The archive.

CVE-2025-43931 · mitre

flask-boilerplate through a170e7c allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a…

CVE-2025-43932 · mitre

JobCenter through 7e7b0b2 allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset d…

CVE-2025-47202 · mitre

In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1…

EPSS 0.4%CVSS 9.1

Campcodes3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-7120 · Campcodes Complaint Management System

Campcodes Complaint Management System check_availability.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7122 · Campcodes Complaint Management System

Campcodes Complaint Management System index.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7119 · Campcodes Complaint Management System

Campcodes Complaint Management System index.php sql injection

EPSS 0.5%public exploit CVSS 9.8

jokob-sk1 vulnerability on this pageMax CVSS 9.4Priority 48KEV 0

CVE-2025-48952 · jokob-sk NetAlertX

NetAlertX has Password Bypass Vulnerability due to Loose Comparison in PHP

EPSS 0.6%public exploit CVSS 9.4

VulDB3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-7101 · VulDB

BoyunCMS Configuration File install_ok.php code injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7102 · VulDB

BoyunCMS Server.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-7100 · VulDB

BoyunCMS Index.php unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

IGEL Technology GmbH1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2025-34082 · IGEL Technology GmbH OS

IGEL OS Secure Terminal and Secure Shadow Remote Code Execution

EPSS 7%CVSS 9.3

lunary-ai1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2025-4779 · lunary-ai lunary-ai/lunary

Stored Cross-site Scripting (XSS) in lunary-ai/lunary

EPSS 0.5%public exploit CVSS 9.1

Pi-hole LLC1 vulnerability on this pageMax CVSS 9.0Priority 46KEV 0

CVE-2025-34087 · Pi-hole LLC Web

Pi-Hole AdminLTE Whitelist (now 'Web Allowlist') Remote Command Execution

EPSS 7%CVSS 9.0

Henan Xiaopi Security Technology Co., Ltd.1 vulnerability on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2025-34061 · Henan Xiaopi Security Technology Co., Ltd. PHPStudy

PHPStudy 2016-2018 Backdoor Remote Code Execution Vulnerability

EPSS 2%CVSS 9.3

Nimesa1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-48501 · Nimesa Nimesa Backup and Recovery

An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4.

EPSS 1%CVSS 9.8

aonetheme1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-23970 · aonetheme Service Finder Booking

WordPress Service Finder Booking plugin <= 6.1 - Privilege Escalation Vulnerability

EPSS 0.8%CVSS 9.8

Broadcom1 vulnerability on this pageMax CVSS 9.5Priority 39KEV 0

CVE-2025-5333 · Broadcom Symantec IT Management Suite

Unauthenticated Remote Code Execution in IT Management Suite

EPSS 0.7%CVSS 9.5

Endress+Hauser3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-1710 · Endress+Hauser Endress+Hauser MEAC300-FNADE4

CVE-2025-1710

EPSS 0.6%CVSS 9.8

CVE-2025-27449 · Endress+Hauser Endress+Hauser MEAC300-FNADE4

CVE-2025-27449

EPSS 0.6%CVSS 9.8

CVE-2025-27456 · Endress+Hauser Endress+Hauser MEAC300-FNADE4

CVE-2025-27456

EPSS 0.6%CVSS 9.8

Frauscher1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2025-3626 · Frauscher FDS102

OS Command Injection via Config Upload in WebUI

EPSS 0.9%CVSS 9.1

Wikimedia Foundation1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-53484 · Wikimedia Foundation Mediawiki - SecurePoll extension

SecurePoll: Multiple locations vulnerable to Cross-Site Scripting (XSS) via unescaped input

EPSS 0.5%CVSS 9.8

Scott Paterson1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-49302 · Scott Paterson Easy Stripe

WordPress Easy Stripe plugin <= 1.1 - Remote Code Execution (RCE) Vulnerability

BestWpDeveloper1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-49417 · BestWpDeveloper WooCommerce Product Multi-Action

WordPress WooCommerce Product Multi-Action plugin <= 1.3 - Deserialization of untrusted data Vulnerability

Fastw3b LLC1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2025-49414 · Fastw3b LLC FW Gallery

WordPress FW Gallery plugin <= 8.0.0 - Arbitrary File Upload Vulnerability

Linux3 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-38146 · Linux Linux

net: openvswitch: Fix the dead loop of MPLS parse

EPSS 0.5%CVSS 9.4

CVE-2025-38211 · Linux Linux

RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction

CVE-2025-38209 · Linux Linux

nvme-tcp: remove tag set when second admin queue config fails

LiquidThemes1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2025-30933 · LiquidThemes LogisticsHub

WordPress LogisticsHub theme <= 1.1.6 - Arbitrary File Upload Vulnerability

NAVER1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-53599 · NAVER NAVER Whale browser

Whale browser for iOS before 3.9.1.4206 allow an attacker to execute malicious scripts in the browser via a crafted javascript scheme.

WAGO1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2025-41672 · WAGO Wago Device Sphere

WAGO: Vulnerability in WAGO Device Sphere

AresIT1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-47479 · AresIT WP Compress

WordPress WP Compress plugin <= 6.30.30 - Broken Authentication Vulnerability

InspiryThemes1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-49867 · InspiryThemes RealHomes

WordPress RealHomes theme <= 4.4.0 - Privilege Escalation vulnerability

WebFactory1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2025-23968 · WebFactory AiBud WP

WordPress AiBud WP plugin <= 1.9 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.1

ClickandPledge1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-28983 · ClickandPledge Click & Pledge Connect

WordPress Click & Pledge Connect plugin <= 25.04010101-WP6.8 - Privilege Escalation via SQL Injection vulnerability

bSecure – Your Universal Checkout1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-52830 · bSecure – Your Universal Checkout bSecure – Your Universal Checkout

WordPress bSecure – Your Universal Checkout plugin <= 1.7.9 - SQL Injection Vulnerability

CreedAlly1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2025-28951 · CreedAlly Bulk Featured Image

WordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 9.1

designthemes1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2025-52833 · designthemes LMS

WordPress LMS theme <= 9.2 - SQL Injection Vulnerability

thanhtungtnt1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2025-52831 · thanhtungtnt Video List Manager

WordPress Video List Manager plugin <= 1.7 - SQL Injection Vulnerability

wpo-HR1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2025-52832 · wpo-HR NGG Smart Image Search

WordPress NGG Smart Image Search plugin <= 3.4.1 - SQL Injection Vulnerability