Critical vulnerability archive — page 313

Cisco2 vulnerabilities on this pageMax CVSS 10.0Priority 100KEV 1

CVE-2025-20281 · Cisco Cisco Identity Services Engine Software

Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

KEV · due 18 Aug EPSS 98%public exploit SSVC act CVSS 10.0

CVE-2025-20282 · Cisco Cisco Identity Services Engine Software

Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

EPSS 39%CVSS 10.0

NetScaler1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2025-6543 · NetScaler ADC

Memory overflow vulnerability leading to unintended control flow and Denial of Service

KEV · due 21 Jul EPSS 10%public exploit SSVC act CVSS 9.8

Quest1 vulnerability on this pageMax CVSS 10.0Priority 97KEV 1

CVE-2025-32975 · Quest KACE Systems Management Appliance (SMA)

Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

KEV · due 4 May EPSS 2%public exploit SSVC act CVSS 10.0

EnGenius1 vulnerability on this pageMax CVSS 10.0Priority 60KEV 0

CVE-2025-34035 · EnGenius EnShare IoT Gigabit Cloud Service

EnGenius EnShare IoT Gigabit Cloud Service Command Injection

EPSS 25%public exploit CVSS 10.0

langchain-ai1 vulnerability on this pageMax CVSS 10.0Priority 60KEV 0

CVE-2025-2828 · langchain-ai langchain-ai/langchain

SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain

EPSS 21%public exploit CVSS 10.0

Linksys1 vulnerability on this pageMax CVSS 10.0Priority 60KEV 0

CVE-2025-34037 · Linksys E4200

Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

EPSS 96%public exploit CVSS 10.0

Shenzhen TVT1 vulnerability on this pageMax CVSS 10.0Priority 60KEV 0

CVE-2025-34036 · Shenzhen TVT CCTV-DVR

Shenzhen TVT CCTV-DVR Command Injection

EPSS 31%public exploit CVSS 10.0

Brother Industries, Ltd1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-51978 · Brother Industries, Ltd DCP-J928N-W/B

Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.

EPSS 16%public exploit CVSS 9.8

Seeyon (Beijing Zhiyuan Internet Software Co., Ltd.)1 vulnerability on this pageMax CVSS 10.0Priority 59KEV 0

CVE-2025-34040 · Seeyon (Beijing Zhiyuan Internet Software Co., Ltd.) Zhiyuan OA Web Application System

Seeyon Zhiyuan OA System Path Traversal File Upload

EPSS 15%public exploit CVSS 10.0

Sangfor Technologies Co., Ltd.1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2025-34041 · Sangfor Technologies Co., Ltd. Endpoint Detection and Response Platform

Sangfor Endpoint Detection and Response OS Command Injection

EPSS 7%CVSS 10.0

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-6580 · SourceCodester Best Salon Management System

SourceCodester Best Salon Management System Login sql injection

EPSS 0.5%public exploit CVSS 9.8

Yonyou Co., Ltd.1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2025-34039 · Yonyou Co., Ltd. UFIDA NC

Yonyou NC BeanShell Command Injection

EPSS 0.6%public exploit CVSS 10.0

5VTechnologies1 vulnerability on this pageMax CVSS 9.3Priority 48KEV 0

CVE-2025-34034 · 5VTechnologies Blue Angel Software Suite

5VTechnologies Blue Angel Software Suite Hardcoded Credentials

EPSS 0.7%public exploit CVSS 9.3

Campcodes1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6567 · Campcodes Online Recruitment Management System

Campcodes Online Recruitment Management System view_application.php sql injection

EPSS 0.5%public exploit CVSS 9.8

code-projects4 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6578 · code-projects Simple Online Hotel Reservation System

code-projects Simple Online Hotel Reservation System delete_account.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6579 · code-projects Car Rental System

code-projects Car Rental System message_admin.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6611 · code-projects Inventory Management System

code-projects Inventory Management System createBrand.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6612 · code-projects Inventory Management System

code-projects Inventory Management System removeCategories.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Dromara1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6517 · Dromara MaxKey

Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery

EPSS 0.5%public exploit CVSS 9.8

Mozilla3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6424 · Mozilla Firefox

Use-after-free in FontFaceSet

EPSS 8%CVSS 9.8

CVE-2025-6427 · Mozilla Firefox

connect-src Content Security Policy restriction could be bypassed

EPSS 0.4%CVSS 9.1

CVE-2025-6433 · Mozilla Firefox

WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate

EPSS 0.3%CVSS 9.8

ConvoyPanel1 vulnerability on this pageMax CVSS 10.0Priority 46KEV 0

CVE-2025-52562 · ConvoyPanel panel

Convey Panel Directory Traversal in LocaleController leading to Remote Code Execution

EPSS 2%CVSS 10.0

ELECOM CO.,LTD.2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-43879 · ELECOM CO.,LTD. WRH-733GBK

WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabi…

EPSS 2%CVSS 9.8

CVE-2025-48890 · ELECOM CO.,LTD. WRH-733GBK

WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabi…

EPSS 2%CVSS 9.8

mitre3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2021-41691 · mitre

A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 via the "student_id" and "TRANSFER{SCHOOL]" p…

EPSS 2%CVSS 9.8

CVE-2025-32977 · mitre

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.3…

EPSS 0.4%public exploit CVSS 9.6

CVE-2024-37743 · mitre

An issue in mmzdev KnowledgeGPT V.0.0.5 allows a remote attacker to execute arbitrary code via the Document Display Component.

EPSS 0.7%CVSS 9.8

harborist2 vulnerabilities on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2025-6545 · harborist

pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supported by Node.js

EPSS 0.4%public exploit CVSS 9.1

CVE-2025-6547 · harborist

On Node.js < 3, pbkdf2 silently disregards Uint8Array input, returning static keys

EPSS 0.5%public exploit CVSS 9.1

Sapido2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-6559 · Sapido BR071n

Sapido Wireless Router - OS Command Injection

EPSS 2%CVSS 9.8

CVE-2025-6560 · Sapido BR071n

Sapido Wireless Router - Exposure of Sensitive Information

EPSS 0.6%CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2021-4457 · Unknown ZoomSounds

ZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload

EPSS 0.4%public exploit CVSS 9.1

gogs1 vulnerability on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2024-56731 · gogs gogs

Gogs deletion of internal files allows remote command execution

EPSS 1%CVSS 10.0

espressif1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-52471 · espressif esp-idf

ESP-NOW Integer Underflow Vulnerability Advisory

EPSS 0.9%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-50213 · Apache Software Foundation Apache Airflow Providers Snowflake

Apache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperator

EPSS 0.8%CVSS 9.8

hikariatama2 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2025-52572 · hikariatama Hikka

Hikka vulnerable to RCE through dangling web interface

EPSS 0.7%CVSS 10.0

CVE-2025-52571 · hikariatama Hikka

Hikka vulnerable to RCE through edits in a channel

EPSS 0.3%CVSS 9.7

JuliaRegistries1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-52480 · JuliaRegistries Registrator.jl

Registrator.jl Argument Injection Vulnerability

EPSS 0.7%CVSS 9.8

Bizerba SE & Co. KG2 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2025-6512 · Bizerba SE & Co. KG BRAIN2

Scripts within reports executable on BRAIN2 Server

EPSS 0.5%CVSS 10.0

CVE-2025-6513 · Bizerba SE & Co. KG BRAIN2

BRAIN2 Configuration file for database access not sufficiently secured

EPSS 0.2%CVSS 9.3

ControlID2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-49851 · ControlID iDSecure On-premises

Improper Authentication in ControlID iDSecure On-premises

EPSS 0.6%CVSS 9.8

CVE-2025-49853 · ControlID iDSecure On-premises

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in ControlID iDSecure On-premises

EPSS 0.5%CVSS 9.3

Microsens2 vulnerabilities on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2025-49153 · Microsens NMP Web+

Path Traversal in MICROSENS NMP Web+

EPSS 0.7%CVSS 9.3

CVE-2025-49151 · Microsens NMP Web+

Use of Hard-coded, Security-relevant Constants in MICROSENS NMP Web+

EPSS 0.6%CVSS 9.3

Kaleris1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2025-2566 · Kaleris Navis N4

Deserialization of Untrusted Data in Kaleris Navis N4

EPSS 0.6%CVSS 9.3

Advantech1 vulnerability on this pageMax CVSS 9.6Priority 37KEV 0

CVE-2025-48469 · Advantech Advantech Wireless Sensing and Equipment (WISE)

Unauthenticated Firmware Upload

EPSS 0.5%CVSS 9.6

Ataturk University1 vulnerability on this pageMax CVSS 10.0Priority 35KEV 0

CVE-2025-4378 · Ataturk University ATA-AOF Mobile Application

Hardcoded Credentials in Ataturk University's ATA-AOF Mobile Application

EPSS 0.3%CVSS 10.0

Art-in Bilişim Teknolojileri ve Yazılım Hizm. Tic. Ltd. Şti.1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-4383 · Art-in Bilişim Teknolojileri ve Yazılım Hizm. Tic. Ltd. Şti. Wi-Fi Cloud Hotspot

Authentication Bypass in Art-In Systems' Wi-Fi Cloud Hotspot

EPSS 0.4%CVSS 9.3

The archive.