by Kastro CVE-2025-10035 · Fortra GoAnywhere MFT
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,977 matching vulnerabilities · Page 275 of 780
Fortra
centos-webpanel
CVE-2025-48703 · centos-webpanel CentOS Web Panel
CWP Control Web Panel OS Command Injection Vulnerability
D-Link
h2oai
Vasion
CVE-2025-34203 · Vasion Print Virtual Appliance Host
Vasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Party Components
CVE-2025-34199 · Vasion Print Virtual Appliance Host
Vasion Print (formerly PrinterLogic) Insecure SSL Verification Allows Man-in-the-Middle Attacks
CVE-2025-34205 · Vasion Print Virtual Appliance Host
Vasion Print (formerly PrinterLogic) Dangerous PHP Dead Code Enables RCE
CVE-2025-34192 · Vasion Print Virtual Appliance Host
Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version
CVE-2025-34195 · Vasion Print Virtual Appliance Host
Vasion Print (formerly PrinterLogic) Unquoted Path During Driver Installation Leads to Execution of C:\Program.exe
CVE-2025-34193 · Vasion Print Virtual Appliance Host
Vasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated Runtimes
CVE-2025-34198 · Vasion Print Virtual Appliance Host
Vasion Print (formerly PrinterLogic) Shared / Hardcoded SSH Host Private Keys in Appliance Image
CVE-2025-34204 · Vasion Print Virtual Appliance Host
Vasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker Instances
CVE-2025-34206 · Vasion Print Virtual Appliance Host
Vasion Print (formerly PrinterLogic) Insecure Shared Storage Permissions
mitre
CVE-2025-57432 · mitre
Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands.
CVE-2025-57437 · mitre
The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977.
CVE-2025-57441 · mitre
The Blackmagic ATEM Mini Pro 2.7 exposes sensitive device and stream configuration information via an unauthenticated Telnet service on p…
CVE-2025-56074 · mitre
A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management Sy…
CVE-2025-57602 · mitre
Insufficient hardening of the proxyuser account in the AiKaan IoT management platform, combined with the use of a shared, hardcoded SSH p…
CVE-2025-57601 · mitre
AiKaan Cloud Controller uses a single hardcoded SSH private key and the username `proxyuser` for remote terminal access to all managed Io…
CVE-2025-57644 · mitre
Accela Automation Platform 22.2.3.0.230103 contains multiple vulnerabilities in the Test Script feature.
Campcodes
CVE-2025-10784 · Campcodes Online Learning Management System
Campcodes Online Learning Management System edit_subject.php sql injection
CVE-2025-10785 · Campcodes Grocery Sales and Inventory System
Campcodes Grocery Sales and Inventory System manage_user.php sql injection
CVE-2025-10786 · Campcodes Grocery Sales and Inventory System
Campcodes Grocery Sales and Inventory System ajax.php sql injection
CVE-2025-10781 · Campcodes Online Learning Management System
Campcodes Online Learning Management System edit_class.php sql injection
CVE-2025-10782 · Campcodes Online Learning Management System
Campcodes Online Learning Management System class.php sql injection
CVE-2025-10783 · Campcodes Online Learning Management System
Campcodes Online Learning Management System add_subject.php sql injection
itsourcecode
CVE-2025-10673 · itsourcecode Student Information Management System
itsourcecode Student Information Management System index.php sql injection
CVE-2025-10670 · itsourcecode E-Logbook with Health Monitoring System for COVID-19
itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile.php sql injection
jeecgboot
SourceCodester
CVE-2025-10687 · SourceCodester Responsive E-Learning System
SourceCodester Responsive E-Learning System add_teacher.php sql injection
CVE-2025-10688 · SourceCodester Pet Grooming Management Software
SourceCodester Pet Grooming Management Software paid.php sql injection
CVE-2025-10788 · SourceCodester Online Hotel Reservation System
SourceCodester Online Hotel Reservation System deleteroominventory.php sql injection
CVE-2025-10789 · SourceCodester Online Hotel Reservation System
SourceCodester Online Hotel Reservation System deleteslide.php sql injection
MapServer
DigitalOcean
Bearsthemes
CVE-2025-10690 · Bearsthemes Goza - Nonprofit Charity WordPress Theme
Goza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation
Dover Fueling Solutions
CVE-2025-54807 · Dover Fueling Solutions ProGauge MagLink LX 4
Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key
CVE-2025-30519 · Dover Fueling Solutions ProGauge MagLink LX 4
Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials
General Bytes
CVE-2022-4980 · General Bytes Crypto Application Server (CAS)
General Bytes Crypto Application Server (CAS) Unauthenticated Creation of Admin Account via Default-installation/First-admin Page
Linux
CVE-2025-39841 · Linux Linux
scsi: lpfc: Fix buffer free/clear order in deferred receive path
CVE-2022-50401 · Linux Linux
nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure
CVE-2022-50410 · Linux Linux
NFSD: Protect against send buffer overflow in NFSv2 READ
CVE-2023-53382 · Linux Linux
net/smc: Reset connection when trying to use SMCRv2 fails.
MicroWorld Technologies
CVE-2024-13990 · MicroWorld Technologies eScan AV
MicroWorld eScan AV Insecure Update Mechanism Allows Man-in-the-Middle Replacement of Updates
aonetheme
CVE-2025-5948 · aonetheme Service Finder Bookings