Critical vulnerability archive — page 311

Sudo project1 vulnerability on this pageMax CVSS 9.3Priority 98KEV 1

CVE-2025-32463 · Sudo project Sudo

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

KEV · due 20 Oct EPSS 56%public exploit SSVC act CVSS 9.3

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2025-6897 · D-Link DI-7300G+

D-Link DI-7300G+ httpd_debug.asp os command injection

EPSS 2%public exploit CVSS 9.8

mitre2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2025-45931 · mitre

An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker to execute arbitrary code via system() function i…

EPSS 1%public exploit CVSS 9.8

CVE-2025-26074 · mitre

Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary OS commands through unrestricted access to Java classes.

EPSS 0.7%public exploit CVSS 9.8

Dromara1 vulnerability on this pageMax CVSS 9.1Priority 50KEV 0

CVE-2025-6925 · Dromara RuoYi-Vue-Plus

Dromara RuoYi-Vue-Plus Mail MailController.java path traversal

EPSS 1%public exploit CVSS 9.1

chatchat-space1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-6853 · chatchat-space Langchain-Chatchat

chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal

EPSS 0.6%public exploit CVSS 9.8

code-projects28 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-6843 · code-projects Simple Photo Gallery

code-projects Simple Photo Gallery upload-photo.php unrestricted upload

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-6819 · code-projects Inventory Management System

code-projects Inventory Management System removeBrand.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6820 · code-projects Inventory Management System

code-projects Inventory Management System createProduct.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6821 · code-projects Inventory Management System

code-projects Inventory Management System createOrder.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6822 · code-projects Inventory Management System

code-projects Inventory Management System removeProduct.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6823 · code-projects Inventory Management System

code-projects Inventory Management System editProduct.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6826 · code-projects Payroll Management System

code-projects Payroll Management System ajax.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6827 · code-projects Inventory Management System

code-projects Inventory Management System editOrder.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6828 · code-projects Inventory Management System

code-projects Inventory Management System orders.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6834 · code-projects Inventory Management System

code-projects Inventory Management System editPayment.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6835 · code-projects Library System

code-projects Library System student-issue-book.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6836 · code-projects Library System

code-projects Library System profile.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6840 · code-projects Product Inventory System

code-projects Product Inventory System Login index.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6844 · code-projects Simple Forum

code-projects Simple Forum signin.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6845 · code-projects Simple Forum

code-projects Simple Forum register1.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6889 · code-projects Movie Ticketing System

code-projects Movie Ticketing System logIn.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6891 · code-projects Inventory Management System

code-projects Inventory Management System createUser.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6901 · code-projects Inventory Management System

code-projects Inventory Management System removeUser.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6902 · code-projects Inventory Management System

code-projects Inventory Management System editUser.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6903 · code-projects Car Rental System

code-projects Car Rental System approve.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6904 · code-projects Car Rental System

code-projects Car Rental System add_cars.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6905 · code-projects Car Rental System

code-projects Car Rental System signup.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6906 · code-projects Car Rental System

code-projects Car Rental System login.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6907 · code-projects Car Rental System

code-projects Car Rental System book_car.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6917 · code-projects Online Hotel Booking

code-projects Online Hotel Booking registration.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6847 · code-projects Simple Forum

code-projects Simple Forum forum_edit.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-6837 · code-projects Library System

code-projects Library System profile.php unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-6900 · code-projects Library System

code-projects Library System add-book.php unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

dataease1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-53004 · dataease dataease

Dataease Redshift Data Source JDBC Connection Parameters Bypass Vulnerability

EPSS 0.6%public exploit CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-6871 · SourceCodester Simple Company Website

SourceCodester Simple Company Website Login.php sql injection

EPSS 0.6%public exploit CVSS 9.8

Campcodes1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6935 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System payment_add.php sql injection

EPSS 0.5%public exploit CVSS 9.8

PHPGurukul3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6863 · PHPGurukul Local Services Search Engine Management System

PHPGurukul Local Services Search Engine Management System edit-category-detail.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6885 · PHPGurukul Teachers Record Management System

PHPGurukul Teachers Record Management System edit-teacher-detail.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6888 · PHPGurukul Teachers Record Management System

PHPGurukul Teachers Record Management System changeimage.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-32897 · Apache Software Foundation Apache Seata (incubating)

Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server

EPSS 2%CVSS 9.8

blafoley1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-5304 · blafoley PT Project Notebooks – Take Meeting minutes, create budgets, track task management, and more

PT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via wpnb_pto_new_users_add Function

EPSS 0.7%CVSS 9.8

Debian1 vulnerability on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2025-53391 · Debian zulucrypt

The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has insecure PolicyKit allow_any/allow_inac…

EPSS 0.2%public exploit CVSS 9.3

Linux1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-38089 · Linux Linux

sunrpc: handle SVC_GARBAGE during svc auth processing as auth error

EPSS 0.6%CVSS 9.8

Samsung Open Source4 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-0634 · Samsung Open Source rLottie

Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2.

EPSS 0.5%CVSS 9.8

CVE-2025-53076 · Samsung Open Source rLottie

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2.

EPSS 0.4%CVSS 9.8

CVE-2025-53074 · Samsung Open Source rLottie

Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2.

EPSS 0.4%CVSS 9.1

CVE-2025-53075 · Samsung Open Source rLottie

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2.

EPSS 0.3%CVSS 9.8

Ubiquiti Inc1 vulnerability on this pageMax CVSS 9.9Priority 36KEV 0

CVE-2025-24290 · Ubiquiti Inc UISP Application

Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious acto…

EPSS 0.4%CVSS 9.9

Daily Expense Manager1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-40731 · Daily Expense Manager Daily Expense Manager

SQL injection vulnerability in Daily Expense Manager

EPSS 0.4%CVSS 9.8

The archive.