CVEs published March 9, 2025
24 CVEs were published on March 9, 2025: 0 critical, 0 high.
- Published
- 24
- Critical
- 0
- High
- 0
- Medium
- 20
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Thinkware Car Dashcam F800 Pro
- 4
- Beijing Founder Electronics Founder Enjoys All-Media Acquis…
- 2
- Control iD RH iD
- 2
- ftcms
- 2
- JoomlaUX JUX Real Estate
- 2
- URL Shortener | Conversion Tracking | AB Testing | WooCom…
- 2
- Apache Software Foundation Apache Camel · org.apache.camel:…
- 1
- AT Software Solutions ATSVD
- 1
- Contact Us By Lord Linus
- 1
- dayrui XunRuiCMS
- 1
Medium, low and unrated 24
- CVE-2025-2133ftcms edit cross site scriptingftcms
- CVE-2025-2132ftcms Search ajax_all_lists sql injectionftcms
- CVE-2025-2131dayrui XunRuiCMS Friendly Links cross site scriptingdayrui XunRuiCMS
- CVE-2025-2130OpenXE Ticket Bearbeiten Page cross site scriptingOpenXE
- CVE-2025-2129Mage AI insecure default initialization of resourceMage AI
- CVE-2025-2127JoomlaUX JUX Real Estate realties cross site scriptingJoomlaUX JUX Real Estate
- CVE-2025-2126JoomlaUX JUX Real Estate GET Parameter realties sql injectionJoomlaUX JUX Real Estate
- CVE-2025-2125Control iD RH iD PDF Document companyId resource injectionControl iD RH iD
- CVE-2025-2124Control iD RH iD API change_password cross site scriptingControl iD RH iD
- CVE-2025-2123GeSHi CSS cssgen.php get_var cross site scriptingGeSHi · geshi/geshi
- CVE-2025-2122Thinkware Car Dashcam F800 Pro Connection denial of serviceThinkware Car Dashcam F800 Pro
- CVE-2025-27636Apache Camel: Camel Message Header Injection via Improper FilteringApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2025-2121Thinkware Car Dashcam F800 Pro File Storage access controlThinkware Car Dashcam F800 Pro
- CVE-2025-2120Thinkware Car Dashcam F800 Pro Configuration File hostapd.conf cleartext storage in a file or on diskThinkware Car Dashcam F800 Pro
- CVE-2025-2119Thinkware Car Dashcam F800 Pro Device Registration default credentialsThinkware Car Dashcam F800 Pro
- CVE-2025-2118Quantico Tecnologia PRMV Login Endpoint login.php sql injectionQuantico Tecnologia PRMV
- CVE-2025-2117Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System reportCenter.do electricDocList sql injectionBeijing Founder Electronics Founder Enjoys All-Media Acquis…
- CVE-2025-2116Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System File Protocol imageProxy.do server-side request forgeryBeijing Founder Electronics Founder Enjoys All-Media Acquis…
- CVE-2025-1382Contact Us By Lord Linus <= 2.6 - Admin+ Stored XSS via CSRFContact Us By Lord Linus
- CVE-2025-1363easy-broken-link-checker <= 9.0.2 - Admin+ Stored XSSURL Shortener | Conversion Tracking | AB Testing | WooCom…
- CVE-2025-1362easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRFURL Shortener | Conversion Tracking | AB Testing | WooCom…
- CVE-2025-2115zzskzy Warehouse Refinement Management System AcceptZip.ashx ProcessRequest unrestricted uploadzzskzy Warehouse Refinement Management System
- CVE-2025-2114Shenzhen Sixun Software Sixun Shanghui Group Business Management System Reset Password Interface OperatorStop.asp improper authorizationShenzhen Sixun Software Sixun Shanghui Group Business Manag…
- CVE-2025-2113AT Software Solutions ATSVD Esqueceu a senha sql injectionAT Software Solutions ATSVD