The archive.

CVE-2025-60553 · mitre

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard52.

CVE-2025-60554 · mitre

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEnableWizard.

CVE-2025-60291 · mitre

An issue was discovered in eTimeTrackLite Web thru 12.0 (20250704).

EPSS 0.3%public exploit CVSS 9.1

CVE-2025-61385 · mitre

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Pyt…

EPSS 0.4%CVSS 9.6

CVE-2025-61481 · mitre

An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing a…

TOTOLINK2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-12239 · TOTOLINK A3300R

TOTOLINK A3300R cstecgi.cgi setDdnsCfg buffer overflow

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-12240 · TOTOLINK A3300R

TOTOLINK A3300R cstecgi.cgi setDmzCfg buffer overflow

EPSS 0.8%public exploit CVSS 9.8

JMA Plugins1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-6440 · JMA Plugins WooCommerce Designer Pro

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

EPSS 33%CVSS 9.8

projectworlds2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-12237 · projectworlds Advanced Library Management System

projectworlds Advanced Library Management System index.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-12215 · projectworlds Online Shopping System

projectworlds Online Shopping System login_submit.php sql injection

SourceCodester2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-12208 · SourceCodester Best House Rental Management System

SourceCodester Best House Rental Management System admin_class.php login2 sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-12226 · SourceCodester Best House Rental Management System

SourceCodester Best House Rental Management System admin_class.php save_house sql injection

Veeder-Root1 vulnerability on this pageMax CVSS 9.9Priority 44KEV 0

CVE-2025-58428 · Veeder-Root TLS4B Automatic Tank Gauge System

Command Injection in Veeder-Root TLS4B Automatic Tank Gauge System

EPSS 1%CVSS 9.9

Dell1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-43995 · Dell Dell Storage Manager

Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability.

EPSS 0.8%CVSS 9.8

Microsoft2 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2025-59503 · Microsoft Azure Compute Resource Provider

Azure Compute Resource Provider Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 10.0

CVE-2025-59273 · Microsoft Azure Event Grid System

Azure Event Grid System Elevation of Privilege Vulnerability

EPSS 0.4%CVSS 9.8

AutomationDirect1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2025-61934 · AutomationDirect Productivity Suite

AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327

EPSS 0.7%CVSS 10.0

AncoraThemes1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-60225 · AncoraThemes BugsPatrol

WordPress BugsPatrol theme <= 1.5.0 - PHP Object Injection vulnerability

ArkSigner Software and Hardware Inc.1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-11023 · ArkSigner Software and Hardware Inc. AcBakImzala

Local File Inclusion in ArkSigner's AcBakImzala

axiomthemes1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-60226 · axiomthemes White Rabbit

WordPress White Rabbit theme <= 1.5.2 - PHP Object Injection vulnerability

Azure Access Technology9 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2025-12275 · Azure Access Technology BLU-IC2

Mail Configuration File Manipulation + Command Execution

EPSS 0.5%CVSS 10.0

CVE-2025-12104 · Azure Access Technology BLU-IC2

Incorrect Content-Type Header

EPSS 0.4%CVSS 10.0

CVE-2025-12176 · Azure Access Technology BLU-IC2

Undocumented Administrative Accounts

CVE-2025-12219 · Azure Access Technology BLU-IC2

Vulnerable Components in Azure Access OS

EPSS 0.4%CVSS 10.0

CVE-2025-12220 · Azure Access Technology BLU-IC2

Busybox 1.31.1 - Multiple Known Vulnerabilities

EPSS 0.4%CVSS 10.0

CVE-2025-12285 · Azure Access Technology BLU-IC2

Missing Initial Password Change

CVE-2025-12218 · Azure Access Technology BLU-IC2

Weak Default Credentials

CVE-2025-12216 · Azure Access Technology BLU-IC2

Malicious / Malformed App can be Installed but not Uninstalled

EPSS 0.2%CVSS 10.0

CVE-2025-12217 · Azure Access Technology BLU-IC2

SNMP Default Community String (public)

EPSS 0.3%CVSS 9.1

BoldThemes2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-60216 · BoldThemes Addison

WordPress Addison theme < 1.4.8 - PHP Object Injection vulnerability

CVE-2025-60214 · BoldThemes Goldenblatt

WordPress Goldenblatt theme < 1.3.0 - PHP Object Injection vulnerability

EPSS 0.5%CVSS 9.8

captivateaudio1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-60221 · captivateaudio Captivate Sync

WordPress Captivate Sync Plugin <= 3.0.3 - PHP Object Injection Vulnerability

eyecix1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-62025 · eyecix JobSearch

WordPress JobSearch plugin < 3.0.8 - PHP Object Injection vulnerability

quantumcloud1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-60232 · quantumcloud KBx Pro Ultimate

WordPress KBx Pro Ultimate plugin <= 8.0.5 - PHP Object Injection vulnerability

universam1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-60238 · universam UNIVERSAM

WordPress UNIVERSAM plugin <= 9.04.02 - PHP Object Injection vulnerability

wpshuffle1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-60224 · wpshuffle Subscribe to Download

WordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerability