Critical vulnerability archive — page 307

wftpserver1 vulnerability on this pageMax CVSS 10.0Priority 100KEV 1

CVE-2025-47812 · wftpserver Wing FTP Server

Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

KEV · due 4 Aug EPSS 94%public exploit SSVC act CVSS 10.0

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-7206 · D-Link DIR-825

D-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflow

EPSS 22%public exploit CVSS 9.8

Genetech Solutions1 vulnerability on this pageMax CVSS 10.0Priority 59KEV 0

CVE-2025-34077 · Genetech Solutions WordPress Pie Register Plugin

WordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCE

EPSS 17%public exploit CVSS 10.0

9fans1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-7208 · 9fans plan9port

9fans plan9port x509.c edump heap-based overflow

EPSS 0.7%public exploit CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.1Priority 50KEV 0

CVE-2025-23048 · Apache Software Foundation Apache HTTP Server

Apache HTTP Server: mod_ssl access control bypass with session resumption

EPSS 1%public exploit CVSS 9.1

Adobe3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-49533 · Adobe Adobe Experience Manager (MS)

Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)

EPSS 52%CVSS 9.8

CVE-2025-27203 · Adobe Adobe Connect

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

EPSS 1%CVSS 9.6

CVE-2025-49535 · Adobe ColdFusion

ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

EPSS 0.7%CVSS 9.3

code-projects14 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-7178 · code-projects Food Distributor Site

code-projects Food Distributor Site login.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7179 · code-projects Library System

code-projects Library System add-teacher.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7180 · code-projects Staff Audit System

code-projects Staff Audit System login.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7181 · code-projects Staff Audit System

code-projects Staff Audit System test.php unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7184 · code-projects Library System

code-projects Library System books.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7185 · code-projects Library System

code-projects Library System approve.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7191 · code-projects Student Enrollment System

code-projects Student Enrollment System login.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7196 · code-projects Jonnys Liquor

code-projects Jonnys Liquor browse.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7197 · code-projects Jonnys Liquor

code-projects Jonnys Liquor delete-row.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7198 · code-projects Jonnys Liquor

code-projects Jonnys Liquor admin-area.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7199 · code-projects Library System

code-projects Library System notapprove.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7211 · code-projects LifeStyle Store

code-projects LifeStyle Store cart_add.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7409 · code-projects Mobile Shop

code-projects Mobile Shop LoginAsAdmin.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7410 · code-projects LifeStyle Store

code-projects LifeStyle Store cart_remove.php sql injection

EPSS 0.5%public exploit CVSS 9.8

JFROG1 vulnerability on this pageMax CVSS 9.6Priority 49KEV 0

CVE-2025-6514 · JFROG

OS command injection in mcp-remote when connecting to untrusted MCP servers

EPSS 77%CVSS 9.6

Microsoft1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-47981 · Microsoft Windows 10 Version 1507

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

EPSS 41%CVSS 9.8

Campcodes5 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-7183 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System customer_account.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7217 · Campcodes Payroll Management System

Campcodes Payroll Management System ajax.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7218 · Campcodes Payroll Management System

Campcodes Payroll Management System ajax.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7219 · Campcodes Payroll Management System

Campcodes Payroll Management System ajax.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7220 · Campcodes Payroll Management System

Campcodes Payroll Management System ajax.php sql injection

EPSS 0.5%public exploit CVSS 9.8

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-7193 · itsourcecode Agri-Trading Online Shopping System

itsourcecode Agri-Trading Online Shopping System suppliercontroller.php sql injection

EPSS 0.5%public exploit CVSS 9.8

krishna97721 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-7200 · krishna9772 Pharmacy Management System

krishna9772 Pharmacy Management System quantity_upd.php sql injection

EPSS 0.5%public exploit CVSS 9.8

webbertakken1 vulnerability on this pageMax CVSS 10.0Priority 46KEV 0

CVE-2025-53624 · webbertakken docusaurus-plugin-content-gists

docusaurus-plugin-content-gists Exposes GitHub Personal Access Token

EPSS 2%CVSS 10.0

QwikDev1 vulnerability on this pageMax CVSS 9.2Priority 44KEV 0

CVE-2025-53620 · QwikDev qwik

Crashing any Qwik Server

EPSS 0.4%public exploit CVSS 9.2

Hewlett Packard Enterprise (HPE)1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2025-37103 · Hewlett Packard Enterprise (HPE) HPE Networking Instant On

Hardcoded Credential Exposure Allows Unauthorized Access in Web Interface

EPSS 1%CVSS 9.8

Radiflow2 vulnerabilities on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2025-3499 · Radiflow iSAP Smart Collector

Unauthenticated execution of arbitrary commands in Radiflow iSAP Smart Collector

EPSS 1.0%CVSS 10.0

CVE-2025-3498 · Radiflow iSAP Smart Collector

Unauthenticated modification of Radiflow iSAP Smart Collector configuration

EPSS 0.3%CVSS 9.9

RSSNext1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2025-53546 · RSSNext Folo

Folo allows secrets exfiltration via `pull_request_target`

EPSS 0.3%public exploit CVSS 9.1

Schiocco2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-4828 · Schiocco Support Board

Support Board <= 3.8.0 - Unauthenticated Arbitrary File Deletion

EPSS 1.0%CVSS 9.8

CVE-2025-4855 · Schiocco Support Board

Support Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret Key

EPSS 0.4%CVSS 9.8

uxper1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-4606 · uxper Sala - Startup & SaaS WordPress Theme

Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover

EPSS 0.7%CVSS 9.8

Linux3 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-38325 · Linux Linux

ksmbd: add free_transport ops in ksmbd connection

EPSS 0.5%CVSS 9.8

CVE-2025-38264 · Linux Linux

nvme-tcp: sanitize request list handling

EPSS 0.4%CVSS 9.8

CVE-2025-38246 · Linux Linux

bnxt: properly flush XDP redirect lists

EPSS 0.3%CVSS 9.8

Quiter3 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-40715 · Quiter Quiter Gateway (Java WAR on Apache Tomcat)

SQL injection vulnerability in Quiter Gateway

EPSS 0.5%CVSS 9.8

CVE-2025-40716 · Quiter Quiter Gateway (Java WAR on Apache Tomcat)

SQL injection vulnerability in Quiter Gateway

EPSS 0.5%CVSS 9.8

CVE-2025-40717 · Quiter Quiter Gateway (Java WAR on Apache Tomcat)

SQL injection vulnerability in Quiter Gateway

EPSS 0.5%CVSS 9.8

IBM2 vulnerabilities on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2024-38327 · IBM Analytics Content Hub

IBM Analytics Content Hub information disclosure

EPSS 0.3%CVSS 9.8

CVE-2024-39752 · IBM Analytics Content Hub

IBM Analytics Content Hub file upload

EPSS 0.3%CVSS 9.8

Qualcomm, Inc.1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2025-21450 · Qualcomm, Inc. Snapdragon

Improper Authentication in GPS_GNSS

EPSS 0.3%CVSS 9.1

Zoom Communications Inc.1 vulnerability on this pageMax CVSS 9.1Priority 31KEV 0

CVE-2025-46788 · Zoom Communications Inc. Zoom Workplace for Linux

Zoom Workplace for Linux - Improper Certificate Validation

EPSS 0.3%CVSS 9.1

The archive.