CVEs published March 30, 2025
16 CVEs were published on March 30, 2025: 1 critical, 5 high.
- Published
- 16
- Critical
- 1
- High
- 5
- Medium
- 10
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- PHP Group PHP
- 4
- Bluestar Micro Mall
- 2
- Hewlett Packard Enterprise HPE Insight Cluster Management U…
- 1
- mannaandpoem OpenManus
- 1
- opensolon · org.noear:solon-view
- 1
- PyTorch · torch
- 1
- TOTOLINK A3000RU
- 1
- TRENDnet TEW-410APB
- 1
- TRENDnet TEW-411BRP+
- 1
- TRENDnet TEW-637AP · TRENDnet TEW-638APB
- 1
Critical 1
High 5
- CVE-2025-2960TRENDnet TEW-637AP/TEW-638APB HTTP Request goahead sub_41DED0 null pointer dereferenceTRENDnet TEW-637AP · TRENDnet TEW-638APB
- CVE-2025-2959TRENDnet TEW-410APB HTTP Request httpd sub_4019A0 null pointer dereferenceTRENDnet TEW-410APB
- CVE-2025-2958TRENDnet TEW-818DRU HTTP Request httpd denial of serviceTRENDnet TEW-818DRU
- CVE-2025-2957TRENDnet TEW-411BRP+ HTTP Request httpd sub_401DB0 null pointer dereferenceTRENDnet TEW-411BRP+
- CVE-2025-2956TRENDnet TI-G102i HTTP Request lighttpd plugins_call_handle_uri_raw null pointer dereferenceTRENDnet TI-G102i
Medium, low and unrated 10
- CVE-2025-2961opensolon org.noear.solon.core.handle.RenderManager aa render_mav path traversalopensolon · org.noear:solon-view
- CVE-2025-2955TOTOLINK A3000RU IBMS Configuration File ExportIbmsConfig.sh access controlTOTOLINK A3000RU
- CVE-2025-2954mannaandpoem OpenManus File file_saver.py execute access controlmannaandpoem OpenManus
- CVE-2025-2953PyTorch torch.mkldnn_max_pool2d denial of servicePyTorch · torch
- CVE-2025-2952Bluestar Micro Mall api.php unrestricted uploadBluestar Micro Mall
- CVE-2025-2951Bluestar Micro Mall data.php sql injectionBluestar Micro Mall
- CVE-2025-1861Stream HTTP wrapper truncates redirect location to 1024 bytesPHP Group PHP
- CVE-2025-1736Stream HTTP wrapper header check might omit basic auth headerPHP Group PHP
- CVE-2025-1734Streams HTTP wrapper does not fail for headers with invalid name and no colonPHP Group PHP
- CVE-2025-1219libxml streams use wrong content-type header when requesting a redirected resourcePHP Group PHP