Critical vulnerability archive — page 228

SolarWinds5 vulnerabilities on this pageMax CVSS 9.8Priority 99KEV 2

CVE-2025-40536 · SolarWinds Web Help Desk

SolarWinds Web Help Desk Security Control Bypass Vulnerability

KEV · due 15 Feb EPSS 74%public exploit SSVC act CVSS 9.8

CVE-2025-40551 · SolarWinds Web Help Desk

SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

KEV · due 6 Feb EPSS 84%public exploit SSVC act CVSS 9.8

CVE-2025-40552 · SolarWinds Web Help Desk

SolarWinds Web Help Desk Authentication Bypass Vulnerability

EPSS 52%public exploit CVSS 9.8

CVE-2025-40553 · SolarWinds Web Help Desk

SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

EPSS 68%public exploit CVSS 9.8

CVE-2025-40554 · SolarWinds Web Help Desk

SolarWinds Web Help Desk Authentication Bypass Vulnerability

EPSS 61%CVSS 9.8

Fortinet1 vulnerability on this pageMax CVSS 9.4Priority 98KEV 1

CVE-2026-24858 · Fortinet FortiWeb

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

KEV · due 30 Jan EPSS 87%public exploit SSVC act CVSS 9.4

Tendenci1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2020-36962 · Tendenci Tendenci

Tendenci 12.3.1 - CSV/ Formula Injection

EPSS 12%public exploit CVSS 9.8

Dokploy1 vulnerability on this pageMax CVSS 9.9Priority 57KEV 0

CVE-2026-24841 · Dokploy dokploy

Dokploy Vulnerable to Authenticated Remote Code Execution via Command Injection in Docker Container Terminal WebSocket Endpoint

EPSS 3%public exploit CVSS 9.9

infiniflow1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2026-24770 · infiniflow ragflow

RAGFlow Affected by Zip Slip Remote Code Execution (RCE) in MinerUParser

EPSS 1%public exploit CVSS 9.8

nyariv1 vulnerability on this pageMax CVSS 10.0Priority 54KEV 0

CVE-2026-23830 · nyariv SandboxJS

SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor

EPSS 1%public exploit CVSS 10.0

kyverno1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-22039 · kyverno kyverno

Kyverno Cross-Namespace Privilege Escalation via Policy apiCall

EPSS 0.6%public exploit CVSS 10.0

inc27341 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-1056 · inc2734 Snow Monkey Forms

Snow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrary File Deletion via Path Traversal

EPSS 13%CVSS 9.8

Zortam.com1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2020-36967 · Zortam.com Zortam Mp3 Media Studio

Zortam Mp3 Media Studio 27.60 - Remote Code Execution (SEH)

EPSS 0.6%public exploit CVSS 9.8

code-projects3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-1534 · code-projects Online Music Site

code-projects Online Music Site AdminEditUser.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-1535 · code-projects Online Music Site

code-projects Online Music Site AdminReply.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-1533 · code-projects Online Music Site

code-projects Online Music Site AdminAddCategory.php sql injection

EPSS 0.4%public exploit CVSS 9.8

amir201 vulnerability on this pageMax CVSS 9.9Priority 47KEV 0

CVE-2026-24740 · amir20 dozzle

Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access

EPSS 0.4%public exploit CVSS 9.9

ik801 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2020-36964 · ik80 YATinyWinFTP

YATinyWinFTP - Denial of Service

EPSS 0.5%public exploit CVSS 9.8

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-1545 · itsourcecode School Management System

itsourcecode School Management System index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

simsong1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-24857 · simsong bulk_extractor

bulk_extractor has Heap-based Buffer Overflow vulnerability

EPSS 0.4%public exploit CVSS 9.8

Squidex1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-24736 · Squidex squidex

Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration

EPSS 0.5%public exploit CVSS 9.1

GnuPG1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-24881 · GnuPG GnuPG

In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based bu…

EPSS 2%CVSS 9.8

Juniper Networks1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-21589 · Juniper Networks Session Smart Router

Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability

EPSS 2%CVSS 9.8

mitre1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2025-69602 · mitre

A session fixation vulnerability exists in 66biolinks v62.0.0 by AltumCode, where the application does not regenerate the session identif…

EPSS 0.4%public exploit CVSS 9.1

Explorance3 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2025-57795 · Explorance Blue

Unauthenticated Remote File Download in Explorance Blue

EPSS 0.6%CVSS 9.9

CVE-2025-57792 · Explorance Blue

SQL Injection Vulnerability in Explorance Blue

EPSS 0.4%CVSS 10.0

CVE-2025-57794 · Explorance Blue

Unrestricted File Upload Vulnerability in Explorance Blue

EPSS 0.6%CVSS 9.1

10-Strike Software1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2020-36961 · 10-Strike Software Network Inventory Explorer

10-Strike Network Inventory Explorer 8.65 - Buffer Overflow (SEH)

EPSS 0.6%CVSS 9.8

OISF2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-22262 · OISF suricata

Suricata datasets: stack overflow when saving a set

EPSS 0.6%CVSS 9.8

CVE-2026-22264 · OISF suricata

Suricata detect/alert: heap-use-after-free on alert queue expansion

EPSS 0.4%CVSS 9.1

iba Systems1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-14988 · iba Systems ibaPDA

Incorrect Permission Assignment for Critical Resource vulnerability in iba Systems ibaPDA

EPSS 0.4%CVSS 10.0

Red Hat1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-61140 · Red Hat Red Hat Ansible Automation Platform 2.1

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution.

EPSS 0.5%CVSS 9.8

discourse1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2025-68662 · discourse discourse

FinalDestination hostname matching allows SSRF protection bypass

EPSS 0.3%CVSS 9.9

nocodb1 vulnerability on this pageMax CVSS 9.0Priority 35KEV 0

CVE-2026-24769 · nocodb nocodb

NocoDB Vulnerable to Stored Cross-Site Scripting via SVG upload

EPSS 0.4%CVSS 9.0

opf2 vulnerabilities on this pageMax CVSS 9.4Priority 34KEV 0

CVE-2026-24685 · opf openproject

OpenProject has Argument Injection on Repository module that allows Arbitrary File Write

EPSS 0.4%CVSS 9.4

CVE-2026-24772 · opf openproject

OpenProject has SSRF and CSWSH in Hocuspocus Synchronization Server

EPSS 0.2%CVSS 9.0

Quatuor12 vulnerabilities on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2026-1472 · Quatuor Evaluación de Desempeño (EDD)

Out-of-band SQL injection in Quatuor Performance Evaluation

EPSS 0.4%CVSS 9.3

CVE-2026-1473 · Quatuor Evaluación de Desempeño (EDD)

Out-of-band SQL injection in Quatuor Performance Evaluation

EPSS 0.4%CVSS 9.3

CVE-2026-1474 · Quatuor Evaluación de Desempeño (EDD)

Out-of-band SQL injection in Quatuor Performance Evaluation

EPSS 0.4%CVSS 9.3

CVE-2026-1475 · Quatuor Evaluación de Desempeño (EDD)

Out-of-band SQL injection in Quatuor Performance Evaluation

EPSS 0.4%CVSS 9.3

CVE-2026-1476 · Quatuor Evaluación de Desempeño (EDD)

Out-of-band SQL injection in Quatuor Performance Evaluation

EPSS 0.4%CVSS 9.3

CVE-2026-1477 · Quatuor Evaluación de Desempeño (EDD)

Out-of-band SQL injection in Quatuor Performance Evaluation

EPSS 0.4%CVSS 9.3

CVE-2026-1478 · Quatuor Evaluación de Desempeño (EDD)

Out-of-band SQL injection in Quatuor Performance Evaluation

EPSS 0.4%CVSS 9.3

CVE-2026-1479 · Quatuor Evaluación de Desempeño (EDD)

Out-of-band SQL injection in Quatuor Performance Evaluation

EPSS 0.4%CVSS 9.3

CVE-2026-1480 · Quatuor Evaluación de Desempeño (EDD)

Out-of-band SQL injection in Quatuor Performance Evaluation

EPSS 0.4%CVSS 9.3

CVE-2026-1481 · Quatuor Evaluación de Desempeño (EDD)

Out-of-band SQL injection in Quatuor Performance Evaluation

EPSS 0.4%CVSS 9.3

CVE-2026-1482 · Quatuor Evaluación de Desempeño (EDD)

Out-of-band SQL injection in Quatuor Performance Evaluation

EPSS 0.4%CVSS 9.3

CVE-2026-1483 · Quatuor Evaluación de Desempeño (EDD)

Out-of-band SQL injection in Quatuor Performance Evaluation

EPSS 0.4%CVSS 9.3

dnnsoftware1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-24838 · dnnsoftware Dnn.Platform

DotNetNuke.Core Vulnerable to Stored XSS via Module Title

EPSS 0.2%CVSS 9.1

jmlepisto1 vulnerability on this pageMax CVSS 9.1Priority 28KEV 0

CVE-2026-24785 · jmlepisto clatter

Clatter has a PSK Validity Rule Violation issue

EPSS 0.1%CVSS 9.1

The archive.