Critical vulnerability archive — page 290

Tenda4 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-9090 · Tenda AC20

Tenda AC20 Telnet Service telnet websFormDefine command injection

EPSS 17%public exploit CVSS 9.8

CVE-2025-9087 · Tenda AC20

Tenda AC20 SetNetControlList Endpoint set_qosMib_list stack-based overflow

EPSS 1%public exploit CVSS 9.8

CVE-2025-9089 · Tenda AC20

Tenda AC20 SetIpMacBind sub_48E628 stack-based overflow

EPSS 1%public exploit CVSS 9.8

CVE-2025-9088 · Tenda AC20

Tenda AC20 formSetVirtualSer save_virtualser_data stack-based overflow

EPSS 1%public exploit CVSS 9.8

mitre5 vulnerabilities on this pageMax CVSS 10.0Priority 58KEV 0

CVE-2025-55591 · mitre

TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formM…

EPSS 7%public exploit CVSS 9.8

CVE-2024-44373 · mitre

A Path Traversal vulnerability in AllSky v2023.05.01 through v2024.12.06_06 allows an unauthenticated attacker to create a webshell and r…

EPSS 1%public exploit CVSS 9.8

CVE-2025-50567 · mitre

Saurus CMS Community Edition 4.7.1 contains a vulnerability in the custom DB::prepare() function, which uses preg_replace() with the depr…

EPSS 0.7%public exploit CVSS 10.0

CVE-2025-54336 · mitre

In Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison.

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-51543 · mitre

An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /administrator/auth/rese…

EPSS 0.4%public exploit CVSS 9.8

Wavlink1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-9149 · Wavlink WL-NU516U1

Wavlink WL-NU516U1 wireless.cgi sub_4032E4 command injection

EPSS 5%public exploit CVSS 9.8

ThinkInAIXYZ1 vulnerability on this pageMax CVSS 9.7Priority 50KEV 0

CVE-2025-55733 · ThinkInAIXYZ deepchat

DeepChat One-click Remote Code Execution through Custom URL Handling

EPSS 0.7%public exploit CVSS 9.7

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-54466 · Apache Software Foundation Apache OFBiz

Apache OFBiz: RCE Vulnerability in scrum plugin

EPSS 29%CVSS 9.8

itsourcecode2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-9154 · itsourcecode Online Tour and Travel Management System

itsourcecode Online Tour and Travel Management System page-login.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-9155 · itsourcecode Online Tour and Travel Management System

itsourcecode Online Tour and Travel Management System forget_password.php sql injection

EPSS 0.5%public exploit CVSS 9.8

mecanik1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-8723 · mecanik Cloudflare Image Resizing – Optimize & Accelerate Your Images

Cloudflare Image Resizing <= 1.5.6 - Missing Authentication to Unauthenticated Remote Code Execution via rest_pre_dispatch Hook

EPSS 19%CVSS 9.8

storychief1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-7441 · storychief StoryChief

StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload

EPSS 51%CVSS 9.8

meshtastic1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-55293 · meshtastic firmware

Meshtastic allows crafting of specific NodeInfo packets that overwrite any publicKey saved in the NodeDB

EPSS 0.5%public exploit CVSS 9.8

projectworlds5 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-9047 · projectworlds Visitor Management System

projectworlds Visitor Management System visitor_out.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-9050 · projectworlds Travel Management System

projectworlds Travel Management System addcategory.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-9051 · projectworlds Travel Management System

projectworlds Travel Management System updatecategory.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-9052 · projectworlds Travel Management System

projectworlds Travel Management System updatepackage.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-9053 · projectworlds Travel Management System

projectworlds Travel Management System updatesubcategory.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Linux9 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2023-3867 · Linux Linux

ksmbd: fix out of bounds read in smb2_sess_setup

EPSS 6%CVSS 9.1

CVE-2025-38566 · Linux Linux

sunrpc: fix handling of server side tls alerts

EPSS 0.7%CVSS 9.8

CVE-2025-38561 · Linux Linux

ksmbd: fix Preauh_HashValue race condition

EPSS 0.5%CVSS 9.8

CVE-2025-38527 · Linux Linux

smb: client: fix use-after-free in cifs_oplock_break

EPSS 0.5%CVSS 9.8

CVE-2025-38533 · Linux Linux

net: libwx: fix the using of Rx buffer DMA

EPSS 0.3%CVSS 9.8

CVE-2023-32249 · Linux Linux

ksmbd: not allow guest user on multichannel

EPSS 0.4%CVSS 9.1

CVE-2025-38552 · Linux Linux

mptcp: plug races between subflow fail and subflow creation

EPSS 0.3%CVSS 9.4

CVE-2023-4515 · Linux Linux

ksmbd: validate command request size

EPSS 0.3%CVSS 9.1

CVE-2025-38560 · Linux Linux

x86/sev: Evict cache lines during SNP memory validation

EPSS 0.2%CVSS 9.3

projectcapsule1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2025-55205 · projectcapsule capsule

Capsule tenant owners with "patch namespace" permission can hijack system namespaces label

EPSS 0.5%public exploit CVSS 9.1

bencevans1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-55294 · bencevans screenshot-desktop

Command Injection via `format` option in screenshot-desktop

EPSS 1%CVSS 9.8

NamelessMC1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2025-54117 · NamelessMC Nameless

NamelessMC allows Stored Cross-Site Scripting (XSS) in dashboard text editor

EPSS 0.4%public exploit CVSS 9.1

Unisoc (Shanghai) Technologies Co., Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-31715 · Unisoc (Shanghai) Technologies Co., Ltd. SL8521E/SL8521ET/ SL8541E/UIS8141E/UWS6137/UWS6137E/UWS6151(E)/UWS6152

In vowifi service, there is a possible command injection due to improper input validation.

EPSS 1%CVSS 9.8

DogukanUrker1 vulnerability on this pageMax CVSS 9.3Priority 42KEV 0

CVE-2025-55736 · DogukanUrker FlaskBlog

flaskBlog allows arbitrary privilege escalation

EPSS 0.3%public exploit CVSS 9.3

aiven2 vulnerabilities on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2025-55282 · aiven aiven-db-migrate

aiven-db-migrate allows Privilege Escalation via unrestricted search_path during migration

EPSS 0.8%CVSS 9.1

CVE-2025-55283 · aiven aiven-db-migrate

aiven-db-migrate allows Privilege Escalation through use of psql during migration

EPSS 0.7%CVSS 9.1

Drupal1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-8995 · Drupal Authenticator Login

Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096

EPSS 0.6%CVSS 9.8

magepeopleteam1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-8898 · magepeopleteam E-cab Taxi Booking Manager for Woocommerce

Taxi Booking Manager for Woocommerce | E-cab <= 1.3.0 - Missing Authorization to Unauthenticated Privilege Escalation via Account Takeover

EPSS 0.5%CVSS 9.8

Mouy-leng1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-55306 · Mouy-leng GenX_FX

GenX_FX authentication bypass in JWT validation

EPSS 0.6%CVSS 9.8

MSoft1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2025-9060 · MSoft MFlash

MFlash Remote Code Execution (RCE) after authentication of a user with the "administrator" role

EPSS 0.6%CVSS 9.1

imithemes1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-6758 · imithemes Real Spaces - WordPress Properties Directory Theme

Real Spaces - WordPress Properties Directory Theme <= 3.6 - Unauthenticated Privilege Escalation to Administrator via 'imic_agent_register'

EPSS 0.4%CVSS 9.8

HCL Software1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-52618 · HCL Software BigFix SaaS Remediate

HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability

EPSS 0.4%CVSS 9.8

openfga1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-55213 · openfga openfga

OpenFGA Authorization Bypass (Check)

EPSS 0.3%CVSS 9.8

phoca.cz1 vulnerability on this pageMax CVSS 9.2Priority 35KEV 0

CVE-2025-54473 · phoca.cz phoca.cz - Phoca Commander for Joomla

Extension - phoca.cz - Authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla

EPSS 0.4%CVSS 9.2

Rockwell Automation1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2025-7693 · Rockwell Automation PLC - Micro850 L50E

Rockwell Automation Micro800 Vulnerability

EPSS 0.4%CVSS 9.3

IBM1 vulnerability on this pageMax CVSS 9.8Priority 32KEV 0

CVE-2025-27909 · IBM Concert Software

IBM Concert Software cross-origin resource sharing

EPSS 0.2%CVSS 9.8

7ritn1 vulnerability on this pageMax CVSS 9.4Priority 31KEV 0

CVE-2025-55299 · 7ritn VaulTLS

VaulTLS has a password-based login exploit in additional user accounts

EPSS 0.2%CVSS 9.4

Santesoft1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2025-54156 · Santesoft Sante PACS Server

Santesoft Sante PACS Server Cleartext Transmission of Sensitive Information

EPSS 0.2%CVSS 9.1

The archive.