by Kastro CVE-2025-55346 · JFROG
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,014 matching vulnerabilities · Page 292 of 781
JFROG
CherryHQ
D-Link
mitre
CVE-2025-52385 · mitre
An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the child_process…
CVE-2025-43984 · mitre
An issue was discovered on KuWFi GC111 devices (Hardware Version: CPE-LM321_V3.2, Software Version: GC111-GL-LM321_V3.0_20191211).
CVE-2025-50518 · mitre
A use-after-free vulnerability exists in the coap_delete_pdu_lkd function within coap_pdu.c of the libcoap library.
CVE-2025-27845 · mitre
In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid authentication request results in exposing a JWT sec…
CVE-2025-51451 · mitre
In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
CVE-2025-51452 · mitre
In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
CVE-2025-43983 · mitre
KuWFi CPF908-CP5 WEB5.0_LCD_20210125 devices have multiple unauthenticated access control vulnerabilities within goform/goform_set_cmd_pr…
Hyland Software
Unknown
CVE-2025-6715 · Unknown LatePoint
Latepoint < 5.1.94 - Unauthenticated LFI
CVE-2025-8047 · Unknown disable-right-click-powered-by-pixterme
Multiple Plugins from itayamar - Supply Chain Compromise
1000 Projects
CVE-2025-8932 · 1000 Projects Sales Management System
1000 Projects Sales Management System sales.php sql injection
CVE-2025-8935 · 1000 Projects Sales Management System
1000 Projects Sales Management System custcmp.php sql injection
CVE-2025-8936 · 1000 Projects Sales Management System
1000 Projects Sales Management System dordupdate.php sql injection
PHPGurukul
CVE-2025-8955 · PHPGurukul Hospital Management System
PHPGurukul Hospital Management System edit-doctor.php sql injection
CVE-2025-8951 · PHPGurukul Teachers Record Management System
PHPGurukul Teachers Record Management System search.php sql injection
CVE-2025-8954 · PHPGurukul Hospital Management System
PHPGurukul Hospital Management System doctor-specilization.php sql injection
Spreecommerce
CVE-2011-10019 · Spreecommerce Spreecommerce
Spreecommerce < 0.60.2 Search Parameter RCE
code-projects
CVE-2025-8921 · code-projects Job Diary
code-projects Job Diary user-apply.php sql injection
CVE-2025-8922 · code-projects Job Diary
code-projects Job Diary admin-inbox.php sql injection
CVE-2025-8923 · code-projects Job Diary
code-projects Job Diary edit-details.php sql injection
projectworlds
CVE-2025-8946 · projectworlds Online Notes Sharing Platform
projectworlds Online Notes Sharing Platform login.php sql injection
CVE-2025-8947 · projectworlds Visitor Management System
projectworlds Visitor Management System query_data.php sql injection
CVE-2025-8948 · projectworlds Visitor Management System
projectworlds Visitor Management System front.php sql injection
SourceCodester
CVE-2025-8926 · SourceCodester COVID 19 Testing Management System
SourceCodester COVID 19 Testing Management System login.php sql injection
CVE-2025-8953 · SourceCodester COVID 19 Testing Management System
SourceCodester COVID 19 Testing Management System check_availability.php sql injection
Synergetic Data Systems Inc.
CVE-2025-34154 · Synergetic Data Systems Inc. UnForm Server Manager
UnForm Server Manager < 10.1.12 Unauthenticated Arbitrary File Read
Campcodes
CVE-2025-8950 · Campcodes Online Recruitment Management System
Campcodes Online Recruitment Management System index.php sql injection
CVE-2025-8952 · Campcodes Online Flight Booking Management System
Campcodes Online Flight Booking Management System Login ajax.php sql injection
CVE-2025-8924 · Campcodes Online Water Billing System
Campcodes Online Water Billing System viewbill.php sql injection
CVE-2025-8957 · Campcodes Online Flight Booking Management System
Campcodes Online Flight Booking Management System flights.php sql injection
itsourcecode
CVE-2025-8925 · itsourcecode Sports Management System
itsourcecode Sports Management System match.php sql injection
Shanghai Lingdang Information Technology
CVE-2025-8908 · Shanghai Lingdang Information Technology Lingdang CRM
Shanghai Lingdang Information Technology Lingdang CRM event.php sql injection
crmperks
CVE-2025-7384 · crmperks Database for Contact Form 7, WPforms, Elementor forms
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion
NVIDIA
CVE-2025-23304 · NVIDIA NVIDIA NeMo Framework
NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injecti…
CVE-2025-23303 · NVIDIA NVIDIA NeMo Framework
NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote c…
INSTAR
beeteam368
CVE-2025-25174 · beeteam368 BeeTeam368 Extensions
WordPress BeeTeam368 Extensions Plugin <= 1.9.4 - Local File Inclusion Vulnerability
WellChoose
CVE-2025-8913 · WellChoose Organization Portal System
WellChoose｜Organization Portal System - Local File Inclusion
Dylan Kuhn
Made I.T.
ThimPress
WPFactory
CVE-2025-49887 · WPFactory Product XML Feed Manager for WooCommerce
WordPress Product XML Feed Manager for WooCommerce Plugin <= 2.9.3 - Remote Code Execution (RCE) Vulnerability
Amazon
CleverReach®
CVE-2025-49059 · CleverReach® CleverReach® WP
WordPress CleverReach® WP Plugin <= 1.5.20 - SQL Injection Vulnerability
highwarden
CVE-2025-52720 · highwarden Super Store Finder