Critical vulnerability archive — page 258

Fortinet1 vulnerability on this pageMax CVSS 9.4Priority 98KEV 1

CVE-2025-64446 · Fortinet FortiWeb

Fortinet FortiWeb Path Traversal Vulnerability

KEV · due 21 Nov EPSS 91%public exploit SSVC act CVSS 9.4

D-Link3 vulnerabilities on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2025-13188 · D-Link DIR-816L

D-Link DIR-816L authentication.cgi authenticationcgi_main stack-based overflow

EPSS 2%public exploit CVSS 9.8

CVE-2025-13189 · D-Link DIR-816L

D-Link DIR-816L gena.cgi genacgi_main stack-based overflow

EPSS 1.0%public exploit CVSS 9.8

CVE-2025-13191 · D-Link DIR-816L

D-Link DIR-816L soap.cgi soapcgi_main stack-based overflow

EPSS 1.0%public exploit CVSS 9.8

silentmatt1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-13204 · silentmatt expr-eval

CVE-2025-13204

EPSS 0.9%public exploit CVSS 9.8

TG81 vulnerability on this pageMax CVSS 9.3Priority 50KEV 0

CVE-2021-4470 · TG8 TG8 Firewall

TG8 Firewall Unauthenticated RCE via runphpcmd.php

EPSS 0.8%public exploit CVSS 9.3

pgadmin.org1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-12762 · pgadmin.org pgAdmin 4

Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)

EPSS 13%CVSS 9.8

code-projects6 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-13169 · code-projects Simple Online Hotel Reservation System

code-projects Simple Online Hotel Reservation System add_query_reserve.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-13201 · code-projects Simple Cafe Ordering System

code-projects Simple Cafe Ordering System login.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-13075 · code-projects Responsive Hotel Site

code-projects Responsive Hotel Site usersettingdel.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13076 · code-projects Responsive Hotel Site

code-projects Responsive Hotel Site usersetting.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13170 · code-projects Simple Online Hotel Reservation System

code-projects Simple Online Hotel Reservation System edit_account.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13203 · code-projects Simple Cafe Ordering System

code-projects Simple Cafe Ordering System addmem.php sql injection

EPSS 0.4%public exploit CVSS 9.8

Microsoft1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-60724 · Microsoft Microsoft Office for Android

GDI+ Remote Code Execution Vulnerability

EPSS 6%CVSS 9.8

SourceCodester3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-13060 · SourceCodester Survey Application System

SourceCodester Survey Application System view_survey.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-13059 · SourceCodester Alumni Management System

SourceCodester Alumni Management System manage_career.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13122 · SourceCodester Patients Waiting Area Queue Management System

SourceCodester Patients Waiting Area Queue Management System api_patient_checkin.php getPatientAppointment sql injection

EPSS 0.5%CVSS 9.8

baptisteArno1 vulnerability on this pageMax CVSS 9.9Priority 47KEV 0

CVE-2025-64709 · baptisteArno typebot.io

Typebot May Expose AWS EKS Credentials via Server Side Request Forgery in Webhook Block

EPSS 0.4%public exploit CVSS 9.9

itsourcecode4 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13233 · itsourcecode Inventory Management System

itsourcecode Inventory Management System index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13235 · itsourcecode Inventory Management System

itsourcecode Inventory Management System login.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13210 · itsourcecode Inventory Management System

itsourcecode Inventory Management System index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13234 · itsourcecode Inventory Management System

itsourcecode Inventory Management System index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

mitre9 vulnerabilities on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2025-63679 · mitre

free5gc v4.1.0 and before is vulnerable to Buffer Overflow.

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-63353 · mitre

A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be…

EPSS 1%CVSS 9.8

CVE-2025-63666 · mitre

Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low…

EPSS 0.5%CVSS 9.8

CVE-2025-64281 · mitre

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin cre…

EPSS 0.5%CVSS 9.8

CVE-2025-56385 · mitre

A SQL injection vulnerability exists in the login functionality of WellSky Harmony version 4.1.0.2.83 within the 'xmHarmony.asp' endpoint.

EPSS 0.4%CVSS 9.8

CVE-2025-64280 · mitre

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field.

EPSS 0.4%CVSS 9.8

CVE-2025-54339 · mitre

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 expl…

EPSS 0.3%CVSS 10.0

CVE-2025-54343 · mitre

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 expl…

EPSS 0.3%CVSS 9.6

CVE-2025-63289 · mitre

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the enc…

EPSS 0.2%CVSS 9.1

AMTT1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-13123 · AMTT Hotel Broadband Operation System

AMTT Hotel Broadband Operation System get_firstdate.php sql injection

EPSS 0.4%public exploit CVSS 9.8

ury-erp1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-13168 · ury-erp ury

ury-erp ury pos_extend.py overrided_past_order_list sql injection

EPSS 0.4%public exploit CVSS 9.8

Campcodes1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-13057 · Campcodes School Fees Payment Management System

Campcodes School Fees Payment Management System ajax.php sql injection

EPSS 0.4%public exploit CVSS 9.8

FiberHome1 vulnerability on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2021-4464 · FiberHome AN5506-04-FA

FIberHome AN5506-04-FA / HG6245D Routers Remote Stack Overflow

EPSS 2%CVSS 9.3

ASUS1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-59367 · ASUS DSL-AC51

An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized…

EPSS 0.9%CVSS 9.8

IBM4 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2025-36250 · IBM AIX

AIX Code Execution

EPSS 0.7%CVSS 10.0

CVE-2025-36251 · IBM AIX

AIX Command Execution

EPSS 0.5%CVSS 9.8

CVE-2025-36236 · IBM AIX

AIX Path Traversal

EPSS 0.5%CVSS 9.1

CVE-2025-36096 · IBM AIX

AIX Insufficiently Protected Credentials

EPSS 0.3%CVSS 9.0

aEnrich2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-12870 · aEnrich a+HRD

aEnrich｜eHRD - Authentication Abuse

EPSS 0.7%CVSS 9.8

CVE-2025-12871 · aEnrich a+HRD

aEnrich｜a+HRD - Authentication Abuse

EPSS 0.6%CVSS 9.8

General Industrial Controls1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2025-58083 · General Industrial Controls Lynx+ Gateway

General Industrial Controls Lynx+ Gateway Missing Authentication for Critical Function

EPSS 0.6%CVSS 10.0

N-able2 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2025-11367 · N-able N-central

N-central windows software probe Remote Code Execution

EPSS 0.6%CVSS 10.0

CVE-2025-11366 · N-able N-central

N-central Authentication bypass via path traversal

EPSS 0.6%CVSS 9.8

Linux1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-40176 · Linux Linux

tls: wait for pending async decryptions if tls_strp_msg_hold fails

EPSS 0.5%CVSS 9.8

zitadel1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-64717 · zitadel zitadel

ZITADEL vulnerable to Account Takeover with deactivated Instance IdP

EPSS 0.5%CVSS 9.8

Zoom Communications Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-64741 · Zoom Communications Inc. Zoom Workplace for Android

Zoom Workplace for Android - Improper Authorization Handling

EPSS 0.4%CVSS 9.8

CVE-2025-62484 · Zoom Communications Inc. Zoom Workplace

Zoom Workplace Clients - Inefficient Regular Expression Complexity

EPSS 0.3%CVSS 9.8

Dell1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2025-46608 · Dell Data Lakehouse

Dell Data Lakehouse, versions prior to 1.6.0.0, contain(s) an Improper Access Control vulnerability.

EPSS 0.5%CVSS 9.1

The archive.