2025-03-11Fix
CVE-2025-26658Broken authentication in SAP Business One (Service Layer)6.8CNA v3.10.3%2025-03-11Fix
CVE-2025-26656Missing authorization check in S/4HANA (Manage Purchasing Info Records)4.3CNA v3.10.2%2025-03-11Fix
CVE-2025-26655Missing authorization check in SAP JIT(Outbound)3.1CNA v3.10.2%2025-03-11Fix
CVE-2025-26645Microsoft Remote Desktop client remote code execution8.8CNA v3.13.2%2025-03-11Fix
CVE-2025-26634Microsoft Windows Core Messaging elevation of privileges7.5CNA v3.10.7%2025-03-11Fix
CVE-2025-26633Microsoft Windows Management Console (MMC) improper neutralization7.0CNA v3.130.4%2025-03-11KEVExploit codeFix
CVE-2025-26631Microsoft Visual Studio Code elevation of privilege7.3CNA v3.10.6%2025-03-11Fix
CVE-2025-26630Microsoft Access remote code execution7.8CNA v3.11.0%2025-03-11Fix
CVE-2025-26629Microsoft Office remote code execution7.8CNA v3.10.6%2025-03-11Fix
CVE-2025-26627Microsoft Azure ARC Installer elevation of privilege7.0CNA v3.10.9%2025-03-11Fix
CVE-2025-25929OpenMRS component /legacyui/quickReportServlet reflected cross-site scripting5.4CISA ADP v3.10.3%2025-03-11
CVE-2025-25928OpenMRS component /admin/users/user.form cross-site request forgery8.0CISA ADP v3.10.3%2025-03-11
CVE-2025-25927OpenMRS A cross-site request forgery6.8CISA ADP v3.10.3%2025-03-11
CVE-2025-25925OpenMRS cross-site scripting4.8CISA ADP v3.10.3%2025-03-11
CVE-2025-25749digitaldruid HotelDruid weak password requirements7.1CISA ADP v3.10.6%2025-03-11Fix
CVE-2025-25748digitaldruid HotelDruid gestione_utenti.php endpoint cross-site request forgery7.3CISA ADP v3.10.4%2025-03-11Exploit codeFix
CVE-2025-25747digitaldruid HotelDruid cross-site scripting5.4CISA ADP v3.10.5%2025-03-11Fix
CVE-2025-25680Lsc Ptz Dual Band Camera code injection7.7CISA ADP v3.10.6%2025-03-11
CVE-2025-25267Siemens Tecnomatix Plant Simulation V2302 files accessible to external parties6.9CNA v4.00.2%2025-03-11Fix
CVE-2025-25266Siemens Tecnomatix Plant Simulation V2302 files accessible to external parties7.0CNA v4.00.2%2025-03-11Fix