by Kastro CVE-2025-34184 · Ilevia Srl. EVE X1 Server
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,977 matching vulnerabilities · Page 277 of 780
Ilevia Srl.
CVE-2025-34186 · Ilevia Srl. EVE X1/X5 Server
Ilevia EVE X1/X5 Server 4.7.18.0.eden Authentication Bypass
CVE-2025-34183 · Ilevia Srl. EVE X1 Server
Ilevia EVE X1 Server 4.7.18.0.eden Credentials Leak Through Log Disclosure
Tenda
dataease
CVE-2025-58046 · dataease dataease
Dataease has a JDBC attack vulnerability in the Impala datasource
CVE-2025-58045 · dataease dataease
Dataease server-side request forgery via unfiltered DB2 JDBC ldap parameter
CVE-2025-58748 · dataease dataease
Dataease H2 data source JDBC URL validation bypass leads to remote code execution
mitre
CVE-2025-57631 · mitre
SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module
CVE-2025-57119 · mitre
An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Log…
CVE-2025-54391 · mitre
A vulnerability in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration (ZCS) allows an attacker with valid user credenti…
CVE-2025-56557 · mitre
An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol.
Campcodes
CVE-2025-10444 · Campcodes Online Job Finder System
Campcodes Online Job Finder System advancesearch.php sql injection
CVE-2025-10445 · Campcodes Computer Sales and Inventory System
Campcodes Computer Sales and Inventory System us_transac.php sql injection
CVE-2025-10446 · Campcodes Computer Sales and Inventory System
Campcodes Computer Sales and Inventory System cust_searchfrm.php sql injection
CVE-2025-10448 · Campcodes Online Job Finder System
Campcodes Online Job Finder System index.php sql injection
CVE-2025-10435 · Campcodes Computer Sales and Inventory System
Campcodes Computer Sales and Inventory System cust_edit1.php sql injection
CVE-2025-10436 · Campcodes Computer Sales and Inventory System
Campcodes Computer Sales and Inventory System sup_searchfrm.php sql injection
CVE-2025-10447 · Campcodes Online Job Finder System
Campcodes Online Job Finder System applicationform.php unrestricted upload
CVE-2025-10562 · Campcodes Grocery Sales and Inventory System
Campcodes Grocery Sales and Inventory System ajax.php sql injection
SourceCodester
CVE-2025-10482 · SourceCodester Online Student File Management System
SourceCodester Online Student File Management System index.php sql injection
CVE-2025-10479 · SourceCodester Online Student File Management System
SourceCodester Online Student File Management System index.php sql injection
CVE-2025-10480 · SourceCodester Online Student File Management System
SourceCodester Online Student File Management System save_file.php unrestricted upload
Spring
JFROG
mohammadzain2008
PHPGurukul
CVE-2025-10459 · PHPGurukul Beauty Parlour Management System
PHPGurukul Beauty Parlour Management System all-appointment.php sql injection
yangzongzhuan
Apple
CVE-2025-31255 · Apple iOS and iPadOS
An authorization issue was addressed with improved state management.
CVE-2025-43362 · Apple iOS and iPadOS
The issue was addressed with improved checks.
CVE-2025-43347 · Apple iOS and iPadOS
This issue was addressed by removing the vulnerable code.
CVE-2025-43359 · Apple iOS and iPadOS
A logic issue was addressed with improved state management.
CVE-2025-43342 · Apple Safari
A correctness issue was addressed with improved checks.
CVE-2025-43343 · Apple Safari
The issue was addressed with improved memory handling.
kidaze
CVE-2025-10477 · kidaze CourseSelectionSystem
kidaze CourseSelectionSystem eligibility.php sql injection
Jaspersoft
CVE-2025-10492 · Jaspersoft JasperReports Library Community Edition
Jaspersoft Library Deserialisation Vulnerability
BGS Interactive
CVE-2025-4688 · BGS Interactive SINAV.LINK Exam Result Module
SQLi in BGS Interactive's SINAV.LINK Exam Result Module
Linux
CVE-2022-50235 · Linux Linux
NFSD: Protect against send buffer overflow in NFSv2 READDIR
CVE-2022-50335 · Linux Linux
9p: set req refcount to zero to avoid uninitialized usage
CVE-2023-53192 · Linux Linux
vxlan: Fix nexthop hash size
CVE-2022-50350 · Linux Linux
scsi: target: iscsi: Fix a race condition between login_work and the login thread
Dolusoft
CVE-2025-7744 · Dolusoft Omaspot
SQLi in Dolusoft's Omaspot
CVE-2025-7743 · Dolusoft Omaspot
Sensitive Data Exposure in Dolusoft's Omaspot
Patika Global Technologies
CVE-2025-8276 · Patika Global Technologies HumanSuite
HTML Injection in Patika Global Technologies' HumanSuite
BMC
CVE-2025-55109 · BMC Control-M/Agent
BMC Control-M/Agent default SSL/TLS configuration authenticated bypass
CVE-2025-55113 · BMC Control-M/Agent
BMC Control-M/Agent unescaped NULL byte in access control list checks
CVE-2025-55115 · BMC Control-M/Agent
BMC Control-M/Agent path traversal local privilege escalation
CVE-2025-55116 · BMC Control-M/Agent