# CVEs published 2025-03-12

101 CVEs were published on March 12, 2025: 13 critical, 28 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2025-25292](https://cve.now/CVE-2025-25292.md): Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) (CVSS 9.3, SAML-Toolkits ruby-saml · ruby-saml)
- [CVE-2025-25291](https://cve.now/CVE-2025-25291.md): ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) (CVSS 9.3, SAML-Toolkits ruby-saml · ruby-saml)
- [CVE-2025-25293](https://cve.now/CVE-2025-25293.md): ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses (CVSS 7.7, SAML-Toolkits ruby-saml · ruby-saml)
- [CVE-2024-26290](https://cve.now/CVE-2024-26290.md): Authenticated Remote Command Injection affecting Avid NEXIS (CVSS 8.7, Avid NEXIS E-series · Avid NEXIS F-series +2)
- [CVE-2025-0118](https://cve.now/CVE-2025-0118.md): GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability (CVSS 6.0, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2025-0117](https://cve.now/CVE-2025-0117.md): GlobalProtect App: Local Privilege Escalation (PE) Vulnerability (CVSS 7.1, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2025-0116](https://cve.now/CVE-2025-0116.md): PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame (CVSS 6.8, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2025-0115](https://cve.now/CVE-2025-0115.md): PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI (CVSS 6.8, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2025-22870](https://cve.now/CVE-2025-22870.md): HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net (CVSS 4.4, Go standard library net/http · golang.org/x/net/http/htt… +3)
- [CVE-2025-0114](https://cve.now/CVE-2025-0114.md): PAN-OS: Denial of Service (DoS) in GlobalProtect (CVSS 8.2, Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1)
- [CVE-2025-27407](https://cve.now/CVE-2025-27407.md): Remote code execution when loading a crafted GraphQL schema (CVSS 9.1, rmosolgo graphql-ruby · graphql)
- [CVE-2025-27017](https://cve.now/CVE-2025-27017.md): Apache NiFi: Potential Insertion of MongoDB Password in Provenance Record (CVSS 6.9, Apache Software Foundation Apache NiFi · org.apache.nifi:ni…)
- [CVE-2025-20209](https://cve.now/CVE-2025-20209.md): Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability (CVSS 7.5, Cisco IOS XR Software)
- [CVE-2025-20177](https://cve.now/CVE-2025-20177.md): Cisco IOS XR Software Image Verification Bypass Vulnerability (CVSS 6.7, Cisco IOS XR Software)
- [CVE-2025-20146](https://cve.now/CVE-2025-20146.md): Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Routing Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2025-20145](https://cve.now/CVE-2025-20145.md): Cisco IOS XR Software Access Control List Bypass Vulnerability (CVSS 5.8, Cisco IOS XR Software)
- [CVE-2025-20144](https://cve.now/CVE-2025-20144.md): Cisco IOS XR Software Access Control List Bypass Vulnerability (CVSS 4.0, Cisco IOS XR Software)
- [CVE-2025-20143](https://cve.now/CVE-2025-20143.md): Cisco IOS XR Software Secure Boot Bypass Vulnerability (CVSS 6.7, Cisco IOS XR Software)
- [CVE-2025-20142](https://cve.now/CVE-2025-20142.md): Cisco IOS XR Software for ASR 9000 Series Routers L2VPN Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2025-20141](https://cve.now/CVE-2025-20141.md): Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity (CVSS 7.4, Cisco IOS XR Software)
- [CVE-2025-20138](https://cve.now/CVE-2025-20138.md): Cisco IOS XR Software CLI Privilege Escalation Vulnerability (CVSS 8.8, Cisco IOS XR Software)
- [CVE-2025-20115](https://cve.now/CVE-2025-20115.md): Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2025-27867](https://cve.now/CVE-2025-27867.md): Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin (CVSS 5.6, Apache Software Foundation Apache Felix HTTP Webconsole Plu…)
- [CVE-2025-1960](https://cve.now/CVE-2025-1960.md): CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could cause an attacker to execute unauthorized co (CVSS 9.8, Schneider Electric WebHMI – Deployed with EcoStruxure Power…)
- [CVE-2025-0813](https://cve.now/CVE-2025-0813.md): CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized user without permission (CVSS 7.0, Schneider Electric EcoStruxure Power Automation System User…)
- [CVE-2025-1984](https://cve.now/CVE-2025-1984.md): Local Privilege Escalation on Xerox® Desktop Print Experience® v8.5 (CVSS 5.2, Xerox® Desktop Print Experience)
- [CVE-2025-1683](https://cve.now/CVE-2025-1683.md): Symbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion (CVSS 7.8, 1E Client)
- [CVE-2025-2002](https://cve.now/CVE-2025-2002.md): CWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause the disclosure of FTP server credentials wh (CVSS 4.0, Schneider Electric EcoStruxure Panel Server)
- [CVE-2025-0883](https://cve.now/CVE-2025-0883.md): vulnerability has been discovered in OpenText™ Service Manager. (CVSS 2.1, OpenText™ Service Manager)
- [CVE-2025-0884](https://cve.now/CVE-2025-0884.md): Privilege Escalation vulnerability has been discovered in OpenText™ Service Manager. (CVSS 7.3, OpenText™ Service Manager)
- [CVE-2025-2240](https://cve.now/CVE-2025-2240.md): Smallrye-fault-tolerance: smallrye fault tolerance (CVSS 7.5, smallrye-fault-tolerance-core · Red Hat build of Apache… +7)
- [CVE-2025-29891](https://cve.now/CVE-2025-29891.md): Apache Camel: Camel Message Header Injection through request parameters (CVSS 4.8, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2024-52362](https://cve.now/CVE-2024-52362.md): IBM App Connect Enterprise Certified Container denial of service (CVSS 4.3, IBM App Connect Enterprise Certified Container)
- [CVE-2025-27794](https://cve.now/CVE-2025-27794.md): Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite (CVSS 6.8, flarum framework · flarum/core +1)
- [CVE-2025-21590](https://cve.now/CVE-2025-21590.md): Junos OS: An local attacker with shell access can execute arbitrary code (CVSS 4.4, KEV, Juniper Networks Junos OS)
- [CVE-2025-27788](https://cve.now/CVE-2025-27788.md): Ruby JSON Parser has Out-of-bounds Read (CVSS 7.5, ruby json · json)
- [CVE-2024-10838](https://cve.now/CVE-2024-10838.md): Integer Underflow in DDS\_Security\_Deserialize\_ methods may lead to OOB read (CVSS 8.8, Eclipse Foundation Eclipse Cyclone DDS)
- [CVE-2025-29904](https://cve.now/CVE-2025-29904.md): In JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible (CVSS 5.3, JetBrains Ktor)
- [CVE-2025-29903](https://cve.now/CVE-2025-29903.md): In JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure macOS flags was possible (CVSS 5.2, JetBrains Runtime)
- [CVE-2024-13870](https://cve.now/CVE-2024-13870.md): Unauthenticated Firmware Downgrade in Bitdefender Box v1 (CVSS 1.8, Bitdefender BOX)
- [CVE-2024-13871](https://cve.now/CVE-2024-13871.md): Unauthenticated Command Injection in Bitdefender BOX v1 (CVSS 9.4, Bitdefender BOX)
- [CVE-2024-13872](https://cve.now/CVE-2024-13872.md): Bitdefender Box Insecure Update Mechanism Vulnerability in libboxhermes.so (CVSS 9.4, Bitdefender BOX)
- [CVE-2025-1527](https://cve.now/CVE-2025-1527.md): ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) \<= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module (CVSS 6.4, devitemsllc ShopLentor – All-in-One WooCommerce Growth & St…)
- [CVE-2025-2239](https://cve.now/CVE-2025-2239.md): Absolute Path Disclosure Vulnerability in Hillstone Next Generation FireWall (CVSS 5.3, Hillstone Networks Hillstone Next Generation FireWall)
- [CVE-2025-21866](https://cve.now/CVE-2025-21866.md): powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM\_ALLOC (CVSS 5.5, Linux)
- [CVE-2025-21865](https://cve.now/CVE-2025-21865.md): gtp: Suppress list corruption splat in gtp\_net\_exit\_batch\_rtnl(). (CVSS 5.5, Linux)
- [CVE-2025-21864](https://cve.now/CVE-2025-21864.md): tcp: drop secpath at the same time as we currently drop dst (CVSS 7.8, Linux)
- [CVE-2025-21863](https://cve.now/CVE-2025-21863.md): io\_uring: prevent opcode speculation (CVSS 7.8, Linux)
- [CVE-2025-21862](https://cve.now/CVE-2025-21862.md): drop\_monitor: fix incorrect initialization order (CVSS 5.5, Linux)
- [CVE-2025-21861](https://cve.now/CVE-2025-21861.md): mm/migrate\_device: don't add folio to be freed to LRU in migrate\_device\_finalize() (CVSS 5.5, Linux)
- [CVE-2025-21860](https://cve.now/CVE-2025-21860.md): mm/zswap: fix inconsistency when zswap\_store\_page() fails (no CVSS, Linux)
- [CVE-2025-21859](https://cve.now/CVE-2025-21859.md): USB: gadget: f\_midi: f\_midi\_complete to call queue\_work (CVSS 5.5, Linux)
- [CVE-2025-21858](https://cve.now/CVE-2025-21858.md): geneve: Fix use-after-free in geneve\_find\_dev(). (CVSS 7.8, Linux)
- [CVE-2025-21857](https://cve.now/CVE-2025-21857.md): net/sched: cls\_api: fix error handling causing NULL dereference (CVSS 5.5, Linux)
- [CVE-2025-21856](https://cve.now/CVE-2025-21856.md): s390/ism: add release function for struct device (CVSS 7.8, Linux)
- [CVE-2025-21855](https://cve.now/CVE-2025-21855.md): ibmvnic: Don't reference skb after sending to VIOS (CVSS 8.6, Linux)
- [CVE-2025-21854](https://cve.now/CVE-2025-21854.md): sockmap, vsock: For connectible sockets allow only connected (CVSS 5.5, Linux)
- [CVE-2025-21853](https://cve.now/CVE-2025-21853.md): bpf: avoid holding freeze\_mutex during mmap operation (no CVSS, Linux)
- [CVE-2025-21852](https://cve.now/CVE-2025-21852.md): net: Add rx\_skb of kfree\_skb to raw\_tp\_null\_args\[\]. (CVSS 5.5, Linux)
- [CVE-2025-21851](https://cve.now/CVE-2025-21851.md): bpf: Fix softlockup in arena\_map\_free on 64k page kernel (CVSS 7.8, Linux)
- [CVE-2025-21850](https://cve.now/CVE-2025-21850.md): nvmet: Fix crash when a namespace is disabled (CVSS 9.8, Linux)
- [CVE-2025-21849](https://cve.now/CVE-2025-21849.md): drm/i915/gt: Use spin\_lock\_irqsave() in interruptible context (CVSS 5.5, Linux)
- [CVE-2025-21848](https://cve.now/CVE-2025-21848.md): nfp: bpf: Add check for nfp\_app\_ctrl\_msg\_alloc() (CVSS 5.5, Linux)
- [CVE-2025-21847](https://cve.now/CVE-2025-21847.md): ASoC: SOF: stream-ipc: Check for cstream nullity in sof\_ipc\_msg\_data() (CVSS 5.5, Linux)
- [CVE-2025-21846](https://cve.now/CVE-2025-21846.md): acct: perform last write from workqueue (CVSS 5.5, Linux)
- [CVE-2025-21845](https://cve.now/CVE-2025-21845.md): mtd: spi-nor: sst: Fix SST write failure (CVSS 5.5, Linux)
- [CVE-2025-21844](https://cve.now/CVE-2025-21844.md): smb: client: Add check for next\_buffer in receive\_encrypted\_standard() (CVSS 7.5, Linux)
- [CVE-2024-58089](https://cve.now/CVE-2024-58089.md): btrfs: fix double accounting race when btrfs\_run\_delalloc\_range() failed (CVSS 7.8, Linux)
- [CVE-2024-58088](https://cve.now/CVE-2024-58088.md): bpf: Fix deadlock when freeing cgroup storage (CVSS 5.5, Linux)
- [CVE-2024-13446](https://cve.now/CVE-2024-13446.md): Workreap \<= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover (CVSS 9.8, AmentoTech Workreap)
- [CVE-2024-13430](https://cve.now/CVE-2024-13430.md): Page Builder: Pagelayer – Drag and Drop website builder \<= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer\_builder\_posts\_shortcode (CVSS 4.3, softaculous Page Builder: Pagelayer – Drag and Drop website…)
- [CVE-2024-58087](https://cve.now/CVE-2024-58087.md): ksmbd: fix racy issue from session lookup and expire (CVSS 9.8, Linux)
- [CVE-2024-12589](https://cve.now/CVE-2024-12589.md): Finale Lite – Sales Countdown Timer & Discount for WooCommerce \<= 2.19.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Countdown Timer (CVSS 6.4, djeet Finale Lite – Sales Countdown Timer & Discount for Wo…)
- [CVE-2024-13838](https://cve.now/CVE-2024-13838.md): Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin \<= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook (CVSS 5.5, uncannyowl Uncanny Automator – Easy Automation, Integration…)
- [CVE-2024-13498](https://cve.now/CVE-2024-13498.md): NEX-Forms – Ultimate Form Builder – Contact forms and much more \<= 8.8.1 - Unauthenticated Sensitive Information Exposure (CVSS 5.3, webaways NEX-Forms – Ultimate Forms Plugin for WordPress)
- [CVE-2025-24912](https://cve.now/CVE-2025-24912.md): hostapd fails to process crafted RADIUS packets properly. (CVSS 3.7, Jouni Malinen hostapd)
- [CVE-2025-2077](https://cve.now/CVE-2025-2077.md): Simple Amazon Affiliate \<= 1.0.9 - Reflected Cross-Site Scripting (CVSS 6.1, duogeek Simple Amazon Affiliate)
- [CVE-2025-2078](https://cve.now/CVE-2025-2078.md): BlogBuzzTime-for-wp \<= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, gpenverne BlogBuzzTime for WP)
- [CVE-2025-1508](https://cve.now/CVE-2025-1508.md): WP Crowdfunding \<= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download (CVSS 5.3, themeum WP Crowdfunding)
- [CVE-2025-2076](https://cve.now/CVE-2025-2076.md): binlayerpress \<= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, gnarf binlayerpress)
- [CVE-2025-2205](https://cve.now/CVE-2025-2205.md): GDPR Cookie Compliance \<= 4.15.6 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, mooveagency GDPR Cookie Compliance – Cookie Banner, Cookie…)
- [CVE-2025-2220](https://cve.now/CVE-2025-2220.md): Odyssey CMS reCAPTCHA odyssey\_contact\_form.php key management (CVSS 4.8, Odyssey CMS)
- [CVE-2025-2219](https://cve.now/CVE-2025-2219.md): LoveCards LoveCardsV2 image unrestricted upload (CVSS 6.9, LoveCardsV2)
- [CVE-2025-2218](https://cve.now/CVE-2025-2218.md): LoveCards LoveCardsV2 Setting other access control (CVSS 6.9, LoveCardsV2)
- [CVE-2025-2217](https://cve.now/CVE-2025-2217.md): zzskzy Warehouse Refinement Management System getAdyData.ashx ProcessRequest sql injection (CVSS 5.3, zzskzy Warehouse Refinement Management System)
- [CVE-2025-2216](https://cve.now/CVE-2025-2216.md): zzskzy Warehouse Refinement Management System SaveCrash.ashx UploadCrash unrestricted upload (CVSS 5.3, zzskzy Warehouse Refinement Management System)
- [CVE-2024-27763](https://cve.now/CVE-2024-27763.md): XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in t (CVSS 5.3, basicsr)
- [CVE-2024-34398](https://cve.now/CVE-2024-34398.md): An issue was discovered in BMC Remedy Mid Tier 7.6.04. (CVSS 4.2)
- [CVE-2025-22954](https://cve.now/CVE-2025-22954.md): GetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl via the supplierid or (CVSS 10.0, Koha)
- [CVE-2025-25565](https://cve.now/CVE-2025-25565.md): SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in the Command.c file via the PtMakeCert and PtMakeCert2048 functions. (CVSS 9.8)
- [CVE-2025-25566](https://cve.now/CVE-2025-25566.md): Memory Leak vulnerability in SoftEtherVPN 5.02.5187 allows an attacker to cause a denial of service via the UnixMemoryAlloc function. (CVSS 5.6)
- [CVE-2025-25567](https://cve.now/CVE-2025-25567.md): SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in Internat.c via the UniToStrForSingleChars function. (CVSS 9.8)
- [CVE-2025-25568](https://cve.now/CVE-2025-25568.md): SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function. (CVSS 9.8)
- [CVE-2025-25683](https://cve.now/CVE-2025-25683.md): AlekSIS-Core is vulnerable to Incorrect Access Control. (CVSS 5.6)
- [CVE-2025-25709](https://cve.now/CVE-2025-25709.md): An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the addUser and updateUser endpoints (CVSS 7.5)
- [CVE-2025-25711](https://cve.now/CVE-2025-25711.md): An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the ProfileID value to the \[/tnexus/rest/ad (CVSS 8.8)
- [CVE-2025-25774](https://cve.now/CVE-2025-25774.md): An issue was discovered in Open5GS v2.7.2. (CVSS 6.5)
- [CVE-2025-25975](https://cve.now/CVE-2025-25975.md): An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function (CVSS 7.5, parse-git-config)
- [CVE-2025-26260](https://cve.now/CVE-2025-26260.md): Plenti \<= 0.7.16 is vulnerable to code execution. (CVSS 8.8, github.com/plentico/plenti)
- [CVE-2025-27914](https://cve.now/CVE-2025-27914.md): An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. (CVSS 5.4)
- [CVE-2025-27915](https://cve.now/CVE-2025-27915.md): An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. (CVSS 5.4, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-03-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.