Critical vulnerability archive — page 293

Fortinet1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-25256 · Fortinet FortiSIEM

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in For…

EPSS 65%public exploit CVSS 9.8

Microsoft3 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-50165 · Microsoft Windows 11 Version 24H2

Windows Graphics Component Remote Code Execution Vulnerability

EPSS 11%public exploit CVSS 9.8

CVE-2025-53766 · Microsoft Microsoft Office for Android

GDI+ Remote Code Execution Vulnerability

EPSS 8%CVSS 9.8

CVE-2025-50171 · Microsoft Windows 10 Version 21H2

Remote Desktop Spoofing Vulnerability

EPSS 1%CVSS 9.1

Xerox1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-8356 · Xerox FreeFlow Core

Path Traversal leading to RCE

EPSS 23%public exploit CVSS 9.8

Belkin1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-8730 · Belkin F9K1009

Belkin F9K1009/F9K1010 Web Interface hard-coded credentials

EPSS 4%public exploit CVSS 9.8

wangzhixuan1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-8752 · wangzhixuan spring-shiro-training

wangzhixuan spring-shiro-training add command injection

EPSS 4%public exploit CVSS 9.8

LabRedesCefetRJ3 vulnerabilities on this pageMax CVSS 10.0Priority 56KEV 0

CVE-2025-55169 · LabRedesCefetRJ WeGIA

WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'

EPSS 2%public exploit CVSS 10.0

CVE-2025-55167 · LabRedesCefetRJ WeGIA

WeGIA SQL Injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php`

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-55168 · LabRedesCefetRJ WeGIA

WeGIA SQL Injection via id_fichamedica at endpoint `GET /html/saude/aplicar_medicamento.php`

EPSS 0.5%public exploit CVSS 9.8

Stirling-Tools3 vulnerabilities on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2025-55161 · Stirling-Tools Stirling-PDF

Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf

EPSS 2%public exploit CVSS 9.8

CVE-2025-55150 · Stirling-Tools Stirling-PDF

Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf

EPSS 2%public exploit CVSS 9.8

CVE-2025-55151 · Stirling-Tools Stirling-PDF

Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf

EPSS 0.4%public exploit CVSS 9.8

SAP_SE2 vulnerabilities on this pageMax CVSS 9.9Priority 55KEV 0

CVE-2025-42957 · SAP_SE SAP S/4HANA (Private Cloud or On-Premise)

Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise)

EPSS 2%public exploit CVSS 9.9

CVE-2025-42950 · SAP_SE SAP Landscape Transformation (Analysis Platform)

Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)

EPSS 0.7%CVSS 9.9

Dinstar1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-8773 · Dinstar Monitoring Platform 甘肃省危险品库监控平台

Dinstar Monitoring Platform 甘肃省危险品库监控平台 login_getPasswordErrorNum.action sql injection

EPSS 0.8%public exploit CVSS 9.8

mitre5 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-45146 · mitre

ModelCache for LLM through v0.2.0 was discovered to contain an deserialization vulnerability via the component /manager/data_manager.py.

EPSS 0.9%public exploit CVSS 9.8

CVE-2025-50594 · mitre

An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Manageme…

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-50251 · mitre

Server side request forgery (SSRF) vulnerability in makeplane plane 0.23.1 via the password recovery.

EPSS 0.3%public exploit CVSS 9.1

CVE-2025-43986 · mitre

An issue was discovered on KuWFi GC111 GC111-GL-LM321_V3.0_20191211 devices.

EPSS 0.5%CVSS 9.8

CVE-2025-43982 · mitre

Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices enable the SSH service by default.

EPSS 0.4%CVSS 9.8

TRENDnet1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-8731 · TRENDnet TI-G160i

TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials

EPSS 0.8%public exploit CVSS 9.8

bulletphysics1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-8854 · bulletphysics bullet3

bullet3 VHACD utility: stack-based buffer overflow in OFF parser (LoadOFF)

EPSS 0.6%public exploit CVSS 9.8

CherryHQ1 vulnerability on this pageMax CVSS 9.6Priority 50KEV 0

CVE-2025-54063 · CherryHQ cherry-studio

Cherry Studio One-click Remote Code Execution Vulnerability through Custom URL Handling

EPSS 0.8%public exploit CVSS 9.6

kanboard1 vulnerability on this pageMax CVSS 9.1Priority 50KEV 0

CVE-2025-55010 · kanboard kanboard

Kanboard Authenticated Admin Remote Code Execution via Unsafe Deserialization of Events

EPSS 1%public exploit CVSS 9.1

猫宁i1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-8815 · 猫宁i Morning

猫宁i Morning Shiro Configuration index path traversal

EPSS 0.7%public exploit CVSS 9.8

code-projects2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-8811 · code-projects Simple Art Gallery

code-projects Simple Art Gallery registration.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8809 · code-projects Online Medicine Guide

code-projects Online Medicine Guide addelidetails.php sql injection

EPSS 0.5%public exploit CVSS 9.8

MasaCMS1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-32640 · MasaCMS MasaCMS

MasaCMS SQL Injection vulnerability

EPSS 78%CVSS 9.8

MigoXLab1 vulnerability on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2025-8729 · MigoXLab LMeterX

MigoXLab LMeterX upload_service.py process_cert_files path traversal

EPSS 0.9%public exploit CVSS 9.1

WinterChenS1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-8838 · WinterChenS my-site

WinterChenS my-site Backend admin preHandle improper authentication

EPSS 0.6%public exploit CVSS 9.8

LitmusChaos1 vulnerability on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2025-8795 · LitmusChaos Litmus

LitmusChaos Litmus login access control

EPSS 0.5%public exploit CVSS 9.9

Qiyuesuo1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-8775 · Qiyuesuo Eelectronic Signature Platform

Qiyuesuo Eelectronic Signature Platform Scheduled Task upload execute unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2025-48913 · Apache Software Foundation Apache CXF

Apache CXF: Untrusted JMS configuration can lead to RCE

EPSS 1%CVSS 9.8

CVE-2025-53606 · Apache Software Foundation Apache Seata (incubating)

Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server

EPSS 0.8%CVSS 9.8

Burk Technology1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-5095 · Burk Technology ARC Solo

Burk Technology ARC Solo Missing Authentication for Critical Function

EPSS 1.0%CVSS 9.8

2100 Technology1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-8853 · 2100 Technology Official Document Management System

2100 Technology｜Official Document Management System - Authentication Bypass

EPSS 0.8%CVSS 9.8

ABB2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-53187 · ABB ASPECT

Unauthenticated RCE

EPSS 0.7%CVSS 9.8

CVE-2025-7679 · ABB Aspect

Session ID Basic Auth Bypass

EPSS 0.5%CVSS 9.2

Packet Power1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-8284 · Packet Power EMX

Packet Power EMX and EG Missing Authentication for Critical Function

EPSS 0.6%CVSS 9.8

Siemens1 vulnerability on this pageMax CVSS 9.4Priority 39KEV 0

CVE-2025-40746 · Siemens SIMATIC RTLS Locating Manager

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2).

EPSS 0.7%CVSS 9.4

Zoom Communications Inc1 vulnerability on this pageMax CVSS 9.6Priority 39KEV 0

CVE-2025-49457 · Zoom Communications Inc Zoom Clients for Windows

Zoom Clients for Windows - Untrusted Search Path

EPSS 0.7%CVSS 9.6

bplugins1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-8059 · bplugins bBlocks – Essential Gutenberg Blocks & Patterns Collection

B Blocks <= 2.0.6 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr_registration Function

EPSS 0.5%CVSS 9.8

Imagination Technologies1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-6573 · Imagination Technologies Graphics DDK

GPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite

EPSS 0.5%CVSS 9.8

checkpoint1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-3831 · checkpoint Check Point Harmony SASE

Exposed SFTP server

EPSS 0.4%CVSS 9.8

zhilink 智互联(深圳)科技有限公司1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-8806 · zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台

zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 treeData sql injection

EPSS 0.4%CVSS 9.8

Broadcom1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-8660 · Broadcom Symantec PGP Encryption

Privilege Escalation in Symantec PGP Encryption 11.0.1

EPSS 0.3%CVSS 9.8

EG4 Electronics1 vulnerability on this pageMax CVSS 9.2Priority 35KEV 0

CVE-2025-46414 · EG4 Electronics EG4 12kPV

EG4 Electronics EG4 Inverters Improper Restriction of Excessive Authentication Attempts

EPSS 0.4%CVSS 9.2

openbao1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2025-54997 · openbao openbao

OpenBao: Privileged Operator May Execute Code on the Underlying Host

EPSS 0.5%CVSS 9.1

intel1 vulnerability on this pageMax CVSS 9.3Priority 29KEV 0

CVE-2025-24325 · intel

Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authen…

EPSS 0.2%CVSS 9.3

The archive.