Critical vulnerability archive — page 246

Cisco1 vulnerability on this pageMax CVSS 10.0Priority 100KEV 1

CVE-2025-20393 · Cisco Cisco Secure Email

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

KEV · due 24 Dec EPSS 32%public exploit SSVC act CVSS 10.0

Hewlett Packard Enterprise (HPE)1 vulnerability on this pageMax CVSS 10.0Priority 100KEV 1

CVE-2025-37164 · Hewlett Packard Enterprise (HPE) HPE OneView

Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

KEV · due 28 Jan EPSS 90%public exploit SSVC act CVSS 10.0

ASUS1 vulnerability on this pageMax CVSS 9.8Priority 93KEV 1

CVE-2025-59374 · ASUS live update

ASUS Live Update Embedded Malicious Code Vulnerability

KEV · due 7 Jan EPSS 1%public exploit SSVC act CVSS 9.8

smallstep1 vulnerability on this pageMax CVSS 10.0Priority 59KEV 0

CVE-2025-44005 · smallstep Step-CA

An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certai…

EPSS 9%public exploit CVSS 10.0

ChurchCRM1 vulnerability on this pageMax CVSS 10.0Priority 58KEV 0

CVE-2025-62521 · ChurchCRM CRM

ChurchCRM has unauthenticated RCE in its Install Wizard

EPSS 5%public exploit CVSS 10.0

mitre17 vulnerabilities on this pageMax CVSS 10.0Priority 56KEV 0

CVE-2025-63414 · mitre

A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary…

EPSS 2%public exploit CVSS 10.0

CVE-2025-67073 · mitre

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to ca…

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-67164 · mitre

An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute…

EPSS 0.5%public exploit CVSS 9.9

CVE-2022-23851 · mitre

Netaxis API Orchestrator (APIO) before 0.19.3 allows server side template injection (SSTI).

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-67165 · mitre

An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges.

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-50398 · mitre

Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter fac_passw…

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-50401 · mitre

Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter password.

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-65318 · mitre

When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-…

EPSS 0.6%public exploit CVSS 9.1

CVE-2025-65319 · mitre

When using the attachment interaction functionality, Blue Mail 1.140.103 and below saves documents to a file system without a Mark-of-the…

EPSS 0.6%public exploit CVSS 9.1

CVE-2025-62863 · mitre

Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an inco…

EPSS 0.4%CVSS 9.8

CVE-2025-62864 · mitre

Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an inco…

EPSS 0.4%CVSS 9.8

CVE-2025-65834 · mitre

Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow.

EPSS 0.4%CVSS 9.8

CVE-2025-67791 · mitre

An issue was discovered in DriveLock 24.1 through 24.1., 24.2 through 24.2., and 25.1 through 25.1.*.

EPSS 0.4%CVSS 9.8

CVE-2025-67790 · mitre

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.

EPSS 0.3%CVSS 9.8

CVE-2025-67781 · mitre

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.

EPSS 0.3%CVSS 9.9

CVE-2025-67793 · mitre

An issue was discovered in DriveLock 24.1 through 24.1., 24.2 through 24.2., and 25.1 before 25.1.6.

EPSS 0.3%CVSS 9.8

CVE-2025-67787 · mitre

An issue was discovered in 25.1.2 before 25.1.5.

EPSS 0.3%CVSS 9.6

Pimpmylog1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-53895 · Pimpmylog PimpMyLog

PimpMyLog 1.7.14 Improper Access Control via Account Creation Endpoint

EPSS 0.7%public exploit CVSS 9.8

Arcadia Technology, LLC1 vulnerability on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2025-14700 · Arcadia Technology, LLC Crafty Controller

Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller

EPSS 7%CVSS 9.9

Podcastgenerator1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-53899 · Podcastgenerator PodcastGenerator

PodcastGenerator 3.2.9 Blind Server-Side Request Forgery via XML Injection

EPSS 0.6%public exploit CVSS 9.8

ThinkInAIXYZ1 vulnerability on this pageMax CVSS 9.7Priority 49KEV 0

CVE-2025-67744 · ThinkInAIXYZ deepchat

Mermaid XSS vulnerability leads to Remote Code Execution

EPSS 0.6%public exploit CVSS 9.7

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2025-67895 · Apache Software Foundation Apache Airflow Providers Edge3

Apache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2

EPSS 1%CVSS 9.8

Claris1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-46295 · Claris FileMaker Server

Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted inpu…

EPSS 1%CVSS 9.8

QNAP Systems Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-62849 · QNAP Systems Inc. QTS

QTS, QuTS hero

EPSS 1.0%CVSS 9.8

CVE-2025-59385 · QNAP Systems Inc. QTS

QTS, QuTS hero

EPSS 0.6%CVSS 9.8

RIOT-OS1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-66647 · RIOT-OS RIOT

RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass

EPSS 1.0%CVSS 9.8

Apple3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-43428 · Apple iOS and iPadOS

A configuration issue was addressed with additional restrictions.

EPSS 0.7%CVSS 9.8

CVE-2025-43526 · Apple Safari

This issue was addressed with improved URL validation.

EPSS 0.5%CVSS 9.8

CVE-2025-46279 · Apple iOS and iPadOS

A permissions issue was addressed with additional restrictions.

EPSS 0.4%CVSS 9.8

Dulldusk1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-53894 · Dulldusk phpfm

phpfm 1.7.9 Authentication Bypass via Type Juggling Vulnerability

EPSS 0.6%CVSS 9.8

Linux7 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-40350 · Linux Linux

net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ

EPSS 0.5%CVSS 9.8

CVE-2025-68192 · Linux Linux

net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup

EPSS 0.6%CVSS 9.8

CVE-2025-68284 · Linux Linux

libceph: prevent potential out-of-bounds writes in handle_auth_session_key()

EPSS 0.6%CVSS 9.8

CVE-2025-68285 · Linux Linux

libceph: fix potential use-after-free in have_mon_and_osd_map()

EPSS 0.6%CVSS 9.8

CVE-2025-68301 · Linux Linux

net: atlantic: fix fragment overflow handling in RX path

EPSS 0.5%CVSS 9.8

CVE-2025-68263 · Linux Linux

ksmbd: ipc: fix use-after-free in ipc_msg_send_request

EPSS 0.4%CVSS 9.8

CVE-2025-68315 · Linux Linux

f2fs: fix to detect potential corrupted nid in free_nid_list

EPSS 0.4%CVSS 9.8

NVIDIA1 vulnerability on this pageMax CVSS 9.0Priority 37KEV 0

CVE-2025-33210 · NVIDIA Isaac Lab

NVIDIA Isaac Lab contains a deserialization vulnerability.

EPSS 0.7%CVSS 9.0

MacWarrior1 vulnerability on this pageMax CVSS 9.0Priority 36KEV 0

CVE-2025-64338 · MacWarrior clipbucket-v5

ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name

EPSS 0.5%CVSS 9.0

World Wide Broadcast Network1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-34434 · World Wide Broadcast Network AVideo

AVideo < 20.1 ImageGallery Plugin Unauthenticated File Upload and Deletion

EPSS 0.5%CVSS 9.3

Grassroot DICOM3 vulnerabilities on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2025-48429 · Grassroot DICOM Grassroot DICOM

An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024.

EPSS 0.4%CVSS 9.1

CVE-2025-53619 · Grassroot DICOM Grassroot DICOM

An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024.

EPSS 0.3%CVSS 9.1

CVE-2025-53618 · Grassroot DICOM Grassroot DICOM

An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024.

EPSS 0.3%CVSS 9.1

openedx1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2025-68270 · openedx edx-platform

CourseLimitedStaff Role Allows Studio Access

EPSS 0.3%CVSS 9.9

Ruijie1 vulnerability on this pageMax CVSS 9.2Priority 32KEV 0

CVE-2023-53881 · Ruijie ReyeeOS

ReyeeOS 1.204.1614 Man-in-the-Middle Remote Code Execution via CWMP

EPSS 0.3%CVSS 9.2

The archive.