CVEs published in March 2025
36 tracked CVEs from 8 vendors had their first vendor advisory published in March 2025: 4 critical, 15 high, 3 in CISA KEV. Newest first.
17 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2025-2782Medium
WatchGuard Terminal Services Agent Local Privilege Escalation via Non-Standard Installation Directory
WatchGuard · 1 advisory - Added
CVE-2025-2781Medium
WatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory
WatchGuard · 1 advisory - Added
CVE-2024-56171High
Libxml2 Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-24928High
Libxml2 Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-24813CriticalCISA KEV
Apache Tomcat Path Equivalence Vulnerability
NetApp · 1 advisory - Added
CVE-2025-23085Medium
NetApp · 1 advisory - Added
CVE-2025-23084Medium
NetApp · 1 advisory - Added
Vim Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-35896High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-35894High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-27080Medium
Vulnerabilities in the command line interface of AOS-CX could
Aruba · 1 advisory - Added
CVE-2025-25042Medium
vulnerability in the AOS-CX REST interface could
Aruba · 1 advisory - Added
vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300…
Aruba · 1 advisory - Added
CVE-2024-8176High
Libexpat: expat: improper restriction of xml entity expansion depth in libexpat
NetApp, Red Hat · 2 advisories - Added
CVE-2025-26633HighCISA KEV
Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
MS Server · 1 advisory - Added
CVE-2024-53700High
command injection vulnerability has been reported to affect QHora.
QNAP · 1 advisory - Added
CVE-2024-53699High
QTS: out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2024-53698Medium
QTS: double free vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2024-53697High
QTS: out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2024-53696Medium
QTS: server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center.
QNAP · 1 advisory - Added
CVE-2024-53695Critical
HBS: buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync.
QNAP · 1 advisory - Added
CVE-2024-53694Unrated
Qsync: time-of-check time-of-use (TOCTOU) race condition vulnerability has been reported to affect several product versions.
QNAP · 1 advisory - Added
CVE-2024-53693High
QTS: improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating…
QNAP · 1 advisory - Added
CVE-2024-53692Medium
QTS: command injection vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2024-50405Medium
QTS: improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating…
QNAP · 1 advisory - Added
CVE-2024-50394High
Helpdesk: improper certificate validation vulnerability has been reported to affect Helpdesk.
QNAP · 1 advisory - Added
CVE-2024-50390Critical
command injection vulnerability has been reported to affect QHora.
QNAP · 1 advisory - Added
CVE-2024-48864Critical
files or directories accessible to external parties vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2024-38638High
QTS: out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2024-13086Medium
QTS: exposure of sensitive information vulnerability has been reported to affect product.
QNAP · 1 advisory - Added
CVE-2025-27113High
Libxml2 Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-0725High
Libcurl Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-9823Medium
Eclipse Jetty Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-6763Medium
Eclipse Jetty Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-22225HighCISA KEV
VMware ESXi Arbitrary Write Vulnerability
VMware · 1 advisory - Added
CVE-2025-1695Medium
In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can
F5 · 1 advisory