Critical vulnerability archive — page 244

n8n-io1 vulnerability on this pageMax CVSS 10.0Priority 100KEV 1

CVE-2025-68613 · n8n-io n8n

n8n Vulnerable to Remote Code Execution via Expression Injection

KEV · due 25 Mar EPSS 99%public exploit SSVC act CVSS 10.0

WatchGuard1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2025-14733 · WatchGuard Fireware OS

WatchGuard Firebox iked Out of Bounds Write Vulnerability

KEV · due 26 Dec ransomware use EPSS 29%public exploit SSVC act CVSS 9.8

Easyphp1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2023-53941 · Easyphp EasyPHP Webserver

EasyPHP Webserver 14.1 Remote Code Execution

EPSS 6%public exploit CVSS 9.8

Mintlify1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2025-67843 · Mintlify Mintlify Platform

A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote at…

EPSS 1%public exploit CVSS 9.8

cat031 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2023-53948 · cat03 Lilac-Reloaded

Lilac-Reloaded for Nagios 2.0.8 Remote Code Execution via Autodiscovery

EPSS 0.9%public exploit CVSS 9.8

Tenda4 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

innovastudio1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-53950 · innovastudio WYSIWYG Editor

InnovaStudio WYSIWYG Editor 5.4 Unrestricted File Upload via Filename Manipulation

EPSS 0.7%public exploit CVSS 9.8

mitre6 vulnerabilities on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2025-65856 · mitre

Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthe…

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-67288 · mitre

An arbitrary file upload vulnerability in Umbraco CMS v16.3.3 allows attackers to execute arbitrary code by uploading a crafted PDF file.

EPSS 0.5%public exploit CVSS 10.0

CVE-2025-67418 · mitre

ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administ…

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-27708 · mitre

Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitra…

EPSS 0.6%CVSS 9.6

CVE-2025-63665 · mitre

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON…

EPSS 0.5%CVSS 9.8

CVE-2025-67289 · mitre

An arbitrary file upload vulnerability in the Attachments module of Frappe Framework v15.89.0 allows attackers to execute arbitrary code…

EPSS 0.5%CVSS 9.6

Kimai1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-53957 · Kimai Kimai

Kimai 1.30.10 SameSite Cookie Vulnerability Session Hijacking

EPSS 0.6%public exploit CVSS 9.8

OpenAgentPlatform1 vulnerability on this pageMax CVSS 9.7Priority 49KEV 0

CVE-2025-66580 · OpenAgentPlatform Dive

Dive has Cross-Site Scripting vulnerability that can escalate to Remote Code Execution

EPSS 0.6%public exploit CVSS 9.7

leefish1 vulnerability on this pageMax CVSS 9.4Priority 48KEV 0

CVE-2023-53942 · leefish File Thingie

File Thingie 2.5.7 Authenticated Arbitrary File Upload Remote Code Execution

EPSS 0.6%public exploit CVSS 9.4

Campcodes3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-14952 · Campcodes Supplier Management System

Campcodes Supplier Management System add_category.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14989 · Campcodes Complete Online Beauty Parlor Management System

Campcodes Complete Online Beauty Parlor Management System search-invoices.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14990 · Campcodes Complete Online Beauty Parlor Management System

Campcodes Complete Online Beauty Parlor Management System view-appointment.php sql injection

EPSS 0.4%public exploit CVSS 9.8

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-15002 · VulDB

SeaCMS mysqli.class.php sql injection

EPSS 0.5%public exploit CVSS 9.8

code-projects8 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-14940 · code-projects Scholars Tracking System

code-projects Scholars Tracking System delete_user.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14950 · code-projects Scholars Tracking System

code-projects Scholars Tracking System delete_post.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14951 · code-projects Scholars Tracking System

code-projects Scholars Tracking System home.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14959 · code-projects Simple Stock System

code-projects Simple Stock System signup.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14960 · code-projects Simple Blood Donor Management System

code-projects Simple Blood Donor Management System editeddonor.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14961 · code-projects Simple Blood Donor Management System

code-projects Simple Blood Donor Management System editedcampaign.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14968 · code-projects Simple Stock System

code-projects Simple Stock System update.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-15011 · code-projects Simple Stock System

code-projects Simple Stock System logout.php sql injection

EPSS 0.4%public exploit CVSS 9.8

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-14967 · itsourcecode Student Management System

itsourcecode Student Management System candidates_report.php sql injection

EPSS 0.4%public exploit CVSS 9.8

Gauzy1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-53951 · Gauzy ever gauzy

Ever Gauzy v0.281.9 JWT Authentication Weakness via HMAC Secret

EPSS 0.4%public exploit CVSS 9.8

Genymobile1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2025-34449 · Genymobile scrcpy

Genymobile/scrcpy <= 3.3.3 Global Buffer Overflow

EPSS 0.4%public exploit CVSS 9.1

World Wide Broadcast Network1 vulnerability on this pageMax CVSS 9.3Priority 43KEV 0

CVE-2025-34433 · World Wide Broadcast Network AVideo

AVideo < 20.1 Unauthenticated RCE via Predictable Installation Salt

EPSS 1%CVSS 9.3

Microsoft4 vulnerabilities on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2025-65037 · Microsoft Azure Container Apps

Azure Container Apps Remote Code Execution Vulnerability

EPSS 1.0%CVSS 10.0

CVE-2025-64663 · Microsoft Azure Cognitive Service for Language

Custom Question Answering Elevation of Privilege Vulnerability

EPSS 0.7%CVSS 9.9

CVE-2025-65041 · Microsoft Microsoft Partner Center

Microsoft Partner Center Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 10.0

CVE-2025-64675 · Microsoft Azure Cosmos DB

Azure Cosmos DB Spoofing Vulnerability

EPSS 0.7%CVSS 9.6

TOTOLINK1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-14964 · TOTOLINK T10

TOTOLINK T10 cstecgi.cgi sprintf stack-based overflow

EPSS 1%CVSS 9.8

filezilla-project1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-53959 · filezilla-project FileZilla Client

FileZilla Client 3.63.1 DLL Hijacking via Missing TextShaping.dll

EPSS 0.9%CVSS 9.8

Advantech2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-14850 · Advantech WebAccess/SCADA

Advantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted Directory

EPSS 0.9%CVSS 9.1

CVE-2025-14849 · Advantech WebAccess/SCADA

Advantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type

EPSS 0.6%CVSS 9.8

snowray1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-13329 · snowray File Uploader for WooCommerce

File Uploader for WooCommerce <= 1.0.3 - Unauthenticated Arbitrary File Upload via add-image-data

EPSS 0.7%CVSS 9.8

WeblateOrg1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2025-68398 · WeblateOrg weblate

Weblate has git config file overwrite vulnerability that leads to remote code execution

EPSS 0.8%CVSS 9.1

Ragic1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-15016 · Ragic Enterprise Cloud Database

Ragic｜Enterprise Cloud Database - Hard-coded Cryptographic Key

EPSS 0.5%CVSS 9.8

CMSSuperHeroes1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-13619 · CMSSuperHeroes Flex Store Users

Flex Store Users <= 1.1.0 - Unauthenticated Privilege Escalation

EPSS 0.4%CVSS 9.8

galette1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2025-58053 · galette galette

Galette has a privilege escalation vulnerability

EPSS 0.3%CVSS 9.8

Restajet Information Technologies Inc.1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2025-1928 · Restajet Information Technologies Inc. Online Food Delivery System

Improper Authentication in Restajet's Online Food Delivery System

EPSS 0.4%CVSS 9.1

Palantir1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2024-49587 · Palantir com.palantir.gotham:glutton

Glutton V1 endpoints missing authentication

EPSS 0.3%CVSS 9.1

The archive.