CVE-2025-8356 · Xerox FreeFlow Core
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,086 matching vulnerabilities · Page 295 of 782
Xerox
Belkin
wangzhixuan
CVE-2025-8752 · wangzhixuan spring-shiro-training
wangzhixuan spring-shiro-training add command injection
Shenzhen Aitemi E Commerce Co. Ltd.
CVE-2025-34149 · Shenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WPA2 Key
CVE-2025-34150 · Shenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater
Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command Injection
CVE-2025-34148 · Shenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WISP SSID
CVE-2025-34152 · Shenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter
CVE-2025-34151 · Shenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater
Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection
Dinstar
CVE-2025-8773 · Dinstar Monitoring Platform 甘肃省危险品库监控平台
Dinstar Monitoring Platform 甘肃省危险品库监控平台 login_getPasswordErrorNum.action sql injection
mitre
CVE-2025-45146 · mitre
ModelCache for LLM through v0.2.0 was discovered to contain an deserialization vulnerability via the component /manager/data_manager.py.
CVE-2025-50692 · mitre
FoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html.
CVE-2025-52913 · mitre
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP2 (9.8.2.12) could allow an unauthentica…
CVE-2023-41525 · mitre
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.…
CVE-2023-41526 · mitre
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and passwor…
CVE-2023-41527 · mitre
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php.
CVE-2023-41528 · mitre
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone,…
CVE-2023-41530 · mitre
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php.
CVE-2025-45765 · mitre
ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption.
TRENDnet
bulletphysics
猫宁i
code-projects
CVE-2025-8811 · code-projects Simple Art Gallery
code-projects Simple Art Gallery registration.php sql injection
CVE-2025-8809 · code-projects Online Medicine Guide
code-projects Online Medicine Guide addelidetails.php sql injection
MigoXLab
Qiyuesuo
CVE-2025-8775 · Qiyuesuo Eelectronic Signature Platform
Qiyuesuo Eelectronic Signature Platform Scheduled Task upload execute unrestricted upload
NVIDIA
CVE-2025-23319 · NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out…
CVE-2025-23318 · NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out…
CVE-2025-23327 · NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through s…
Microsoft
CVE-2025-53767 · Microsoft Azure Open AI
Azure OpenAI Elevation of Privilege Vulnerability
CVE-2025-53792 · Microsoft Azure Portal
Azure Portal Elevation of Privilege Vulnerability
Apache Software Foundation
CVE-2025-48913 · Apache Software Foundation Apache CXF
Apache CXF: Untrusted JMS configuration can lead to RCE
CVE-2025-53606 · Apache Software Foundation Apache Seata (incubating)
Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server
Burk Technology
CVE-2025-5095 · Burk Technology ARC Solo
Burk Technology ARC Solo Missing Authentication for Critical Function
Meta Platforms, Inc
CVE-2025-30404 · Meta Platforms, Inc ExecuTorch
An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code ex…
CVE-2025-30405 · Meta Platforms, Inc ExecuTorch
An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area,…
CVE-2025-54949 · Meta Platforms, Inc ExecuTorch
A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable ef…
CVE-2025-54950 · Meta Platforms, Inc ExecuTorch
An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code e…
CVE-2025-54951 · Meta Platforms, Inc ExecuTorch
A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially res…
CVE-2025-54952 · Meta Platforms, Inc ExecuTorch
An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, pot…
IBM
CVE-2025-3320 · IBM Tivoli Monitoring
IBM Tivoli Monitoring code execution
CVE-2025-3354 · IBM Tivoli Monitoring
IBM Tivoli Monitoring code execution
Packet Power
Imagination Technologies
CVE-2025-6573 · Imagination Technologies Graphics DDK
GPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite
Tigo Energy
CVE-2025-7768 · Tigo Energy Cloud Connect Advanced
Use of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced
zhilink 智互联(深圳)科技有限公司
CVE-2025-8806 · zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台
zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 treeData sql injection
Broadcom
CVE-2025-8660 · Broadcom Symantec PGP Encryption