CVE-2025 records published in March 2025
Page three of three: records 2,001 to 2,921 of the 2,921 published in March 2025, newest first. The first page carries the figures for March 2025.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2025-25245 | Cross-site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform | 5.4CNA v3.1 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-25244 | Missing authorization Check in SAP Business Warehouse (Process Chains) | 5.7CNA v3.1 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-25242 | Cross-site scripting (XSS) in SAP NetWeaver Application Server ABAP | 6.1CNA v3.1 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-25008 | Microsoft Windows Server elevation of privilege | 7.1CNA v3.1 | 0.6% | 2025-03-11 | Fix |
| CVE-2025-25003 | Visual Studio elevation of privilege | 7.3CNA v3.1 | 0.5% | 2025-03-11 | Fix |
| CVE-2025-24998 | Visual Studio elevation of privilege | 7.3CNA v3.1 | 0.5% | 2025-03-11 | Fix |
| CVE-2025-24997 | Microsoft Windows DirectX Graphics Kernel file denial of service | 4.4CNA v3.1 | 0.6% | 2025-03-11 | Fix |
| CVE-2025-24996 | Microsoft Windows NTLM hash disclosure spoofing | 6.5CNA v3.1 | 1.3% | 2025-03-11 | Fix |
| CVE-2025-24995 | Microsoft Windows kernel Streaming WOW Thunk service driver elevation of privilege | 7.8CNA v3.1 | 0.6% | 2025-03-11 | Fix |
| CVE-2025-24994 | Microsoft Windows Cross Device service elevation of privilege | 7.3CNA v3.1 | 1.2% | 2025-03-11 | Fix |
| CVE-2025-24993 | Microsoft Windows NTFS heap-based buffer overflow | 7.8CNA v3.1 | 2.2% | 2025-03-11 | KEVKCVFix |
| CVE-2025-24992 | Microsoft Windows NTFS information disclosure | 5.5CNA v3.1 | 1.1% | 2025-03-11 | Fix |
| CVE-2025-24991 | Microsoft Windows NTFS out-of-bounds read | 5.5CNA v3.1 | 2.0% | 2025-03-11 | KEVKCVFix |
| CVE-2025-24988 | Microsoft Windows USB Video Class System driver elevation of privilege | 6.6CNA v3.1 | 0.7% | 2025-03-11 | Fix |
| CVE-2025-24987 | Microsoft Windows USB Video Class System driver elevation of privilege | 6.6CNA v3.1 | 0.7% | 2025-03-11 | Fix |
| CVE-2025-24986 | Microsoft Azure Promptflow remote code execution | 6.5CNA v3.1 | 0.5% | 2025-03-11 | Fix |
| CVE-2025-24985 | Microsoft Windows Fast FAT File System driver integer overflow | 7.8CNA v3.1 | 3.9% | 2025-03-11 | KEVKCVFix |
| CVE-2025-24984 | Microsoft Windows NTFS information disclosure | 4.6CNA v3.1 | 2.0% | 2025-03-11 | KEVKCVFix |
| CVE-2025-24983 | Microsoft Windows Win32k use-after-free | 7.0CNA v3.1 | 1.4% | 2025-03-11 | KEVFix |
| CVE-2025-24453 | Adobe InDesign Desktop heap-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-24452 | Adobe InDesign Desktop out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-24451 | Adobe Substance3D Painter out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-24450 | Adobe Substance3D Painter out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-24449 | Adobe Illustrator out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-24448 | Adobe Illustrator out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-24445 | Adobe Substance3D Sampler out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-24444 | Adobe Substance3D Sampler out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-24443 | Adobe Substance3D Sampler heap-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-24442 | Adobe Substance3D Sampler out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-24441 | Adobe Substance3D Sampler out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-24440 | Adobe Substance3D Sampler out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-24439 | Adobe Substance3D Sampler heap-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-24431 | Adobe Acrobat Reader out-of-bounds read | 5.5CNA v3.1 | 0.4% | 2025-03-11 | Fix |
| CVE-2025-24201 | Apple Multiple Products WebKit out-of-bounds write | 10.0NVD v3.1 | 3.8% | 2025-03-11 | KEVExploit codeKCVFix |
| CVE-2025-24084 | Microsoft Windows subsystem for Linux (WSL2) Kernel remote code execution | 8.4CNA v3.1 | 0.7% | 2025-03-11 | Fix |
| CVE-2025-24083 | Microsoft Office remote code execution | 7.8CNA v3.1 | 0.7% | 2025-03-11 | Fix |
| CVE-2025-24082 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 0.7% | 2025-03-11 | Fix |
| CVE-2025-24081 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 0.7% | 2025-03-11 | Fix |
| CVE-2025-24080 | Microsoft Office remote code execution | 7.8CNA v3.1 | 0.7% | 2025-03-11 | Fix |
| CVE-2025-24079 | Microsoft Word remote code execution | 7.8CNA v3.1 | 0.7% | 2025-03-11 | Fix |
| CVE-2025-24078 | Microsoft Word remote code execution | 7.0CNA v3.1 | 0.6% | 2025-03-11 | Fix |
| CVE-2025-24077 | Microsoft Word remote code execution | 7.8CNA v3.1 | 0.6% | 2025-03-11 | Fix |
| CVE-2025-24076 | Microsoft Windows Cross Device service elevation of privilege | 7.3CNA v3.1 | 3.2% | 2025-03-11 | Exploit codeFix |
| CVE-2025-24075 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 0.7% | 2025-03-11 | Fix |
| CVE-2025-24072 | Microsoft Local Security Authority (LSA) server elevation of privilege | 7.8CNA v3.1 | 0.5% | 2025-03-11 | Fix |
| CVE-2025-24071 | Microsoft Windows File Explorer spoofing | 6.5CNA v3.1 | 23.3% | 2025-03-11 | Exploit codeFix |
| CVE-2025-24070 | Microsoft ASP.NET Core and Visual Studio elevation of privilege | 7.0CNA v3.1 | 1.0% | 2025-03-11 | Fix |
| CVE-2025-24067 | Microsoft Windows kernel Streaming service driver elevation of privilege | 7.8CNA v3.1 | 0.7% | 2025-03-11 | Fix |
| CVE-2025-24066 | Microsoft Windows kernel Streaming service driver elevation of privilege | 7.8CNA v3.1 | 0.7% | 2025-03-11 | Fix |
| CVE-2025-24064 | Microsoft Windows Domain Name service remote code execution | 8.1CNA v3.1 | 1.3% | 2025-03-11 | Fix |
| CVE-2025-24061 | Microsoft Windows Mark of the web security feature bypass | 7.8CNA v3.1 | 1.2% | 2025-03-11 | Fix |
| CVE-2025-24059 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 0.5% | 2025-03-11 | Fix |
| CVE-2025-24057 | Microsoft Office remote code execution | 7.8CNA v3.1 | 1.0% | 2025-03-11 | Fix |
| CVE-2025-24056 | Microsoft Windows Telephony service remote code execution | 8.8CNA v3.1 | 1.6% | 2025-03-11 | Fix |
| CVE-2025-24055 | Microsoft Windows USB Video Class System driver information disclosure | 4.3CNA v3.1 | 0.9% | 2025-03-11 | Fix |
| CVE-2025-24054 | Microsoft Windows NTLM hash disclosure spoofing | 6.5CNA v3.1 | 62.3% | 2025-03-11 | KEVExploit codeFix |
| CVE-2025-24051 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.5% | 2025-03-11 | Fix |
| CVE-2025-24050 | Microsoft Windows Hyper-V elevation of privilege | 7.8CNA v3.1 | 0.5% | 2025-03-11 | Fix |
| CVE-2025-24049 | Microsoft Azure Command Line Integration (CLI) elevation of privilege | 8.4CNA v3.1 | 0.4% | 2025-03-11 | Fix |
| CVE-2025-24048 | Microsoft Windows Hyper-V elevation of privilege | 7.8CNA v3.1 | 0.5% | 2025-03-11 | Fix |
| CVE-2025-24046 | Microsoft Windows kernel Streaming service driver elevation of privilege | 7.8CNA v3.1 | 0.5% | 2025-03-11 | Fix |
| CVE-2025-24045 | Microsoft Windows Remote Desktop services remote code execution | 8.1CNA v3.1 | 1.3% | 2025-03-11 | Fix |
| CVE-2025-24044 | Microsoft Windows Win32 Kernel subsystem elevation of privilege | 7.8CNA v3.1 | 0.6% | 2025-03-11 | Fix |
| CVE-2025-24043 | Microsoft WinDbg remote code execution | 7.5CNA v3.1 | 0.9% | 2025-03-11 | Fix |
| CVE-2025-24035 | Microsoft Windows Remote Desktop services remote code execution | 8.1CNA v3.1 | 1.7% | 2025-03-11 | Exploit codeFix |
| CVE-2025-23402 | Siemens Teamcenter Visualization use-after-free | 7.3CNA v4.0 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-23401 | Siemens Teamcenter Visualization out-of-bounds read | 7.3CNA v4.0 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-23400 | Siemens Teamcenter Visualization memory corruption | 7.3CNA v4.0 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-23399 | Siemens Teamcenter Visualization out-of-bounds read | 7.3CNA v4.0 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-23398 | Siemens Teamcenter Visualization memory corruption | 7.3CNA v4.0 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-23397 | Siemens Teamcenter Visualization memory corruption | 7.3CNA v4.0 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-23396 | Siemens Teamcenter Visualization out-of-bounds write | 7.3CNA v4.0 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-23384 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2.1), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2.1), SCALANCE M812-1 ADSL-Router family (All versions < | 6.3CNA v4.0 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-23360 | NVIDIA NeMo Framework relative path traversal | 7.1CNA v3.1 | 0.5% | 2025-03-11 | Fix |
| CVE-2025-23243 | NVIDIA Riva improper access control | 6.5CNA v3.1 | 2.1% | 2025-03-11 | Fix |
| CVE-2025-23242 | NVIDIA Riva improper access control | 7.3CNA v3.1 | 2.0% | 2025-03-11 | Fix |
| CVE-2025-23194 | Missing authentication check in SAP NetWeaver Enterprise Portal (OBN component) | 5.3CNA v3.1 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-23188 | Missing authorization check in SAP S/4HANA (RBD) | 4.3CNA v3.1 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-23185 | Information disclosure in SAP Business Objects Business Intelligence Platform | 4.1CNA v3.1 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-22454 | Ivanti Secure Access Client incorrect permission assignment | 7.8CNA v3.1 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-22370 | Mennekes smart/premium charges systems, SQL injection in web configuration interface | 5.3CNA v4.0 | 0.4% | 2025-03-11 | Fix |
| CVE-2025-22369 | Mennekes smart/premium charges systems, arbitrary file download using ReadFile endpoint | 7.1CNA v4.0 | 0.4% | 2025-03-11 | Fix |
| CVE-2025-22368 | Mennekes smart/premium charges systems, command injection in sCU firmware update | 8.7CNA v4.0 | 0.6% | 2025-03-11 | Fix |
| CVE-2025-22367 | Mennekes smart/premium charges systems, command injection in time setting | 8.7CNA v4.0 | 0.6% | 2025-03-11 | Fix |
| CVE-2025-22366 | Mennekes smart/premium charges systems, command injection in firmware upgrade | 8.7CNA v4.0 | 0.6% | 2025-03-11 | Fix |
| CVE-2025-22213 | Joomla! CMS Core Malicious file uploads via Media Manager | 7.1CNA v4.0 | 0.5% | 2025-03-11 | Fix |
| CVE-2025-21247 | Microsoft Windows MapUrlToZone security feature bypass | 4.3CNA v3.1 | 3.1% | 2025-03-11 | Fix |
| CVE-2025-21199 | Microsoft Azure Agent Installer for Backup and Site Recovery elevation of privilege | 6.7CNA v3.1 | 0.4% | 2025-03-11 | Fix |
| CVE-2025-21180 | Microsoft Windows exFAT File System remote code execution | 7.8CNA v3.1 | 0.9% | 2025-03-11 | Fix |
| CVE-2025-21170 | Adobe Substance3D Modeler null pointer dereference | 5.5CNA v3.1 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-21169 | Adobe Substance3D Designer heap-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-2233 | Samsung SmartThings improper verification of cryptographic signature authentication bypass | 8.8CNA v3.0 | 0.8% | 2025-03-11 | |
| CVE-2025-2213 | Castlenet CBW383G2N Wireless menu wlanPrimaryNetwork.asp cross-site scripting | 4.8v3.1 | 0.4% | 2025-03-11 | |
| CVE-2025-2212 | Castlenet CBW383G2N RgSwInfo.asp cross-site scripting | 6.1v3.1 | 0.4% | 2025-03-11 | |
| CVE-2025-2211 | aitangbao springboot-manager add cross-site scripting | 4.8v3.1 | 0.5% | 2025-03-11 | |
| CVE-2025-2210 | aitangbao springboot-manager add cross-site scripting | 4.8v3.1 | 0.5% | 2025-03-11 | |
| CVE-2025-2209 | aitangbao springboot-manager add cross-site scripting | 4.8v3.1 | 0.5% | 2025-03-11 | |
| CVE-2025-2208 | aitangbao springboot-manager Filename upload cross-site scripting | 4.8v3.1 | 0.5% | 2025-03-11 | |
| CVE-2025-2207 | aitangbao springboot-manager dept cross-site scripting | 4.8v3.1 | 0.5% | 2025-03-11 | |
| CVE-2025-2206 | aitangbao springboot-manager permission cross-site scripting | 4.8v3.1 | 0.5% | 2025-03-11 | |
| CVE-2025-2196 | Mrcms org.marker.mushroom.controller.FileController upload.do upload cross-site scripting | 6.1v3.1 | 0.4% | 2025-03-11 | |
| CVE-2025-2195 | Mrcms org.marker.mushroom.controller.FileController rename.do rename cross-site scripting | 6.1v3.1 | 0.4% | 2025-03-11 | |
| CVE-2025-2194 | Mrcms org.marker.mushroom.controller.FileController list.do list cross-site scripting | 6.1v3.1 | 0.4% | 2025-03-11 | |
| CVE-2025-2193 | Mrcms org.marker.mushroom.controller.FileController delete.do delete path traversal | 8.1v3.1 | 0.8% | 2025-03-11 | |
| CVE-2025-2192 | Stoque Zeev.it login page server-side request forgery | 5.3CNA v4.0 | 0.4% | 2025-03-11 | |
| CVE-2025-2191 | Claro A7600-A1 Ping6 Diagnóstico form2pingv6.cgi cross-site scripting | 4.8CNA v4.0 | 0.3% | 2025-03-11 | |
| CVE-2025-2190 | TECNO com.transsnet.store improper certificate host validation | 8.1CISA ADP v3.1 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-2189 | Information disclosure vulnerability in Tinxy Smart Devices | 5.1CNA v4.0 | 0.1% | 2025-03-11 | |
| CVE-2025-2177 | libzvbi search.c vbi_search_new integer overflow | 6.5NVD v3.1 | 0.6% | 2025-03-11 | Fix |
| CVE-2025-2176 | libzvbi io-sim.c vbi_capture_sim_load_caption integer overflow | 7.5v3.1 | 0.7% | 2025-03-11 | Fix |
| CVE-2025-2175 | libzvbi _vbi_strndup_iconv integer overflow | 6.5v3.1 | 0.6% | 2025-03-11 | Fix |
| CVE-2025-2174 | libzvbi conv.c vbi_strndup_iconv_ucs2 integer overflow | 7.5v3.1 | 0.8% | 2025-03-11 | Fix |
| CVE-2025-2173 | libzvbi conv.c vbi_strndup_iconv_ucs2 uninitialized pointer | 7.5v3.1 | 0.6% | 2025-03-11 | Fix |
| CVE-2025-2169 | WPCS WordPress Currency Switcher Professional plugin unauthenticated arbitrary shortcode execution | 7.3CNA v3.1 | 0.5% | 2025-03-11 | Fix |
| CVE-2025-2023 | Ashlar-Vellum Cobalt LI File Parsing integer overflow remote code execution | 7.8CNA v3.0 | 0.3% | 2025-03-11 | |
| CVE-2025-2022 | Ashlar-Vellum Cobalt VS File Parsing type confusion remote code execution | 7.8CNA v3.0 | 0.3% | 2025-03-11 | |
| CVE-2025-2021 | Ashlar-Vellum Cobalt XE File Parsing integer overflow remote code execution | 7.8CNA v3.0 | 0.3% | 2025-03-11 | |
| CVE-2025-2020 | Ashlar-Vellum Cobalt VC6 File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.3% | 2025-03-11 | |
| CVE-2025-2019 | Ashlar-Vellum Cobalt VC6 File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.0 | 0.3% | 2025-03-11 | |
| CVE-2025-2018 | Ashlar-Vellum Cobalt VS File Parsing type confusion remote code execution | 7.8CNA v3.0 | 0.3% | 2025-03-11 | |
| CVE-2025-2017 | Ashlar-Vellum Cobalt CO File Parsing buffer overflow remote code execution | 7.8CNA v3.0 | 0.3% | 2025-03-11 | |
| CVE-2025-2016 | Ashlar-Vellum Cobalt VC6 File Parsing type confusion remote code execution | 7.8CNA v3.0 | 0.3% | 2025-03-11 | |
| CVE-2025-2015 | Ashlar-Vellum Cobalt VS File Parsing type confusion remote code execution | 7.8CNA v3.0 | 0.3% | 2025-03-11 | |
| CVE-2025-2014 | Ashlar-Vellum Cobalt VS File Parsing use of uninitialized variable remote code execution | 7.8CNA v3.0 | 0.3% | 2025-03-11 | |
| CVE-2025-2013 | Ashlar-Vellum Cobalt CO File Parsing use-after-free remote code execution | 7.8CNA v3.0 | 0.3% | 2025-03-11 | |
| CVE-2025-2012 | Ashlar-Vellum Cobalt VS File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.3% | 2025-03-11 | |
| CVE-2025-1828 | Perl's Crypt::Random module after and may use rand function for cryptographic functions | 8.8CISA ADP v3.1 | 0.4% | 2025-03-11 | Fix |
| CVE-2025-1707 | Review Schema WordPress plugin authenticated (Contributor+) local file inclusion via post Meta | 8.8CNA v3.1 | 0.7% | 2025-03-11 | Fix |
| CVE-2025-1661 | HUSKY WordPress plugin local file inclusion | 9.8CNA v3.1 | 56.4% | 2025-03-11 | NucleiExploit codeFix |
| CVE-2025-1550 | Google arbitrary code execution via Crafted Keras Config for Model Loading | 7.3CNA v4.0 | 2.6% | 2025-03-11 | Exploit codeFix |
| CVE-2025-1434 | XSS in AREAL SAS Topkapi Vision Webserv2 | 6.1CNA v3.1 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-0900 | PDF-XChange Editor PDF File Parsing out-of-bounds read information disclosure | 3.3CNA v3.0 | 0.2% | 2025-03-11 | |
| CVE-2025-0629 | Coronavirus (COVID-19) Notice Message WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2025-03-11 | |
| CVE-2025-0151 | Zoom Apps use-after-free | 8.5CNA v3.1 | 0.4% | 2025-03-11 | Fix |
| CVE-2025-0150 | Zoom Workplace Apps for iOS incorrect behavior order | 7.1CNA v3.1 | 0.5% | 2025-03-11 | Fix |
| CVE-2025-0149 | Zoom Apps insufficient verification of data authenticity | 6.5CNA v3.1 | 0.2% | 2025-03-11 | Fix |
| CVE-2025-0071 | Information disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager | 4.9CNA v3.1 | 0.4% | 2025-03-11 | Fix |
| CVE-2025-0062 | Cross-site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform | 4.7CNA v3.1 | 0.3% | 2025-03-11 | Fix |
| CVE-2025-27926 | Nintex Automation incorrect default permissions | 5.3v3.1 | 0.3% | 2025-03-10 | Fix |
| CVE-2025-27925 | Nintex Automation deserialization of untrusted data | 9.8v3.1 | 0.4% | 2025-03-10 | Fix |
| CVE-2025-27924 | Nintex Automation cross-site scripting | 5.4CNA v3.1 | 0.2% | 2025-03-10 | Fix |
| CVE-2025-27913 | Passbolt API use of a less trusted source | 7.5CISA ADP v3.1 | 0.2% | 2025-03-10 | Fix |
| CVE-2025-27910 | tianti 天梯 cross-site request forgery | 8.0CISA ADP v3.1 | 0.2% | 2025-03-10 | |
| CVE-2025-27616 | go-vela server Vela Server has Insufficient Webhook Payload Data Verification | 8.6CNA v3.1 | 0.3% | 2025-03-10 | Fix |
| CVE-2025-27615 | UmatiGateway's UI publicly accessible in provided docker-compose file | 8.2CNA v3.1 | 0.5% | 2025-03-10 | |
| CVE-2025-27610 | Local file inclusion in Rack::Static | 7.5CNA v3.1 | 1.2% | 2025-03-10 | Fix |
| CVE-2025-27257 | GE Vernova N60 multilin insufficient verification of data authenticity | 6.1CNA v3.1 | 0.2% | 2025-03-10 | |
| CVE-2025-27256 | GE Vernova EnerVista UR Setup missing authentication | 8.3CNA v3.1 | 0.3% | 2025-03-10 | |
| CVE-2025-27255 | GE Vernova EnerVista UR Setup hard-coded credentials | 8.0CNA v3.1 | 0.2% | 2025-03-10 | |
| CVE-2025-27254 | GE Vernova EnerVista UR Setup authentication bypass | 8.0CNA v3.1 | 0.2% | 2025-03-10 | |
| CVE-2025-27253 | GE Vernova N60 multilin external control of a configuration setting | 6.1CNA v3.1 | 0.2% | 2025-03-10 | |
| CVE-2025-27136 | Robothy local-s3 LocalS3 CreateBucketConfiguration endpoint XML external entity (XXE) injection | 5.5CNA v4.0 | 0.5% | 2025-03-10 | Exploit codeFix |
| CVE-2025-26936 | Fresh Framework WordPress plugin unauthenticated remote code execution (RCE) | 10.0CNA v3.1 | 0.5% | 2025-03-10 | |
| CVE-2025-26933 | Place Order Without Payment for WooCommerce WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-03-10 | Fix |
| CVE-2025-26916 | Massive Dynamic WordPress theme unauthenticated local file inclusion | 9.0CNA v3.1 | 0.6% | 2025-03-10 | |
| CVE-2025-26910 | WPBookit WordPress plugin cross-site request forgery (CSRF) | 6.1NVD v3.1 | 0.1% | 2025-03-10 | Fix |
| CVE-2025-26865 | Apache OFBiz: Server-side template injection affecting the ecommerce plugin leading to possible RCE | 3.5CISA ADP v3.1 | 0.7% | 2025-03-10 | Exploit codeFix |
| CVE-2025-26696 | Mozilla Thunderbird crafted email message incorrectly shown as being encrypted | 7.0CISA ADP v3.1 | 0.4% | 2025-03-10 | Fix |
| CVE-2025-26695 | Mozilla Thunderbird downloading of OpenPGP keys from WKD used incorrect padding | 5.3CISA ADP v3.1 | 0.2% | 2025-03-10 | Fix |
| CVE-2025-25977 | Canvg prototype pollution | 9.8CISA ADP v3.1 | 0.7% | 2025-03-10 | Fix |
| CVE-2025-25940 | VisiCut deserialization of untrusted data | 9.8CISA ADP v3.1 | 0.8% | 2025-03-10 | |
| CVE-2025-25908 | tianti 天梯 tianti v2.3 stored cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2025-03-10 | |
| CVE-2025-25907 | tianti 天梯 cross-site request forgery | 8.8CISA ADP v3.1 | 0.2% | 2025-03-10 | |
| CVE-2025-25620 | changeweb Unifiedtransform cross-site scripting | 5.4CISA ADP v3.1 | 0.6% | 2025-03-10 | |
| CVE-2025-25616 | changeweb Unifiedtransform improper access control | 4.3NVD v3.1 | 0.4% | 2025-03-10 | |
| CVE-2025-25615 | changeweb Unifiedtransform improper access control | 2.7NVD v3.1 | 0.5% | 2025-03-10 | |
| CVE-2025-25614 | changeweb Unifiedtransform privilege escalation | 8.8CISA ADP v3.1 | 0.8% | 2025-03-10 | |
| CVE-2025-25382 | Ikm Sanchaya web parameter tampering | 7.5CISA ADP v3.1 | 0.3% | 2025-03-10 | |
| CVE-2025-25306 | Misskey's Incomplete Patch of leads to Forgery of Federated Notes | 9.3CNA v3.1 | 0.2% | 2025-03-10 | Fix |
| CVE-2025-24813 | Apache Tomcat path equivalence | 9.8NVD v3.1 | 99.9% | 2025-03-10 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2025-24387 | OTRS missing CSRF protection | 4.8CNA v3.1 | 0.2% | 2025-03-10 | Fix |
| CVE-2025-22603 | AutoGPT Platform Send Web Request block server-side request forgery | 7.7CNA v4.0 | 0.6% | 2025-03-10 | |
| CVE-2025-2153 | HDF5 h5 File H5SM.c H5SM_delete heap-based overflow | 8.1v3.1 | 0.5% | 2025-03-10 | Fix |
| CVE-2025-2152 | Open Asset Import Library Assimp File BaseImporter.cpp ConvertToUTF8 heap-based overflow | 9.8v3.1 | 0.5% | 2025-03-10 | Fix |
| CVE-2025-2151 | Open Asset Import Library Assimp File ParsingUtils.h GetNextLine stack-based overflow | 8.8v3.1 | 0.6% | 2025-03-10 | Fix |
| CVE-2025-2150 | HGiga C&Cm@il stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2025-03-10 | Fix |
| CVE-2025-2149 | PyTorch Quantized Sigmoid module nnq_Sigmoid initialization | 2.0CNA v4.0 | 0.3% | 2025-03-10 | Fix |
| CVE-2025-2148 | PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption | 7.5v3.1 | 0.4% | 2025-03-10 | Fix |
| CVE-2025-2147 | A vulnerability was found in Beijing Zhide Intelligent Internet Technology Modern Farm Digital Integrated Management System 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to files or directories accessible. It is possible to launch the attack remo | 7.5v3.1 | 0.6% | 2025-03-10 | |
| CVE-2025-2137 | Google Chrome V8 out-of-bounds read | 8.8CISA ADP v3.1 | 0.4% | 2025-03-10 | Fix |
| CVE-2025-2136 | Google Chrome Inspector use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2025-03-10 | Fix |
| CVE-2025-2135 | Google Chrome V8 type confusion | 8.8CISA ADP v3.1 | 6.6% | 2025-03-10 | Exploit codeFix |
| CVE-2025-2133 | Ftcms edit cross-site scripting | 4.8v3.1 | 0.3% | 2025-03-10 | |
| CVE-2025-1945 | picklescan Zip Flag Bit Exploit crashes Picklescan But not PyTorch | 9.8NVD v3.1 | 0.6% | 2025-03-10 | Fix |
| CVE-2025-1944 | picklescan ZIP archive manipulation attack leads to crash | 6.5NVD v3.1 | 0.3% | 2025-03-10 | Fix |
| CVE-2025-1926 | Page Builder: Pagelayer WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-03-10 | Fix |
| CVE-2025-1920 | Google Chrome V8 type confusion | 8.8CISA ADP v3.1 | 0.3% | 2025-03-10 | Fix |
| CVE-2025-1497 | Remote code execution in PlotAI | 9.8v3.1 | 1.0% | 2025-03-10 | Fix |
| CVE-2025-1296 | Nomad exposes Sensitive Workload Identity and Client Secret Token in Audit Logs | 6.5CNA v3.1 | 0.5% | 2025-03-10 | Fix |
| CVE-2025-0660 | Concrete CMS stored XSS in Folder function by Rogue Admin | 4.8CNA v4.0 | 0.3% | 2025-03-10 | Fix |
| CVE-2025-27636 | Apache Camel: Camel message header injection via Improper Filtering | 5.6CISA ADP v3.1 | 97.1% | 2025-03-09 | Reported exploitedEmerging ThreatsExploit codeFix |
| CVE-2025-2132 | Ftcms Search ajax_all_lists SQL injection | 7.2v3.1 | 0.4% | 2025-03-09 | |
| CVE-2025-2131 | dayrui XunRuiCMS Friendly Links cross-site scripting | 4.8v3.1 | 0.3% | 2025-03-09 | |
| CVE-2025-2130 | OpenXE ticket edit page cross-site scripting | 5.4v3.1 | 0.4% | 2025-03-09 | |
| CVE-2025-2129 | Mage AI insecure default initialization of resource | 6.3CNA v4.0 | 1.1% | 2025-03-09 | Nuclei |
| CVE-2025-2127 | JoomlaUX JUX Real Estate realties cross-site scripting | 6.1v3.1 | 1.0% | 2025-03-09 | Nuclei |
| CVE-2025-2126 | JoomlaUX JUX Real Estate GET parameter realties SQL injection | 8.8v3.1 | 11.2% | 2025-03-09 | Exploit code |
| CVE-2025-2125 | Control iD RH iD PDF Document companyId resource injection | 4.3v3.1 | 0.3% | 2025-03-09 | |
| CVE-2025-2124 | Control iD RH iD API change_password cross-site scripting | 5.1CNA v4.0 | 0.3% | 2025-03-09 | |
| CVE-2025-2123 | GeSHi CSS cssgen.php get_var cross-site scripting | 6.1v3.1 | 0.5% | 2025-03-09 | Fix |
| CVE-2025-2122 | Thinkware Car Dashcam F800 Pro Connection denial of service | 5.3v3.1 | 0.8% | 2025-03-09 | |
| CVE-2025-2121 | Thinkware Car Dashcam F800 Pro File Storage access control | 8.8v3.1 | 1.0% | 2025-03-09 | |
| CVE-2025-2120 | Thinkware F800 Pro configuration file handler cleartext storage of sensitive information | 4.6v3.1 | 0.3% | 2025-03-09 | |
| CVE-2025-2119 | Thinkware Car Dashcam F800 Pro Device Registration default credentials | 1.0CNA v4.0 | 0.3% | 2025-03-09 | |
| CVE-2025-2118 | Quantico Tecnologia PRMV Login endpoint login.php SQL injection | 6.9CNA v4.0 | 0.5% | 2025-03-09 | |
| CVE-2025-2117 | Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System SQL injection | 5.3CNA v4.0 | 0.4% | 2025-03-09 | |
| CVE-2025-2116 | A vulnerability has been found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /newsedit/newsedit/xy/imageProxy.do of the component File Protocol Handler. | 5.3CNA v4.0 | 0.4% | 2025-03-09 | |
| CVE-2025-2115 | zzskzy Warehouse Refinement Management System AcceptZip.ashx ProcessRequest unrestricted upload | 9.8v3.1 | 0.6% | 2025-03-09 | |
| CVE-2025-2114 | Shenzhen Sixun Software Sixun Shanghui Group Business Management System improper authorization | 6.3CNA v4.0 | 0.6% | 2025-03-09 | |
| CVE-2025-2113 | AT Software Solutions ATSVD Esqueceu a senha SQL injection | 9.8v3.1 | 0.6% | 2025-03-09 | |
| CVE-2025-1382 | Contact Us By Lord Linus WordPress plugin Admin+ stored XSS via CSRF | 6.1CISA ADP v3.1 | 0.2% | 2025-03-09 | |
| CVE-2025-1363 | tahminajannat URL Shortener settings stored cross-site scripting | 3.5CISA ADP v3.1 | 0.3% | 2025-03-09 | |
| CVE-2025-1362 | tahminajannat URL Shortener bulk actions cross-site request forgery | 4.3CISA ADP v3.1 | 0.2% | 2025-03-09 | |
| CVE-2025-27840 | espressif ESP32 hidden functionality | 6.8NVD v3.1 | 1.4% | 2025-03-08 | Exploit code |
| CVE-2025-27839 | Tangem SDK offline wallet attestation vulnerability | 3.2CNA v3.1 | 0.4% | 2025-03-08 | Fix |
| CVE-2025-2112 | user-xiangpeng yaoqishan MediaInfoService.java getMediaLisByFilter SQL injection | 9.8v3.1 | 0.6% | 2025-03-08 | |
| CVE-2025-1783 | Gallery Styles WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-03-08 | Fix |
| CVE-2025-1664 | Essential Blocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-03-08 | Fix |
| CVE-2025-1504 | Post Lockdown WordPress plugin missing authorization to authenticated (Subscriber+) post disclosure | 6.5v3.1 | 0.3% | 2025-03-08 | Fix |
| CVE-2025-1481 | Shortcode Cleaner Lite WordPress plugin missing authorization authenticated arbitrary options export | 4.3v3.1 | 0.3% | 2025-03-08 | |
| CVE-2025-1325 | WP-Recall shortcode preview endpoint missing authorization | 6.3v3.1 | 0.3% | 2025-03-08 | Fix |
| CVE-2025-1324 | WP-Recall Registration, Profile, Commerce and More WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-03-08 | Fix |
| CVE-2025-1323 | WP-Recall Registration, Profile, Commerce and More WordPress plugin unauthenticated SQL injection | 9.8v3.1 | 2.9% | 2025-03-08 | NucleiExploit codeFix |
| CVE-2025-1322 | WP-Recall Registration, Profile, Commerce and More WordPress plugin Protected post disclosure | 4.3v3.1 | 0.4% | 2025-03-08 | Fix |
| CVE-2025-1287 | The Plus Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-03-08 | Fix |
| CVE-2025-1261 | HT Mega Absolute Addons For Elementor WordPress plugin DOM-based stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-03-08 | Fix |
| CVE-2025-0177 | Javo Core WordPress plugin unauthenticated privilege escalation in ajax_signup | 9.8v3.1 | 0.4% | 2025-03-08 | Fix |
| CVE-2025-27826 | backdropcms Bootstrap Lite theme An cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-03-07 | Fix |
| CVE-2025-27825 | backdropcms Bootstrap 5 Lite theme cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-03-07 | Fix |
| CVE-2025-27824 | backdropcms Link iframe formatter An cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-03-07 | Fix |
| CVE-2025-27823 | backdropcms Mail Disguise cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-03-07 | Fix |
| CVE-2025-27822 | backdropcms Masquerade incorrect authorization | 7.5CNA v3.1 | 0.3% | 2025-03-07 | Fix |
| CVE-2025-27816 | Arctera InfoScale Plugin_Host service deserialization of untrusted data | 9.8CNA v3.1 | 0.7% | 2025-03-07 | |
| CVE-2025-27796 | GraphicsMagick uninitialized resource use | 9.8v3.1 | 0.4% | 2025-03-07 | Fix |
| CVE-2025-27795 | GraphicsMagick resource exhaustion | 7.5v3.1 | 0.4% | 2025-03-07 | Fix |
| CVE-2025-27607 | nhairs python-json-logger python JSON Logger has a Potential RCE | 8.8CNA v3.1 | 1.6% | 2025-03-07 | Fix |
| CVE-2025-27604 | XWiki Confluence Migrator Pro's homepage is public | 7.5CNA v3.1 | 0.4% | 2025-03-07 | Fix |
| CVE-2025-27603 | XWiki Confluence Migrator Pro page translation template vulnerability | 9.1CNA v3.1 | 0.7% | 2025-03-07 | Fix |
| CVE-2025-27597 | intlify vue-i18n vue I18n prototype pollution in `handleFlatJson` | 8.9CNA v4.0 | 0.6% | 2025-03-07 | Fix |
| CVE-2025-27519 | Cognita arbitrary file write | 9.3CNA v4.0 | 1.4% | 2025-03-07 | Exploit code |
| CVE-2025-27518 | Cognita CORS misconfiguration in backend API server | 6.9CNA v4.0 | 0.5% | 2025-03-07 | |
| CVE-2025-27152 | Possible SSRF and credential leakage via Absolute URL in axios requests | 7.7CNA v4.0 | 0.8% | 2025-03-07 | Exploit codeFix |
| CVE-2025-26708 | ZTE Link ZTELink has a configuration defect vulnerability | 4.2CNA v3.1 | 0.1% | 2025-03-07 | |
| CVE-2025-26643 | Microsoft Edge (Chromium-based) spoofing | 5.4CNA v3.1 | 0.7% | 2025-03-07 | Fix |
| CVE-2025-26331 | Dell Wyse Proprietary OS (Modern ThinOS) command injection | 7.8CNA v3.1 | 0.6% | 2025-03-07 | Fix |
| CVE-2025-25617 | Unifiedtransform syllabus creation privilege escalation | 4.3CISA ADP v3.1 | 0.4% | 2025-03-07 | |
| CVE-2025-21843 | Linux kernel panthor DRM driver ioctl vulnerability | 5.5v3.1 | 0.2% | 2025-03-07 | Fix |
| CVE-2025-21842 | Linux kernel amdkfd queue context buffer vulnerability | 7.8CNA v3.1 | 0.2% | 2025-03-07 | Fix |
| CVE-2025-21841 | Linux kernel amd-pstate cpufreq driver vulnerability | 5.5v3.1 | 0.2% | 2025-03-07 | Fix |
| CVE-2025-21840 | Linux kernel thermal netlink UAPI vulnerability | 5.5v3.1 | 0.2% | 2025-03-07 | Fix |
| CVE-2025-21839 | Linux kernel KVM x86 debug register handling vulnerability | 7.3CNA v3.1 | 0.2% | 2025-03-07 | Fix |
| CVE-2025-21838 | Linux kernel USB gadget core workqueue vulnerability | 5.5NVD v3.1 | 0.2% | 2025-03-07 | Fix |
| CVE-2025-21836 | Linux kernel io_uring buffer ring vulnerability | 7.8CNA v3.1 | 0.3% | 2025-03-07 | Fix |
| CVE-2025-21835 | Linux kernel f_midi USB gadget driver vulnerability | 5.5NVD v3.1 | 0.2% | 2025-03-07 | Fix |
| CVE-2025-2097 | TOTOLINK EX1800T cstecgi.cgi setRptWizardCfg stack-based overflow | 9.8v3.1 | 7.2% | 2025-03-07 | |
| CVE-2025-2096 | TOTOLINK EX1800T cstecgi.cgi setRebootScheCfg os command injection | 9.8v3.1 | 2.8% | 2025-03-07 | |
| CVE-2025-2095 | TOTOLINK EX1800T cstecgi.cgi setDmzCfg os command injection | 9.8v3.1 | 2.8% | 2025-03-07 | |
| CVE-2025-2094 | TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig os command injection | 9.8v3.1 | 13.0% | 2025-03-07 | Emerging Threats |
| CVE-2025-2093 | PHPGurukul Online Library Management System change-password.php password recovery | 2.3CNA v4.0 | 0.4% | 2025-03-07 | |
| CVE-2025-2090 | PHPGurukul Pre-School Enrollment System Sub Admin add-subadmin.php access control | 5.1CNA v4.0 | 0.4% | 2025-03-07 | |
| CVE-2025-2089 | StarSea99 starsea-mall UserController updateUserInfo improper access control | 5.3CNA v4.0 | 0.5% | 2025-03-07 | |
| CVE-2025-2088 | PHPGurukul Pre-School Enrollment System profile.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-2087 | StarSea99 starsea-mall update cross-site scripting | 6.1v3.1 | 0.4% | 2025-03-07 | |
| CVE-2025-2086 | StarSea99 starsea-mall update cross-site scripting | 6.1v3.1 | 0.4% | 2025-03-07 | |
| CVE-2025-2085 | StarSea99 starsea-mall save cross-site scripting | 6.1v3.1 | 0.3% | 2025-03-07 | |
| CVE-2025-2084 | PHPGurukul Human Metapneumovirus Testing Management System search-report.php cross-site scripting | 6.1v3.1 | 0.4% | 2025-03-07 | |
| CVE-2025-2067 | Projectworlds Life Insurance Management System search.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-2066 | Projectworlds Life Insurance Management System updateAgent.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-2065 | Projectworlds Life Insurance Management System editAgent.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-2064 | Projectworlds Life Insurance Management System deletePayment.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-2063 | Projectworlds Life Insurance Management System deleteNominee.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-2062 | Projectworlds Life Insurance Management System clientStatus.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-2061 | code-projects Online Ticket Reservation System passenger.php cross-site scripting | 6.1v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-2060 | PHPGurukul Emergency Ambulance Hiring Portal admin-profile.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-2059 | PHPGurukul Emergency Ambulance Hiring Portal booking-details.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-07 | |
| CVE-2025-2058 | PHPGurukul Emergency Ambulance Hiring Portal search.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-07 | |
| CVE-2025-2057 | PHPGurukul Emergency Ambulance Hiring Portal about-us.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-07 | |
| CVE-2025-2054 | code-projects Blood Bank Management System edit_state.php SQL injection | 7.2v3.1 | 0.6% | 2025-03-07 | |
| CVE-2025-2053 | PHPGurukul Apartment Visitors Management System visitor-detail.php SQL injection | 8.8v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-2052 | PHPGurukul Apartment Visitors Management System forgot-password.php SQL injection | 8.8v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-2051 | PHPGurukul Apartment Visitors Management System search-visitor.php SQL injection | 8.8v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-2050 | PHPGurukul User Registration and Login and User Management System login.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-2024 | Trimble SketchUp SKP File Parsing uninitialized variable remote code execution | 7.8CNA v3.0 | 0.4% | 2025-03-07 | |
| CVE-2025-1887 | SMB forced authentication vulnerability in Sage 200 Spain | 7.1CNA v4.0 | 0.4% | 2025-03-07 | |
| CVE-2025-1886 | Sage 200 Spain SMTP credentials vulnerability | 7.1CNA v4.0 | 0.3% | 2025-03-07 | |
| CVE-2025-1768 | SEO Plugin by Squirrly SEO WordPress plugin SQL injection | 6.5CNA v3.1 | 0.5% | 2025-03-07 | Fix |
| CVE-2025-1475 | WPCOM Member WordPress plugin authentication bypass via user_phone | 9.8CNA v3.1 | 0.6% | 2025-03-07 | Fix |
| CVE-2025-1315 | InWave Jobs WordPress plugin unauthenticated privilege escalation via password reset | 9.8CNA v3.1 | 0.5% | 2025-03-07 | |
| CVE-2025-1309 | UiPress lite WordPress plugin unauthorized access | 8.8CNA v3.1 | 0.5% | 2025-03-07 | Fix |
| CVE-2025-1121 | Google ChromeOS Installer and Recovery image handling privilege escalation | 6.8CISA ADP v3.1 | 0.1% | 2025-03-07 | Fix |
| CVE-2025-0959 | Eventer - WordPress Event and Booking Manager plugin SQL injection | 6.5NVD v3.1 | 0.4% | 2025-03-07 | Fix |
| CVE-2025-0863 | Flexmls® IDX WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-03-07 | Fix |
| CVE-2025-0749 | Homey WordPress theme limited authentication bypass due to missing Empty Value check | 8.1CNA v3.1 | 0.5% | 2025-03-07 | Fix |
| CVE-2025-0748 | Homey WordPress theme cross-site request forgery to user verification | 4.3CNA v3.1 | 0.2% | 2025-03-07 | Fix |
| CVE-2025-0162 | IBM Aspera Shares XML external entity injection | 7.1CNA v3.1 | 0.5% | 2025-03-07 | Fix |
| CVE-2025-27600 | FastGPT web crawling plugin server-side request forgery | 6.9CNA v4.0 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-27598 | Out-of-bounds write in SixLabors ImageSharp | 7.5CNA v3.1 | 0.6% | 2025-03-06 | Fix |
| CVE-2025-27509 | fleetdm fleet SAML authentication vulnerability due to improper SAML response validation | 9.3CNA v4.0 | 0.7% | 2025-03-06 | Fix |
| CVE-2025-27506 | NocoDB vulnerable to reflected cross-site scripting on Reset Password page | 5.4CNA v3.1 | 0.7% | 2025-03-06 | NucleiFix |
| CVE-2025-26699 | Django vulnerable to allocation of resources without limits or throttling | 7.5v3.1 | 0.8% | 2025-03-06 | Fix |
| CVE-2025-26167 | Buffalo LS520D NAS web UI information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-03-06 | |
| CVE-2025-25763 | CRMEB SQL injection | 9.8CISA ADP v3.1 | 0.9% | 2025-03-06 | |
| CVE-2025-25497 | Netsweeper Server account management interface vulnerability | 8.1CISA ADP v3.1 | 0.4% | 2025-03-06 | |
| CVE-2025-25452 | Mytaag improper authentication | 5.1CISA ADP v3.1 | 0.3% | 2025-03-06 | |
| CVE-2025-25451 | Mytaag improper authentication | 5.1CISA ADP v3.1 | 0.2% | 2025-03-06 | |
| CVE-2025-25450 | Mytaag improper authentication | 5.1CISA ADP v3.1 | 0.3% | 2025-03-06 | |
| CVE-2025-25381 | Karnataka State Road Transport Corporation AWATAR app improper access control | 7.5CISA ADP v3.1 | 0.4% | 2025-03-06 | |
| CVE-2025-25361 | PublicCMS component /cms/CmsWebFileAdminController.java arbitrary file upload | 9.8CISA ADP v3.1 | 0.7% | 2025-03-06 | |
| CVE-2025-25294 | Envoy Gateway log injection | 5.3CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-25191 | Group-office has a stored XSS vulnerability via user's name field | 6.9CNA v4.0 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-24864 | RSUPPORT RemoteView Agent incorrect default permissions | 7.8CNA v3.0 | 0.2% | 2025-03-06 | |
| CVE-2025-24796 | Remote code execution within Collabora Online jail with Macros Enabled | 6.3CNA v4.0 | 0.5% | 2025-03-06 | Fix |
| CVE-2025-22623 | Ad Inserter reflected cross-site scripting (XSS) | 5.1CNA v4.0 | 0.4% | 2025-03-06 | Fix |
| CVE-2025-22447 | RSUPPORT RemoteView Agent incorrect default permissions | 7.8CNA v3.0 | 0.2% | 2025-03-06 | |
| CVE-2025-21834 | Linux kernel seccomp uretprobe filtering denial of service | 5.5v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-21833 | Linux kernel iommu/vt-d null pointer dereference | 5.5v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-21832 | Linux kernel block layer direct I/O vulnerability | 7.8CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-21831 | Linux kernel PCIe root port power management denial of service | 5.5v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-21830 | In the Linux kernel, the following vulnerability has been resolved: landlock: Handle weird files A corrupted filesystem (e.g. bcachefs) might return weird files. Instead of throwing a warning and allowing access to such file, treat them as regular files. | 7.3CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-21829 | Linux kernel RDMA rxe driver vulnerability | 9.8CNA v3.1 | 0.4% | 2025-03-06 | Fix |
| CVE-2025-21828 | Linux kernel mac80211 station management vulnerability | 8.8CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-21827 | Linux kernel btusb MediaTek Bluetooth driver vulnerability | 7.8CNA v3.1 | 0.1% | 2025-03-06 | Fix |
| CVE-2025-21826 | Linux kernel nf_tables pipapo set vulnerability | 7.8CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-21825 | Linux kernel BPF timer double free | 7.8CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-20933 | Samsung Mobile Samsung Notes parsing bmp image out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-20932 | Samsung Mobile Samsung Notes parsing rle of bmp image out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-20931 | Samsung Mobile Samsung Notes parsing bmp image out-of-bounds write | 7.3CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-20930 | Samsung Mobile Samsung Notes parsing jpeg image out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-20929 | Samsung Mobile Samsung Notes parsing jpeg image out-of-bounds write | 7.3CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-20928 | Samsung Mobile Samsung Notes parsing wbmp image out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-20927 | Samsung Mobile Samsung Notes parsing image data out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-20926 | Samsung Mobile Samsung My Files improper export of Android application components | 5.5CNA v3.1 | 0.1% | 2025-03-06 | Fix |
| CVE-2025-20925 | Samsung Mobile Samsung Notes applying binary of text data out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-20924 | Samsung Mobile Samsung Notes improper access control | 4.6CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-20923 | Samsung Mobile Galaxy Wearable improper access control | 4.0CNA v3.1 | 0.1% | 2025-03-06 | |
| CVE-2025-20922 | Samsung Mobile Samsung Notes appending text paragraph out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-20921 | Samsung Mobile Samsung Notes applying binary of text content out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-20920 | Samsung Mobile Samsung Notes action link data out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-20919 | Samsung Mobile Samsung Notes applying binary of video content out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-20918 | Samsung Mobile Samsung Notes applying extra data of base content out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-20917 | Samsung Mobile Samsung Notes applying binary of pdf content out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-20916 | Samsung Mobile Samsung Notes reading string of SPen out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-20915 | Samsung Mobile Samsung Notes applying binary of voice content out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-20914 | Samsung Mobile Samsung Notes applying binary of hand writing content out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-20913 | Samsung Mobile Samsung Notes applying binary of drawing content out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-20912 | Samsung Mobile Devices insecure storage of sensitive information | 6.2CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-20911 | Samsung Mobile Devices sem_wifi service improper access control | 4.4CNA v3.1 | 0.1% | 2025-03-06 | Fix |
| CVE-2025-20910 | Samsung Mobile Devices incorrect default permissions | 6.2CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-20909 | Samsung Mobile Devices settings implicit intent for sensitive communication | 4.0CNA v3.1 | 0.1% | 2025-03-06 | Fix |
| CVE-2025-20908 | Samsung Mobile Devices Auracast insufficient randomness | 6.5CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-20903 | Samsung Mobile Devices SecSettingsIntelligence improper access control | 7.3CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-2049 | code-projects Blood Bank System AB+.php cross-site scripting | 5.1CNA v4.0 | 0.4% | 2025-03-06 | |
| CVE-2025-2047 | PHPGurukul Art Gallery Management System search.php cross-site scripting | 5.1CNA v4.0 | 0.4% | 2025-03-06 | |
| CVE-2025-2046 | SourceCodester Best Employee Management System print1.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-06 | |
| CVE-2025-2045 | Incorrect authorization in GitLab | 4.3CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-2044 | code-projects Blood Bank Management System delete_bloodGroup.php SQL injection | 7.2v3.1 | 0.5% | 2025-03-06 | |
| CVE-2025-2043 | LinZhaoguan pb-cms Add New Topic admin#themes deserialization | 7.2v3.1 | 0.5% | 2025-03-06 | |
| CVE-2025-2042 | huang-yk student-manage cross-site request forgery | 6.5v3.1 | 0.3% | 2025-03-06 | |
| CVE-2025-2041 | s-a-zhd Ecommerce-Website-using-PHP shop.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-06 | |
| CVE-2025-2040 | zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine | 5.3CNA v4.0 | 0.5% | 2025-03-06 | |
| CVE-2025-2039 | code-projects Blood Bank Management System delete_members.php SQL injection | 7.2v3.1 | 0.5% | 2025-03-06 | |
| CVE-2025-2038 | code-projects Blood Bank Management System upload exposure of information through directory listing | 6.9CNA v4.0 | 0.6% | 2025-03-06 | |
| CVE-2025-2037 | code-projects Blood Bank Management System delete_requester.php SQL injection | 8.8v3.1 | 0.5% | 2025-03-06 | |
| CVE-2025-2036 | s-a-zhd Ecommerce-Website-using-PHP details.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-06 | |
| CVE-2025-2035 | s-a-zhd Ecommerce-Website-using-PHP customer_register.php unrestricted upload | 9.8v3.1 | 0.6% | 2025-03-06 | |
| CVE-2025-2034 | PHPGurukul Pre-School Enrollment System edit-class.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-06 | |
| CVE-2025-2033 | code-projects Blood Bank Management System view_donor.php SQL injection | 8.8v3.1 | 0.5% | 2025-03-06 | |
| CVE-2025-2032 | ChestnutCMS rename renameFile path traversal | 5.1CNA v4.0 | 0.5% | 2025-03-06 | |
| CVE-2025-2031 | ChestnutCMS upload uploadFile unrestricted upload | 7.6v3.1 | 0.4% | 2025-03-06 | |
| CVE-2025-2030 | Seeyon Zhiyuan Interconnect FE Collaborative Office Platform addUser.jsp SQL injection | 6.9CNA v4.0 | 0.4% | 2025-03-06 | |
| CVE-2025-2029 | MicroDicom DICOM Viewer mDicom.exe memory corruption | 4.8CNA v4.0 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-1979 | ray vulnerable to insertion of sensitive information into log file | 5.7CNA v4.0 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-1696 | Exposure of Proxy Credentials in Docker Desktop Logs | 5.2CNA v4.0 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-1672 | Notibar WordPress plugin authenticated (Administrator+) stored cross-site scripting | 5.5CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-1666 | Cookie banner plugin for WordPress WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-1540 | Incorrect authorization in GitLab | 3.1CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-1383 | Podlove Podcast Publisher WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-03-06 | Fix |
| CVE-2025-0877 | XSS in AtaksAPP's Reservation Management System | 4.7CNA v3.1 | 0.3% | 2025-03-06 | Fix |
| CVE-2025-0337 | Authorization bypass in Now Platform | 7.1CNA v4.0 | 0.4% | 2025-03-06 | Fix |
| CVE-2025-27685 | PrinterLogic Virtual Appliance cleartext storage of sensitive information | 7.5CISA ADP v3.1 | 0.4% | 2025-03-05 | |
| CVE-2025-27684 | PrinterLogic Virtual Appliance debug information exposure | 7.5CISA ADP v3.1 | 0.6% | 2025-03-05 | |
| CVE-2025-27683 | PrinterLogic Virtual Appliance unrestricted file upload | 8.8CISA ADP v3.1 | 0.7% | 2025-03-05 | |
| CVE-2025-27682 | PrinterLogic Virtual Appliance incorrect default permissions | 9.8CISA ADP v3.1 | 0.7% | 2025-03-05 | |
| CVE-2025-27681 | PrinterLogic Virtual Appliance client-side enforcement of server-side security | 9.8CISA ADP v3.1 | 0.8% | 2025-03-05 | |
| CVE-2025-27680 | PrinterLogic Virtual Appliance insufficient verification of data authenticity | 9.1CISA ADP v3.1 | 0.3% | 2025-03-05 | |
| CVE-2025-27679 | PrinterLogic Virtual Appliance cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2025-03-05 | |
| CVE-2025-27678 | PrinterLogic Virtual Appliance code injection | 9.8CISA ADP v3.1 | 1.3% | 2025-03-05 | |
| CVE-2025-27677 | PrinterLogic Virtual Appliance incorrect default permissions | 9.8CISA ADP v3.1 | 0.7% | 2025-03-05 | |
| CVE-2025-27676 | PrinterLogic Virtual Appliance cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2025-03-05 | |
| CVE-2025-27675 | PrinterLogic Virtual Appliance information disclosure | 9.8CISA ADP v3.1 | 0.8% | 2025-03-05 | |
| CVE-2025-27674 | PrinterLogic Virtual Appliance hard-coded cryptographic key | 9.8CISA ADP v3.1 | 0.7% | 2025-03-05 | |
| CVE-2025-27673 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017. | 9.1CISA ADP v3.1 | 0.5% | 2025-03-05 | |
| CVE-2025-27672 | PrinterLogic Virtual Appliance improper authentication | 9.8CISA ADP v3.1 | 0.6% | 2025-03-05 | |
| CVE-2025-27671 | PrinterLogic Virtual Appliance authentication bypass by spoofing | 9.8CISA ADP v3.1 | 0.6% | 2025-03-05 | |
| CVE-2025-27670 | PrinterLogic Virtual Appliance improper signature verification | 9.8CISA ADP v3.1 | 0.4% | 2025-03-05 | |
| CVE-2025-27669 | PrinterLogic Virtual Appliance denial of service | 7.5CISA ADP v3.1 | 0.5% | 2025-03-05 | |
| CVE-2025-27668 | PrinterLogic Virtual Appliance inclusion of untrusted functionality | 9.8CISA ADP v3.1 | 0.7% | 2025-03-05 | |
| CVE-2025-27667 | PrinterLogic Virtual Appliance observable discrepancy | 9.8CISA ADP v3.1 | 0.7% | 2025-03-05 | |
| CVE-2025-27666 | PrinterLogic Virtual Appliance missing authorization | 9.8CISA ADP v3.1 | 0.6% | 2025-03-05 | |
| CVE-2025-27665 | PrinterLogic Virtual Appliance protection mechanism failure | 9.8CISA ADP v3.1 | 0.7% | 2025-03-05 | |
| CVE-2025-27664 | PrinterLogic Virtual Appliance cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2025-03-05 | |
| CVE-2025-27663 | PrinterLogic Virtual Appliance weak password requirements | 9.8CISA ADP v3.1 | 0.4% | 2025-03-05 | |
| CVE-2025-27662 | PrinterLogic Virtual Appliance plaintext password storage | 9.8CISA ADP v3.1 | 0.6% | 2025-03-05 | |
| CVE-2025-27661 | PrinterLogic Virtual Appliance session fixation | 9.1CISA ADP v3.1 | 0.5% | 2025-03-05 | |
| CVE-2025-27660 | PrinterLogic Virtual Appliance cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2025-03-05 | |
| CVE-2025-27659 | PrinterLogic Virtual Appliance SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2025-03-05 | |
| CVE-2025-27658 | PrinterLogic Virtual Appliance authentication bypass | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27657 | PrinterLogic Virtual Appliance code injection | 9.8CISA ADP v3.1 | 1.7% | 2025-03-05 | |
| CVE-2025-27656 | PrinterLogic Virtual Appliance plaintext password storage | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27655 | PrinterLogic Virtual Appliance server-side request forgery | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27654 | PrinterLogic Virtual Appliance cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2025-03-05 | |
| CVE-2025-27653 | PrinterLogic Virtual Appliance cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2025-03-05 | |
| CVE-2025-27652 | PrinterLogic Virtual Appliance server-side request forgery | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27651 | PrinterLogic Virtual Appliance server-side request forgery | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27650 | PrinterLogic Virtual Appliance insufficiently protected credentials | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27649 | PrinterLogic Virtual Appliance improper access control | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27648 | PrinterLogic Virtual Appliance insufficiently protected credentials | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27647 | PrinterLogic Virtual Appliance missing authentication | 9.8CISA ADP v3.1 | 1.0% | 2025-03-05 | |
| CVE-2025-27646 | PrinterLogic Virtual Appliance improper access control | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27645 | PrinterLogic Virtual Appliance incorrect authorization | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27644 | PrinterLogic Virtual Appliance improper privilege management | 7.8CISA ADP v3.1 | 0.2% | 2025-03-05 | |
| CVE-2025-27643 | PrinterLogic Virtual Appliance hard-coded credentials | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27642 | PrinterLogic Virtual Appliance missing authentication | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27641 | PrinterLogic Virtual Appliance improper authentication | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27640 | PrinterLogic Virtual Appliance SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2025-03-05 | |
| CVE-2025-27639 | PrinterLogic Virtual Appliance improper privilege management | 8.8CISA ADP v3.1 | 0.8% | 2025-03-05 | |
| CVE-2025-27638 | PrinterLogic Virtual Appliance hard-coded password | 9.8CISA ADP v3.1 | 0.9% | 2025-03-05 | |
| CVE-2025-27637 | PrinterLogic Virtual Appliance cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2025-03-05 | |
| CVE-2025-27625 | Jenkins open redirect | 4.3CISA ADP v3.1 | 0.6% | 2025-03-05 | Fix |
| CVE-2025-27624 | Jenkins cross-site request forgery (CSRF) | 5.4CISA ADP v3.1 | 0.4% | 2025-03-05 | Fix |
| CVE-2025-27623 | Jenkins cleartext storage of sensitive information | 4.3CISA ADP v3.1 | 0.3% | 2025-03-05 | Fix |
| CVE-2025-27622 | Jenkins cleartext storage of sensitive information | 4.3CISA ADP v3.1 | 0.8% | 2025-03-05 | Fix |
| CVE-2025-27517 | Volt allows RCE via User-Crafted requests | 9.3CNA v4.0 | 0.6% | 2025-03-05 | Fix |
| CVE-2025-27516 | Jinja sandbox breakout through attr filter selecting format method | 5.4CNA v4.0 | 0.5% | 2025-03-05 | Fix |
| CVE-2025-27515 | Laravel has a File Validation Bypass | 6.9CNA v4.0 | 0.7% | 2025-03-05 | Exploit codeFix |
| CVE-2025-27513 | opentelemetry-dotnet OpenTelemetry .NET has a denial of service (DoS) vulnerability in API Package | 7.5CNA v3.1 | 0.5% | 2025-03-05 | Fix |
| CVE-2025-27508 | Emissary use of a broken or risky cryptographic algorithm | 7.5CNA v3.1 | 0.2% | 2025-03-05 | Fix |
| CVE-2025-27497 | OpenDJ denial of service (DoS) using alias loop | 8.7CNA v4.0 | 0.4% | 2025-03-05 | Fix |
| CVE-2025-27412 | REDAXO allows authenticated reflected cross-site scripting packages installation | 6.1CNA v3.1 | 0.3% | 2025-03-05 | Fix |
| CVE-2025-27411 | REDAXO allows arbitrary file upload in the mediapool page | 5.4CNA v3.1 | 0.3% | 2025-03-05 | Fix |
| CVE-2025-25634 | Tenda AC15 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.3% | 2025-03-05 | |
| CVE-2025-25632 | Tenda AC15 command injection | 9.8CISA ADP v3.1 | 1.7% | 2025-03-05 | |
| CVE-2025-25362 | Spacy-LLM server-side template injection (SSTI) | 9.8CISA ADP v3.1 | 0.8% | 2025-03-05 | Fix |
| CVE-2025-25015 | Kibana arbitrary code execution via prototype pollution | 9.9CNA v3.1 | 1.3% | 2025-03-05 | Fix |
| CVE-2025-24924 | GMOD Apollo missing authentication for critical function | 9.3CNA v4.0 | 0.6% | 2025-03-05 | Fix |
| CVE-2025-24521 | Keysight Ixia Vision Product Family improper restriction of XML external entity reference | 6.9CNA v4.0 | 0.4% | 2025-03-05 | Fix |
| CVE-2025-24494 | Keysight Ixia Vision Product Family path traversal | 8.6CNA v4.0 | 1.2% | 2025-03-05 | Fix |
| CVE-2025-23416 | Keysight Ixia Vision Product Family path traversal | 6.9CNA v4.0 | 0.5% | 2025-03-05 | Fix |
| CVE-2025-23410 | GMOD Apollo relative path traversal | 9.3CNA v4.0 | 0.7% | 2025-03-05 | Fix |
| CVE-2025-22493 | Improper cookie attributes in Foreseer Reporting Software (FRS) | 5.6CNA v3.1 | 0.1% | 2025-03-05 | Fix |
| CVE-2025-22212 | Extension tassos.gr SQL injection in Convert Forms component for Joomla | 2.7CISA ADP v3.1 | 0.3% | 2025-03-05 | |
| CVE-2025-21095 | Keysight Ixia Vision Product Family path traversal | 6.9CNA v4.0 | 0.6% | 2025-03-05 | Fix |
| CVE-2025-21092 | GMOD Apollo incorrect privilege assignment | 7.1CNA v4.0 | 0.3% | 2025-03-05 | Fix |
| CVE-2025-20208 | Cisco TelePresence Management Suite (TMS) cross-site scripting | 4.6CNA v3.1 | 0.3% | 2025-03-05 | Fix |
| CVE-2025-20206 | Cisco Secure Client for Windows with VPN Posture (HostScan) Module DLL hijacking | 7.1CNA v3.1 | 0.2% | 2025-03-05 | Fix |
| CVE-2025-20002 | GMOD Apollo generation of error message containing sensitive information | 6.9CNA v4.0 | 0.3% | 2025-03-05 | Fix |
| CVE-2025-2003 | Devolutions Server PAM vaults incorrect authorization | 7.1CISA ADP v3.1 | 0.4% | 2025-03-05 | Fix |
| CVE-2025-1967 | code-projects Blood Bank Management System donor.php cross-site scripting | 5.1CNA v4.0 | 0.5% | 2025-03-05 | |
| CVE-2025-1966 | PHPGurukul Pre-School Enrollment System index.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-05 | |
| CVE-2025-1965 | Projectworlds Online Hotel Booking login.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-05 | |
| CVE-2025-1964 | Projectworlds Online Hotel Booking booknow.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-05 | |
| CVE-2025-1963 | Projectworlds Online Hotel Booking reservation.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-05 | |
| CVE-2025-1962 | Projectworlds Online Hotel Booking addroom.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-05 | |
| CVE-2025-1923 | Google Chrome Permission Prompts inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2025-03-05 | Fix |
| CVE-2025-1922 | Google Chrome Selection inappropriate implementation | 4.3CISA ADP v3.1 | 0.3% | 2025-03-05 | Fix |
| CVE-2025-1921 | Google Chrome Media Stream inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2025-03-05 | Fix |
| CVE-2025-1919 | Google Chrome Media out-of-bounds read | 8.8CISA ADP v3.1 | 0.4% | 2025-03-05 | Fix |
| CVE-2025-1918 | Google Chrome PDFium out-of-bounds read | 8.8CISA ADP v3.1 | 0.4% | 2025-03-05 | Fix |
| CVE-2025-1917 | Google Chrome Browser UI inappropriate implementation | 4.3CISA ADP v3.1 | 0.3% | 2025-03-05 | Fix |
| CVE-2025-1916 | Google Chrome Profiles use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2025-03-05 | Fix |
| CVE-2025-1915 | Google Chrome DevTools path traversal | 8.1CISA ADP v3.1 | 0.4% | 2025-03-05 | Fix |
| CVE-2025-1914 | Google Chrome V8 out-of-bounds read | 8.8CISA ADP v3.1 | 0.4% | 2025-03-05 | Fix |
| CVE-2025-1714 | Perforce Gliffy sign-up workflow information disclosure | 6.9CNA v4.0 | 0.4% | 2025-03-05 | Fix |
| CVE-2025-1702 | Ultimate Member WordPress plugin unauthenticated SQL injection via search parameter | 7.5CNA v3.1 | 0.7% | 2025-03-05 | Fix |
| CVE-2025-1515 | WP Real Estate Manager WordPress plugin authentication bypass via account takeover | 9.8CNA v3.1 | 0.6% | 2025-03-05 | |
| CVE-2025-1463 | Spreadsheet Integration WordPress plugin cross-site request forgery to arbitrary post Publish | 4.3CNA v3.1 | 0.2% | 2025-03-05 | Fix |
| CVE-2025-1435 | bbPress WordPress plugin cross-site request forgery to limited privilege escalation | 6.3CNA v3.1 | 0.2% | 2025-03-05 | Fix |
| CVE-2025-1393 | Weidmueller: Authentication vulnerability due to hard-coded credentials | 9.8CNA v3.1 | 0.6% | 2025-03-05 | Fix |
| CVE-2025-1316 | Edimax IC-7100 IP Camera OS command injection | 9.8v3.1 | 74.5% | 2025-03-05 | KEVEmerging Threats |
| CVE-2025-1008 | Recently Purchased Products For Woo WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-03-05 | Fix |
| CVE-2025-0990 | I Am Gloria WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.1% | 2025-03-05 | |
| CVE-2025-0956 | WooCommerce Recover Abandoned Cart WordPress plugin unauthenticated PHP object injection | 8.1CNA v3.1 | 0.6% | 2025-03-05 | Fix |
| CVE-2025-0954 | WP Online Contract WordPress plugin missing authorization to unauthenticated settings import | 6.5CNA v3.1 | 0.3% | 2025-03-05 | |
| CVE-2025-27521 | Huawei HarmonyOS vulnerability of improper access permission in the process management module | 6.8CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-27510 | RCE in the package conda-forge-metadata | 9.3CNA v4.0 | 0.6% | 2025-03-04 | |
| CVE-2025-27507 | IDOR vulnerabilities in ZITADEL's Admin API that Primarily Impact LDAP Configurations | 9.0CNA v3.1 | 0.6% | 2025-03-04 | Fix |
| CVE-2025-27426 | Mozilla Firefox Mobile iOS Full Address Bar Spoof using Server-Side Redirect to internal error page | 5.4CISA ADP v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-27425 | Mozilla Firefox QR code user confirmation bypass with invalid protocol | 4.3CISA ADP v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-27424 | Mozilla Firefox Mobile iOS Address Bar Spoof using Server-Side Redirect to non-http Scheme | 4.3CISA ADP v3.1 | 0.3% | 2025-03-04 | Fix |
| CVE-2025-27402 | Tuleap is missing CSRF protections on tracker fields administrative operations | 4.6CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-27401 | In Tuleap, deleting a report can delete criteria filters in other reports | 4.6CNA v3.1 | 0.3% | 2025-03-04 | Fix |
| CVE-2025-27221 | URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+ | 5.3v3.1 | 0.5% | 2025-03-04 | Fix |
| CVE-2025-27220 | CGI has regular expression denial of service (ReDoS) potential in Util#escapeElement | 7.5v3.1 | 0.7% | 2025-03-04 | Fix |
| CVE-2025-27219 | CGI has denial of service (DoS) potential in Cookie.parse | 7.5v3.1 | 0.8% | 2025-03-04 | Fix |
| CVE-2025-27156 | Tuleap allows content injection via emails sent by the mass emailing features | 4.1CNA v3.1 | 0.3% | 2025-03-04 | Fix |
| CVE-2025-27155 | matrix-org pinecone in-memory stored cross-site scripting (XSS) vulnerability in pineconesim | 6.1CNA v3.1 | 0.2% | 2025-03-04 | |
| CVE-2025-27150 | Tuleap dumps the Redis password into the generated troubleshooting archives | 5.3CNA v3.1 | 0.4% | 2025-03-04 | Fix |
| CVE-2025-27111 | Escape sequence injection vulnerability in Rack lead to possible log injection | 6.9CNA v4.0 | 0.8% | 2025-03-04 | Fix |
| CVE-2025-26849 | Docusnap There is a hard-coded cryptographic key | 4.3CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-26320 | T0MER Broadlinkmanager OS command injection | 6.5CISA ADP v3.1 | 0.9% | 2025-03-04 | |
| CVE-2025-26319 | FlowiseAI Flowise arbitrary file upload | 9.8CISA ADP v3.1 | 55.9% | 2025-03-04 | Reported exploitedNucleiEmerging Threats |
| CVE-2025-26318 | TSplus Remote Access information disclosure | 5.8CNA v3.1 | 1.0% | 2025-03-04 | Exploit codeFix |
| CVE-2025-26202 | DZS Router Web Interface WPA/WAPI passphrase field vulnerability | 4.3CISA ADP v3.1 | 0.7% | 2025-03-04 | |
| CVE-2025-26182 | xxyopen Novel-Plus code injection | 6.5CISA ADP v3.1 | 0.5% | 2025-03-04 | |
| CVE-2025-26136 | wangl1989 mysiteforme SQL injection | 9.8CISA ADP v3.1 | 0.4% | 2025-03-04 | |
| CVE-2025-26091 | Team Password Manager TeamPasswordManager v12.162.284 and cross-site scripting | 4.6CISA ADP v3.1 | 0.3% | 2025-03-04 | |
| CVE-2025-25426 | guchengwuyue yshopmall SQL injection | 7.2CISA ADP v3.1 | 0.4% | 2025-03-04 | |
| CVE-2025-24309 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds write | 3.8CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-24301 | OpenHarmony Arkcompiler Ets Runtime has an UAF | 3.8CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-23420 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds write | 3.8CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-23418 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds read | 3.3CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-23414 | OpenHarmony Arkcompiler Ets Runtime has an UAF | 3.8CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-23409 | OpenHarmony communication Dsoftbus has an UAF | 3.8CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-23368 | Wildfly Elytron integration susceptible to brute force attacks via CLI | 8.1CNA v3.1 | 0.9% | 2025-03-04 | Fix |
| CVE-2025-23240 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds write | 3.8CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-23234 | OpenHarmony Arkcompiler Ets Runtime has a buffer overflow | 3.3CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-22897 | OpenHarmony Arkcompiler Ets Runtime has a buffer overflow | 3.3CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-22847 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds read | 3.3CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-22841 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds read | 3.3CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-22837 | OpenHarmony arkcompiler Ets Runtime has a null pointer dereference | 3.3CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-22835 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds write | 3.8CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-22443 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds read | 3.3CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-22226 | VMware ESXi, Workstation, and Fusion information disclosure | 7.1CNA v3.1 | 1.8% | 2025-03-04 | KEVKCVFix |
| CVE-2025-22225 | VMware ESXi arbitrary write | 8.2CNA v3.1 | 1.0% | 2025-03-04 | KEVKCVFix |
| CVE-2025-22224 | VMware ESXi and Workstation TOCTOU race condition | 9.3CNA v3.1 | 1.6% | 2025-03-04 | KEVKCVFix |
| CVE-2025-21098 | OpenHarmony Liteos-A has an insecure storage of sensitive information | 5.5CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-21097 | OpenHarmony arkcompiler Ets Runtime has a null pointer dereference | 3.3CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-21089 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds read | 3.3CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-21084 | OpenHarmony arkcompiler Ets Runtime has an null pointer dereference | 3.8CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-20626 | OpenHarmony Arkcompiler Ets Runtime has an UAF | 3.8CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-20091 | OpenHarmony communication Dsoftbus has an UAF | 3.8CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-20081 | OpenHarmony communication Dsoftbus has an UAF | 3.8CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-20042 | OpenHarmony Liteos-A has an out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-20024 | OpenHarmony Arkcompiler Ets Runtime has an integer overflow | 3.8CNA v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-20021 | OpenHarmony Arkcompiler Ets Runtime has an out-of-bounds read | 3.3CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-20011 | OpenHarmony Communication Dsoftbus has a memory leak | 3.3CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-1969 | Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center | 5.3CNA v4.0 | 0.3% | 2025-03-04 | Fix |
| CVE-2025-1961 | SourceCodester Best Church Management Software web_crud.php SQL injection | 7.5v3.1 | 0.3% | 2025-03-04 | |
| CVE-2025-1959 | Codezips Gym Management System change_s_pwd.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-04 | |
| CVE-2025-1958 | aaluoxiang oa_system address-mapper.xml SQL injection | 9.8v3.1 | 0.6% | 2025-03-04 | |
| CVE-2025-1957 | code-projects Blood Bank System o+.php cross-site scripting | 5.1CNA v4.0 | 0.4% | 2025-03-04 | |
| CVE-2025-1956 | code-projects Shopping Portal Login index.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-04 | |
| CVE-2025-1955 | code-projects Online Class and Exam Scheduling System profile.php cross-site scripting | 5.4v3.1 | 0.4% | 2025-03-04 | |
| CVE-2025-1954 | PHPGurukul Human Metapneumovirus Testing Management System login.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-04 | |
| CVE-2025-1953 | vLLM AIBrix Prefix Caching hash.go random values | 2.1CNA v4.0 | 0.3% | 2025-03-04 | |
| CVE-2025-1952 | PHPGurukul Restaurant Table Booking System password-recovery.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-04 | |
| CVE-2025-1949 | ZZCMS URL register_nodb.php cross-site scripting | 6.1v3.1 | 0.5% | 2025-03-04 | |
| CVE-2025-1947 | hzmanyun Education and Training System UploadImageController.java scorm command injection | 9.8v3.1 | 5.2% | 2025-03-04 | |
| CVE-2025-1946 | hzmanyun Education and Training System exportPDF command injection | 9.8v3.1 | 5.2% | 2025-03-04 | |
| CVE-2025-1943 | Mozilla memory safety bugs fixed in Firefox 136 and Thunderbird 136 | 8.2CISA ADP v3.1 | 0.4% | 2025-03-04 | Fix |
| CVE-2025-1942 | Mozilla Firefox disclosure of uninitialized memory when .toUpperCase causes string to get longer | 9.8CISA ADP v3.1 | 0.5% | 2025-03-04 | Fix |
| CVE-2025-1941 | Mozilla Lock screen setting bypass in Firefox Focus for Android | 9.1CISA ADP v3.1 | 0.4% | 2025-03-04 | Fix |
| CVE-2025-1940 | Mozilla Firefox android Intent confirmation prompt tapjacking using Select options | 7.1CISA ADP v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-1939 | Mozilla Firefox Tapjacking in Android Custom Tabs using transition animations | 3.9CISA ADP v3.1 | 0.2% | 2025-03-04 | Fix |
| CVE-2025-1938 | Mozilla memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR, and Thunderbird | 6.5CISA ADP v3.1 | 0.3% | 2025-03-04 | Fix |
| CVE-2025-1937 | Mozilla Firefox memory safety bugs | 7.5CISA ADP v3.1 | 0.6% | 2025-03-04 | Fix |
| CVE-2025-1936 | Mozilla Firefox and Thunderbird jar URL handler vulnerability | 7.3CISA ADP v3.1 | 0.4% | 2025-03-04 | Fix |
| CVE-2025-1935 | Mozilla Firefox clickjacking the registerProtocolHandler info-bar | 4.3CISA ADP v3.1 | 0.3% | 2025-03-04 | Fix |
| CVE-2025-1934 | Mozilla Firefox unexpected GC during RegExp bailout processing | 6.5CISA ADP v3.1 | 0.5% | 2025-03-04 | Fix |
| CVE-2025-1933 | Mozilla Firefox JIT corruption of WASM i32 return values on 64-bit CPUs | 7.6CISA ADP v3.1 | 0.3% | 2025-03-04 | Fix |
| CVE-2025-1932 | Mozilla Firefox inconsistent comparator in XSLT sorting led to out-of-bounds access | 8.1CISA ADP v3.1 | 0.4% | 2025-03-04 | Fix |
| CVE-2025-1931 | Mozilla Firefox use-after-free in WebTransportChild | 7.5CISA ADP v3.1 | 0.5% | 2025-03-04 | Fix |
| CVE-2025-1930 | Mozilla Firefox AudioIPC StreamData could trigger a use-after-free in the Browser process | 8.8CISA ADP v3.1 | 0.4% | 2025-03-04 | Fix |
| CVE-2025-1925 | Open5GS AMF nsmf-handler.c amf_nsmf_pdusession_handle_update_sm_context denial of service | 7.5v3.1 | 0.8% | 2025-03-04 | |
| CVE-2025-1906 | PHPGurukul Restaurant Table Booking System profile.php SQL injection | 9.8v3.1 | 0.4% | 2025-03-04 | |
| CVE-2025-1905 | SourceCodester Employee Management System employee.php cross-site scripting | 6.1v3.1 | 0.3% | 2025-03-04 | |
| CVE-2025-1904 | code-projects Blood Bank System A+.php cross-site scripting | 6.1v3.1 | 0.3% | 2025-03-04 | |
| CVE-2025-1903 | Codezips Online Shopping Website cart_add.php SQL injection | 9.8v3.1 | 0.7% | 2025-03-04 | |
| CVE-2025-1902 | PHPGurukul Student Record System password-recovery.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-04 | |
| CVE-2025-1901 | PHPGurukul Restaurant Table Booking System check_availability.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-04 | |
| CVE-2025-1900 | PHPGurukul Restaurant Table Booking System add-table.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-04 | |
| CVE-2025-1899 | Tenda TX3 setPptpUserList buffer overflow | 7.5v3.1 | 0.7% | 2025-03-04 | |
| CVE-2025-1898 | Tenda TX3 openSchedWifi buffer overflow | 7.5v3.1 | 0.9% | 2025-03-04 | |
| CVE-2025-1897 | Tenda TX3 SetNetControlList buffer overflow | 7.5v3.1 | 1.2% | 2025-03-04 | Emerging Threats |
| CVE-2025-1896 | Tenda TX3 SetStaticRouteCfg buffer overflow | 7.5v3.1 | 0.9% | 2025-03-04 | |
| CVE-2025-1895 | Tenda TX3 setMacFilterCfg buffer overflow | 7.5v3.1 | 0.9% | 2025-03-04 | |
| CVE-2025-1894 | PHPGurukul Restaurant Table Booking System search-result.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-04 | |
| CVE-2025-1893 | Open5GS AMF gmm-sm.c gmm_state_authentication denial of service | 7.5v3.1 | 0.9% | 2025-03-04 | |
| CVE-2025-1892 | shishuocms Directory Deletion page add.json cross-site scripting | 4.8v3.1 | 0.4% | 2025-03-04 | |
| CVE-2025-1891 | shishuocms cross-site request forgery | 8.8NVD v3.1 | 0.3% | 2025-03-04 | |
| CVE-2025-1890 | shishuocms ManageUpLoadAction.java handleRequest unrestricted upload | 9.8v3.1 | 0.5% | 2025-03-04 | |
| CVE-2025-1695 | F5 NGINX Unit Java language module denial of service | 6.9CNA v4.0 | 0.6% | 2025-03-04 | Fix |
| CVE-2025-1639 | crowdyTheme Animation Addons for Elementor Pro plugin installation handler missing authorization | 8.8v3.1 | 1.0% | 2025-03-04 | Exploit codeFix |
| CVE-2025-1425 | PocketBook InkPad Color 3 File Read through Improper Sudo Privilege Management | 4.7CNA v4.0 | 0.2% | 2025-03-04 | |
| CVE-2025-1424 | PocketBook InkPad Color 3 privilege escalation through SUID Binary and Developer Mode | 8.6CNA v4.0 | 0.2% | 2025-03-04 | |
| CVE-2025-1321 | teachPress WordPress plugin authenticated (Contributor+) SQL injection | 8.8v3.1 | 0.5% | 2025-03-04 | Fix |
| CVE-2025-1307 | Newscrunch WordPress theme authenticated (Subscriber+) arbitrary file upload | 9.8CNA v3.1 | 2.2% | 2025-03-04 | Exploit codeFix |
| CVE-2025-1306 | Newscrunch WordPress theme cross-site request forgery to arbitrary file upload | 8.8CNA v3.1 | 0.5% | 2025-03-04 | Exploit codeFix |
| CVE-2025-1260 | Arista Networks EOS OpenConfig gNOI request handling improper access control | 9.1CNA v3.1 | 0.4% | 2025-03-04 | |
| CVE-2025-1259 | Arista Networks EOS OpenConfig gNOI request handling improper access control | 7.7CNA v3.1 | 0.4% | 2025-03-04 | |
| CVE-2025-1080 | The Document Foundation LibreOffice macro URL arbitrary script execution | 7.2CNA v4.0 | 0.3% | 2025-03-04 | Fix |
| CVE-2025-0958 | Ultimate WordPress Auction plugin missing authorization to arbitrary post deletion | 6.3v3.1 | 0.4% | 2025-03-04 | Fix |
| CVE-2025-0912 | Donations Widget WordPress plugin PHP object injection | 9.8CNA v3.1 | 1.4% | 2025-03-04 | Fix |
| CVE-2025-0587 | OpenHarmony Arkcompiler Ets Runtime has an integer overflow | 3.8CNA v3.1 | 0.2% | 2025-03-04 | |
| CVE-2025-0512 | Structured Content (JSON-LD) #wpsc WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-03-04 | Fix |
| CVE-2025-0433 | Master Addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-03-04 | Fix |
| CVE-2025-0370 | WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin stored cross-site scripting | 5.4v3.1 | 35.6% | 2025-03-04 | Fix |
| CVE-2025-0360 | Axis Communications AXIS OS incorrect authorization | 7.8CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-0359 | Axis Communications AXIS OS incorrect authorization | 8.5CNA v3.1 | 0.1% | 2025-03-04 | Fix |
| CVE-2025-27590 | Oxidized Web path traversal | 9.8v3.1 | 27.4% | 2025-03-03 | Exploit codeFix |
| CVE-2025-27585 | Serosoft Academia Student Information System Serosoft Solutions Pvt Ltd stored cross-site scripting | 5.4CISA ADP v3.1 | 0.2% | 2025-03-03 | |
| CVE-2025-27584 | Serosoft Academia Student Information System Serosoft Solutions Pvt Ltd stored cross-site scripting | 5.4CISA ADP v3.1 | 0.2% | 2025-03-03 | |
| CVE-2025-27583 | Serosoft Academia Student Information System missing authorization | 9.1CISA ADP v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-27579 | Bitaxe ESP-MIner cross-site request forgery | 5.4CNA v3.1 | 0.2% | 2025-03-03 | Fix |
| CVE-2025-27501 | openziti ziti-console server side request forgery in Ziti console | 8.6CNA v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-27500 | openziti ziti-console cross-site scripting potential in Ziti console | 8.2CNA v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-27499 | WeGIA has a stored cross-site scripting in processa_edicao_socio.php | 6.4CNA v4.0 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-27498 | AEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failure | 5.6CNA v4.0 | 0.1% | 2025-03-03 | Fix |
| CVE-2025-27423 | Improper input validation in Vim | 7.1CNA v3.1 | 22.5% | 2025-03-03 | Fix |
| CVE-2025-27422 | FACTION allows authentication bypass via User Creation | 7.5CNA v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-27421 | Goroutine leak in Abacus SSE Implementation | 7.5CNA v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-27420 | WeGIA contains a stored cross-site scripting in atendido_parentesco_adicionar.php | 6.4CNA v4.0 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-27419 | Denial of service (DoS) in WeGIA due to Recursive Crawling of Dynamic URLs | 9.2CNA v4.0 | 0.6% | 2025-03-03 | Fix |
| CVE-2025-27418 | WeGIA contains a stored cross-site scripting in adicionar_tipo_atendido.php | 6.4CNA v4.0 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-27417 | WeGIA Contains a stored cross-site scripting in adicionar_status_atendido.php | 6.4CNA v4.0 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-27371 | IETF RFC 7523 authentication bypass | 6.9CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-27370 | OpenID Connect authentication bypass | 6.9CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-27279 | Flashfader WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-03 | |
| CVE-2025-27278 | AcuGIS Leaflet Maps WordPress plugin Multiple cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-03 | |
| CVE-2025-27275 | WOO Codice Fiscale WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-03 | |
| CVE-2025-27274 | GPX Viewer WordPress plugin path traversal | 4.9v3.1 | 0.5% | 2025-03-03 | Fix |
| CVE-2025-27273 | Affiliate Links Manager WordPress plugin reflected cross-site scripting (XSS) | 5.8CNA v3.1 | 0.2% | 2025-03-03 | |
| CVE-2025-27271 | DB Tables Import/Export WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-03 | |
| CVE-2025-27270 | Residential Address Detection WordPress plugin arbitrary option update to privilege escalation | 9.8CNA v3.1 | 0.5% | 2025-03-03 | Fix |
| CVE-2025-27269 | htaccess Login block WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-27268 | Small Package Quotes Worldwide Express Edition WordPress plugin SQL injection | 9.3CNA v3.1 | 0.5% | 2025-03-03 | Fix |
| CVE-2025-27264 | Doctor Appointment Booking WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.8% | 2025-03-03 | |
| CVE-2025-27263 | Doctor Appointment Booking WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-27099 | Tuleap allows XSS via the tracker names used in the semantic timeframe deletion message | 4.8CNA v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-27094 | Tuleap allows default values to be cleared from field configuration | 5.4CNA v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-26999 | ProfileGrid WordPress plugin PHP object injection | 8.8CNA v3.1 | 0.7% | 2025-03-03 | Fix |
| CVE-2025-26994 | softdiscover Zigaform stored cross-site scripting | 6.1NVD v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-26989 | Zigaform Form Builder Lite WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-26988 | SMS Alert Order Notifications WooCommerce WordPress plugin SQL injection | 7.5NVD v3.1 | 0.5% | 2025-03-03 | Fix |
| CVE-2025-26984 | SMS Alert Order Notifications WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-26970 | Ark Theme Core WordPress plugin unauthenticated remote code execution (RCE) | 9.8v3.1 | 0.7% | 2025-03-03 | Fix |
| CVE-2025-26967 | Events Calendar for GeoDirectory WordPress plugin PHP object injection | 8.8v3.1 | 0.7% | 2025-03-03 | Fix |
| CVE-2025-26918 | Small Package Quotes Unishippers Edition WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-26917 | WP Templata WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-26914 | Variable Inspector WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-26885 | Assistant WordPress plugin PHP object injection | 7.2CNA v3.1 | 0.7% | 2025-03-03 | Fix |
| CVE-2025-26879 | s2Member WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-26589 | IE CSS3 Support WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-26588 | TTT Crop WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-26587 | sidebarTabs WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-26586 | Events Planner WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-26585 | DL Leadback WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-26563 | Rocket Mobile WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-26557 | ViperBar WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-26540 | Helloprint WordPress plugin arbitrary file deletion | 7.7CNA v3.1 | 0.7% | 2025-03-03 | Fix |
| CVE-2025-26535 | Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin improper neutralization | 9.3CNA v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-26534 | Helloprint WordPress plugin arbitrary file deletion | 8.6CNA v3.1 | 0.7% | 2025-03-03 | Fix |
| CVE-2025-26206 | Selldone StoreFront cross-site request forgery | 9.0CISA ADP v3.1 | 0.6% | 2025-03-03 | |
| CVE-2025-25967 | Ddsn Acora Cms cross-site request forgery | 8.8v3.1 | 0.6% | 2025-03-03 | Exploit code |
| CVE-2025-25953 | Serosoft Academia Student Information System missing authorization | 6.5CISA ADP v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25952 | Serosoft Academia Student Information System insecure direct object reference | 6.5CISA ADP v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25951 | Serosoft Academia Student Information System information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25950 | Serosoft Academia Student Information System improper access control | 8.1CISA ADP v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25949 | Academiaerp Student Information System stored cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-25948 | Academiaerp Student Information System improper access control | 9.1CISA ADP v3.1 | 6.9% | 2025-03-03 | |
| CVE-2025-25939 | Reprisesoftware Reprise License Manager cross-site scripting | 6.1v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-25303 | Server-side request forgery (SSRF) in MouseTooltipTranslator | 6.9CNA v4.0 | 0.5% | 2025-03-03 | |
| CVE-2025-25302 | Rembg CORS middleware origin validation error | 6.5NVD v3.1 | 0.2% | 2025-03-03 | Fix |
| CVE-2025-25301 | Rembg allows SSRF via /API/remove | 7.5NVD v3.1 | 0.5% | 2025-03-03 | Fix |
| CVE-2025-25280 | Century Systems FutureNet AS-250/S FutureNet AS series buffer overflow | 5.3CNA v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-25185 | binary-husky gpt_academic link following | 7.5CNA v3.1 | 0.6% | 2025-03-03 | |
| CVE-2025-25170 | Migrate Posts WordPress plugin post based cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25169 | Authors Autocomplete Meta Box WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25165 | richardgabriel Staff Directory Plugin Company Directory stored cross-site scripting | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25164 | Meta Accelerator WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25162 | Sports Rankings and Lists WordPress plugin arbitrary file download | 7.1CNA v3.1 | 0.8% | 2025-03-03 | |
| CVE-2025-25161 | WP Find Your Nearest WordPress plugin CSRF to settings Change | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25158 | Uncomplicated SEO WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-25157 | WP Church Center WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-25150 | uListing WordPress plugin SQL injection | 9.3CNA v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-25142 | WP Less Compiler WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-25137 | Social Links WordPress plugin stored cross-site scripting | 6.5CNA v3.1 | 0.1% | 2025-03-03 | |
| CVE-2025-25133 | WP Frontend Submit WordPress plugin reflected cross-site scripting | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-25132 | Visitor Details WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-25131 | RJ Quickcharts WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-25130 | Delete Comments By Status WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25129 | Callback Request WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-25127 | Contact Us By Lord Linus WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-25124 | Status Updater WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-25122 | WizShop WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-25121 | Theme Options Z WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2025-03-03 | |
| CVE-2025-25119 | Woocommerce osCommerce Sync WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-25118 | Top Bar WordPress plugin cross-site scripting | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-25115 | Like dislike plus counter WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25114 | User Role WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25113 | Implied Cookie Consent WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25112 | Social Links WordPress plugin SQL injection | 7.6CNA v3.1 | 0.7% | 2025-03-03 | |
| CVE-2025-25109 | Vehicle Manager WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.8% | 2025-03-03 | |
| CVE-2025-25108 | SW Plus WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-25102 | Yahoo BOSS WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25099 | Appointment Buddy Widget By Accrete WordPress plugin reflected cross-site scripting | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25092 | All push notification for WP WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25090 | Dreamstime Stock Photos WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-25089 | Image Rotator WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25087 | seekXL Snapr WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25084 | UniTimetable WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25083 | EP4 More Embeds WordPress plugin stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-25070 | Album Reviewer WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-24846 | Century Systems FutureNet AS-250/S FutureNet AS series authentication bypass | 7.5CNA v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-24758 | CM Map Locations WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-24694 | CM Pop-Up Banners WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-24654 | Squirrly SEO WordPress plugin broken access control | 8.8v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-24023 | Observable response discrepancy in Flask-AppBuilder | 3.7CNA v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-23956 | WP Easy Post Mailer WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23945 | Popliup WordPress plugin local file inclusion | 7.5CNA v3.1 | 1.0% | 2025-03-03 | |
| CVE-2025-23904 | Rebrand Fluent Forms WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23903 | Local Shipping Labels for WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23883 | Stray Random Quotes WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23881 | LJ Custom Menu Links WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23879 | Easy Automatic Newsletter Lite WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23852 | First Comment Redirect WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23850 | Mojo Under Construction WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23847 | Site Launcher WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23843 | WP-HR Manager WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-23829 | Woo Update Variations In Cart WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23814 | CRUDLab Like Box WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23813 | Guten Free Options WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23763 | WAH Forms WordPress plugin sensitive data exposure | 6.5CNA v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-23762 | DsgnWrks Twitter Importer WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23753 | DN Sitemap Control WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23741 | Notifications Center WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23740 | Easy School Registration WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23739 | WP Ultimate Reviews FREE WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23738 | Ps Ads Pro WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23736 | Form To JSON WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23731 | Tax Report for WooCommerce WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23726 | ComparePress WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23721 | Mobigate WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23718 | Mancx AskMe Widget WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23716 | Login Watchdog WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23688 | Cobwebo URL WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23670 | 4 author cheer up donate WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23668 | ChatGPT Open AI Images and Content for WooCommerce WordPress plugin reflected cross-site scripting | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23663 | Contexto WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23637 | fxy060608 新淘客WordPress插件 reflected cross-site scripting | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23635 | ePermissions WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23619 | Catch Duplicate Switcher WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-23616 | Canalplan WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23615 | Interactive Page Hierarchy WordPress plugin broken access control | 6.5CNA v3.1 | 0.6% | 2025-03-03 | |
| CVE-2025-23613 | WP Journal WordPress plugin broken access control | 6.5CNA v3.1 | 0.6% | 2025-03-03 | |
| CVE-2025-23600 | Send to a Friend Addon WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23595 | Page Health-O-Meter WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23587 | all-in-one-box-login WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23586 | WP Post Category Notifications WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23585 | Goo.gl Url Shorter WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23584 | Pin Locations on Map WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23579 | DZS Ajaxer Lite WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23576 | WP Intro.JS WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23575 | DX Sales CRM WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23570 | WP Social Links WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23565 | Wibstats WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23564 | WP FixTag WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23563 | Explore pages WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23556 | Push Envoy Notifications WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23555 | Ui Slider Filter By Price WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23553 | Userbase Access Control WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23552 | Texteller WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23549 | Maniac SEO WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23539 | Awesome Hooks WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23538 | WP Contest WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23536 | Track Page Scroll WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23526 | Swift Calendar Online Appointment Scheduling WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23524 | ClickBank Storefront WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23521 | Goodlayers Blocks WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-23520 | Heartland Management Terminal WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-23519 | G Web Pro Store Locator WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23518 | GoogleMapper WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23517 | Google Map on Post/Page WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23516 | Sale with Razorpay WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23515 | ts-tree WordPress plugin arbitrary content deletion vulnerability | 6.5CNA v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-23505 | Pit Login Welcome WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23502 | Curated Search WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-03-03 | |
| CVE-2025-23496 | WP FPO WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23494 | Quizzin WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23493 | Google Transliteration WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23490 | Browser-Update-Notify WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23488 | rng-refresh WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23487 | Easy Gallery WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23485 | RS Survey WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23484 | Predict When WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23482 | azurecurve Floating Featured Image WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23481 | Ni WooCommerce Sales Report Email WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23480 | RSVP ME WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23479 | melascrivi WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23478 | Photo Video Store WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23473 | Killer Theme Options WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23472 | Flexo Slider WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23468 | Essay Wizard (wpCRES) WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23465 | Vampire Character Manager WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-23464 | Twitter News Feed WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23451 | Awesome Twitter Feeds WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23450 | AW WooCommerce Kode Pembayaran WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23447 | Smooth Dynamic Slider WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23446 | WP SpaceContent WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-03-03 | |
| CVE-2025-23441 | Attach Gallery Posts WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23440 | radSLIDE WordPress plugin broken access control to stored cross-site scripting | 6.3CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23439 | TinyMCE Extended Config WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23437 | ntp-header-images WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23433 | vcOS WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-23425 | Marekkis Watermark WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-21424 | Qualcomm Snapdragon use-after-free in NPU | 7.8CNA v3.1 | 0.1% | 2025-03-03 | Fix |
| CVE-2025-20653 | MediaTek chipsets integer overflow in DA | 6.5CISA ADP v3.1 | 0.1% | 2025-03-03 | Fix |
| CVE-2025-20652 | MediaTek chipsets out-of-bounds read in DA | 4.6CISA ADP v3.1 | 0.1% | 2025-03-03 | Fix |
| CVE-2025-20651 | MediaTek chipsets out-of-bounds read in DA | 4.1CISA ADP v3.1 | 0.1% | 2025-03-03 | Fix |
| CVE-2025-20650 | MediaTek chipsets out-of-bounds write in DA | 6.8CISA ADP v3.1 | 0.1% | 2025-03-03 | Fix |
| CVE-2025-20649 | MediaTek chipsets improper handling of insufficient permissions or privileges in Bluetooth | 6.5CISA ADP v3.1 | 0.2% | 2025-03-03 | Fix |
| CVE-2025-20648 | MediaTek chipsets out-of-bounds read in apu | 5.5CISA ADP v3.1 | 0.1% | 2025-03-03 | Fix |
| CVE-2025-20647 | MediaTek chipsets null pointer dereference in Modem | 6.5CISA ADP v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-20646 | MediaTek chipsets out-of-bounds write in wlan | 9.8CISA ADP v3.1 | 0.9% | 2025-03-03 | Fix |
| CVE-2025-20645 | MediaTek chipsets out-of-bounds write in KeyInstall | 7.8CISA ADP v3.1 | 0.1% | 2025-03-03 | Fix |
| CVE-2025-20644 | MediaTek chipsets Syntactic correctness in Modem | 6.5CISA ADP v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-1889 | picklescan Security scanning bypass via non-standard file extensions | 9.8NVD v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-1882 | i-Drive i11/i12 device setting improper access control for register interface | 7.0v3.1 | 0.2% | 2025-03-03 | |
| CVE-2025-1881 | i-Drive i11/i12 Video Footage/Live Video Stream access control | 5.3CNA v4.0 | 0.3% | 2025-03-03 | |
| CVE-2025-1880 | i-Drive i11/i12 Device Pairing authentication bypass | 4.3v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-1879 | i-Drive i11/i12 APK hard-coded credentials | 6.8v3.1 | 0.2% | 2025-03-03 | |
| CVE-2025-1878 | i-Drive i11/i12 WiFi default password | 3.1v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-1877 | D-Link DAP-1562 HTTP POST request pure_auth_check null pointer dereference | 7.5v3.1 | 1.1% | 2025-03-03 | |
| CVE-2025-1876 | D-Link DAP-1562 HTTP header http_request_parse stack-based overflow | 9.8v3.1 | 3.6% | 2025-03-03 | |
| CVE-2025-1875 | SQL injection vulnerability in 101news | 9.8v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-1874 | SQL injection vulnerability in 101news | 9.8v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-1873 | SQL injection vulnerability in 101news | 9.8v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-1872 | SQL injection vulnerability in 101news | 9.8v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-1871 | SQL injection vulnerability in 101news | 9.8v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-1870 | SQL injection vulnerability in 101news | 9.8v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-1869 | SQL injection vulnerability in 101news | 9.8v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-1868 | Information display on multiple products from Famatech Corp | 6.8CISA ADP v3.1 | 0.3% | 2025-03-03 | |
| CVE-2025-1867 | HTTP response smuggling vulnerability in libhv | 10.0CNA v4.0 | 0.4% | 2025-03-03 | |
| CVE-2025-1866 | Undefined behavior due to Out-of-Bounds Pointer Arithmetic in libwebsockets | 10.0CNA v4.0 | 0.4% | 2025-03-03 | |
| CVE-2025-1864 | Buffer overflow and potential code execution in Radare2 | 9.8v3.1 | 0.5% | 2025-03-03 | Fix |
| CVE-2025-1859 | PHPGurukul News Portal login.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-1858 | Codezips Online Shopping Website success.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-03 | |
| CVE-2025-1857 | PHPGurukul Nipah Virus Testing Management System check_availability.php SQL injection | 9.8v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-1856 | Codezips Gym Management System gen_invoice.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-03 | |
| CVE-2025-1855 | PHPGurukul Online Shopping Portal product-details.php SQL injection | 8.8v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-1854 | Codezips Gym Management System del_member.php SQL injection | 8.8v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-1853 | Tenda AC8 Parameter SetIpMacBind sub_49E098 stack-based overflow | 9.8v3.1 | 1.5% | 2025-03-03 | Emerging Threats |
| CVE-2025-1852 | Totolink EX1800T cstecgi.cgi loginAuth buffer overflow | 9.8v3.1 | 0.9% | 2025-03-03 | |
| CVE-2025-1851 | Tenda AC7 SetFirewallCfg formSetFirewallCfg stack-based overflow | 8.7CNA v4.0 | 1.1% | 2025-03-03 | Emerging Threats |
| CVE-2025-1850 | Codezips College Management System university.php SQL injection | 9.8v3.1 | 0.6% | 2025-03-03 | |
| CVE-2025-1849 | zj1983 zz import_data_todb server-side request forgery | 8.8v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-1848 | zj1983 zz import_data_check server-side request forgery | 8.8v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-1847 | zj1983 zz improper authorization | 8.8v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-1846 | zj1983 zz File ZfileAction.java deleteLocalFile denial of service | 6.5v3.1 | 0.6% | 2025-03-03 | |
| CVE-2025-1845 | ESAFENET DSM examExportPDF command injection | 9.8v3.1 | 3.4% | 2025-03-03 | |
| CVE-2025-1844 | ESAFENET CDG backupLogDetail.jsp SQL injection | 9.8v3.1 | 0.4% | 2025-03-03 | |
| CVE-2025-1843 | Mini-Tmall ProductMapper.java select SQL injection | 9.8v3.1 | 0.6% | 2025-03-03 | |
| CVE-2025-1842 | FITSTATS Technologies AthleteMonitoring login.php cross-site scripting | 5.3CNA v4.0 | 0.4% | 2025-03-03 | |
| CVE-2025-1841 | ESAFENET CDG ClientSortLog.jsp SQL injection | 9.8v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-1840 | ESAFENET CDG updateorg.jsp SQL injection | 9.8v3.1 | 0.5% | 2025-03-03 | |
| CVE-2025-1801 | Red Hat Ansible Automation Platform aap-gateway: Aap-gateway privilege escalation | 8.1CNA v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-1723 | ManageEngine ADSelfService Plus account takeover | 8.1CNA v3.1 | 1.5% | 2025-03-03 | Fix |
| CVE-2025-1125 | GRUB2: Fs/hfs: Integer overflow may lead to heap based out-of-bounds write | 7.8NVD v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-0689 | GRUB2: Udf: Heap based buffer overflow in grub_udf_read_block may lead to arbitrary code execution | 7.8NVD v3.1 | 0.5% | 2025-03-03 | Fix |
| CVE-2025-0686 | GNU GRUB2 romfs module out-of-bounds write | 6.4NVD v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-0685 | GNU GRUB2 JFS module out-of-bounds write | 6.4NVD v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-0684 | GNU GRUB2 ReiserFS module out-of-bounds write | 6.4NVD v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-0678 | GRUB2: Squash4: Integer overflow may lead to heap based out-of-bounds write when reading data | 7.8NVD v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-0555 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 7.7CNA v3.1 | 0.5% | 2025-03-03 | Fix |
| CVE-2025-0475 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 8.7CNA v3.1 | 0.5% | 2025-03-03 | Fix |
| CVE-2025-0289 | Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service. | 7.8CISA ADP v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-0288 | Paragon Software Migrate OS to SSD privilege escalation | 7.8CISA ADP v3.1 | 0.5% | 2025-03-03 | Exploit codeFix |
| CVE-2025-0287 | Paragon Software Migrate OS to SSD null pointer dereference | 5.1CISA ADP v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-0286 | Paragon Software Partition Manager improper quantity validation | 8.4CISA ADP v3.1 | 0.4% | 2025-03-03 | Fix |
| CVE-2025-0285 | Paragon Software Hard Disk Manager biontdrv.sys driver privilege escalation | 7.8CISA ADP v3.1 | 0.3% | 2025-03-03 | Fix |
| CVE-2025-25724 | libarchive unchecked return value | 7.8v3.1 | 0.4% | 2025-03-02 | Fix |
| CVE-2025-1836 | Incorta Edit Insight CSV injection | 5.3CNA v4.0 | 0.3% | 2025-03-02 | |
| CVE-2025-1835 | osuuu LightPicture Api.php upload unrestricted upload | 5.3CNA v4.0 | 0.3% | 2025-03-02 | |
| CVE-2025-1834 | zj1983 zz resolve unrestricted upload | 9.8v3.1 | 0.6% | 2025-03-02 | |
| CVE-2025-1833 | zj1983 zz HTTP Request Customer_noticeAction.java sendNotice server-side request forgery | 8.8v3.1 | 0.5% | 2025-03-02 | |
| CVE-2025-1832 | zj1983 zz ZroleAction.java getUserList SQL injection | 8.8v3.1 | 0.5% | 2025-03-02 | |
| CVE-2025-1831 | zj1983 zz ZorgAction.java GetDBUser SQL injection | 9.8v3.1 | 0.6% | 2025-03-02 | |
| CVE-2025-1830 | zj1983 zz Customer Information Handler cross-site scripting | 4.8v3.1 | 0.4% | 2025-03-02 | |
| CVE-2025-1829 | TOTOLINK X18 cstecgi.cgi setMtknatCfg os command injection | 8.8v3.1 | 12.4% | 2025-03-02 | |
| CVE-2025-1821 | zj1983 zz ZorgAction.java getUserOrgForUserId SQL injection | 9.8v3.1 | 0.6% | 2025-03-02 | |
| CVE-2025-1820 | zj1983 zz ZworkflowAction.java getOaWid SQL injection | 8.8v3.1 | 0.5% | 2025-03-02 | |
| CVE-2025-1819 | Tenda AC7 1200M telnet TendaTelnet os command injection | 9.8v3.1 | 1.8% | 2025-03-02 | |
| CVE-2025-1818 | zj1983 zz ZfileAction.upload unrestricted upload | 9.8v3.1 | 0.7% | 2025-03-02 | |
| CVE-2025-1817 | Mini-Tmall Admin Name admin cross-site scripting | 5.4v3.1 | 0.4% | 2025-03-02 | |
| CVE-2025-1816 | FFmpeg IAMF file iamf_parse.c audio_element_obu memory leak | 5.3CNA v4.0 | 0.5% | 2025-03-02 | Fix |
| CVE-2025-1815 | pbrong hrms resource.go HrmsDB improper authorization | 6.9CNA v4.0 | 0.5% | 2025-03-02 | |
| CVE-2025-1814 | Tenda AC6 WifiExtraSet stack-based overflow | 9.8v3.1 | 1.0% | 2025-03-02 | |
| CVE-2025-1813 | zj1983 zz cross-site request forgery | 6.5v3.1 | 0.4% | 2025-03-02 | |
| CVE-2025-1812 | zj1983 zz SuperZ.java GetUserOrg SQL injection | 8.8v3.1 | 0.6% | 2025-03-02 | |
| CVE-2025-1811 | AT Software Solutions ATSVD Login endpoint login.aspx SQL injection | 6.9CNA v4.0 | 0.6% | 2025-03-02 | |
| CVE-2025-1810 | Pixsoft Vivaz Login endpoint servlet cross-site scripting | 5.3CNA v4.0 | 0.6% | 2025-03-02 | |
| CVE-2025-1809 | Pixsoft Sol Login endpoint servlet SQL injection | 6.9CNA v4.0 | 0.6% | 2025-03-02 | |
| CVE-2025-1808 | Pixsoft E-Saphira Login endpoint servlet SQL injection | 6.9CNA v4.0 | 0.6% | 2025-03-02 | |
| CVE-2025-1807 | Eastnets PaymentSafe Edit Manual Reply directRouter.rfc cross-site scripting | 5.1CNA v4.0 | 0.4% | 2025-03-02 | |
| CVE-2025-1806 | Eastnets PaymentSafe URL Default.aspx improper authorization | 5.3CNA v4.0 | 0.3% | 2025-03-02 | |
| CVE-2025-0895 | IBM Cognos Mobile information disclosure | 2.4CNA v3.1 | 0.2% | 2025-03-02 | Fix |
| CVE-2025-27554 | ToDesktop code injection | 9.9CNA v3.1 | 0.8% | 2025-03-01 | Fix |
| CVE-2025-27416 | Scratch-Coding-Hut.github.io Asking for Scratch Username and Password | 5.9CNA v4.0 | 0.5% | 2025-03-01 | |
| CVE-2025-23119 | Ubiquiti UniFi Protect Cameras command injection | 7.5CNA v3.0 | 0.7% | 2025-03-01 | Fix |
| CVE-2025-23118 | Ubiquiti UniFi Protect Cameras improper certificate validation | 6.4CNA v3.0 | 0.2% | 2025-03-01 | Fix |
| CVE-2025-23117 | Ubiquiti UniFi Protect Cameras origin validation error | 6.8CISA ADP v3.1 | 0.2% | 2025-03-01 | Fix |
| CVE-2025-23116 | Ubiquiti UniFi Protect Application improper authentication | 9.6CNA v3.0 | 0.5% | 2025-03-01 | Fix |
| CVE-2025-23115 | Ubiquiti UniFi Protect Cameras use-after-free | 9.0CNA v3.0 | 0.7% | 2025-03-01 | Fix |
| CVE-2025-1804 | Blizzard Battle.Net profapi.dll uncontrolled search path | 7.3CNA v4.0 | 0.2% | 2025-03-01 | |
| CVE-2025-1800 | D-Link DAR-7000 HTTP POST request sxh_vpnlic.php get_ip_addr_details command injection | 8.8v3.1 | 5.5% | 2025-03-01 | |
| CVE-2025-1799 | Zorlan SkyCaiji Tool.php previewAction server-side request forgery | 5.3CNA v4.0 | 0.3% | 2025-03-01 | |
| CVE-2025-1797 | A vulnerability, which was classified as critical, has been found in Hunan Zhonghe Baiyi Information Technology Baiyiyun Asset Management and Operations System up to 20250217. Affected by this issue is some unknown functionality of the file /wuser/anyUserBoundHouse.php. The manipulation of the argum | 5.3CNA v4.0 | 0.3% | 2025-03-01 | |
| CVE-2025-1791 | Zorlan SkyCaiji Tool.php fileAction unrestricted upload | 9.8v3.1 | 0.4% | 2025-03-01 | |
| CVE-2025-1788 | rizinorg Rizin utf8.c rz_utf8_encode heap-based overflow | 7.8v3.1 | 0.3% | 2025-03-01 | |
| CVE-2025-1786 | rizinorg Rizin pdb.c msf_stream_directory_free buffer overflow | 7.8v3.1 | 0.3% | 2025-03-01 | |
| CVE-2025-1780 | themekraft BuddyPress WooCommerce My Account Integration missing authorization | 4.3v3.1 | 0.3% | 2025-03-01 | Fix |
| CVE-2025-1730 | Simple Download Counter WordPress plugin authenticated (Author+) arbitrary file read | 6.5CNA v3.1 | 0.4% | 2025-03-01 | Fix |
| CVE-2025-1671 | Academist Membership WordPress plugin authentication bypass via account takeover | 9.8CNA v3.1 | 0.6% | 2025-03-01 | Fix |
| CVE-2025-1638 | Alloggio Membership WordPress plugin authentication bypass via Social login account takeover | 9.8CNA v3.1 | 0.6% | 2025-03-01 | Fix |
| CVE-2025-1564 | SetSail Membership WordPress plugin authentication bypass via account takeover | 9.8CNA v3.1 | 0.6% | 2025-03-01 | Fix |
| CVE-2025-1502 | IP2Location Redirection WordPress plugin missing authorization to unauthenticated settings export | 5.3CNA v3.1 | 0.3% | 2025-03-01 | Fix |
| CVE-2025-1491 | WP Posts Carousel WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-03-01 | Fix |
| CVE-2025-1459 | Page Builder by SiteOrigin WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-03-01 | Fix |
| CVE-2025-1404 | Secure Copy Content Protection and Content Locking WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2025-03-01 | Fix |
| CVE-2025-1291 | Gutenberg Blocks by Kadence Blocks WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-03-01 | Fix |
| CVE-2025-0820 | Clicface Trombi WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-03-01 |