by Kastro CVE-2025-43300 · Apple iOS and iPadOS
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,014 matching vulnerabilities · Page 288 of 781
Apple
Tenda
mitre
CVE-2025-57105 · mitre
The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device.
CVE-2025-55637 · mitre
Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 was discovered to contain a command injection…
CVE-2022-31491 · mitre
Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote…
CVE-2024-52786 · mitre
An authentication bypass vulnerability in anji-plus AJ-Report up to v1.4.2 allows unauthenticated attackers to execute arbitrary code via…
CVE-2022-43110 · mitre
Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system…
CVE-2024-50645 · mitre
MallChat v1.0-SNAPSHOT has an authentication bypass vulnerability.
CVE-2024-50644 · mitre
zhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability.
CVE-2024-53496 · mitre
Incorrect access control in the doFilter function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authe…
CVE-2025-29366 · mitre
In mupen64plus v2.6.0 there is an array overflow vulnerability in the write_rdram_regs and write_rdram_regs functions, which enables exec…
CVE-2025-55613 · mitre
Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter.
CVE-2024-53499 · mitre
Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API.
CVE-2025-29365 · mitre
spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.
CVE-2025-55602 · mitre
D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formSysCmd function via the submit-url parameter.
CVE-2025-55599 · mitre
D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formWlanSetup function via the parameter f_wds_wepKey.
CVE-2025-55603 · mitre
Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter.
CVE-2025-55605 · mitre
Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter.
CVE-2025-55606 · mitre
Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parameter.
CVE-2025-55611 · mitre
D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formLanguageChange function via the nextPage parameter.
CVE-2025-55619 · mitre
Reolink v4.54.0.4.20250526 was discovered to contain a hardcoded encryption key and initialization vector.
CVE-2022-45134 · mitre
Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 deserializes user input unsafely during skin import.
CVE-2025-51092 · mitre
The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php.
CVE-2025-55398 · mitre
An issue was discovered in mouse07410 asn1c thru 0.9.29 (2025-03-20) - a fork of vlm asn1c.
CVE-2025-52095 · mitre
An issue in PDQ Smart Deploy V.3.0.2040 allows an attacker to escalate privileges via the Credential encryption routines in SDCommon.dll
TOTOLINK
itsourcecode
CVE-2025-9311 · itsourcecode Apartment Management System
itsourcecode Apartment Management System addfair.php sql injection
PHPGurukul
CVE-2025-9302 · PHPGurukul User Management System
PHPGurukul User Management System signup.php sql injection
CVE-2025-9307 · PHPGurukul Online Course Registration
PHPGurukul Online Course Registration session.php sql injection
SourceCodester
CVE-2025-9304 · SourceCodester Online Bank Management System
SourceCodester Online Bank Management System show.php sql injection
CVE-2025-9305 · SourceCodester Online Bank Management System
SourceCodester Online Bank Management System mnotice.php sql injection
LabRedesCefetRJ
Ubiquiti Inc
CVE-2025-24285 · Ubiquiti Inc UniFi Connect EV Station Lite
Multiple Improper Input Validation vulnerabilities in UniFi Connect EV Station Lite may allow a Command Injection by a malicious actor wi…
CVE-2025-27214 · Ubiquiti Inc UniFi Connect EV Station Pro
A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro may allow a malicious actor with physica…
Consensys
Microsoft
CVE-2025-53763 · Microsoft Microsoft Purview Data Governance
Azure Databricks Elevation of Privilege Vulnerability
CVE-2025-53795 · Microsoft Microsoft PC Manager
Microsoft PC Manager Elevation of Privilege Vulnerability
Mitsubishi Electric Europe
CVE-2025-3128 · Mitsubishi Electric Europe smartRTU
Mitsubishi Electric Europe smartRTU OS Command Injection
cozmoslabs
CVE-2025-8895 · cozmoslabs WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress
WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File Copy
simplercheckout
CVE-2025-7642 · simplercheckout Simpler Checkout
Simpler Checkout 0.7.0 - 1.1.9 - Authentication Bypass
Liferay
kristoferfannar
CVE-2025-57754 · kristoferfannar eslint-ban-moment
eslint-ban-moment exposed a sensitive Supabase URI in .env (Credential leak)
Linux
An-Themes
Softing
Salesforce
CVE-2025-26496 · Salesforce Tableau Server, Tableau Desktop