by Kastro CVE-2025-50739 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,977 matching vulnerabilities · Page 262 of 780
mitre
CVE-2025-29270 · mitre
Incorrect access control in the realtime.cgi endpoint of Deep Sea Electronics devices DSE855 v1.1.0 to v1.1.26 allows attackers to gain a…
CVE-2025-57108 · mitre
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader.
CVE-2025-63622 · mitre
A vulnerability was found in code-projects Online Complaint Site 1.0.
Ubiquiti Inc
kingaddons
CVE-2025-8489 · kingaddons King Addons for Elementor – 4,000+ ready Elementor sections, 650+ templates, 70+ FREE widgets for Elementor
King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation
MLflow
win-cli-mcp-server
CVE-2025-11202 · win-cli-mcp-server win-cli-mcp-server
win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability
Nagios
CVE-2024-14003 · Nagios XI
Nagios XI < 2024R1.2 RCE via NRDP Server Plugins
CVE-2024-14005 · Nagios XI
Nagios XI < 2024R1.2 Command Injection via Docker Wizard
CVE-2025-34274 · Nagios Log Server
Nagios Log Server < 2024R2.0.3 Logstash Process Root Privileges
CVE-2025-34277 · Nagios Log Server
Nagios Log Server < 2024R1.3.1 RCE via Malformed Dashboard ID
CVE-2025-34284 · Nagios XI
Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin
CVE-2020-36856 · Nagios XI
Nagios XI < 5.6.14 Authenticated RCE command_test.php via address
CVE-2024-13999 · Nagios XI
Nagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information Disclosure
CVE-2024-14008 · Nagios XI
Nagios XI < 2024R1.3.2 RCE via WinRM Configuration Wizard
CVE-2025-34134 · Nagios XI
Nagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI)
CVE-2025-34286 · Nagios XI
Nagios XI < 2026R1 RCE via Run Check Command in CCM
CVE-2023-7317 · Nagios XI
Nagios XI < 2024R1 Web SSH Terminal Missing Access Control
CVE-2012-10063 · Nagios XI
Nagios XI < 2012R1.3 Authenticated SQL Injection in Legacy CCM
CVE-2024-13994 · Nagios XI
Nagios XI < 2024R1.1.2 Allow Insecure Logins Missing Authorization
CVE-2024-13996 · Nagios XI
Nagios XI < 2024R1.1.3 Session Not Invalidated After Password Change
CVE-2024-14009 · Nagios XI
Nagios XI < 2024R1.0.1 Privilege Escalation via System Profile
CVE-2025-34271 · Nagios Log Server
Nagios Log Server < 2024R2.0.2 Cluster Manager Credential Requests Sent Over Plaintext
Anheng Information (Hangzhou DBAPP Security Information Technology Co., Ltd.)
CVE-2023-7325 · Anheng Information (Hangzhou DBAPP Security Information Technology Co., Ltd.) Mingyu Operations and Maintenance Audit and Risk Control System
Mingyu Operations and Maintenance Audit and Risk Control System xmlrpc.sock SSRF
Veeam
Unknown
SUSE
CVE-2025-54469 · SUSE neuvector
NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow
CVE-2025-53883 · SUSE Container suse manager 5.0
spacewalk-java has various XSS issues on search page
IBM
Azure Access Technology
CVE-2025-12476 · Azure Access Technology BLU-IC2
Resource Lacking AuthN
CVE-2025-12477 · Azure Access Technology BLU-IC2
Server Version Disclosure
CVE-2025-12515 · Azure Access Technology BLU-IC2
Systemic Internal Server Errors - HTTP 500 Response
CVE-2025-12516 · Azure Access Technology BLU-IC2
Lack of Graceful Error Handling - HTTP 5xx Error
CVE-2025-12554 · Azure Access Technology BLU-IC2
Missing Security Headers
CVE-2025-12552 · Azure Access Technology BLU-IC2
Insufficient Password Policy
CVE-2025-12478 · Azure Access Technology BLU-IC2
Non-Compliant TLS Configuration
CVE-2025-12553 · Azure Access Technology BLU-IC2
Server Certificate Verification Disabled
CVE-2025-12479 · Azure Access Technology BLU-IC2
Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation
Genetec Inc.
Seeyon
CVE-2021-4461 · Seeyon Zhiyuan OA Web Application System
Seeyon Zhiyuan OA Web Application System < 7.0 SP1 Authentication Bypass
zitadel
Circutor
CVE-2025-64385 · Circutor TCPRS1plus
INCORRECT SECURITY VALIDATION IN SENDING UDP FRAMES
CVE-2025-64388 · Circutor TCPRS1plus