Critical vulnerability archive — page 267

Microsoft3 vulnerabilities on this pageMax CVSS 9.9Priority 99KEV 1

CVE-2025-59287 · Microsoft Windows Server 2012

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

KEV · due 14 Nov EPSS 100%public exploit SSVC act CVSS 9.8

CVE-2025-55315 · Microsoft ASP.NET Core 2.3

ASP.NET Security Feature Bypass Vulnerability

EPSS 67%public exploit CVSS 9.9

CVE-2025-49708 · Microsoft Windows 10 Version 1809

Microsoft Graphics Component Elevation of Privilege Vulnerability

EPSS 1%CVSS 9.9

FlowiseAI1 vulnerability on this pageMax CVSS 9.9Priority 59KEV 0

CVE-2025-34267 · FlowiseAI Flowise

Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright Packages

EPSS 7%public exploit CVSS 9.9

LabRedesCefetRJ1 vulnerability on this pageMax CVSS 9.4Priority 50KEV 0

CVE-2025-62360 · LabRedesCefetRJ WeGIA

WeGIA SQL Injection via 'id_dependente' param at endpoint `/html/funcionario/dependente_documento.php`

EPSS 0.9%public exploit CVSS 9.4

RainyGao3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-11630 · RainyGao DocSys

RainyGao DocSys File Upload uploadDoc.do updateRealDoc path traversal

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-11631 · RainyGao DocSys

RainyGao DocSys deleteDoc.do path traversal

EPSS 0.8%public exploit CVSS 9.1

CVE-2025-11629 · RainyGao DocSys

RainyGao DocSys getUserList.do getUserList sql injection

EPSS 0.4%public exploit CVSS 9.8

ProjectsAndPrograms6 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-11656 · ProjectsAndPrograms School Management System

ProjectsAndPrograms School Management System editNotes.php unrestricted upload

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-11657 · ProjectsAndPrograms School Management System

ProjectsAndPrograms School Management System createNotice.php unrestricted upload

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-11659 · ProjectsAndPrograms School Management System

ProjectsAndPrograms School Management System uploadNotes.php unrestricted upload

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-11661 · ProjectsAndPrograms School Management System

ProjectsAndPrograms School Management System missing authentication

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11658 · ProjectsAndPrograms School Management System

ProjectsAndPrograms School Management System changeSllyabus.php unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11660 · ProjectsAndPrograms School Management System

ProjectsAndPrograms School Management System uploadSllyabus.php unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11665 · D-Link DAP-2695

D-Link DAP-2695 Firmware Update rgbin fwupdater_main os command injection

EPSS 7%CVSS 9.8

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11736 · itsourcecode Online Examination System

itsourcecode Online Examination System index.php sql injection

EPSS 0.5%public exploit CVSS 9.8

SourceCodester3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11615 · SourceCodester Best Salon Management System

SourceCodester Best Salon Management System add_invoice.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11662 · SourceCodester Best Salon Management System

SourceCodester Best Salon Management System booking.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11614 · SourceCodester Best Salon Management System

SourceCodester Best Salon Management System edit-appointment.php sql injection

EPSS 0.4%public exploit CVSS 9.8

Campcodes1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-11664 · Campcodes Online Beauty Parlor Management System

Campcodes Online Beauty Parlor Management System search-appointment.php sql injection

EPSS 0.5%public exploit CVSS 9.8

pwncollege1 vulnerability on this pageMax CVSS 9.5Priority 47KEV 0

CVE-2025-62376 · pwncollege dojo

pwn.college DOJO vulnerable to improper authentication in workspace endpoint allowing unauthorized Windows VM access

EPSS 0.5%public exploit CVSS 9.5

mitre2 vulnerabilities on this pageMax CVSS 9.4Priority 46KEV 0

CVE-2025-56749 · mitre

Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing.

EPSS 0.5%public exploit CVSS 9.4

CVE-2025-54603 · mitre

An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonat…

EPSS 0.8%CVSS 9.0

ZTE1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-46581 · ZTE ZXCDN

ZTE ZXCDN product has a Struts RCE Vulnerability

EPSS 0.8%CVSS 9.8

SAP_SE2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-42937 · SAP_SE SAP Print Service

Directory Traversal vulnerability in SAP Print Service

EPSS 0.7%CVSS 9.8

CVE-2025-42910 · SAP_SE SAP Supplier Relationship Management

Unrestricted File Upload Vulnerability in SAP Supplier Relationship Management

EPSS 0.5%CVSS 9.0

Dassault Systèmes1 vulnerability on this pageMax CVSS 9.0Priority 39KEV 0

CVE-2025-9976 · Dassault Systèmes Station Launcher App in 3DEXPERIENCE platform

OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x

EPSS 0.9%CVSS 9.0

Fortinet2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-49201 · Fortinet FortiPAM

A weak authentication vulnerability in Fortinet FortiPAM 1.5.0, FortiPAM 1.4.0 through 1.4.2, FortiPAM 1.3 all versions, FortiPAM 1.2 all…

EPSS 0.6%CVSS 9.8

CVE-2024-33507 · Fortinet FortiIsolator

An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in FortiIsolator 2.4.0…

EPSS 0.4%CVSS 9.1

Rockwell Automation3 vulnerabilities on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2025-7328 · Rockwell Automation Comms - 1783-NATR

Rockwell Automation Comms - 1783-NATR Multiple Broken Authentication Vulnerabilities

EPSS 0.5%CVSS 9.9

CVE-2025-9064 · Rockwell Automation FactoryTalk View Machine Edition

Rockwell Automation FactoryTalk View Machine Edition Path Traversal

EPSS 0.6%CVSS 9.1

CVE-2025-9063 · Rockwell Automation PanelView Plus 7 Performance Series B

Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass

EPSS 0.4%CVSS 9.8

Siemens2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-40765 · Siemens TeleControl Server Basic V3.1

A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3).

EPSS 0.5%CVSS 9.8

CVE-2025-40771 · Siemens SIMATIC CP 1542SP-1

A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK754…

EPSS 0.5%CVSS 9.8

Elastic1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2025-37729 · Elastic Elastic Cloud Enterprise (ECE)

Elastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template Engine

EPSS 0.7%CVSS 9.1

Mozilla6 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

Adobe1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2025-49553 · Adobe Adobe Connect

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

EPSS 0.5%CVSS 9.3

ibi1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2025-11548 · ibi WebFOCUS

ibi WebFOCUS - Unauthenticated RCE Vulnerability

EPSS 0.5%CVSS 9.3

Cats Information Technology Software Development Technologies1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-6919 · Cats Information Technology Software Development Technologies Aykome License Tracking System

SQLi in Cats Informatics' Aykome

EPSS 0.4%CVSS 9.8

HCL Software2 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-31998 · HCL Software Unica Centralized Offer Management

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information

EPSS 0.4%CVSS 9.8

CVE-2025-31993 · HCL Software Unica Centralized Offer Management

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)

EPSS 0.2%CVSS 9.8

SFS Consulting Information Processing Industry and Foreign Trade Inc.1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-10610 · SFS Consulting Information Processing Industry and Foreign Trade Inc. Winsure

SQLi in SFS Winsure

EPSS 0.4%CVSS 9.8

Ericsson1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2025-27258 · Ericsson Ericsson Network Manager(ENM)

Ericsson Network Manager: escalation of privilege vulnerability

EPSS 0.3%CVSS 9.8

IBM1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2025-36087 · IBM Security Verify Access

IBM Security Verify Access hard coded credentials

EPSS 0.3%CVSS 9.8

Kiloview1 vulnerability on this pageMax CVSS 10.0Priority 33KEV 0

CVE-2025-9265 · Kiloview NDI

API Authentication Bypass via Header Spoofing vulnerability in Kiloview NDI N30 Products

EPSS 0.2%CVSS 10.0

The archive.