The archive.

CVE-2025-38737 · Linux Linux

cifs: Fix oops due to uninitialised variable

CVE-2025-39703 · Linux Linux

net, hsr: reject HSR frame if skb can't hold tag

CVE-2025-39673 · Linux Linux

ppp: fix race conditions in ppp_fill_forward_path

EPSS 0.3%CVSS 9.8

CVE-2025-39726 · Linux Linux

s390/ism: fix concurrency management in ism_cmd()

EPSS 0.3%CVSS 9.8

FOGProject1 vulnerability on this pageMax CVSS 9.9Priority 59KEV 0

CVE-2025-58443 · FOGProject fogproject

FOG's authentication bypass leads to full SQL DB dump

EPSS 21%public exploit CVSS 9.9

mitre6 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2025-56266 · mitre

A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL.

EPSS 3%public exploit CVSS 9.8

CVE-2025-57285 · mitre

codeceptjs 3.7.3 contains a command injection vulnerability in the emptyFolder function (lib/utils.js).

EPSS 2%public exploit CVSS 9.8

CVE-2025-56267 · mitre

A CSV injection vulnerability in the /id_profiles endpoint of Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via suup…

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-57141 · mitre

rsbi-os 4.7 is vulnerable to Remote Code Execution (RCE) in sqlite-jdbc.

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-22956 · mitre

OPSI before 4.3 allows any client to retrieve any ProductPropertyState, including those of other clients.

CVE-2025-52161 · mitre

Scholl Communications AG Weblication CMS Core v019.004.000.000 was discovered to contain a cross-site scripting (XSS) vulnerability.

Jinher3 vulnerabilities on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2025-10090 · Jinher OA

Jinher OA GetTreeDate.aspx sql injection

EPSS 2%public exploit CVSS 9.8

CVE-2025-10091 · Jinher OA

Jinher OA XML Type xml external entity reference

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-10092 · Jinher OA

Jinher OA XML Type xml external entity reference

EPSS 0.6%public exploit CVSS 9.8

seperman1 vulnerability on this pageMax CVSS 10.0Priority 54KEV 0

CVE-2025-58367 · seperman deepdiff

DeepDiff is vulnerable to DoS and Remote Code Execution via Delta class pollution

EPSS 1%public exploit CVSS 10.0

akoskm1 vulnerability on this pageMax CVSS 9.3Priority 52KEV 0

CVE-2025-54994 · akoskm create-mcp-server-stdio

@akoskm/create-mcp-server-stdio has Command Injection in MCP Server due to unsafe `exec` API

EPSS 1%public exploit CVSS 9.3

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2025-10034 · D-Link DIR-825

D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow

EPSS 1%public exploit CVSS 9.8

SimStudioAI1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-10097 · SimStudioAI sim

SimStudioAI sim route.ts code injection

EPSS 0.8%public exploit CVSS 9.8

Campcodes4 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-10030 · Campcodes Grocery Sales and Inventory System

Campcodes Grocery Sales and Inventory System ajax.php sql injection

CVE-2025-10031 · Campcodes Grocery Sales and Inventory System

Campcodes Grocery Sales and Inventory System ajax.php sql injection

CVE-2025-10108 · Campcodes Online Loan Management System

Campcodes Online Loan Management System ajax.php sql injection

CVE-2025-10109 · Campcodes Online Loan Management System

Campcodes Online Loan Management System ajax.php sql injection

code-projects3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-10102 · code-projects Online Event Judging System

code-projects Online Event Judging System index.php sql injection

CVE-2025-10103 · code-projects Online Event Judging System

code-projects Online Event Judging System home.php sql injection

CVE-2025-10104 · code-projects Online Event Judging System

code-projects Online Event Judging System review_search.php sql injection

itsourcecode3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-10033 · itsourcecode Online Discussion Forum

itsourcecode Online Discussion Forum admin sql injection

CVE-2025-10062 · itsourcecode Student Information Management System

itsourcecode Student Information Management System login.php sql injection

CVE-2025-10068 · itsourcecode Online Discussion Forum

itsourcecode Online Discussion Forum add_views.php sql injection

PHPGurukul2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-10025 · PHPGurukul Online Course Registration

PHPGurukul Online Course Registration semester.php sql injection

CVE-2025-10079 · PHPGurukul Small CRM

PHPGurukul Small CRM get-quote.php sql injection

SourceCodester5 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-10076 · SourceCodester Online Polling System

SourceCodester Online Polling System manage-profile.php sql injection

CVE-2025-10077 · SourceCodester Online Polling System

SourceCodester Online Polling System registeracc.php sql injection

CVE-2025-10078 · SourceCodester Online Polling System

SourceCodester Online Polling System candidates.php sql injection

CVE-2025-10082 · SourceCodester Online Polling System

SourceCodester Online Polling System manage-admins.php sql injection

CVE-2025-10100 · SourceCodester Simple Forum Discussion System

SourceCodester Simple Forum Discussion System admin_class.php sql injection

prest1 vulnerability on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2025-58450 · prest prest

pREST has Systemic SQL Injection Vulnerability

EPSS 0.4%public exploit CVSS 9.3

RooCodeInc2 vulnerabilities on this pageMax CVSS 9.9Priority 45KEV 0

CVE-2025-58371 · RooCodeInc Roo-Code

Roo Code is vulnerable to command injection via GitHub actions workflow

EPSS 2%CVSS 9.9

CVE-2025-58372 · RooCodeInc Roo-Code

Roo Code: Potential Remote Code Execution via .code-workspace

EPSS 0.6%CVSS 9.8

ImageMagick1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-57807 · ImageMagick ImageMagick

ImageMagick BlobStream Forward-Seek Under-Allocation

EPSS 0.3%public exploit CVSS 9.8

jjjake1 vulnerability on this pageMax CVSS 9.4Priority 43KEV 0

CVE-2025-58438 · jjjake internetarchive

internetarchive is vulnerable to Directory Traversal through file downloads

EPSS 2%CVSS 9.4

PTZOptics2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-35451 · PTZOptics PT12X-SE-xx-G3

Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled

EPSS 0.8%CVSS 9.8

CVE-2025-35452 · PTZOptics PT12X-SE-xx-G3

Pan-Tilt-Zoom cameras default administrative credentials for web interface

EPSS 0.9%CVSS 9.8

dreamstechnologies2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-9113 · dreamstechnologies Doccure Core

Doccure Core <= 1.5.3 - Unauthenticated Arbitrary File Upload

EPSS 0.6%CVSS 9.8

CVE-2025-9114 · dreamstechnologies Doccure

Doccure <= 1.5.0 - Unauthenticated Arbitrary User Password Change