| 2025-03-31 | CVE-2025-3018 | SQL Injection vulnerability in Oretnom23 Online Eyewear Shop 1.0
A vulnerability, which was classified as critical, was found in SourceCodester Online Eyewear Shop 1.0. | 7.5 |
| 2025-03-31 | CVE-2025-3015 | Out-of-bounds Read vulnerability in Assimp 5.4.3
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. | 8.8 |
| 2025-03-31 | CVE-2025-31117 | Unspecified vulnerability in Open-Emr Openemr
OpenEMR is a free and open source electronic health records and medical practice management application. | 7.5 |
| 2025-03-31 | CVE-2025-2586 | A flaw was found in the OpenShift Lightspeed Service, which is vulnerable to unauthenticated API request flooding. | 7.5 |
| 2025-03-31 | CVE-2025-2984 | Injection vulnerability in Fabian Payroll Management System 1.0
A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. | 8.8 |
| 2025-03-31 | CVE-2025-2985 | Injection vulnerability in Fabian Payroll Management System 1.0
A vulnerability was found in code-projects Payroll Management System 1.0. | 8.8 |
| 2025-03-31 | CVE-2025-31103 | Deserialization of Untrusted Data vulnerability in Appleple A-Blog CMS
Untrusted data deserialization vulnerability exists in a-blog cms. | 7.5 |
| 2025-03-29 | CVE-2025-2249 | The SoJ SoundSlides plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the soj_soundslides_options_subpanel() function in all versions up to, and including, 1.2.2. | 8.8 |
| 2025-03-29 | CVE-2025-2803 | The So-Called Air Quotes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.1. | 7.3 |
| 2025-03-28 | CVE-2025-2917 | Path Traversal vulnerability in 1000Cms Chestnutcms
A vulnerability, which was classified as problematic, was found in ChestnutCMS up to 1.5.3. | 7.5 |