Critical vulnerability archive — page 247

Shiguangwu6 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-14704 · Shiguangwu sgwbox N3

Shiguangwu sgwbox N3 API eshell path traversal

EPSS 12%public exploit CVSS 9.8

CVE-2025-14705 · Shiguangwu sgwbox N3

Shiguangwu sgwbox N3 SHARESERVER Feature command injection

EPSS 17%public exploit CVSS 9.8

CVE-2025-14706 · Shiguangwu sgwbox N3

Shiguangwu sgwbox N3 NETREBOOT http_eshell_server command injection

EPSS 19%public exploit CVSS 9.8

CVE-2025-14707 · Shiguangwu sgwbox N3

Shiguangwu sgwbox N3 DOCKER Feature http_eshell_server command injection

EPSS 19%public exploit CVSS 9.8

CVE-2025-14708 · Shiguangwu sgwbox N3

Shiguangwu sgwbox N3 WIREDCFGGET http_eshell_server buffer overflow

EPSS 6%public exploit CVSS 9.8

CVE-2025-14709 · Shiguangwu sgwbox N3

Shiguangwu sgwbox N3 WIRELESSCFGGET http_eshell_server buffer overflow

EPSS 6%public exploit CVSS 9.8

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2025-14659 · D-Link DIR-860LB1

D-Link DIR-860LB1/DIR-868LB1 DHCP command injection

EPSS 4%public exploit CVSS 9.8

Tenda1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2025-14665 · Tenda WH450

Tenda WH450 HTTP Request DhcpListClient stack-based overflow

EPSS 1.0%public exploit CVSS 9.8

mitre6 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-65213 · mitre

MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool.

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-66438 · mitre

A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism.

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-66439 · mitre

An issue was discovered in Frappe ERPNext through 15.89.0.

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-66440 · mitre

An issue was discovered in Frappe ERPNext through 15.89.0.

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-66844 · mitre

In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page content is processed by Twig…

EPSS 0.3%public exploit CVSS 9.1

CVE-2025-55895 · mitre

TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access C…

EPSS 0.3%CVSS 9.1

ays-pro1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-14156 · ays-pro Fox LMS – WordPress LMS Plugin

Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'

EPSS 7%CVSS 9.8

code-projects9 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-14620 · code-projects Student File Management System

code-projects Student File Management System login_query.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-14622 · code-projects Student File Management System

code-projects Student File Management System save_user.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14623 · code-projects Student File Management System

code-projects Student File Management System update_student.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14640 · code-projects Student File Management System

code-projects Student File Management System save_student.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14643 · code-projects Simple Attendance Record System

code-projects Simple Attendance Record System check.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14645 · code-projects Student File Management System

code-projects Student File Management System delete_user.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14646 · code-projects Student File Management System

code-projects Student File Management System delete_student.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14621 · code-projects Student File Management System

code-projects Student File Management System update_user.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14647 · code-projects Computer Book Store

code-projects Computer Book Store admin_delete.php sql injection

EPSS 0.4%public exploit CVSS 9.8

gmg1372 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-14672 · gmg137 snap7-rs

gmg137 snap7-rs s7_micro_client.cpp opWriteArea heap-based overflow

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-14673 · gmg137 snap7-rs

gmg137 snap7-rs client.rs as_ct_write heap-based overflow

EPSS 0.5%public exploit CVSS 9.8

Gomlab1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2023-53874 · Gomlab GOM Player

GOM Player 2.3.90.5360 Buffer Overflow via Equalizer Preset Name

EPSS 0.5%public exploit CVSS 9.8

FantasticLBP2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-14710 · FantasticLBP Hotels Server

FantasticLBP Hotels Server OrderList.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14711 · FantasticLBP Hotels Server

FantasticLBP Hotels Server hotelList.php sql injection

EPSS 0.5%public exploit CVSS 9.8

campcodes2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-14664 · Campcodes Supplier Management System

Campcodes Supplier Management System view_unit.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14668 · campcodes Advanced Online Examination System

campcodes Advanced Online Examination System loginExe.php sql injection

EPSS 0.4%public exploit CVSS 9.8

itsourcecode11 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-14637 · itsourcecode Online Pet Shop Management System

itsourcecode Online Pet Shop Management System addcnp.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14638 · itsourcecode Online Pet Shop Management System

itsourcecode Online Pet Shop Management System update_cnp.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14639 · itsourcecode Student Management System

itsourcecode Student Management System uprec.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14644 · itsourcecode Student Management System

itsourcecode Student Management System update_subject.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14649 · itsourcecode Online Cake Ordering System

itsourcecode Online Cake Ordering System supplier.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14650 · itsourcecode Online Cake Ordering System

itsourcecode Online Cake Ordering System product.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14652 · itsourcecode Online Cake Ordering System

itsourcecode Online Cake Ordering System admindetail.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14653 · itsourcecode Student Management System

itsourcecode Student Management System addrecord.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14661 · itsourcecode Student Managemen System

itsourcecode Student Managemen System advisers.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14666 · itsourcecode COVID Tracking System

itsourcecode COVID Tracking System page sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14667 · itsourcecode COVID Tracking System

itsourcecode COVID Tracking System page sql injection

EPSS 0.4%public exploit CVSS 9.8

MISP1 vulnerability on this pageMax CVSS 9.0Priority 42KEV 0

CVE-2025-67906 · MISP MISP

In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.

EPSS 0.3%public exploit CVSS 9.0

wp2fac1 vulnerability on this pageMax CVSS 9.3Priority 41KEV 0

CVE-2023-53872 · wp2fac Wp2Fac

Wp2Fac 1.0 OS Command Injection via send.php Endpoint

EPSS 1%CVSS 9.3

Soosyze1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-53871 · Soosyze Soosyze

Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic

EPSS 0.6%CVSS 9.8

Exim1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-67896 · Exim Exim

Exim before 4.99.1, with certain non-default rate-limit configurations, allows a remote heap-based buffer overflow because database recor…

EPSS 0.5%CVSS 9.8

redhat-developer1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2025-13888 · redhat-developer gitops-operator

Openshift-gitops-operator: openshift gitops: namespace admin cluster takeover via privileged jobs

EPSS 0.7%CVSS 9.1

Phpjabbers1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2023-53877 · Phpjabbers Bus Reservation System

Bus Reservation System 1.1 Multiple SQL Injection via pickup_id Parameter

EPSS 0.4%CVSS 9.8

WeblateOrg1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-64725 · WeblateOrg weblate

Weblate has improper validation upon invitation acceptance

EPSS 0.3%CVSS 9.8

nanomq1 vulnerability on this pageMax CVSS 9.0Priority 32KEV 0

CVE-2025-59947 · nanomq nanomq

NanoMQ has Buffer Overflow

EPSS 0.3%CVSS 9.0

The archive.