CVEs published March 23, 2025
40 CVEs were published on March 23, 2025: 0 critical, 3 high.
- Published
- 40
- Critical
- 0
- High
- 3
- Medium
- 37
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- PHPGurukul Art Gallery Management System
- 8
- Project Worlds Online Time Table Generator
- 4
- JIZHICMS
- 3
- Apache Software Foundation Apache Commons VFS · org.apache.…
- 2
- code-projects Payroll Management System
- 2
- PHPGurukul Doctor Appointment Management System
- 2
- PHPGurukul Online Security Guards Hiring System
- 2
- SourceCodester AC Repair and Services System
- 2
- CodeZips Hospital Management System
- 1
- FoxCMS
- 1
High 3
- CVE-2025-29795Microsoft Edge (Chromium-based) Update Elevation of Privilege VulnerabilityMicrosoft Edge Update Setup
- CVE-2025-2691Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname thnossrf
- CVE-2025-27553Apache Commons VFS: Possible path traversal issue when using NameScope.DESCENDENTApache Software Foundation Apache Commons VFS · org.apache.…
Medium, low and unrated 37
- CVE-2025-2673code-projects Payroll Management System home_employee.php cross site scriptingcode-projects Payroll Management System
- CVE-2025-2672code-projects Payroll Management System add_deductions.php sql injectioncode-projects Payroll Management System
- CVE-2018-25109Nintendo Animal Crossing Letter Trigram ac-exploit-gc memory corruptionNintendo Animal Crossing · Nintendo Doubutsu no Mori+ +1
- CVE-2025-2671Yue Lao Blind Box 月老盲盒 Upload.php base64image unrestricted uploadYue Lao Blind Box 月老盲盒
- CVE-2025-2665PHPGurukul Online Security Guards Hiring System bwdates-reports-details.php sql injectionPHPGurukul Online Security Guards Hiring System
- CVE-2025-2664CodeZips Hospital Management System suadpeted.php sql injectionCodeZips Hospital Management System
- CVE-2025-2663PHPGurukul Bank Locker Management System search-locker-details.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2025-2662Project Worlds Online Time Table Generator studentdashboard.php sql injectionProject Worlds Online Time Table Generator
- CVE-2025-2661Project Worlds Online Time Table Generator index.php sql injectionProject Worlds Online Time Table Generator
- CVE-2025-2660Project Worlds Online Time Table Generator index.php sql injectionProject Worlds Online Time Table Generator
- CVE-2025-2659Project Worlds Online Time Table Generator index.php sql injectionProject Worlds Online Time Table Generator
- CVE-2025-2658PHPGurukul Online Security Guards Hiring System search-request.php sql injectionPHPGurukul Online Security Guards Hiring System
- CVE-2025-2657projectworlds Apartment Visitors Management System front.php sql injectionprojectworlds Apartment Visitors Management System
- CVE-2025-2656PHPGurukul Zoo Management System login.php sql injectionPHPGurukul Zoo Management System
- CVE-2025-2655SourceCodester AC Repair and Services System Users.php delete_users sql injectionSourceCodester AC Repair and Services System
- CVE-2025-29806Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2025-2654SourceCodester AC Repair and Services System manage_service.php sql injectionSourceCodester AC Repair and Services System
- CVE-2025-2653FoxCMS improper authorizationFoxCMS
- CVE-2025-2652SourceCodester Employee and Visitor Gate Pass Logging System exposure of information through directory listingSourceCodester Employee and Visitor Gate Pass Logging System
- CVE-2025-2651SourceCodester Online Eyewear Shop admin exposure of information through directory listingSourceCodester Online Eyewear Shop
- CVE-2025-30474Apache Commons VFS: Failing to find an FTP file can reveal the URI's password in an error messageApache Software Foundation Apache Commons VFS · org.apache.…
- CVE-2025-2650PHPGurukul Medical Card Generation System download-medical-cards.php cross site scriptingPHPGurukul Medical Card Generation System
- CVE-2025-2649PHPGurukul Doctor Appointment Management System check-appointment.php sql injectionPHPGurukul Doctor Appointment Management System
- CVE-2025-2648PHPGurukul Art Gallery Management System view-enquiry-detail.php sql injectionPHPGurukul Art Gallery Management System
- CVE-2025-2647PHPGurukul Art Gallery Management System search.php sql injectionPHPGurukul Art Gallery Management System
- CVE-2025-2646PHPGurukul Art Gallery Management System admin-profile.php sql injectionPHPGurukul Art Gallery Management System
- CVE-2025-2645PHPGurukul Art Gallery Management System product.php cross site scriptingPHPGurukul Art Gallery Management System
- CVE-2025-2644PHPGurukul Art Gallery Management System add-art-product.php sql injectionPHPGurukul Art Gallery Management System
- CVE-2025-2643PHPGurukul Art Gallery Management System edit-art-type-detail.php sql injectionPHPGurukul Art Gallery Management System
- CVE-2025-2642PHPGurukul Art Gallery Management System edit-art-product-detail.php sql injectionPHPGurukul Art Gallery Management System
- CVE-2025-1446Pods < 3.2.8.2 - Admin+ SQL InjectionPods
- CVE-2025-0718Nested Pages < 3.2.13 - Contributor+ Stored XSSNested Pages
- CVE-2025-2641PHPGurukul Art Gallery Management System edit-artist-detail.php sql injectionPHPGurukul Art Gallery Management System
- CVE-2025-2640PHPGurukul Doctor Appointment Management System appointment-bwdates-reports-details.php sql injectionPHPGurukul Doctor Appointment Management System
- CVE-2025-2639JIZHICMS Article release.html improper authorizationJIZHICMS
- CVE-2025-2638JIZHICMS Article release.html improper authorizationJIZHICMS
- CVE-2025-2637JIZHICMS Account Profile Page userinfo.html improper authorizationJIZHICMS