The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

38,974 matching vulnerabilities · Page 225 of 780

Intermesh1 vulnerability on this pageMax CVSS 9.4Priority 58KEV 0

CVE-2026-25512 · Intermesh groupoffice

Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler

EPSS 20%public exploit CVSS 9.4

wcchandler1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2020-37123 · wcchandler Pinger

Pinger 1.0 - Remote Code Execution

EPSS 3%public exploit CVSS 9.8

Arox2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2020-37090 · Arox School ERP Pro

School ERP Pro 1.0 - Remote Code Execution

EPSS 0.9%public exploit CVSS 9.8

CVE-2020-37089 · Arox School ERP Pro

School ERP Pro 1.0 - 'es_messagesid' SQL Injection

EPSS 0.4%public exploit CVSS 9.8

maziggy1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-25505 · maziggy bambuddy

Bambuddy Uses Hardcoded Secret Key + Many API Endpoints do not Require Authentication

EPSS 0.8%public exploit CVSS 9.8

siyuan-note1 vulnerability on this pageMax CVSS 9.1Priority 51KEV 0

CVE-2026-25539 · siyuan-note siyuan

SiYuan has Arbitrary File Write via /api/file/copyFile leading to RCE

EPSS 1%public exploit CVSS 9.1

CraftCMS1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2020-37071 · CraftCMS CraftCMS

CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution

EPSS 0.7%public exploit CVSS 9.8

Konica Minolta2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2020-37068 · Konica Minolta FTP Utility

Konica Minolta FTP Utility 1.0 - 'LIST' Denial of Service

EPSS 0.7%public exploit CVSS 9.8

CVE-2020-37069 · Konica Minolta FTP Utility

Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service

EPSS 0.7%public exploit CVSS 9.8

langroid1 vulnerability on this pageMax CVSS 9.6Priority 50KEV 0

CVE-2026-25481 · langroid langroid

Langroid has WAF Bypass Leading to RCE in TableChatAgent

EPSS 0.7%public exploit CVSS 9.6

Nsasoft1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2020-37119 · Nsasoft Nsauditor

Nsauditor 3.2.1.0 - Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite))

EPSS 0.7%public exploit CVSS 9.8

CloudMe1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2020-37070 · CloudMe CloudMe

CloudMe 1.11.2 - Buffer Overflow (SEH,DEP,ASLR)

EPSS 0.5%public exploit CVSS 9.8

LizardSystems2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2020-37075 · LizardSystems LanSend

LanSend 3.2 - Buffer Overflow (SEH)

EPSS 0.5%public exploit CVSS 9.8

CVE-2020-37074 · LizardSystems Remote Desktop Audit

Remote Desktop Audit 2.3.0.157 - Buffer Overflow (SEH)

EPSS 0.4%public exploit CVSS 9.8

Rubo Medical Imaging1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2020-37120 · Rubo Medical Imaging Rubo DICOM Viewer

Rubo DICOM Viewer 2.0 - Buffer Overflow (SEH)

EPSS 0.5%public exploit CVSS 9.8

Weberp1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2020-37082 · Weberp webERP

webERP 4.15.1 - Unauthenticated Backup File Access

EPSS 0.6%public exploit CVSS 9.8

bolo-blog2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-1812 · bolo-blog bolo-solo

bolo-blog bolo-solo Filename BackupService.java importFromCnblogs path traversal

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-1813 · bolo-blog bolo-solo

bolo-blog bolo-solo FreeMarker Template PicUploadProcessor.java unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

GoldWave1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2020-37066 · GoldWave GoldWave

GoldWave 5.70 – Buffer Overflow (SEH Unicode)

EPSS 0.4%public exploit CVSS 9.8

Utillyty1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2020-37067 · Utillyty Filetto

Filetto 1.0 - 'FEAT' Denial of Service

EPSS 0.4%public exploit CVSS 9.8

luiswang1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2020-37080 · luiswang webTareas

webTareas 2.0.p8 - Arbitrary File Deletion

EPSS 0.4%public exploit CVSS 9.8

StreamRipper1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2020-37065 · StreamRipper StreamRipper32

StreamRipper32 2.6 - Buffer Overflow

EPSS 0.4%public exploit CVSS 9.8

n8n-io6 vulnerabilities on this pageMax CVSS 9.9Priority 45KEV 0

Netis Systems Co., Ltd.1 vulnerability on this pageMax CVSS 9.3Priority 43KEV 0

CVE-2020-37092 · Netis Systems Co., Ltd. Netis E1+

Netis E1+ 1.2.32533 - Backdoor Account (root)

EPSS 0.3%public exploit CVSS 9.3

ci4-cms-erp1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-25510 · ci4-cms-erp ci4ms

CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor

EPSS 0.9%CVSS 10.0

HubSpot1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-25526 · HubSpot jinjava

JinJava Bypass through ForTag leads to Arbitrary Java Execution

EPSS 1.0%CVSS 9.8

mitre1 vulnerability on this pageMax CVSS 9.0Priority 41KEV 0

CVE-2025-68723 · mitre

Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities in the WebAdmin interface.

EPSS 0.3%public exploit CVSS 9.0

QwikDev1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-25150 · QwikDev qwik

Prototype Pollution via FormData Processing in Qwik City

EPSS 0.7%CVSS 10.0

Synectix1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-1633 · Synectix LAN 232 TRIO

Synectix LAN 232 TRIO Missing Authentication for Critical Function

EPSS 0.6%CVSS 10.0

Unstructured-IO1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-64712 · Unstructured-IO unstructured

Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

EPSS 0.7%CVSS 9.8

Zenitel1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2025-59818 · Zenitel TCIS-3+

Authenticated Remote Code Execution via the file name of an uploaded file

EPSS 0.6%CVSS 10.0

IBM1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-13375 · IBM Common Cryptographic Architecture

IBM Common Cryptographic Architecture Arbitrary Command Execution

EPSS 0.5%CVSS 9.8

OpenSlides1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-25519 · OpenSlides OpenSlides

OpenSlides has incorrect access control vulnerability in authentication service

EPSS 0.5%CVSS 9.8

Martcode Software Inc.1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-5329 · Martcode Software Inc. Delta Course Automation

SQLi in Martcode Software's Delta Course Automation

EPSS 0.5%CVSS 9.8

Avation1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-1341 · Avation Avation Light Engine Pro

Missing Authentication for Critical Function in Avation Light Engine Pro

EPSS 0.5%CVSS 9.3

isaacs1 vulnerability on this pageMax CVSS 9.2Priority 37KEV 0

CVE-2026-25547 · isaacs brace-expansion

Uncontrolled Resource Consumption in @isaacs/brace-expansion

EPSS 0.5%CVSS 9.2

RIOT-OS1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-25139 · RIOT-OS RIOT

RIOT Vulnerable to Multiple Out-of-Bounds Read When Processing Received 6LoWPAN SFR Fragments

EPSS 0.6%CVSS 9.1

RISS SRL1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-1632 · RISS SRL MOMA Seismic Station

RISS SRL MOMA Seismic Station Missing Authentication for Critical Function

EPSS 0.5%CVSS 9.3

Significant-Gravitas2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-62615 · Significant-Gravitas AutoGPT

AutoGPT has SSRF vulnerability in ReadRSSFeedBlock

EPSS 0.4%CVSS 9.8

CVE-2025-62616 · Significant-Gravitas AutoGPT

AutoGPT has SSRF vulnerability in SendDiscordFileBlock

EPSS 0.4%CVSS 9.8

navidrome1 vulnerability on this pageMax CVSS 9.2Priority 36KEV 0

CVE-2026-25579 · navidrome navidrome

Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints

EPSS 0.5%CVSS 9.2

OpenSolution1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-23796 · OpenSolution Quick.Cart

Session Fixation in Quick.Cart

EPSS 0.3%CVSS 9.8

glpi-project1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2026-22247 · glpi-project glpi

GLPI is Vulnerable to SSRF via Webhooks

EPSS 0.4%CVSS 9.1

locutusjs1 vulnerability on this pageMax CVSS 9.4Priority 33KEV 0

CVE-2026-25521 · locutusjs locutus

Locutus is vulnerable to Prototype Pollution

EPSS 0.3%CVSS 9.4

AlistGo1 vulnerability on this pageMax CVSS 9.1Priority 31KEV 0

CVE-2026-25160 · AlistGo alist

Alist has Insecure TLS Config

EPSS 0.3%CVSS 9.1