Critical vulnerability archive — page 234

Getgrav1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2021-47812 · Getgrav GravCMS

GravCMS 1.10.7 - Arbitrary YAML Write/Update (Unauthenticated) (2)

EPSS 2%public exploit CVSS 9.8

Changjetong Information Technology Co., Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2023-7334 · Changjetong Information Technology Co., Ltd. T+

Changjetong T+ <= 16.x GetStoreWarehouseByStore Deserialization RCE

EPSS 1%public exploit CVSS 9.8

Mp3-Avi-Mpeg-Wmv-Rm-To-Audio-Cd-Burner1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2021-47785 · Mp3-Avi-Mpeg-Wmv-Rm-To-Audio-Cd-Burner Ether_MP3_CD_Burner

Ether_MP3_CD_Burner 1.3.8 - Buffer Overflow (SEH)

EPSS 0.9%public exploit CVSS 9.8

Phpkf1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2021-47753 · Phpkf phpKF CMS

phpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (Unauthenticated)

EPSS 0.8%public exploit CVSS 9.8

10-Strike1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2021-47772 · 10-Strike Strike Network Inventory Explorer Pro

10-Strike Network Inventory Explorer Pro 9.31 - Buffer Overflow (SEH)

EPSS 0.7%public exploit CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-60021 · Apache Software Foundation Apache bRPC

Apache bRPC: Remote command injection vulnerability in heap builtin service

EPSS 26%CVSS 9.8

docmost1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-22249 · docmost docmost

Docmost affected by an Arbitrary File Write via Zip Import Feature (ZipSlip)

EPSS 0.6%public exploit CVSS 9.8

En1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2021-47774 · En Kingdia CD Extractor

Kingdia CD Extractor 3.0.2 - Buffer Overflow (SEH)

EPSS 0.5%public exploit CVSS 9.8

FreeRDP5 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

RustCrypto1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-23519 · RustCrypto utils

RustCrypto cmov: thumbv6m-none-eabi compiler emits non-constant time assembly when using cmovnz

EPSS 0.6%public exploit CVSS 9.8

mitre4 vulnerabilities on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2025-67084 · mitre

File upload vulnerability in InvoicePlane through 1.6.3 allows authenticated attackers to upload arbitrary PHP files into attachments, wh…

EPSS 0.4%public exploit CVSS 9.9

CVE-2025-70892 · mitre

Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module.

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-67079 · mitre

File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagic…

EPSS 0.4%CVSS 9.8

CVE-2025-67822 · mitre

A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow a…

EPSS 0.4%CVSS 9.4

Grocerycrud1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2021-47811 · Grocerycrud Grocery crud

Grocery crud 1.6.4 - 'order_by' SQL Injection

EPSS 0.6%public exploit CVSS 9.1

Noteburner1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2021-47798 · Noteburner NoteBurner

NoteBurner 2.35 - Denial Of Service (DoS) (PoC)

EPSS 0.4%public exploit CVSS 9.8

Projeqtor1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2021-47819 · Projeqtor ProjeQtOr Project Management

ProjeQtOr Project Management 9.1.4 - Remote Code Execution

EPSS 0.4%public exploit CVSS 9.8

AVEVA4 vulnerabilities on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2025-61937 · AVEVA Process Optimization

AVEVA Process Optimization Code Injection

EPSS 1%CVSS 10.0

CVE-2025-61943 · AVEVA Process Optimization

AVEVA Process Optimization SQL Injection

EPSS 0.3%CVSS 9.3

CVE-2025-64691 · AVEVA Process Optimization

AVEVA Process Optimization Code Injection

EPSS 0.3%CVSS 9.3

CVE-2025-65118 · AVEVA Process Optimization

AVEVA Process Optimization Uncontrolled Search Path Element

EPSS 0.3%CVSS 9.3

Cmder1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2021-47781 · Cmder Cmder Console Emulator

Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial of Service (PoC)

EPSS 0.3%public exploit CVSS 9.8

Delta Electronics3 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-0975 · Delta Electronics DIAView

DIAView - Command Injection Vulnerability

EPSS 2%CVSS 9.8

CVE-2025-62581 · Delta Electronics DIAView

DIAView - Authentication Bypass Vulnerability

EPSS 0.6%CVSS 9.8

CVE-2025-62582 · Delta Electronics DIAView

DIAView - Authentication Bypass Vulnerability

EPSS 0.5%CVSS 9.8

National Oceanic and Atmospheric Administration (NOAA)1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-62193 · National Oceanic and Atmospheric Administration (NOAA) Live Access Server (LAS)

NOAA PMEL Live Access Server (LAS) PyFerret command injection

EPSS 1%CVSS 9.8

getarcaneapp1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2026-23520 · getarcaneapp arcane

Arcane has a Command Injection in Arcane Updater Lifecycle Labels Enables RCE

EPSS 2%CVSS 9.1

Canon Inc.7 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-14237 · Canon Inc. Satera LBP670C Series

Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on…

EPSS 1.0%CVSS 9.8

CVE-2025-14231 · Canon Inc. Satera LBP670C Series

Buffer overflow in print job processing by WSD on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker o…

EPSS 0.9%CVSS 9.8

CVE-2025-14232 · Canon Inc. Satera LBP670C Series

Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on…

EPSS 0.9%CVSS 9.8

CVE-2025-14233 · Canon Inc. Satera LBP670C Series

Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on…

EPSS 0.8%CVSS 9.8

CVE-2025-14234 · Canon Inc. Satera LBP670C Series

Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the n…

EPSS 0.9%CVSS 9.8

CVE-2025-14235 · Canon Inc. Satera LBP670C Series

Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker…

EPSS 0.9%CVSS 9.8

CVE-2025-14236 · Canon Inc. Satera LBP670C Series

Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may allow an attacker on the net…

EPSS 0.9%CVSS 9.8

Entrust Corporation1 vulnerability on this pageMax CVSS 9.3Priority 42KEV 0

CVE-2026-23746 · Entrust Corporation Instant Financial Issuance (IF)

Entrust Instant Financial Issuance (IFI) SmartCardController Service .NET Remoting RCE

EPSS 1%CVSS 9.3

denoland2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-22864 · denoland deno

Deno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypass

EPSS 0.7%CVSS 9.8

CVE-2026-22863 · denoland deno

Deno node:crypto doesn't finalize cipher

EPSS 0.2%CVSS 9.2

h3js1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-23527 · h3js h3

h3 v1 has Request Smuggling (TE.TE) issue

EPSS 0.6%CVSS 9.8

glpi-project1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-66417 · glpi-project glpi

GLPI has an unauthenticated SQL injection through the inventory endpoint

EPSS 0.5%CVSS 9.8

SICK AG4 vulnerabilities on this pageMax CVSS 9.9Priority 37KEV 0

CVE-2026-22907 · SICK AG TDC-X401GL

An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data.

EPSS 0.4%CVSS 9.9

CVE-2026-22908 · SICK AG TDC-X401GL

Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integri…

EPSS 0.6%CVSS 9.1

CVE-2026-22909 · SICK AG TDC-X401GL

Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed application…

EPSS 0.6%CVSS 9.1

CVE-2026-22910 · SICK AG TDC-X401GL

The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized…

EPSS 0.5%CVSS 9.1

sveltejs1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2025-67647 · sveltejs kit

SvelteKit Denial of service and possible SSRF when using prerendering

EPSS 0.6%CVSS 9.1

HCL Software1 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2025-59870 · HCL Software MyXalytics

Improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk

EPSS 0.3%CVSS 9.8

Altium1 vulnerability on this pageMax CVSS 9.0Priority 30KEV 0

CVE-2026-1009 · Altium Altium Live

Stored Cross-Site Scripting in Altium Live Forum Leading to Cross-Customer Data Exposure

EPSS 0.2%CVSS 9.0

The archive.