# CVEs published 2025-03-07

112 CVEs were published on March 7, 2025: 7 critical, 30 high. Days are UTC.

- [CVE-2025-2097](https://cve.now/CVE-2025-2097.md): TOTOLINK EX1800T cstecgi.cgi setRptWizardCfg stack-based overflow (CVSS 8.7, TOTOLINK EX1800T)
- [CVE-2025-2096](https://cve.now/CVE-2025-2096.md): TOTOLINK EX1800T cstecgi.cgi setRebootScheCfg os command injection (CVSS 5.3, TOTOLINK EX1800T)
- [CVE-2025-2095](https://cve.now/CVE-2025-2095.md): TOTOLINK EX1800T cstecgi.cgi setDmzCfg os command injection (CVSS 5.3, TOTOLINK EX1800T)
- [CVE-2025-2094](https://cve.now/CVE-2025-2094.md): TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig os command injection (CVSS 5.3, TOTOLINK EX1800T)
- [CVE-2025-2093](https://cve.now/CVE-2025-2093.md): PHPGurukul Online Library Management System change-password.php password recovery (CVSS 2.3, PHPGurukul Online Library Management System)
- [CVE-2025-2024](https://cve.now/CVE-2025-2024.md): Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp)
- [CVE-2025-26643](https://cve.now/CVE-2025-26643.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 5.4, Microsoft Edge)
- [CVE-2023-43052](https://cve.now/CVE-2023-43052.md): IBM Control Center external service interaction (CVSS 5.3, IBM Control Center)
- [CVE-2023-35894](https://cve.now/CVE-2023-35894.md): IBM Control Center HOST header injection (CVSS 5.4, IBM Control Center)
- [CVE-2024-12975](https://cve.now/CVE-2024-12975.md): Silicon Labs CPC can leak information in full duplex SPI (CVSS 1.0, Silicon Labs Simplicity SDK)
- [CVE-2025-0162](https://cve.now/CVE-2025-0162.md): IBM Aspera Shares XML external entity injection (CVSS 7.1, IBM Aspera Shares)
- [CVE-2025-27607](https://cve.now/CVE-2025-27607.md): Python JSON Logger has a Potential RCE via missing \`msgspec-python313-pre\` dependency (CVSS 8.8, nhairs python-json-logger)
- [CVE-2024-53700](https://cve.now/CVE-2024-53700.md): QHora (CVSS 5.1, QNAP Systems QuRouter)
- [CVE-2024-53699](https://cve.now/CVE-2024-53699.md): QTS, QuTS hero (CVSS 2.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-53698](https://cve.now/CVE-2024-53698.md): QTS, QuTS hero (CVSS 2.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-53697](https://cve.now/CVE-2024-53697.md): QTS, QuTS hero (CVSS 2.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-53696](https://cve.now/CVE-2024-53696.md): QuLog Center (CVSS 5.1, QNAP Systems QuLog Center · QNAP Systems QTS +1)
- [CVE-2024-53695](https://cve.now/CVE-2024-53695.md): HBS 3 Hybrid Backup Sync (CVSS 6.3, QNAP Systems HBS 3 Hybrid Backup Sync)
- [CVE-2024-53694](https://cve.now/CVE-2024-53694.md): QVPN Device Client, Qsync, Qfinder Pro (CVSS 8.6, QNAP Systems QVPN Device Client for Mac · QNAP Systems Q… +1)
- [CVE-2024-53693](https://cve.now/CVE-2024-53693.md): QTS, QuTS hero (CVSS 7.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-53692](https://cve.now/CVE-2024-53692.md): QTS, QuTS hero (CVSS 5.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-50405](https://cve.now/CVE-2024-50405.md): QTS, QuTS hero (CVSS 5.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-50394](https://cve.now/CVE-2024-50394.md): Helpdesk (CVSS 7.7, QNAP Systems Helpdesk)
- [CVE-2024-50390](https://cve.now/CVE-2024-50390.md): QHora (CVSS 7.7, QNAP Systems QuRouter)
- [CVE-2024-48864](https://cve.now/CVE-2024-48864.md): File Station 5 (CVSS 5.3, QNAP Systems File Station)
- [CVE-2024-38638](https://cve.now/CVE-2024-38638.md): QTS, QuTS hero (CVSS 2.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-13086](https://cve.now/CVE-2024-13086.md): QTS, QuTS hero (CVSS 5.3, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2025-27604](https://cve.now/CVE-2025-27604.md): XWiki Confluence Migrator Pro's homepage is public (CVSS 7.5, xwikisas application-confluence-migrator-pro · com.xwiki.co…)
- [CVE-2025-27603](https://cve.now/CVE-2025-27603.md): XWiki Confluence Migrator Pro allows Remote Code Execution via unescaped translations (CVSS 9.1, xwikisas application-confluence-migrator-pro · com.xwiki.co…)
- [CVE-2025-27597](https://cve.now/CVE-2025-27597.md): Vue I18n Prototype Pollution in \`handleFlatJson\` (CVSS 8.9, intlify vue-i18n · @intlify/message-resolver +5)
- [CVE-2025-27518](https://cve.now/CVE-2025-27518.md): Cognita CORS misconfiguration in backend API server (CVSS 6.9, truefoundry cognita)
- [CVE-2025-27519](https://cve.now/CVE-2025-27519.md): Cognita Arbitrary File Write (CVSS 9.3, truefoundry cognita)
- [CVE-2025-27152](https://cve.now/CVE-2025-27152.md): Possible SSRF and Credential Leakage via Absolute URL in axios Requests (CVSS 7.7, axios)
- [CVE-2025-2090](https://cve.now/CVE-2025-2090.md): PHPGurukul Pre-School Enrollment System Sub Admin add-subadmin.php access control (CVSS 5.1, PHPGurukul Pre-School Enrollment System)
- [CVE-2025-2089](https://cve.now/CVE-2025-2089.md): StarSea99 starsea-mall com.siro.mall.controller.mall.UserController updateInfo updateUserInfo access control (CVSS 5.3, StarSea99 starsea-mall)
- [CVE-2025-2088](https://cve.now/CVE-2025-2088.md): PHPGurukul Pre-School Enrollment System profile.php sql injection (CVSS 6.9, PHPGurukul Pre-School Enrollment System)
- [CVE-2025-2087](https://cve.now/CVE-2025-2087.md): StarSea99 starsea-mall update cross site scripting (CVSS 5.1, StarSea99 starsea-mall)
- [CVE-2025-2086](https://cve.now/CVE-2025-2086.md): StarSea99 starsea-mall update cross site scripting (CVSS 5.1, StarSea99 starsea-mall)
- [CVE-2025-2085](https://cve.now/CVE-2025-2085.md): StarSea99 starsea-mall save cross site scripting (CVSS 5.1, StarSea99 starsea-mall)
- [CVE-2025-2084](https://cve.now/CVE-2025-2084.md): PHPGurukul Human Metapneumovirus Testing Management System Search Report Page search-report.php cross site scripting (CVSS 5.1, PHPGurukul Human Metapneumovirus Testing Management System)
- [CVE-2024-12634](https://cve.now/CVE-2024-12634.md): Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins \<= 2.0.59 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, Related Posts, Inline Related Posts, Contextual Related Pos…)
- [CVE-2025-1768](https://cve.now/CVE-2025-1768.md): SEO Plugin by Squirrly SEO \<= 12.4.05 - Authenticated (Subscriber+) SQL Injection via search Parameter (CVSS 6.5, cifi SEO Plugin by Squirrly SEO)
- [CVE-2025-1887](https://cve.now/CVE-2025-1887.md): SMB forced authentication vulnerability in Sage 200 Spain (CVSS 7.1, Sage 200 Spain)
- [CVE-2025-1886](https://cve.now/CVE-2025-1886.md): Pass-Back vulnerability in Sage 200 Spain (CVSS 7.1, Sage 200 Spain)
- [CVE-2024-13668](https://cve.now/CVE-2024-13668.md): WordPress Activity O Meter \<= 1 - Reflected XSS (CVSS 7.1, WordPress Activity O Meter)
- [CVE-2024-9458](https://cve.now/CVE-2024-9458.md): Reservit Hotel \< 3.0 - Admin+ Stored XSS (CVSS 4.8, Reservit Hotel)
- [CVE-2024-13857](https://cve.now/CVE-2024-13857.md): WPGet API \<= 2.2.10 - Authenticated (Administrator+) Server-Side Request Forgery (CVSS 5.5, davidanderson WPGet API – Connect to any external REST API)
- [CVE-2024-13635](https://cve.now/CVE-2024-13635.md): VK Blocks \<= 1.94.2.2 - Missing Authorization to Sensitive Information Exposure (CVSS 4.3, vektor-inc VK Blocks)
- [CVE-2024-13552](https://cve.now/CVE-2024-13552.md): SupportCandy – Helpdesk & Customer Support Ticket System \<= 3.3.0 - Insecure Direct Object Reference (CVSS 4.3, psmplugins SupportCandy – Helpdesk & Customer Support Ticke…)
- [CVE-2024-13805](https://cve.now/CVE-2024-13805.md): Advanced File Manager \<= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload (CVSS 6.4, saadiqbal Advanced File Manager – Ultimate File Manager for…)
- [CVE-2025-21843](https://cve.now/CVE-2025-21843.md): drm/panthor: avoid garbage value in panthor\_ioctl\_dev\_query() (CVSS 5.5, Linux)
- [CVE-2025-21842](https://cve.now/CVE-2025-21842.md): amdkfd: properly free gang\_ctx\_bo when failed to init user queue (CVSS 7.8, Linux)
- [CVE-2025-21841](https://cve.now/CVE-2025-21841.md): cpufreq/amd-pstate: Fix cpufreq\_policy ref counting (no CVSS, Linux)
- [CVE-2025-21840](https://cve.now/CVE-2025-21840.md): thermal/netlink: Prevent userspace segmentation fault by adjusting UAPI header (no CVSS, Linux)
- [CVE-2025-21839](https://cve.now/CVE-2025-21839.md): KVM: x86: Load DR6 with guest value only before entering .vcpu\_run() loop (CVSS 7.3, Linux)
- [CVE-2025-21838](https://cve.now/CVE-2025-21838.md): usb: gadget: core: flush gadget workqueue after device removal (no CVSS, Linux)
- [CVE-2025-21836](https://cve.now/CVE-2025-21836.md): io\_uring/kbuf: reallocate buf lists on upgrade (CVSS 7.8, Linux)
- [CVE-2025-21835](https://cve.now/CVE-2025-21835.md): usb: gadget: f\_midi: fix MIDI Streaming descriptor lengths (no CVSS, Linux)
- [CVE-2024-13431](https://cve.now/CVE-2024-13431.md): Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin \<= 1.6.8.3 - Reflected Cross-Site Scripting (CVSS 6.1, croixhaug Appointment Booking Calendar — Simply Schedule Ap…)
- [CVE-2024-12876](https://cve.now/CVE-2024-12876.md): Golo - Directory & Listing, Travel WordPress Theme \<= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change (CVSS 9.8, uxper Golo - City Travel Guide WordPress Theme)
- [CVE-2025-1315](https://cve.now/CVE-2025-1315.md): InWave Jobs \<= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset (CVSS 9.8, sfwebservice InWave Jobs)
- [CVE-2025-0959](https://cve.now/CVE-2025-0959.md): Eventer - WordPress Event & Booking Manager Plugin \<= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg\_id (CVSS 8.8, imithemes Eventer - WordPress Event & Booking Manager Plugin)
- [CVE-2024-9658](https://cve.now/CVE-2024-9658.md): School Management System for Wordpress \<= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation (CVSS 8.8, dasinfomedia School Management System for Wordpress)
- [CVE-2024-12609](https://cve.now/CVE-2024-12609.md): School Management System for Wordpress \<= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance' (CVSS 6.5, dasinfomedia School Management System for Wordpress)
- [CVE-2024-12610](https://cve.now/CVE-2024-12610.md): School Management System for Wordpress \<= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion (CVSS 5.3, dasinfomedia School Management System for Wordpress)
- [CVE-2024-13904](https://cve.now/CVE-2024-13904.md): Platform.ly for WooCommerce \<= 1.1.6 - Unauthenticated Blind Server-Side Request Forgery (CVSS 5.3, platformlycom Platform.ly for WooCommerce)
- [CVE-2024-13781](https://cve.now/CVE-2024-13781.md): Hero Maps Premium - Customizable Google Maps Plugin \<= 2.3.9 - Authenticated (Subscriber+) SQL Injection (CVSS 6.5, Hero Plugins Hero Maps Premium)
- [CVE-2024-12036](https://cve.now/CVE-2024-12036.md): CS Framework \<= 7.1 - Authenticated (Subscriber+) Arbitrary File Read (CVSS 7.5, Chimpstudio CS Framework)
- [CVE-2024-10804](https://cve.now/CVE-2024-10804.md): Ultimate Video Player \<= 10.0 - Unauthenticated Arbitrary File Download (CVSS 7.5, FWDesign Ultimate Video Player WordPress & WooCommerce Plug…)
- [CVE-2024-12611](https://cve.now/CVE-2024-12611.md): School Management System for Wordpress \<= 93.0.0 - Reflected Cross-Site Scripting (CVSS 5.3, dasinfomedia School Management System for Wordpress)
- [CVE-2024-12035](https://cve.now/CVE-2024-12035.md): CS Framework \<= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion (CVSS 8.8, Chimpstudio CS Framework)
- [CVE-2024-12607](https://cve.now/CVE-2024-12607.md): School Management System for Wordpress \<= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj\_smgt\_show\_event\_task' (CVSS 6.5, dasinfomedia School Management System for Wordpress)
- [CVE-2025-26331](https://cve.now/CVE-2025-26331.md): Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. (CVSS 7.8, Dell Wyse Proprietary OS)
- [CVE-2024-12837](https://cve.now/CVE-2024-12837.md): GPU DDK - Exploitable kernel double free on apsFenceSyncCheckpoints allocated with arbitrary size (CVSS 7.8, Imagination Technologies Graphics DDK)
- [CVE-2024-12576](https://cve.now/CVE-2024-12576.md): GPU DDK - Untrusted app can crash firmware by forcing MCU access to non-aligned address (CVSS 5.5, Imagination Technologies Graphics DDK)
- [CVE-2024-13906](https://cve.now/CVE-2024-13906.md): Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress \<= 4.7.3 - Authenticated (Administrator+) PHP Object Injection (CVSS 7.2, Gallery by BestWebSoft – Customizable Image and Photo Galle…)
- [CVE-2025-1309](https://cve.now/CVE-2025-1309.md): UiPress lite | Effortless custom dashboards, admin themes and pages \<= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update (CVSS 8.8, admintwentytwenty UiPress lite | Effortless custom dashboar…)
- [CVE-2025-0863](https://cve.now/CVE-2025-0863.md): Flexmls® IDX \<= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Flexmls® IDX Plugin)
- [CVE-2024-13320](https://cve.now/CVE-2024-13320.md): CURCY - WooCommerce Multi Currency - Currency Switcher \<= 2.3.6 - Unauthenticated SQL Injection (CVSS 7.5, villatheme CURCY - WooCommerce Multi Currency - Currency Sw…)
- [CVE-2024-13655](https://cve.now/CVE-2024-13655.md): Flex Mag - Responsive WordPress News Theme \<= 3.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion (CVSS 8.1, MVPThemes Flex Mag - Responsive WordPress News Theme)
- [CVE-2024-12809](https://cve.now/CVE-2024-12809.md): Wishlist \<= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, pickplugins Wishlist)
- [CVE-2025-1475](https://cve.now/CVE-2025-1475.md): WPCOM Member \<= 1.7.5 - Authentication Bypass via 'user\_phone' (CVSS 9.8, whyun WPCOM Member)
- [CVE-2025-2067](https://cve.now/CVE-2025-2067.md): projectworlds Life Insurance Management System search.php sql injection (CVSS 6.9, projectworlds Life Insurance Management System)
- [CVE-2025-2066](https://cve.now/CVE-2025-2066.md): projectworlds Life Insurance Management System updateAgent.php sql injection (CVSS 6.9, projectworlds Life Insurance Management System)
- [CVE-2025-2065](https://cve.now/CVE-2025-2065.md): projectworlds Life Insurance Management System editAgent.php sql injection (CVSS 6.9, projectworlds Life Insurance Management System)
- [CVE-2025-2064](https://cve.now/CVE-2025-2064.md): projectworlds Life Insurance Management System deletePayment.php sql injection (CVSS 6.9, projectworlds Life Insurance Management System)
- [CVE-2025-2063](https://cve.now/CVE-2025-2063.md): projectworlds Life Insurance Management System deleteNominee.php sql injection (CVSS 6.9, projectworlds Life Insurance Management System)
- [CVE-2025-2062](https://cve.now/CVE-2025-2062.md): projectworlds Life Insurance Management System clientStatus.php sql injection (CVSS 6.9, projectworlds Life Insurance Management System)
- [CVE-2025-2061](https://cve.now/CVE-2025-2061.md): code-projects Online Ticket Reservation System passenger.php cross site scripting (CVSS 5.3, code-projects Online Ticket Reservation System)
- [CVE-2025-26708](https://cve.now/CVE-2025-26708.md): ZTELink has a configuration defect vulnerability (CVSS 4.2, ZTE Link)
- [CVE-2025-2060](https://cve.now/CVE-2025-2060.md): PHPGurukul Emergency Ambulance Hiring Portal admin-profile.php sql injection (CVSS 6.9, PHPGurukul Emergency Ambulance Hiring Portal)
- [CVE-2025-2059](https://cve.now/CVE-2025-2059.md): PHPGurukul Emergency Ambulance Hiring Portal booking-details.php sql injection (CVSS 6.9, PHPGurukul Emergency Ambulance Hiring Portal)
- [CVE-2025-0748](https://cve.now/CVE-2025-0748.md): Homey \<= 2.4.3 - Cross-Site Request Forgery to User Verification (CVSS 4.3, Fave Themes Homey)
- [CVE-2024-13526](https://cve.now/CVE-2024-13526.md): EventPrime – Events Calendar, Bookings and Tickets \<= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export (CVSS 4.3, metagauss EventPrime – Events Calendar, Bookings and Tickets)
- [CVE-2025-0749](https://cve.now/CVE-2025-0749.md): Homey \<= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check (CVSS 8.1, Fave Themes Homey)
- [CVE-2025-2058](https://cve.now/CVE-2025-2058.md): PHPGurukul Emergency Ambulance Hiring Portal search.php sql injection (CVSS 6.9, PHPGurukul Emergency Ambulance Hiring Portal)
- [CVE-2025-2057](https://cve.now/CVE-2025-2057.md): PHPGurukul Emergency Ambulance Hiring Portal about-us.php sql injection (CVSS 6.9, PHPGurukul Emergency Ambulance Hiring Portal)
- [CVE-2025-2054](https://cve.now/CVE-2025-2054.md): code-projects Blood Bank Management System edit\_state.php sql injection (CVSS 5.1, code-projects Blood Bank Management System)
- [CVE-2025-2053](https://cve.now/CVE-2025-2053.md): PHPGurukul Apartment Visitors Management System visitor-detail.php sql injection (CVSS 5.3, PHPGurukul Apartment Visitors Management System)
- [CVE-2025-2052](https://cve.now/CVE-2025-2052.md): PHPGurukul Apartment Visitors Management System forgot-password.php sql injection (CVSS 5.3, PHPGurukul Apartment Visitors Management System)
- [CVE-2025-2051](https://cve.now/CVE-2025-2051.md): PHPGurukul Apartment Visitors Management System search-visitor.php sql injection (CVSS 5.3, PHPGurukul Apartment Visitors Management System)
- [CVE-2024-42733](https://cve.now/CVE-2024-42733.md): An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script to the UNC path inpu (CVSS 9.8)
- [CVE-2025-25617](https://cve.now/CVE-2025-25617.md): Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus. (CVSS 4.3)
- [CVE-2025-27795](https://cve.now/CVE-2025-27795.md): ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits. (CVSS 4.3, GraphicsMagick)
- [CVE-2025-27796](https://cve.now/CVE-2025-27796.md): ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory i (CVSS 4.5, GraphicsMagick)
- [CVE-2025-27816](https://cve.now/CVE-2025-27816.md): A vulnerability was discovered in the Arctera InfoScale 7.0 through 8.0.2 where a .NET remoting endpoint can be exploited due to the insecur (CVSS 9.8)
- [CVE-2025-27822](https://cve.now/CVE-2025-27822.md): An issue was discovered in the Masquerade module before 1.x-1.0.1 for Backdrop CMS. (CVSS 7.5, backdropcms Masquerade)
- [CVE-2025-27823](https://cve.now/CVE-2025-27823.md): An issue was discovered in the Mail Disguise module before 1.x-1.0.5 for Backdrop CMS. (CVSS 6.4, backdropcms Mail Disguise)
- [CVE-2025-27824](https://cve.now/CVE-2025-27824.md): An XSS issue was discovered in the Link iframe formatter module before 1.x-1.1.1 for Backdrop CMS. (CVSS 6.4, backdropcms Link iframe formatter)
- [CVE-2025-27825](https://cve.now/CVE-2025-27825.md): An XSS issue was discovered in the Bootstrap 5 Lite theme before 1.x-1.0.3 for Backdrop CMS. (CVSS 6.4, backdropcms Bootstrap 5 Lite theme)
- [CVE-2025-27826](https://cve.now/CVE-2025-27826.md): An XSS issue was discovered in the Bootstrap Lite theme before 1.x-1.4.5 for Backdrop CMS. (CVSS 6.4, backdropcms Bootstrap Lite theme)
- [CVE-2025-27839](https://cve.now/CVE-2025-27839.md): operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuin (CVSS 3.2, Tangem SDK)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-03-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.