CVE-2025-7404 · Calibre Web Calibre Web
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,086 matching vulnerabilities · Page 301 of 782
Calibre Web
Steppschuh
CVE-2022-4978 · Steppschuh Remote Control Collection Server
Steppschuh Remote Control Server 3.1.1.12 Unauthenticated RCE
WWBN
CVE-2025-48732 · WWBN AVideo
An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff.
CVE-2025-46410 · WWBN AVideo
A cross-site scripting (xss) vulnerability exists in the managerPlaylists PlaylistOwnerUsersId parameter functionality of WWBN AVideo 14.…
CVE-2025-50128 · WWBN AVideo
A cross-site scripting (xss) vulnerability exists in the videoNotFound 404ErrorMsg parameter functionality of WWBN AVideo 14.4 and dev ma…
CVE-2025-53084 · WWBN AVideo
A cross-site scripting (xss) vulnerability exists in the videosList page parameter functionality of WWBN AVideo 14.4 and dev master commi…
CVE-2025-41420 · WWBN AVideo
A cross-site scripting (xss) vulnerability exists in the userLogin cancelUri parameter functionality of WWBN AVideo 14.4 and dev master c…
CVE-2025-36548 · WWBN AVideo
A cross-site scripting (xss) vulnerability exists in the LoginWordPress loginForm cancelUri parameter functionality of WWBN AVideo 14.4 a…
code-projects
CVE-2025-7950 · code-projects Public Chat Room
code-projects Public Chat Room login.php sql injection
Samsung Electronics
CVE-2025-54445 · Samsung Electronics MagicINFO 9 Server
Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request…
CVE-2025-54453 · Samsung Electronics MagicINFO 9 Server
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server al…
CVE-2025-54449 · Samsung Electronics MagicINFO 9 Server
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue…
CVE-2025-54451 · Samsung Electronics MagicINFO 9 Server
Improper Control of Generation of Code ('Code Injection') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.T…
CVE-2025-54454 · Samsung Electronics MagicINFO 9 Server
Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects Mag…
CVE-2025-54455 · Samsung Electronics MagicINFO 9 Server
Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects Mag…
CVE-2025-54438 · Samsung Electronics MagicINFO 9 Server
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server al…
CVE-2025-54443 · Samsung Electronics MagicINFO 9 Server
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server al…
CVE-2025-54444 · Samsung Electronics MagicINFO 9 Server
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue…
CVE-2025-54446 · Samsung Electronics MagicINFO 9 Server
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server al…
CVE-2025-54448 · Samsung Electronics MagicINFO 9 Server
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue…
CVE-2025-54450 · Samsung Electronics MagicINFO 9 Server
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server al…
CVE-2025-54440 · Samsung Electronics MagicINFO 9 Server
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue…
CVE-2025-54442 · Samsung Electronics MagicINFO 9 Server
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue…
CVE-2025-54447 · Samsung Electronics MagicINFO 9 Server
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue…
CVE-2025-54452 · Samsung Electronics MagicINFO 9 Server
Improper Authentication vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO…
ETQ
CVE-2025-34143 · ETQ Reliance CG (legacy)
ETQ Reliance CG Authentication Bypass via Trailing Space RCE
haxtheweb
SonicWall
iqonicdesign
SMG Software
CVE-2025-5243 · SMG Software Information Portal
Arbitrary File Upload in SMG Software's Information Portal
motovnet
CVE-2025-7437 · motovnet Ebook Store
Ebook Store <= 5.8012 - Unauthenticated Arbitrary File Upload
tobias_conrad
CVE-2025-6441 · tobias_conrad WebinarIgnition – Live, Automated & Evergreen Webinars for WooCommerce
Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition <= 4.03.32 - Unauthenticated Login Token Generation to Authentication Bypass
VMware
CVE-2025-41240 · VMware bitnamicharts/appsmith
Mounted Kubernetes Secrets under a predictable path located within the web server document root
Bayraktar Solar Energies
CVE-2025-4822 · Bayraktar Solar Energies ScadaWatt Otopilot
SQLi in Bayraktar Solar Energies' ScadaWatt Otopilot
bsecuretech
CVE-2025-6187 · bsecuretech bSecure – Your Universal Checkout
bSecure 1.3.7 - 1.7.9 - Missing Authorization to Unauthenticated Privilege Escalation via order_info REST Endpoint
onlyoffice
Weidmueller
Mozilla
CVE-2025-8028 · Mozilla Firefox
Large branch table could lead to truncated instruction
CVE-2025-8031 · Mozilla Firefox
Incorrect URL stripping in CSP reports
CVE-2025-8044 · Mozilla Firefox
Memory safety bugs fixed in Firefox 141 and Thunderbird 141
CVE-2025-8043 · Mozilla Firefox
Incorrect URL truncation
CVE-2025-8038 · Mozilla Firefox
CSP frame-src was not correctly enforced for paths
CVE-2025-8037 · Mozilla Firefox
Nameless cookies shadow secure cookies
Network Thermostat
CVE-2025-6260 · Network Thermostat X-Series WiFi thermostats
Network Thermostat X-Series WiFi Thermostats Missing Authentication for Critical Function
Devolutions
Rolantis Information Technologies
CVE-2025-4285 · Rolantis Information Technologies Agentis
SQLi in Rolantis Information Technologies' Agentis
stackideas.com
CVE-2025-54294 · stackideas.com Komento component for Joomla
Extension - stackideas.com - SQLi vulnerability in Komento component 4.0.0-4.0.7 for Joomla
ASUSTOR
PCL-Community
CVE-2025-54120 · PCL-Community PCL2-CE