Critical vulnerability archive — page 261

React Native Community1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2025-11953 · React Native Community CLI

Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests

KEV · due 26 Feb EPSS 94%public exploit SSVC act CVSS 9.8

mitre10 vulnerabilities on this pageMax CVSS 9.9Priority 55KEV 0

CVE-2025-61304 · mitre

OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address.

EPSS 2%public exploit CVSS 9.8

CVE-2025-63334 · mitre

PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submit_opacity.php co…

EPSS 1%public exploit CVSS 9.8

CVE-2025-63451 · mitre

Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php.

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-63452 · mitre

Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php.

EPSS 0.5%public exploit CVSS 9.4

CVE-2025-63416 · mitre

exclusively-hosted-service A Stored Cross-Site Scripting (XSS) vulnerability in the chat functionality of the SelfBest platform 202…

EPSS 0.4%public exploit CVSS 9.1

CVE-2025-56231 · mitre

Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass u…

EPSS 0.2%public exploit CVSS 9.1

CVE-2025-63601 · mitre

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious…

EPSS 0.6%CVSS 9.9

CVE-2025-55343 · mitre

Quipux 4.0.1 through e1774ac allows authenticated users to conduct SQL injection attacks via busqueda/busqueda.php txt_depe_codi, busqued…

EPSS 0.5%CVSS 9.9

CVE-2025-63453 · mitre

Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/contact.php.

EPSS 0.6%CVSS 9.8

CVE-2025-52910 · mitre

An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400.

EPSS 0.4%CVSS 9.8

Tenda6 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

saadiqbal1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-11833 · saadiqbal Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App

Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.0 - Missing Authorization to Account Takeover via Unauthenticated Email Log Disclosure

EPSS 61%CVSS 9.8

itsourcecode6 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-12617 · itsourcecode Billing System

itsourcecode Billing System login_crud.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-12604 · itsourcecode Online Loan Management System

itsourcecode Online Loan Management System load_fields.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-12605 · itsourcecode Online Loan Management System

itsourcecode Online Loan Management System manage_loan.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-12606 · itsourcecode Online Loan Management System

itsourcecode Online Loan Management System manage_borrower.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-12607 · itsourcecode Online Loan Management System

itsourcecode Online Loan Management System manage_payment.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-12608 · itsourcecode Online Loan Management System

itsourcecode Online Loan Management System manage_user.php sql injection

EPSS 0.4%public exploit CVSS 9.8

SourceCodester3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-12597 · SourceCodester Best House Rental Management System

SourceCodester Best House Rental Management System admin_class.php save_category sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-12598 · SourceCodester Best House Rental Management System

SourceCodester Best House Rental Management System admin_class.php save_tenant sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-12614 · SourceCodester Best House Rental Management System

SourceCodester Best House Rental Management System admin_class.php delete_payment sql injection

EPSS 0.4%public exploit CVSS 9.8

Campcodes1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-12612 · Campcodes School Fees Payment Management System

Campcodes School Fees Payment Management System ajax.php sql injection

EPSS 0.3%public exploit CVSS 9.8

essekia1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-11499 · essekia Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload

EPSS 1%CVSS 9.8

Nagios1 vulnerability on this pageMax CVSS 9.4Priority 42KEV 0

CVE-2024-13997 · Nagios XI

Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host

EPSS 1%CVSS 9.4

devitemsllc1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-12493 · devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin

ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'

EPSS 0.8%CVSS 9.8

Radiometrics3 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2025-61945 · Radiometrics VizAir

Missing Authentication for Critical Function in Radiometrics VizAir

EPSS 0.8%CVSS 10.0

CVE-2025-61956 · Radiometrics VizAir

Missing Authentication for Critical Function in Radiometrics VizAir

EPSS 0.7%CVSS 10.0

CVE-2025-54863 · Radiometrics VizAir

Insufficiently Protected Credentials in Radiometrics VizAir

EPSS 0.7%CVSS 10.0

fahadmahmood1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-12682 · fahadmahmood Easy Upload Files During Checkout

Easy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File Upload

EPSS 0.7%CVSS 9.8

Guetebruck1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-12463 · Guetebruck G-Cam

Unauthenticated SQL Injection in Guetebruck G-Cam Series Cameras

EPSS 0.6%CVSS 9.8

ce21com2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-11008 · ce21com CE21 Suite

CE21 Suite <= 2.3.1 - Unauthenticated Sensitive Information Exposure to Privilege Escalation

EPSS 0.5%CVSS 9.8

CVE-2025-11007 · ce21com CE21 Suite

CE21 Suite 2.2.1 - 2.3.1 - Missing Authorization to Unauthenticated Privilege Escalation via Plugin Settings Update

EPSS 0.5%CVSS 9.8

IBM1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2025-12531 · IBM InfoSphere Information Server

IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability

EPSS 0.8%CVSS 9.1

Azure Access Technology5 vulnerabilities on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2025-12599 · Azure Access Technology BLU-IC2

Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)

EPSS 0.4%CVSS 10.0

CVE-2025-12600 · Azure Access Technology BLU-IC2

Web UI Malfunction

EPSS 0.4%CVSS 10.0

CVE-2025-12601 · Azure Access Technology BLU-IC2

Denial of Service Due to SlowLoris

EPSS 0.3%CVSS 10.0

CVE-2025-12602 · Azure Access Technology BLU-IC2

/etc/avahi/services/z9.service can be Arbitrarily Written

EPSS 0.3%CVSS 9.8

CVE-2025-12603 · Azure Access Technology BLU-IC2

/etc/timezone can be Arbitrarily Written

EPSS 0.3%CVSS 9.8

tanvirahmed19841 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-12158 · tanvirahmed1984 Simple User Capabilities

Simple User Capabilities <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

EPSS 0.5%CVSS 9.8

dreamstechnologies1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-8900 · dreamstechnologies Doccure Core

Doccure Core < 1.5.4 - Unauthenticated Privilege Escalation

EPSS 0.4%CVSS 9.8

Survision1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-12108 · Survision License Plate Recognition Camera

Missing Authentication for Critical Function Survision License Plate Recognition Camera

EPSS 0.5%CVSS 9.3

CB Project Ltd. Co.1 vulnerability on this pageMax CVSS 9.9Priority 34KEV 0

CVE-2025-0987 · CB Project Ltd. Co. CVLand

IDOR in CB Project's CVLand

EPSS 0.3%CVSS 9.9

lighttpd1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2025-12642 · lighttpd lighttpd

HTTP Header Smuggling via Trailer Merge

EPSS 0.4%CVSS 9.1

mantisbt1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2025-47776 · mantisbt mantisbt

MantisBT: Authentication bypass for some passwords due to PHP type juggling

EPSS 0.3%CVSS 9.1

The archive.