Critical vulnerability archive — page 302

Microsoft1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2025-53770 · Microsoft Microsoft SharePoint Enterprise Server 2016

Microsoft SharePoint Server Remote Code Execution Vulnerability

KEV · due 21 Jul ransomware use EPSS 100%public exploit SSVC act CVSS 9.8

mitre10 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-36846 · mitre

An issue was discovered in Eveo URVE Web Manager 27.02.2025.

EPSS 5%public exploit CVSS 9.8

CVE-2025-46121 · mitre

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the functions `stamgr_cfg_adpt_a…

EPSS 1%public exploit CVSS 9.8

CVE-2025-46120 · mitre

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10…

EPSS 1%public exploit CVSS 9.8

CVE-2025-46122 · mitre

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the authenticated diagnostics AP…

EPSS 1%public exploit CVSS 9.1

CVE-2020-26799 · mitre

A reflected cross-site scripting (XSS) vulnerability was discovered in index.php on Luxcal 4.5.2 which allows an unauthenticated attacker…

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-46117 · mitre

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10…

EPSS 0.9%public exploit CVSS 9.1

CVE-2025-52362 · mitre

Server-Side Request Forgery (SSRF) vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior.

EPSS 0.5%public exploit CVSS 9.1

CVE-2025-44654 · mitre

In Linksys E2500 3.0.04.002, the chroot_local_user option is enabled in the vsftpd configuration file.

EPSS 1%CVSS 9.8

CVE-2025-44658 · mitre

In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to only limit FPM to .…

EPSS 1%CVSS 9.8

CVE-2025-44655 · mitre

In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf.

EPSS 0.4%CVSS 9.8

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2025-7911 · D-Link DI-8100

D-Link DI-8100 jhttpd upnp_ctrl.asp sprintf stack-based overflow

EPSS 2%public exploit CVSS 9.8

TOTOLINK1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2025-7862 · TOTOLINK T6

TOTOLINK T6 Telnet Service cstecgi.cgi setTelnetCfg missing authentication

EPSS 1%public exploit CVSS 9.8

Manager-io1 vulnerability on this pageMax CVSS 10.0Priority 52KEV 0

CVE-2025-54122 · Manager-io Manager

Manager-io/Manager allows unauthenticated full read server-side request forgery in "proxy" endpoint

EPSS 0.9%public exploit CVSS 10.0

Metasoft 美特软件5 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-7876 · Metasoft 美特软件 MetaCRM

Metasoft 美特软件 MetaCRM download.jsp AnalyzeParam deserialization

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-7877 · Metasoft 美特软件 MetaCRM

Metasoft 美特软件 MetaCRM sendfile.jsp unrestricted upload

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7879 · Metasoft 美特软件 MetaCRM

Metasoft 美特软件 MetaCRM mobileupload.jsp unrestricted upload

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7874 · Metasoft 美特软件 MetaCRM

Metasoft 美特软件 MetaCRM env.jsp information disclosure

EPSS 0.9%public exploit CVSS 9.1

CVE-2025-7873 · Metasoft 美特软件 MetaCRM

Metasoft 美特软件 MetaCRM mcc_login.jsp sql injection

EPSS 0.5%public exploit CVSS 9.8

Campcodes2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-7838 · Campcodes Online Movie Theater Seat Reservation System

Campcodes Online Movie Theater Seat Reservation System manage_seat.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-7933 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System Setting settings_update.php sql injection

EPSS 0.7%public exploit CVSS 9.8

Chanjet1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-7915 · Chanjet CRM

Chanjet CRM Login Page mailinactive.php sql injection

EPSS 0.6%public exploit CVSS 9.8

code-projects11 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-7928 · code-projects Church Donation System

code-projects Church Donation System edit_user.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7929 · code-projects Church Donation System

code-projects Church Donation System edit_Members.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7930 · code-projects Church Donation System

code-projects Church Donation System add_members.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7829 · code-projects Church Donation System

code-projects Church Donation System login.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7830 · code-projects Church Donation System

code-projects Church Donation System reg.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7831 · code-projects Church Donation System

code-projects Church Donation System Tithes.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7832 · code-projects Church Donation System

code-projects Church Donation System offering.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7833 · code-projects Church Donation System

code-projects Church Donation System giving.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7859 · code-projects Church Donation System

code-projects Church Donation System update_password_admin.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7860 · code-projects Church Donation System

code-projects Church Donation System login_admin.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7861 · code-projects Church Donation System

code-projects Church Donation System search.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Jinher1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-7824 · Jinher OA

Jinher OA XmlHttp.aspx xml external entity reference

EPSS 0.6%public exploit CVSS 9.8

rommapp1 vulnerability on this pageMax CVSS 9.4Priority 49KEV 0

CVE-2025-54071 · rommapp romm

RomM's authenticated arbitrary file write vulnerability can lead to Remote Code Execution

EPSS 0.8%public exploit CVSS 9.4

Sophos2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-6704 · Sophos Sophos Firewall

An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2)…

EPSS 12%CVSS 9.8

CVE-2025-7624 · Sophos Sophos Firewall

An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead t…

EPSS 11%CVSS 9.8

TDuckCloud1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-7888 · TDuckCloud tduck-platform

TDuckCloud tduck-platform UserFormDataMapper.java UserFormDataMapper sql injection

EPSS 0.6%public exploit CVSS 9.8

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-7894 · VulDB

Onyx Chat Interface a3_generate_simple_sql.py generate_simple_sql sql injection

EPSS 0.6%public exploit CVSS 9.8

Canonical1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-6107 · Canonical MAAS

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region.

EPSS 0.4%public exploit CVSS 9.8

Mbed1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-47917 · Mbed mbedtls

Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation.

EPSS 2%CVSS 9.8

ASKEY1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-7921 · ASKEY RTF8207w

ASKEY｜modem - Stack-based Buffer Overflow

EPSS 1.0%CVSS 9.8

Simopro Technology2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-7916 · Simopro Technology WinMatrix3

Simopro Technology｜WinMatrix3 - Insecure Deserialization

EPSS 0.9%CVSS 9.8

CVE-2025-7918 · Simopro Technology WinMatrix3 Web package

Simopro Technology｜WinMatrix3 Web package - SQL Injection

EPSS 0.5%CVSS 9.8

Digiwin1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-7343 · Digiwin SFT

Digiwin｜SFT - SQL Injection

EPSS 0.7%CVSS 9.8

harry07032 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-7897 · harry0703 MoneyPrinterTurbo

harry0703 MoneyPrinterTurbo API Endpoint base.py verify_token missing authentication

EPSS 0.7%CVSS 9.8

CVE-2025-7895 · harry0703 MoneyPrinterTurbo

harry0703 MoneyPrinterTurbo File Extension video.py upload_bgm_file unrestricted upload

EPSS 0.5%CVSS 9.8

Drupal1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-7393 · Drupal Mail Login

Mail Login - Critical - Access bypass - SA-CONTRIB-2025-088

EPSS 0.5%CVSS 9.8

Nokia2 vulnerabilities on this pageMax CVSS 9.0Priority 34KEV 0

CVE-2025-24936 · Nokia WaveSuite NOC

Insufficient Validation of Input in the URL

EPSS 0.4%CVSS 9.0

CVE-2025-24937 · Nokia WaveSuite NOC

Access to local file system and its content

EPSS 0.3%CVSS 9.0

The archive.