CVEs published March 16, 2025
33 CVEs were published on March 16, 2025: 1 critical, 4 high.
- Published
- 33
- Critical
- 1
- High
- 4
- Medium
- 23
- Low
- 5
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 12
Most affected products
- GDPR Cookie Compliance
- 6
- IROAD Dash Cam FX2
- 4
- IROAD Dash Cam X5 · IROAD Dash Cam X6
- 4
- otale Tale Blog
- 2
- tbeu matio
- 2
- boxdot gurk · gurk
- 1
- DayCloud StudentManage
- 1
- Download Manager
- 1
- Drivin Soluções
- 1
- IROAD Dash Cam X5
- 1
Critical 1
High 4
- CVE-2025-2343IROAD Dash Cam X5/Dash Cam X6 Device Pairing hard-coded credentialsIROAD Dash Cam X5 · IROAD Dash Cam X6
- CVE-2022-49737In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various dataX.org X server
- CVE-2025-30074Alludo Parallels Desktop before 19.4.2 and 20.x before 20.2.2 for macOS on Intel platforms allows privilege escalation to root via the VM crParallels Desktop
- CVE-2025-30076Koha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the tools/scheduler.pl report parameter.Koha
Medium, low and unrated 28
- CVE-2025-2353VAM Virtual Airlines Manager HTTP GET Parameter index.php sql injectionVAM Virtual Airlines Manager
- CVE-2025-2352StarSea99 starsea-mall Backend save cross site scriptingStarSea99 starsea-mall
- CVE-2025-2351DayCloud StudentManage Login Endpoint adminScoreUrl sql injectionDayCloud StudentManage
- CVE-2025-2350IROAD Dash Cam FX2 upload_file unrestricted uploadIROAD Dash Cam FX2
- CVE-2025-2349IROAD Dash Cam FX2 Password Hash passwd weak password hashIROAD Dash Cam FX2
- CVE-2025-2348IROAD Dash Cam FX2 HTTP/RTSP event information disclosureIROAD Dash Cam FX2
- CVE-2025-2347IROAD Dash Cam FX2 Device Registration default passwordIROAD Dash Cam FX2
- CVE-2025-2346IROAD Dash Cam X5/Dash Cam X6 Domain origin validationIROAD Dash Cam X5 · IROAD Dash Cam X6
- CVE-2025-2344IROAD Dash Cam X5/Dash Cam X6 API Endpoint missing authenticationIROAD Dash Cam X5 · IROAD Dash Cam X6
- CVE-2025-2342IROAD X5 Mobile App API Endpoint hard-coded credentialsIROAD X5 Mobile App
- CVE-2025-2341IROAD Dash Cam X5 SSID default credentialsIROAD Dash Cam X5
- CVE-2025-2340otale Tale Blog Site Settings save saveOptions cross site scriptingotale Tale Blog
- CVE-2025-2339otale Tale Blog logs improper authenticationotale Tale Blog
- CVE-2025-2338tbeu matio io.c strdup_vprintf heap-based overflowtbeu matio
- CVE-2025-2337tbeu matio mat.c Mat_VarPrint heap-based overflowtbeu matio
- CVE-2025-1624GDPR Cookie Compliance < 4.15.9 - Admin+ Stored XSSGDPR Cookie Compliance
- CVE-2025-1623GDPR Cookie Compliance < 4.15.9 - Admin+ Stored XSSGDPR Cookie Compliance
- CVE-2025-1622GDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSSGDPR Cookie Compliance
- CVE-2025-1621GDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSSGDPR Cookie Compliance
- CVE-2025-1620GDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSSGDPR Cookie Compliance
- CVE-2025-1619GDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSSGDPR Cookie Compliance
- CVE-2024-13602Poll Maker < 5.5.4 - Admin+ Stored XSSPoll Maker
- CVE-2024-13126Download Manager < 3.3.07 - Unauthenticated Data ExposureDownload Manager
- CVE-2025-2335Drivin Soluções API registerSchool cross site scriptingDrivin Soluções
- CVE-2024-58103Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt.Square Wire · com.squareup.wire:wire-runtime
- CVE-2025-24856An issue was discovered in the oidc (aka OpenID Connect Authentication) extension before 4.0.0 for TYPO3.TYPO3 oidc · causal/oidc
- CVE-2025-30077Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of onosproject onos-lib-go · github.com/onosproject/onos-lib-go
- CVE-2025-30089gurk (aka gurk-rs) through 0.6.3 mishandles ANSI escape sequences.boxdot gurk · gurk