The archive.

CVE-2025-62481 · Oracle Corporation Oracle Marketing

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).

CVE-2025-53037 · Oracle Corporation Oracle Financial Services Analytical Applications Infrastructure

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (…

MOTEX Inc.1 vulnerability on this pageMax CVSS 9.8Priority 97KEV 1

CVE-2025-61932 · MOTEX Inc. Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA))

Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

KEV · due 12 Nov EPSS 3%public exploit SSVC act CVSS 9.8

70mai2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2025-11942 · 70mai X200

70mai X200 Pairing missing authentication

EPSS 1%public exploit CVSS 9.8

CVE-2025-11943 · 70mai X200

70mai X200 HTTP Web Server default credentials

EPSS 0.7%public exploit CVSS 9.8

marsupialtail1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-62515 · marsupialtail quokka

Remote Code Execution by Pickle Deserialization via FlightServer in pyquokka

EPSS 0.9%public exploit CVSS 9.8

mitre5 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-60772 · mitre

Improper authentication in the web-based management interface of NETLINK HG322G V1.0.00-231017, allows a remote unauthenticated attacker…

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-61455 · mitre

SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the signup.inc.php endpoint.

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-61303 · mitre

Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a vulnerability in its Windows b…

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-54957 · mitre

An issue was discovered in Dolby UDC 4.5 through 4.13.

EPSS 2%CVSS 9.8

CVE-2025-56447 · mitre

TM2 Monitoring v3.04 contains an authentication bypass and plaintext credential disclosure.

EPSS 0.3%public exploit CVSS 9.8

The Wikimedia Foundation1 vulnerability on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2025-12004 · The Wikimedia Foundation Mediawiki - Lockdown Extension

The compare API module breaks Extension:Lockdown

EPSS 0.4%public exploit CVSS 10.0

TP-Link Systems Inc.3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-7850 · TP-Link Systems Inc. Omada gateways

Authenticated OS command execution

EPSS 3%CVSS 9.3

CVE-2025-6542 · TP-Link Systems Inc. Omada gateways

OS command injection in multiple parameters

EPSS 1%CVSS 9.8

CVE-2025-7851 · TP-Link Systems Inc. Omada gateways

Unauthorized root access via debug functionality

EPSS 0.7%CVSS 9.8

Sauter1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-41723 · Sauter modulo 6 devices modu680-AS

Sauter: Directory Traversal in importFile SOAP Method

EPSS 1%CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2025-10916 · Unknown FormGent

FormGent < 1.0.4 - Unauthenticated Arbitrary File Deletion

EPSS 0.4%public exploit CVSS 9.1

Excellent Infotek1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-11948 · Excellent Infotek Document Management System

Excellent Infotek｜Document Management System - Arbitrary File Upload

EPSS 1%CVSS 9.8

themeisle1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-11391 · themeisle PPOM – Product Addons & Custom Fields for WooCommerce

PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File Upload

EPSS 1.0%CVSS 9.8

ABB1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2025-9574 · ABB ALS-mini-s4 IP

Missing Authentication Vulnerability

EPSS 0.8%CVSS 10.0

EfficientLab1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-10640 · EfficientLab WorkExaminer Professional

Missing Server-Side Authentication Checks in EfficientLab WorkExaminer Professional

EPSS 0.9%CVSS 9.8

CMSSuperHeroes2 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2025-48106 · CMSSuperHeroes Clanora

WordPress Clanora theme < 1.3.1 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 10.0

CVE-2025-49060 · CMSSuperHeroes Wastia

WordPress Wastia theme < 1.1.3 - Arbitrary File Upload vulnerability

quantumcloud1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-49901 · quantumcloud Simple Link Directory

WordPress Simple Link Directory plugin < 14.8.1 - Broken Authentication vulnerability

EPSS 0.7%CVSS 9.8

7oroof1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2025-58963 · 7oroof Medcity

WordPress Medcity theme < 1.1.9 - Arbitrary File Upload vulnerability

Beplusthemes1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2025-60206 · Beplusthemes Alone

WordPress Alone theme <= 7.8.3 - Remote Code Execution (RCE) vulnerability

CRM Perks1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-60209 · CRM Perks Connector for Gravity Forms and Google Sheets

WordPress Connector for Gravity Forms and Google Sheets plugin <= 1.2.6 - PHP Object Injection vulnerability

Esri1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2025-57870 · Esri ArcGIS Server

BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services.

Whitebox-Studio1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-60213 · Whitebox-Studio Scape

WordPress Scape theme <= 1.5.13 - PHP Object Injection vulnerability

Raisecomm1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2025-11534 · Raisecomm RAX701-GC-WP-01 P200R002C52

Authentication Bypass Using an Alternate Path or Channel in Raisecomm RAX701-GC Series

EPSS 0.7%CVSS 9.3

rascals1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-60039 · rascals Noisa

WordPress Noisa theme <= 2.6.0 - PHP Object Injection vulnerability

themesflat1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-59007 · themesflat TF Woo Product Grid Addon For Elementor

WordPress TF Woo Product Grid Addon For Elementor Plugin <= 1.0.1 - Deserialization of untrusted data Vulnerability

wpeverest1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-60210 · wpeverest Everest Forms - Frontend Listing

WordPress Everest Forms - Frontend Listing plugin <= 1.0.5 - PHP Object Injection Vulnerability

wpinstinct1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-49380 · wpinstinct WooCommerce Vehicle Parts Finder

WordPress WooCommerce Vehicle Parts Finder plugin <= 3.7 - PHP Object Injection vulnerability

Crocoblock1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2025-49931 · Crocoblock JetSearch

WordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerability

Eclipse Foundation1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-55086 · Eclipse Foundation NextX Duo

In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked…

EPSS 0.4%CVSS 9.8

Galaxy Software Services Corporation1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2025-31342 · Galaxy Software Services Corporation Vitals ESP

Galaxy Software Services Vitals ESP Forum Module - Unrestricted Upload of File with Dangerous Type

wolfSSL1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-11625 · wolfSSL wolfSSH

Host verification bypass and credential leak

EPSS 0.4%CVSS 9.8

Cozy Vision1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-49915 · Cozy Vision SMS Alert Order Notifications

WordPress SMS Alert Order Notifications plugin <= 3.8.5 - SQL Injection vulnerability

Gesundheit Bewegt GmbH1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2025-52758 · Gesundheit Bewegt GmbH Zippy

WordPress Zippy plugin <= 1.7.0 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.1

Grupo Castilla1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-41028 · Grupo Castilla Epsilon RH

SQL injection in Epsilon RH