Critical vulnerability archive — page 272

Vasion14 vulnerabilities on this pageMax CVSS 10.0Priority 55KEV 0

CVE-2025-34221 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic)

EPSS 1%public exploit CVSS 10.0

CVE-2025-34223 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) Insecure Installation Credentials

EPSS 1%public exploit CVSS 10.0

CVE-2025-34215 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) Unauthenticated Firmware Update Endpoint RCE

EPSS 1%public exploit CVSS 9.8

CVE-2025-34216 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) RCE and Password Leaks via API

EPSS 0.8%public exploit CVSS 10.0

CVE-2025-34224 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) Unauthenticated Device Modification

EPSS 1.0%public exploit CVSS 10.0

CVE-2025-34207 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) Insecure SSH Client Configuration

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-34209 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) Hardcoded GPG Private Key

EPSS 0.7%public exploit CVSS 9.4

CVE-2025-34222 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) Unauthenticated Admin APIs Used to Modify SSL Certificates

EPSS 0.5%public exploit CVSS 10.0

CVE-2025-34235 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) Weak SSL/TLS Certificate Validation RCE

EPSS 0.5%public exploit CVSS 9.5

CVE-2025-34211 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) Hardcoded SSL Certificate and Private Keys

EPSS 0.4%public exploit CVSS 9.3

CVE-2025-34234 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) Hardcoded Encryption Private Keys

EPSS 0.4%public exploit CVSS 9.2

CVE-2025-34218 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) Exposed Internal Docker Instance

EPSS 1.0%CVSS 10.0

CVE-2025-34212 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) Insecure Build Pipeline

EPSS 0.7%CVSS 9.8

CVE-2025-34196 · Vasion Print Virtual Appliance Host

Vasion Print (formerly PrinterLogic) Hardcoded PrinterLogic CA Private Key and Hardcoded Password

EPSS 0.5%CVSS 9.8

Campcodes7 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-11079 · Campcodes Farm Management System

Campcodes Farm Management System file information disclosure

EPSS 0.9%public exploit CVSS 9.8

CVE-2025-11076 · Campcodes Online Learning Management System

Campcodes Online Learning Management System edit_teacher.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11109 · Campcodes Computer Sales and Inventory System

Campcodes Computer Sales and Inventory System us_edit.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11110 · Campcodes Online Learning Management System

Campcodes Online Learning Management System school_year.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11111 · Campcodes Advanced Online Voting Management System

Campcodes Advanced Online Voting Management System candidates_edit.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11077 · Campcodes Online Learning Management System

Campcodes Online Learning Management System add_content.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11102 · Campcodes Online Learning Management System

Campcodes Online Learning Management System edit_content.php sql injection

EPSS 0.4%public exploit CVSS 9.8

Bjskzy2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-11139 · Bjskzy Zhiyou ERP

Bjskzy Zhiyou ERP com.artery.form.services.FormStudioUpdater uploadStudioFile path traversal

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-11140 · Bjskzy Zhiyou ERP

Bjskzy Zhiyou ERP com.artery.richclient.RichClientService openForm xml external entity reference

EPSS 0.6%public exploit CVSS 9.8

KnowageLabs1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-59954 · KnowageLabs Knowage-Server

Knowage Contains a Remote Code Execution Vulnerability

EPSS 0.5%public exploit CVSS 9.8

Progress Software1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-8868 · Progress Software Chef Automate

Chef Automate compliance service SQL Injection Vulnerability

EPSS 28%CVSS 9.8

code-projects7 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11115 · code-projects Simple Scheduling System

code-projects Simple Scheduling System addtime.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11116 · code-projects Simple Scheduling System

code-projects Simple Scheduling System add.home.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11105 · code-projects Simple Scheduling System

code-projects Simple Scheduling System addsubject.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11106 · code-projects Simple Scheduling System

code-projects Simple Scheduling System addfaculty.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11107 · code-projects Simple Scheduling System

code-projects Simple Scheduling System addcourse.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11108 · code-projects Simple Scheduling System

code-projects Simple Scheduling System addroom.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11094 · code-projects E-Commerce Website

code-projects E-Commerce Website admin_product_details.php sql injection

EPSS 0.4%CVSS 9.8

CodeAstro1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11118 · CodeAstro Student Grading System

CodeAstro Student Grading System adminLogin.php sql injection

EPSS 0.5%public exploit CVSS 9.8

FreshRSS2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-54592 · FreshRSS FreshRSS

FreshRSS has Incomplete Session Termination on Logout

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-54875 · FreshRSS FreshRSS

FreshRSS: Unauthorized creation of admin user when registration is enabled

EPSS 0.5%public exploit CVSS 9.8

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-11101 · itsourcecode Open Source Job Portal

itsourcecode Open Source Job Portal index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

kidaze1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-11089 · kidaze CourseSelectionSystem

kidaze CourseSelectionSystem COUNT3s4.php sql injection

EPSS 0.4%public exploit CVSS 9.8

mitre3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-56513 · mitre

NiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital signatures or hash checks.

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-57266 · mitre

An issue was discovered in file AssistantController.java in ThriveX Blogging Framework 2.5.9 thru 3.1.3 allowing unauthenticated attacker…

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-56795 · mitre

Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting (XSS) in the recipe creation functionality.

EPSS 0.4%public exploit CVSS 9.0

wneessen1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2025-59937 · wneessen go-mail

go-mail has insufficient address encoding when passing mail addresses to the SMTP client

EPSS 0.5%public exploit CVSS 9.1

Western Digital1 vulnerability on this pageMax CVSS 9.3Priority 41KEV 0

CVE-2025-30247 · Western Digital My Cloud

An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows re…

EPSS 1%CVSS 9.3

westi1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-9762 · westi Post By Email

Post By Email <= 1.0.4b - Unauthenticated Arbitrary File Upload via Email Attachments

EPSS 0.8%CVSS 9.8

Apeman1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-11126 · Apeman ID71

Apeman ID71 system.ini hard-coded credentials

EPSS 0.6%CVSS 9.8

copypressdev1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-8625 · copypressdev Copypress Rest API

Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution

EPSS 0.6%CVSS 9.8

Saison Technology Co.,Ltd.1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2025-48006 · Saison Technology Co.,Ltd. DataSpider Servista

Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier.

EPSS 0.5%CVSS 9.1

Fayton Software and Consulting Services1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2024-13150 · Fayton Software and Consulting Services fayton.pro ERP

SQLi in Fayton Software's fayton.pro ERP

EPSS 0.4%CVSS 9.8

serverless-dns1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-61584 · serverless-dns serverless-dns

serverless-dns is vulnerable to Command Injection through pr.yml GitHub Action Workflow

EPSS 0.4%CVSS 9.3

Medical Informatics Engineering1 vulnerability on this pageMax CVSS 9.9Priority 33KEV 0

CVE-2025-35032 · Medical Informatics Engineering Enterprise Health

Medical Informatics Engineering Enterprise Health arbitrary file upload

EPSS 0.3%CVSS 9.9

QWER1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2024-58040 · QWER Crypt::RandomEncryption

Crypt::RandomEncryption for Perl uses insecure rand() function during encryption

EPSS 0.2%CVSS 9.1

The archive.