The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

38,977 matching vulnerabilities · Page 256 of 780

UTT1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-13442 · UTT 进取 750W

UTT 进取 750W formPdbUpConfig system command injection

EPSS 20%public exploit CVSS 9.8

mitre13 vulnerabilities on this pageMax CVSS 10.0Priority 58KEV 0

CVE-2025-63207 · mitre

The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper auth…

EPSS 7%public exploit CVSS 9.8

CVE-2025-60738 · mitre

An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 - 2025_07_21 and before allows a remote a…

EPSS 1%public exploit CVSS 9.8

CVE-2025-63213 · mitre

The QVidium Opera11 device (firmware version 2.9.0-Ax4x-opera11) is vulnerable to Remote Code Execution (RCE) due to improper input valid…

EPSS 0.9%public exploit CVSS 9.8

CVE-2025-63223 · mitre

The Axel Technology StreamerMAX MK II devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing a…

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-63224 · mitre

The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices.

EPSS 0.7%public exploit CVSS 10.0

CVE-2025-63218 · mitre

The Axel Technology WOLF1MS and WOLF2MS devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing…

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-63206 · mitre

An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing…

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-63210 · mitre

The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass.

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-63221 · mitre

The Axel Technology puma devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication…

EPSS 0.6%public exploit CVSS 9.1

CVE-2025-63685 · mitre

Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability.

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-52410 · mitre

Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint.

EPSS 0.3%public exploit CVSS 9.8

CVE-2025-63888 · mitre

The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability.

EPSS 0.8%CVSS 9.8

CVE-2025-63807 · mitre

An issue was discovered in weijiang1994 university-bbs (aka Blogin) in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 (2025-01-13).

EPSS 0.5%CVSS 9.8

Tenda3 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-13445 · Tenda AC21

Tenda AC21 SetIpMacBind stack-based overflow

EPSS 4%public exploit CVSS 9.8

CVE-2025-13446 · Tenda AC21

Tenda AC21 SetSysTimeCfg stack-based overflow

EPSS 4%public exploit CVSS 9.8

CVE-2025-13400 · Tenda CH22

Tenda CH22 WrlExtraGet formWrlExtraGet buffer overflow

EPSS 0.8%public exploit CVSS 9.8

dataease1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-64428 · dataease dataease

DataEase DB2 JNDI Vulnerability

EPSS 0.6%public exploit CVSS 9.8

esm-dev2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-65025 · esm-dev esm.sh

esm.sh CDN service has arbitrary file write via tarslip

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-65026 · esm-dev esm.sh

esm.sh CDN service has JS Template Literal Injection in CSS-to-JavaScript

EPSS 0.5%public exploit CVSS 9.6

Lynxtechnology1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-13315 · Lynxtechnology Twonky Server

Unauthenticated log access in Twonky Server

EPSS 31%CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-12057 · Unknown WavePlayer

WavePlayer < 3.8.0 - Unauthenticated Arbitrary File Upload

EPSS 0.6%public exploit CVSS 9.8

freeprojectscodes1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-13422 · freeprojectscodes Sports Club Management System

freeprojectscodes Sports Club Management System change_s_pwd.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Campcodes3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13410 · Campcodes Retro Basketball Shoes Online Store

Campcodes Retro Basketball Shoes Online Store receipt.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13424 · Campcodes Supplier Management System

Campcodes Supplier Management System add_product.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13411 · Campcodes Retro Basketball Shoes Online Store

Campcodes Retro Basketball Shoes Online Store admin_football.php unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

code-projects2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13449 · code-projects Online Shop Project

code-projects Online Shop Project login.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13396 · code-projects Courier Management System

code-projects Courier Management System add-office.php sql injection

EPSS 0.4%public exploit CVSS 9.8

itsourcecode2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13420 · itsourcecode Human Resource Management System

itsourcecode Human Resource Management System EventStore.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13421 · itsourcecode Human Resource Management System

itsourcecode Human Resource Management System NoticeStore.php sql injection

EPSS 0.4%public exploit CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13451 · SourceCodester Online Shop Project

SourceCodester Online Shop Project action.php sql injection

EPSS 0.4%public exploit CVSS 9.8

authlib1 vulnerability on this pageMax CVSS 9.2Priority 45KEV 0

CVE-2025-65015 · authlib joserfc

joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads

EPSS 0.4%public exploit CVSS 9.2

EmbySupport1 vulnerability on this pageMax CVSS 9.0Priority 45KEV 0

CVE-2025-64325 · EmbySupport Emby.Security

Emby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard

EPSS 0.4%public exploit CVSS 9.0

lukevella1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2025-65021 · lukevella rallly

Rallly Has Unauthorized Poll Finalization via Insecure Direct Object Reference (IDOR)

EPSS 0.4%public exploit CVSS 9.1

AudioCodes Limited2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2025-34329 · AudioCodes Limited AudioCodes Fax/IVR Appliance

AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Backup Upload RCE via ajaxBackupUploadFile.php

EPSS 1%CVSS 9.8

CVE-2025-34328 · AudioCodes Limited AudioCodes Fax/IVR Appliance

AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated File Upload RCE via ajaxScript.php

EPSS 0.8%CVSS 9.8

Microsoft3 vulnerabilities on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2025-59245 · Microsoft Microsoft SharePoint Online

Microsoft SharePoint Online Elevation of Privilege Vulnerability

EPSS 1%CVSS 9.8

CVE-2025-49752 · Microsoft Azure Bastion Developer

Azure Bastion Elevation of Privilege Vulnerability

EPSS 0.9%CVSS 10.0

CVE-2025-64655 · Microsoft Dynamics OmniChannel SDK Storage Containers

Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability

EPSS 0.5%CVSS 9.8

BASIS International Ltd.1 vulnerability on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2025-34320 · BASIS International Ltd. BASIS BBj

BASIS BBj < 25.00 Unauthenticated Arbitrary File Read RCE

EPSS 0.9%CVSS 9.3

anthropics1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-65099 · anthropics claude-code

Claude Code vulnerable to command execution prior to startup trust dialog

EPSS 0.5%CVSS 9.8

Eksagate Electronic Engineering and Computer Industry Trade Inc.1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-10437 · Eksagate Electronic Engineering and Computer Industry Trade Inc. Webpack Management System

SQLi in Exagate's Webpack Management System

EPSS 0.4%CVSS 9.8

Lookyloo1 vulnerability on this pageMax CVSS 9.4Priority 35KEV 0

CVE-2025-65095 · Lookyloo lookyloo

Lookyloo is vulnerable due to improper user input sanitization

EPSS 0.4%CVSS 9.4

ABB1 vulnerability on this pageMax CVSS 9.6Priority 34KEV 0

CVE-2025-10571 · ABB ABB Ability Edgenius

ABB Ability Edgenius Authentication Bypass

EPSS 0.3%CVSS 9.6

Google Cloud1 vulnerability on this pageMax CVSS 9.2Priority 34KEV 0

CVE-2025-12414 · Google Cloud Looker

Looker account compromise via punycode homograph attack

EPSS 0.4%CVSS 9.2

Vivotek1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-12592 · Vivotek Affected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7138-VVTK,IP7142-VVTK,IP7142-VVTK,IP7151-VVTK,IP7152-VVTK,IP7153-VVTK,IP7153-VVTK,IP7154-VVTK,IP7330-VVTK,IP7330-VVTK,IP7330-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131W-VVTK,PT7135-VVTK,PT7137-TCON,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PZ7131-VVTK,PZ7131-VVTK,PZ71X1-VVTK,PZ71X1-VVTK,PZ71X2-VVTK,SD73X3-VVTK,SD73X3-VVTK,SD73X3-VVTK,TC5330-VVTK,TC5332-TCVV,TC5333-TCVV,TC5633-TCVV,TC5633-VVTK,VS7100-VVTK,VS7100-VVTK,VS7100-VVTK

Use of default login credentials in Legacy Vivotek Devices

EPSS 0.4%CVSS 9.3

Eclipse Foundation1 vulnerability on this pageMax CVSS 9.4Priority 33KEV 0

CVE-2025-12383 · Eclipse Foundation Jersey

Race Condition allows Bypass of Trust Restrictions

EPSS 0.3%CVSS 9.4

WSO21 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2025-9312 · WSO2 WSO2 API Manager

Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products

EPSS 0.3%CVSS 9.8

SonicWall1 vulnerability on this pageMax CVSS 9.8Priority 32KEV 0

CVE-2025-40604 · SonicWall Email Security

Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without ver…

EPSS 0.2%CVSS 9.8

ASUSTOR1 vulnerability on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2025-13051 · ASUSTOR ABP and AES

Windows service used an uncontrolled search path element will cause unauthorized code execution with localsystem privileges

EPSS 0.2%CVSS 9.3