by Kastro CVE-2025-26399 · SolarWinds Web Help Desk
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,977 matching vulnerabilities · Page 274 of 780
SolarWinds
FlowiseAI
Novakon
CVE-2025-9962 · Novakon P series (P07, P10, P12, P15)
Unauthenticated Buffer Overflow
CVE-2025-9965 · Novakon P series (P07, P10, P12, P15)
UDP Service Weak Authentication
CVE-2025-9963 · Novakon P series (P07, P10, P12, P15)
Path Traversal
Campcodes
CVE-2025-10810 · Campcodes Online Learning Management System
Campcodes Online Learning Management System edit_user.php sql injection
CVE-2025-10809 · Campcodes Online Learning Management System
Campcodes Online Learning Management System department.php sql injection
CVE-2025-10808 · Campcodes Farm Management System
Campcodes Farm Management System uploadProduct.php sql injection
CVE-2025-10817 · Campcodes Online Learning Management System
Campcodes Online Learning Management System admin_user.php sql injection
CVE-2025-10829 · Campcodes Computer Sales and Inventory System
Campcodes Computer Sales and Inventory System sup_edit1.php sql injection
CVE-2025-10830 · Campcodes Computer Sales and Inventory System
Campcodes Computer Sales and Inventory System inv_edit1.php sql injection
CVE-2025-10831 · Campcodes Computer Sales and Inventory System
Campcodes Computer Sales and Inventory System pro_edit1.php sql injection
CVE-2025-10851 · Campcodes Gym Management System
Campcodes Gym Management System ajax.php sql injection
CVE-2025-10857 · Campcodes Point of Sale System POS
Campcodes Point of Sale System POS login.php sql injection
code-projects
CVE-2025-10811 · code-projects Hostel Management System
code-projects Hostel Management System index.php sql injection
CVE-2025-10791 · code-projects Online Bidding System
code-projects Online Bidding System index.php sql injection
CVE-2025-10793 · code-projects E-Commerce Website
code-projects E-Commerce Website admin_account_delete.php sql injection
CVE-2025-10795 · code-projects Online Bidding System
code-projects Online Bidding System bidupdate.php sql injection
CVE-2025-10802 · code-projects Online Bidding System
code-projects Online Bidding System remove.php sql injection
CVE-2025-10841 · code-projects Online Bidding System
code-projects Online Bidding System weweee.php sql injection
CVE-2025-10812 · code-projects Hostel Management System
code-projects Hostel Management System index.php sql injection
CVE-2025-10842 · code-projects Online Bidding System
code-projects Online Bidding System wew.php sql injection
CVE-2025-10796 · code-projects Hostel Management System
code-projects Hostel Management System login.php sql injection
CVE-2025-10797 · code-projects Hostel Management System
code-projects Hostel Management System index.php sql injection
CVE-2025-10798 · code-projects Hostel Management System
code-projects Hostel Management System index.php sql injection
CVE-2025-10799 · code-projects Hostel Management System
code-projects Hostel Management System index.php sql injection
CVE-2025-10813 · code-projects Hostel Management System
code-projects Hostel Management System index.php sql injection
Jinher
SourceCodester
CVE-2025-10801 · SourceCodester Pet Grooming Management Software
SourceCodester Pet Grooming Management Software edit_tax.php sql injection
CVE-2025-10832 · SourceCodester Pet Grooming Management Software
SourceCodester Pet Grooming Management Software fetch_product_details.php sql injection
CVE-2025-10836 · SourceCodester Pet Grooming Management Software
SourceCodester Pet Grooming Management Software print1.php sql injection
itsourcecode
CVE-2025-10800 · itsourcecode Online Discussion Forum
itsourcecode Online Discussion Forum index.php sql injection
CVE-2025-10834 · itsourcecode Open Source Job Portal
itsourcecode Open Source Job Portal login.php sql injection
1000projects
CVE-2025-10833 · 1000projects Bookstore Management System
1000projects Bookstore Management System login.php sql injection
mitre
CVE-2025-56819 · mitre
An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.
CVE-2025-57321 · mitre
A Prototype Pollution vulnerability in the util-deps.addFileDepend function of magix-combine-ex versions thru 1.2.10 allows attackers to…
Reservation
CVE-2025-10843 · Reservation Online Hotel Reservation System
Reservation Online Hotel Reservation System paypalpayout.php sql injection
Iron Mountain Archiving Services Inc.
CVE-2025-9588 · Iron Mountain Archiving Services Inc. enVision
OS Command Injection in Iron Mountain's enVision
TalentSys Consulting Information Technology Industry Inc.
CVE-2025-9846 · TalentSys Consulting Information Technology Industry Inc. Inka.Net
Unrestricted File Upload in TaletSys Inka.Net
eteubert
CVE-2025-10147 · eteubert Podlove Podcast Publisher
Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload
wpsight
MooMoo
CVE-2025-10412 · MooMoo Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium)
Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) <= 4.9.55 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'
dnnsoftware
CVE-2025-59545 · dnnsoftware Dnn.Platform
DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module
Linux
RTI
CVE-2025-1255 · RTI Connext Professional
Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.
CVE-2025-4993 · RTI Connext Professional
Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.
VibeThemes
yonisink
CVE-2025-58255 · yonisink Custom Post Type Images