Critical vulnerability archive — page 306

eemitch1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2020-36847 · eemitch Simple File List

Simple File List < 4.2.3 - Remote Code Execution

EPSS 44%public exploit CVSS 9.8

AIT Themes1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2020-36849 · AIT Themes AIT CSV import/export

AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload

EPSS 8%public exploit CVSS 9.8

Crypttech1 vulnerability on this pageMax CVSS 9.3Priority 57KEV 0

CVE-2025-34102 · Crypttech CryptoLog

CryptoLog Unauthenticated RCE via SQL Injection and Command Injection

EPSS 9%public exploit CVSS 9.3

Real Time Logic1 vulnerability on this pageMax CVSS 9.3Priority 57KEV 0

CVE-2025-34095 · Real Time Logic Mako Server

Mako Server v2.5 and v2.6 OS Command Injection via examples/save.lsp

EPSS 6%public exploit CVSS 9.3

BuilderEngine1 vulnerability on this pageMax CVSS 9.3Priority 56KEV 0

CVE-2025-34100 · BuilderEngine CMS

BuilderEngine 3.5.0 RCE via Unauthenticated Arbitrary File Upload

EPSS 4%public exploit CVSS 9.3

EFS Software Inc.1 vulnerability on this pageMax CVSS 9.3Priority 54KEV 0

CVE-2025-34096 · EFS Software Inc. Easy File Sharing HTTP Server

Easy File Sharing HTTP Server 7.2 Buffer Overflow via POST to /sendemail.ghp

EPSS 2%public exploit CVSS 9.3

Shenzhen Liandian Communication Technology LTD1 vulnerability on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2025-7503 · Shenzhen Liandian Communication Technology LTD V380 IP Camera / AppFHE1_V1.0.6.0

An OEM IP camera manufactured by Shenzhen Liandian Communication Technology LTD exposes a Telnet service (port 23) with undocumented, def…

EPSS 0.7%public exploit CVSS 10.0

code-projects15 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-7467 · code-projects Modern Bag

code-projects Modern Bag product-detail.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7475 · code-projects Simple Car Rental System

code-projects Simple Car Rental System pay.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7476 · code-projects Simple Car Rental System

code-projects Simple Car Rental System approve.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7478 · code-projects Modern Bag

code-projects Modern Bag category-list.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7411 · code-projects LifeStyle Store

code-projects LifeStyle Store success.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7459 · code-projects Mobile Shop

code-projects Mobile Shop EditMobile.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7461 · code-projects Modern Bag

code-projects Modern Bag action.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7471 · code-projects Modern Bag

code-projects Modern Bag login-back.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7474 · code-projects Job Diary

code-projects Job Diary search.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7508 · code-projects Modern Bag

code-projects Modern Bag product-update.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7509 · code-projects Modern Bag

code-projects Modern Bag slide.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7510 · code-projects Modern Bag

code-projects Modern Bag productadd_back.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7512 · code-projects Modern Bag

code-projects Modern Bag contact-back.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7513 · code-projects Modern Bag

code-projects Modern Bag slideupdate.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7514 · code-projects Modern Bag

code-projects Modern Bag contact-list.php sql injection

EPSS 0.5%public exploit CVSS 9.8

1000projects1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-7466 · 1000projects ABC Courier Management

1000projects ABC Courier Management add_dealerrequest.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Campcodes7 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-7436 · Campcodes Online Recruitment Management System

Campcodes Online Recruitment Management System ajax.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7454 · Campcodes Online Movie Theater Seat Reservation System

Campcodes Online Movie Theater Seat Reservation System manage_theater.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7455 · Campcodes Online Movie Theater Seat Reservation System

Campcodes Online Movie Theater Seat Reservation System manage_reserve.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7456 · Campcodes Online Movie Theater Seat Reservation System

Campcodes Online Movie Theater Seat Reservation System reserve.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7457 · Campcodes Online Movie Theater Seat Reservation System

Campcodes Online Movie Theater Seat Reservation System manage_movie.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7469 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System product_add.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7470 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System product_add.php unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

iqonicdesign1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6058 · iqonicdesign WPBookit

WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload

EPSS 6%CVSS 9.8

PHPGurukul2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-7480 · PHPGurukul Vehicle Parking Management System

PHPGurukul Vehicle Parking Management System signup.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7483 · PHPGurukul Vehicle Parking Management System

PHPGurukul Vehicle Parking Management System forgot-password.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Schneider Electric1 vulnerability on this pageMax CVSS 9.5Priority 48KEV 0

CVE-2025-50121 · Schneider Electric EcoStruxure™ IT Data Center Expert

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could caus…

EPSS 22%CVSS 9.5

Ivanti2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2023-38036 · Ivanti Avalanche

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer ov…

EPSS 3%CVSS 9.8

CVE-2024-38648 · Ivanti DSM

A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data includin…

EPSS 0.6%CVSS 9.0

Serviio1 vulnerability on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2025-34101 · Serviio Media Server

Serviio Media Server Unauthenticated Command Injection via checkStreamUrl VIDEO Parameter

EPSS 4%CVSS 9.3

VICIdial Group1 vulnerability on this pageMax CVSS 9.3Priority 43KEV 0

CVE-2025-34099 · VICIdial Group VICIdial

VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password

EPSS 2%CVSS 9.3

gb-plugins1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-5392 · gb-plugins GB Forms DB

GB Forms DB <= 1.0.2 - Unauthenticated Remote Code Execution

EPSS 1.0%CVSS 9.8

Trend Micro, Inc.1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-53378 · Trend Micro, Inc. Trend Micro Worry-Free Business Security Services

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthent…

EPSS 0.8%CVSS 9.8

aa-team1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-7401 · aa-team Premium Age Verification / Restriction for WordPress

Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read and Write via remote_tunnel.php

EPSS 0.6%CVSS 9.8

Axis Communications AB2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-30026 · Axis Communications AB AXIS Camera Station Pro

The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.

EPSS 0.7%CVSS 9.8

CVE-2025-30023 · Axis Communications AB AXIS Camera Station Pro

The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code ex…

EPSS 0.6%CVSS 9.0

Honeywell1 vulnerability on this pageMax CVSS 9.4Priority 40KEV 0

CVE-2025-2523 · Honeywell C300 PCNT02

Lack of buffer clearing before reuse may result in incorrect system behavior.

EPSS 0.8%CVSS 9.4

ctfer-io2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-53632 · ctfer-io chall-manager

Chall-Manager's scenario decoding process does not check for zip slips

EPSS 0.8%CVSS 9.1

CVE-2025-53633 · ctfer-io chall-manager

Chall-Manager's scenario decoding process does not check for zip bombs

EPSS 0.5%CVSS 9.8

Juniper Networks1 vulnerability on this pageMax CVSS 9.6Priority 37KEV 0

CVE-2025-52950 · Juniper Networks Juniper Security Director

Juniper Security Director: Insufficient authorization for multiple endpoints in web interface

EPSS 0.5%CVSS 9.6

webnus/1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2021-4458 · webnus/ Modern Events Calendar Lite

Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection

EPSS 0.4%CVSS 9.8

Emerson1 vulnerability on this pageMax CVSS 9.4Priority 35KEV 0

CVE-2025-52579 · Emerson ValveLink SOLO

Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory

EPSS 0.4%CVSS 9.4

miraheze1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2025-53371 · miraheze DiscordNotifications

DiscordNotifications allows DOS, SSRF, and possible RCE through requests to user-controlled URLs

EPSS 0.4%CVSS 9.1

The archive.