CVEs published March 2, 2025
30 CVEs were published on March 2, 2025: 0 critical, 2 high.
- Published
- 30
- Critical
- 0
- High
- 2
- Medium
- 26
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- zj1983 zz
- 10
- IBM Cognos Analytics Mobile
- 2
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ G… +24
- 1
- AT Software Solutions ATSVD
- 1
- Bitaxe ESP-MIner
- 1
- Eastnets PaymentSafe
- 1
- ESAFENET CDG
- 1
- FFmpeg
- 1
- Incorta
- 1
- libarchive
- 1
High 2
Medium, low and unrated 28
- CVE-2025-1840ESAFENET CDG updateorg.jsp sql injectionESAFENET CDG
- CVE-2025-1836Incorta Edit Insight csv injectionIncorta
- CVE-2025-1835osuuu LightPicture Api.php upload unrestricted uploadosuuu LightPicture
- CVE-2025-1834zj1983 zz resolve unrestricted uploadzj1983 zz
- CVE-2025-1833zj1983 zz HTTP Request Customer_noticeAction.java sendNotice server-side request forgeryzj1983 zz
- CVE-2025-1832zj1983 zz ZroleAction.java getUserList sql injectionzj1983 zz
- CVE-2025-1831zj1983 zz ZorgAction.java GetDBUser sql injectionzj1983 zz
- CVE-2025-1830zj1983 zz Customer Information cross site scriptingzj1983 zz
- CVE-2025-1829TOTOLINK X18 cstecgi.cgi setMtknatCfg os command injectionTOTOLINK X18
- CVE-2025-1821zj1983 zz ZorgAction.java getUserOrgForUserId sql injectionzj1983 zz
- CVE-2024-36353Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentialAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ G… +24
- CVE-2025-1820zj1983 zz ZworkflowAction.java getOaWid sql injectionzj1983 zz
- CVE-2025-1819Tenda AC7 1200M telnet TendaTelnet os command injectionTenda AC7
- CVE-2025-1818zj1983 zz ZfileAction.upload unrestricted uploadzj1983 zz
- CVE-2024-55907IBM Cognos Mobile information disclosureIBM Cognos Analytics Mobile
- CVE-2025-0895IBM Cognos Mobile information disclosureIBM Cognos Analytics Mobile
- CVE-2025-1817Mini-Tmall Admin Name admin cross site scriptingMini-Tmall
- CVE-2025-1816FFmpeg IAMF File iamf_parse.c audio_element_obu memory leakFFmpeg
- CVE-2025-1815pbrong hrms resource.go HrmsDB improper authorizationpbrong hrms
- CVE-2025-1813zj1983 zz cross-site request forgeryzj1983 zz
- CVE-2025-1812zj1983 zz SuperZ.java GetUserOrg sql injectionzj1983 zz
- CVE-2025-1811AT Software Solutions ATSVD Login Endpoint login.aspx sql injectionAT Software Solutions ATSVD
- CVE-2025-1810Pixsoft Vivaz Login Endpoint servlet cross site scriptingPixsoft Vivaz
- CVE-2025-1809Pixsoft Sol Login Endpoint servlet sql injectionPixsoft Sol
- CVE-2025-1808Pixsoft E-Saphira Login Endpoint servlet sql injectionPixsoft E-Saphira
- CVE-2025-1807Eastnets PaymentSafe Edit Manual Reply directRouter.rfc cross site scriptingEastnets PaymentSafe
- CVE-2025-25724list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service olibarchive
- CVE-2025-27579In Bitaxe ESP-Miner before 2.5.0 with AxeOS, one can use an /api/system CSRF attack to update the payout address (aka stratumUser) for a BitBitaxe ESP-MIner