Critical vulnerability archive — page 240

SignalK2 vulnerabilities on this pageMax CVSS 9.7Priority 59KEV 0

CVE-2025-66398 · SignalK signalk-server

Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)

EPSS 20%public exploit CVSS 9.7

CVE-2025-68620 · SignalK signalk-server

Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling

EPSS 0.5%public exploit CVSS 9.1

D-Link2 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-15357 · D-Link DI-7400G+

D-Link DI-7400G+ msp_info.htm command injection

EPSS 5%public exploit CVSS 9.8

CVE-2025-15391 · D-Link DIR-806A

D-Link DIR-806A SSDP Request ssdpcgi_main command injection

EPSS 4%CVSS 9.8

SOUND4 Ltd.4 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2022-50794 · SOUND4 Ltd. Impact/Pulse/First

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via Username

EPSS 4%public exploit CVSS 9.8

CVE-2022-50796 · SOUND4 Ltd. Impact/Pulse/First

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote Code Execution via upload.cgi

EPSS 2%public exploit CVSS 9.8

CVE-2022-50694 · SOUND4 Ltd. Impact/Pulse/First

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x SQL Injection via Username Parameter

EPSS 0.9%public exploit CVSS 9.8

CVE-2022-50696 · SOUND4 Ltd. Impact/Pulse/First

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Hardcoded Credentials Authentication Bypass

EPSS 0.6%public exploit CVSS 9.8

MiniDVBLinux1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2022-50691 · MiniDVBLinux MiniDVBLinux

MiniDVBLinux 5.4 Remote Root Command Execution via commands.sh

EPSS 1%public exploit CVSS 9.8

Ateme2 vulnerabilities on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2024-58338 · Ateme Flamingo XL

Anevia Flamingo XL 3.2.9 Remote Root Jailbreak via Traceroute Command

EPSS 0.8%public exploit CVSS 10.0

CVE-2023-53983 · Ateme Anevia Flamingo XL/XS

Anevia Flamingo XL/XS 3.6.20 Default Credentials Authentication Bypass

EPSS 0.6%public exploit CVSS 9.8

infiniflow1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-69286 · infiniflow ragflow

RAGFlow has Predictable Token Generation Leading to Authentication Bypass Vulnerability

EPSS 0.8%public exploit CVSS 9.8

Tinycontrol1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-54327 · Tinycontrol LAN Controller

Tinycontrol LAN Controller 1.58a Authentication Bypass via Admin Password Change

EPSS 0.7%public exploit CVSS 9.8

kromitgmbh1 vulnerability on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2025-69288 · kromitgmbh titra

Titra has Remote Code Execution in Admin Functionality

EPSS 0.9%public exploit CVSS 9.1

Ksenia Security S.p.A.3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-15111 · Ksenia Security S.p.A. lares

Ksenia Security lares Home Automation 1.6 Default Credentials Vulnerability

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-15114 · Ksenia Security S.p.A. lares

Ksenia Security lares Home Automation 1.6 PIN Exposure Vulnerability

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-15113 · Ksenia Security S.p.A. lares

Ksenia Security lares Home Automation 1.6 Remote Code Execution via MPFS Upload

EPSS 0.5%public exploit CVSS 9.3

Edimax1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-15257 · Edimax BR-6208AC

Edimax BR-6208AC Web-based Configuration formRoute command injection

EPSS 5%CVSS 9.8

Yonyou7 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-15425 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter del_user.jsp sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-15420 · Yonyou KSOA

Yonyou KSOA agent_work_report.jsp sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-15421 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter agent_worksadd.jsp sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-15424 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter agent_worksdel.jsp sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-15436 · Yonyou KSOA

Yonyou KSOA work_edit.jsp sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-15434 · Yonyou KSOA

Yonyou KSOA PrintZPYG.jsp sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-15435 · Yonyou KSOA

Yonyou KSOA work_update.jsp sql injection

EPSS 0.4%public exploit CVSS 9.8

code-projects11 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-15409 · code-projects Online Guitar Store

code-projects Online Guitar Store Delete_product.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-0546 · code-projects Content Management System

code-projects Content Management System search.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-0570 · code-projects Online Music Site

code-projects Online Music Site Feedback.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-15407 · code-projects Online Guitar Store

code-projects Online Guitar Store Create_category.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-15408 · code-projects Online Guitar Store

code-projects Online Guitar Store Create_product.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-15410 · code-projects Online Guitar Store

code-projects Online Guitar Store login.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-0565 · code-projects Content Management System

code-projects Content Management System delete.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-0567 · code-projects Content Management System

code-projects Content Management System pages.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-0568 · code-projects Online Music Site

code-projects Online Music Site ViewSongs.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-0569 · code-projects Online Music Site

code-projects Online Music Site AlbumByCategory.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-0566 · code-projects Content Management System

code-projects Content Management System edit_posts.php unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

JM-DATA ONU1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2022-50803 · JM-DATA ONU JF511-TV

JM-DATA ONU JF511-TV 1.0.67 Default Credentials Vulnerability

EPSS 0.4%public exploit CVSS 9.8

BiggiDroid1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-15263 · BiggiDroid Simple PHP CMS

BiggiDroid Simple PHP CMS Admin Login login.php sql injection

EPSS 0.4%public exploit CVSS 9.8

itsourcecode3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-15353 · itsourcecode Society Management System

itsourcecode Society Management System edit_admin_query.php edit_admin_query sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-15354 · itsourcecode Society Management System

itsourcecode Society Management System add_admin.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-0544 · itsourcecode School Management System

itsourcecode School Management System index.php sql injection

EPSS 0.4%CVSS 9.8

Selea1 vulnerability on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2020-36904 · Selea Selea CarPlateServer (CPS)

Selea CarPlateServer 4.0.1.6 Remote Program Execution via Configuration Endpoint

EPSS 0.5%public exploit CVSS 9.3

wpmudev1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-14998 · wpmudev Branda – White Label & Branding, Free Login Page Customizer

Branda – White Label & Branding, Free Login Page Customizer <= 3.4.24 - Unauthenticated Privilege Escalation via Account Takeover

EPSS 2%CVSS 9.8

QNAP Systems Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-11837 · QNAP Systems Inc. Malware Remover

Malware Remover

EPSS 2%CVSS 9.8

CVE-2025-59389 · QNAP Systems Inc. Hyper Data Protector

Hyper Data Protector

EPSS 0.7%CVSS 9.8

Cypress1 vulnerability on this pageMax CVSS 9.3Priority 43KEV 0

CVE-2021-47744 · Cypress ONE

Cypress Solutions CTM-200/CTM-ONE 1.3.6 Hard-coded Credentials Remote Root

EPSS 0.3%public exploit CVSS 9.3

Red Hat1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-67268 · Red Hat Red Hat Enterprise Linux 10

gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file.

EPSS 0.8%CVSS 9.8

libcoap1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-34468 · libcoap libcoap

libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE

EPSS 0.7%CVSS 9.8

mitre1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-65125 · mitre

SQL injection in gosaliajainam/online-movie-booking 5.5 in movie_details.php allows attackers to gain sensitive information.

EPSS 0.4%CVSS 9.8

emlog1 vulnerability on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2026-21430 · emlog emlog

Emlog: CSRF chained with stored XSS leads to ATO

EPSS 0.2%CVSS 9.3

The archive.