CVE Tools
Sign in
month report

March 2025

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

March 2025 closed with 4,251 published CVEs — +26.0% YoY . 420 criticals, 32 added to CISA KEV (4 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via linux. Biggest breakout: ао «сбертех» at ×9.8 their 12-month median. Top weakness class — CWE-79 (854 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
4,251
— MoM+26.0% YoY
Severity mix
420 / 1,461
critical / high
KEV added
32
4 ransomware-linked
Nuclei coverage
27.4%
1,165 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
349.3
n=1,165
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
4
n=26
Detection gap

KEV pressure, no Nuclei coverage

March 2025 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in March 2025

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS89SQL Injection352CSRF862Missing Authorization74Injection94Code Injection284CWE-284787Out-of-bounds Write22Path Traversal200Information Exposureсообщество свободного программного обеспечения7151531ооо «ред софт»311131linux4ооо «русбитех-астра»2121pypi57538101apple271238138red hat inc.11121ао «нппкт»2162ао «сбертех»2novell inc.1115canonical ltd.111phpgurukul6717062

Most discussed CVEs — March 2025

No CVE mentions in the news this month yet.

Breakout vendors

CVE count ≥3× their own 12-period median.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    312 CVE14 critCVSS 6.2
    KEV 2Nuclei 4PoC 26
    linux (200) · debian gnu/linux (140) · wpe webkit (7)
  • 2linux—
    207 CVECVSS 5.9
    PoC 1
    linux (207) · linux kernel (207)
  • 3ооо «ред софт»—
    202 CVE4 critCVSS 6.2
    KEV 2Nuclei 5PoC 22
    ред ос (202)
  • 4ооо «русбитех-астра»—
    173 CVE8 critCVSS 6.6
    KEV 2PoC 9
    astra linux special edition (171) · astra linux common edition (32) · пк "ald pro" (1)
  • 5pypi—
    166 CVE33 critCVSS 7.7
    Nuclei 4PoC 36
    open-webui (21) · aim (12) · h2o (10)
  • 6redhat—
    166 CVE2 critCVSS 6.4
    PoC 6
    red hat enterprise linux (130) · red hat enterprise linux 7 (17) · red hat enterprise linux 8 (17)
  • 7apple—
    159 CVE46 critCVSS 7.0
    ×3.9KEV 1PoC 1
    macos (149) · ipados (74) · ios and ipados (72)
  • 8ао "нппкт"—
    123 CVE7 critCVSS 6.6
    KEV 3Nuclei 1PoC 7
    осон основа оnyx (123)
  • 9ао «сбертех»—
    108 CVECVSS 6.0
    ×9.8KEV 1PoC 1
    platform v sberlinux os server (108)
  • 10novell inc.—
    102 CVE2 critCVSS 6.1
    ×3.0PoC 7
    suse linux enterprise server (89) · suse linux enterprise server for sap applications (85) · opensuse leap (51)
  • 11phpgurukul—
    81 CVECVSS 6.7
    ×6.2Nuclei 1PoC 78
    bank locker management system (12) · art gallery management system (11) · old age home management system (7)
  • 12canonical—
    80 CVE2 critCVSS 6.2
    PoC 3
    ubuntu (79) · accountsservice (1) · linux-bluefield (1)
  • 13unknown—
    76 CVE1 critCVSS 5.6
    Nuclei 76PoC 76
    gdpr cookie compliance (6) · url shortener | conversion tracking | ab testing | woocommerce (3) · product labels for woocommerce (sale badges) (2)
  • 14microsoft—
    70 CVE1 critCVSS 7.2
    KEV 8PoC 3
    windows server 2025 (38) · windows server 2022, 23h2 edition (server core installation) (37) · windows server 2022 (37)
  • 15maven—
    64 CVE8 critCVSS 6.7
    KEV 1Nuclei 3PoC 8
    ai.h2o:h2o-core (9) · io.github.robothy:local-s3-rest (4) · org.jenkins-ci.main:jenkins-core (4)
  • 16packagist—
    62 CVE5 critCVSS 6.7
    Nuclei 1PoC 15
    drupal/ai (4) · drupal/core (4) · shopxo/shopxo (3)
  • 17ао «ивк»—
    62 CVE8 critCVSS 6.8
    KEV 1Nuclei 1PoC 5
    альт сп 10 (56) · альт 8 сп (12)
  • 18go—
    60 CVE5 critCVSS 6.4
    Nuclei 4PoC 9
    github.com/mattermost/mattermost/server/v8 (7) · github.com/ollama/ollama (6) · k8s.io/ingress-nginx (5)
  • 19npm—
    52 CVE7 critCVSS 6.5
    KEV 1Nuclei 5PoC 10
    directus (5) · open-webui (3) · flowise (3)
  • 20printerlogic—
    49 CVE36 critCVSS 9.0
    NEW
    vasion print (49) · virtual appliance (49)
  • 21tenda—
    46 CVE10 critCVSS 7.1
    PoC 29
    fh1202 firmware (8) · fh1202 (8) · rx3 firmware (7)
  • 22fortinet—
    44 CVE2 critCVSS 6.6
    ×3.8
    fortios (7) · fortisandbox (7) · fortiweb (6)
  • 23adobe—
    43 CVECVSS 7.0
    indesign desktop (9) · acrobat (9) · indesign (9)
  • 24ibm—
    39 CVE3 critCVSS 5.7
    infosphere information server (5) · engineering requirements management doors next (3) · common cryptographic architecture (3)
  • 25google—
    35 CVE2 critCVSS 7.2
    KEV 1Nuclei 1PoC 1
    google chrome (16) · chrome (15) · android (14)
  • 26shenzhen tenda technology co., ltd.—
    35 CVE6 critCVSS 7.2
    PoC 25
    tenda fh1202 (6) · tenda ac9 (5) · tenda tx3 (5)
  • 27code-projects—
    33 CVECVSS 5.2
    PoC 33
    blood bank management system (10) · payroll management system (7) · online class and exam scheduling system (5)
  • 28dell—
    32 CVE2 critCVSS 7.6
    unity operating environment (15) · unity (15) · smartfabric os10 software (11)
  • 29fortinet inc.—
    32 CVE2 critCVSS 6.6
    ×3.6
    fortisandbox (6) · fortiweb (5) · fortimail (4)
  • 30dell technologies—
    30 CVE2 critCVSS 7.7
    emc unity operating environment (16) · emc unityvsa operating environment (16) · smartfabric os10 (10)
  • 31drupal—
    30 CVE3 critCVSS 6.9
    drupal (4) · ai (artificial intelligence) (4) · drupal core (4)
  • 32samsung—
    30 CVECVSS 6.9
    notes (19) · exynos 1080 firmware (3) · exynos 1280 firmware (3)
  • 33qualcomm—
    27 CVECVSS 7.2
    fastconnect 7800 firmware (20) · wcd9380 firmware (19) · fastconnect 6900 firmware (19)
  • 34qualcomm, inc.—
    27 CVECVSS 7.4
    snapdragon (27)
  • 35samsung mobile—
    27 CVECVSS 5.6
    samsung notes (19) · samsung mobile devices (6) · samsung my files (1)
  • 36openatom—
    26 CVECVSS 3.7
    ×4.0
    openharmony (26)
  • 37openharmony—
    26 CVECVSS 3.7
    ×4.0
    openharmony (26)
  • 38esri—
    25 CVE1 critCVSS 5.4
    arcgis server (24) · portal for arcgis (1)
  • 39siemens—
    25 CVE2 critCVSS 7.0
    tecnomatix plant simulation v2404 (10) · tecnomatix plant simulation v2302 (10) · tecnomatix plant simulation (10)
  • 40apache—
    23 CVE3 critCVSS 6.4
    KEV 1Nuclei 2PoC 3
    traffic server (4) · vcl (2) · camel (2)
  • 41apache software foundation—
    23 CVE3 critCVSS 6.3
    KEV 1Nuclei 2PoC 3
    apache traffic server (4) · traffic server (4) · commons vfs (virtual file system) (2)
  • 42lunary-ai—
    22 CVE1 critCVSS 7.0
    PoC 9
    lunary (22) · lunary-ai/lunary (22)
  • 43binary-husky—
    21 CVECVSS 7.4
    NEWNuclei 1PoC 11
    gpt academic (21) · binary-husky/gpt_academic (20) · gpt_academic (1)
  • 44dlink—
    20 CVE4 critCVSS 5.8
    KEV 1PoC 14
    dir-618 (8) · dir-605l firmware (8) · dir-618 firmware (8)
  • 45gitlab inc.—
    20 CVE3 critCVSS 6.3
    Nuclei 1PoC 13
    gitlab (20)
  • 46mozilla—
    20 CVE3 critCVSS 7.2
    firefox (18) · thunderbird (13) · firefox esr (10)
  • 47open-webui—
    20 CVE2 critCVSS 7.4
    NEWPoC 5
    open-webui/open-webui (20)
  • 48sap_se—
    20 CVECVSS 5.1
    sap s/4hana (manage bank statements) (2) · sap business objects business intelligence platform (1) · sap businessobjects business intelligence platform (1)
  • 49ао «нтц ит роса»—
    20 CVE3 critCVSS 7.4
    KEV 1PoC 2
    роса хром (14) · rosa virtualization 3.0 (5) · роса кобальт (3)
  • 50gitlab—
    19 CVECVSS 5.5
    PoC 11
    gitlab (19)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79854—
2CWE-89319—
3CWE-352236—
4CWE-862190—
5CWE-74183—
6CWE-94143—
7CWE-284132—
8CWE-787111—
9CWE-22103—
10CWE-20097—
11CWE-12585—
12CWE-11978—
13CWE-41678—
14CWE-91878—
15CWE-47669—
16CWE-7864—
17CWE-50263—
18CWE-7758—
19CWE-43454—
20CWE-12053—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins1,033 CVE
    83 crit6 KEV661 vendorsCVSS 7.9
    gdpr cookie compliance (7) · advanced iframe (6) · school management system (5)
  • Operating Systems623 CVE
    74 crit396 KEV42 vendorsCVSS 7.2
    linux (408) · linux kernel (207) · ред ос (202)
  • OSS Libraries623 CVE
    89 crit5 KEV118 vendorsCVSS 7.7
    open-webui (21) · aim (12) · h2o (10)
  • Enterprise Software609 CVE
    162 crit11 KEV156 vendorsCVSS 7.9
    vasion print (49) · virtual appliance (49) · bank locker management system (12)
  • AI / ML315 CVE
    80 crit74 vendorsCVSS 7.7
    open-webui/open-webui (20) · open webui (19) · dify (11)
  • Networking Infrastructure256 CVE
    74 crit8 KEV56 vendorsCVSS 7.2
    cisco ios xr (10) · cisco ios xr software (10) · ios xr (10)
  • Mobile Apps237 CVE
    160 crit14 KEV10 vendorsCVSS 7.5
    macos (205) · ipados (112) · ios and ipados (72)
  • Hardware Firmware160 CVE
    41 crit3 KEV40 vendorsCVSS 9.2
    qts (18) · quts hero (18) · emc unity operating environment (16)
  • Security Products152 CVE
    23 crit1 KEV66 vendorsCVSS 7.2
    fortios (7) · fortisandbox (7) · fortiweb (6)
  • Consumer Software141 CVE
    17 crit40 vendorsCVSS 9.8
    cobalt (36) · autocad (22) · autocad architecture (22)
  • ICS / OT / IoT113 CVE
    50 crit43 vendorsCVSS 8.1
    aprol (9) · b&r aprol (5) · enervista ur setup (3)
  • DevTools & CI80 CVE
    10 crit11 KEV33 vendorsCVSS 6.9
    jenkins (12) · tuleap (11) · schedule (2)
  • Cloud & SaaS78 CVE
    18 crit32 KEV49 vendorsCVSS 8.2
    appsmith (5) · tripleplay (4) · file away (2)
  • Communications60 CVE
    5 crit2 KEV36 vendorsCVSS 7.9
    danny-avila/librechat (11) · librechat (11) · mattermost (11)
  • Databases54 CVE
    3 crit1 KEV20 vendorsCVSS 8.5
    mariadb (8) · ibm 4769 developers toolkit (3) · ibm common cryptographic architecture (3)
  • Unclassified383 CVE
    42 crit1 KEV270 vendorsCVSS 6.6
    мсвсфера (9) · dir-605l (8) · dir-618 (8)
Weakness × Sector

Which weaknesses hit which solution categories in March 2025

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS89SQL Injection352CSRF862Missing Authorization74Injection94Code Injection284CWE-284787Out-of-bounds Write22Path Traversal200Information ExposureWeb & CMS Plugins4861571471297350302516Operating Systems511762930441OSS Libraries751621148288172214Enterprise Software13013013189729142206AI / ML227151511122Networking Infrastructure14196261951Consumer Software21395472935Security Products18972736648Hardware Firmware415101342ICS / OT / IoT1711155565