The archive.

mitre11 vulnerabilities on this pageMax CVSS 9.9Priority 55KEV 0

CVE-2025-45890 · mitre

Directory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to execute arbitrary code via the filePath parameter

EPSS 2%public exploit CVSS 9.8

CVE-2025-46157 · mitre

An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave req…

EPSS 0.9%public exploit CVSS 9.9

CVE-2025-26198 · mitre

CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component.

CVE-2025-32877 · mitre

An issue was discovered on COROS PACE 3 devices through 3.0808.0.

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-26199 · mitre

CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability.

CVE-2025-45784 · mitre

D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVIS_USER_PASSWORD, which may expose sensitive…

CVE-2025-46179 · mitre

A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0.

CVE-2025-32878 · mitre

An issue was discovered on COROS PACE 3 devices through 3.0808.0.

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-32880 · mitre

An issue was discovered on COROS PACE 3 devices through 3.0808.0.

CVE-2025-48706 · mitre

An issue was discovered in COROS PACE 3 through 3.0808.0.

EPSS 0.6%public exploit CVSS 9.1

CVE-2025-44635 · mitre

There are multiple unauthorized remote command execution vulnerabilities in the H3C ER2200G2, ERG2-450W, ERG2-1200W, ERG2-1350W, NR1200W…

EPSS 1%CVSS 9.8

TransformerOptimus1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-6280 · TransformerOptimus SuperAGI

TransformerOptimus SuperAGI EmailToolKit read_email.py download_attachment path traversal

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-6278 · VulDB

Upsonic server.py os.path.join path traversal

EPSS 0.7%public exploit CVSS 9.8

xlang-ai1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-6282 · xlang-ai OpenAgents

xlang-ai OpenAgents file.py create_upload_file path traversal

Trend Micro, Inc.8 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-49212 · Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code…

EPSS 13%CVSS 9.8

CVE-2025-49213 · Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code…

EPSS 13%CVSS 9.8

CVE-2025-47867 · Trend Micro, Inc. Trend Micro Apex Central

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include a…

CVE-2025-49220 · Trend Micro, Inc. Trend Micro Apex Central

An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code e…

CVE-2025-47865 · Trend Micro, Inc. Trend Micro Apex Central

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote c…

CVE-2025-49219 · Trend Micro, Inc. Trend Micro Apex Central

An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code…

EPSS 1%CVSS 9.8

CVE-2025-49217 · Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code…

EPSS 1%CVSS 9.8

CVE-2025-49216 · Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server

An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods…

EPSS 0.5%CVSS 9.8

Veeam1 vulnerability on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2025-23121 · Veeam Backup and Recovery

A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user

EPSS 25%CVSS 9.9

Brilliance2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6276 · Brilliance Golden Link Secondary System

Brilliance Golden Link Secondary System rentTakeInfoPage.htm sql injection

CVE-2025-6277 · Brilliance Golden Link Secondary System

Brilliance Golden Link Secondary System custTakeInfoPage.htm sql injection

code-projects7 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6293 · code-projects Hostel Management System

code-projects Hostel Management System contact_manager.php sql injection

CVE-2025-6294 · code-projects Hostel Management System

code-projects Hostel Management System contact.php sql injection

CVE-2025-6295 · code-projects Hostel Management System

code-projects Hostel Management System allocated_rooms.php sql injection

CVE-2025-6296 · code-projects Hostel Management System

code-projects Hostel Management System empty_rooms.php sql injection

CVE-2025-6303 · code-projects Online Shoe Store

code-projects Online Shoe Store contactus1.php sql injection

CVE-2025-6304 · code-projects Online Shoe Store

code-projects Online Shoe Store cart.php sql injection

CVE-2025-6305 · code-projects Online Shoe Store

code-projects Online Shoe Store admin_feature.php sql injection

gravitational1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-49825 · gravitational teleport

Teleport allows remote authentication bypass

EPSS 8%CVSS 9.8

PHPGurukul1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6300 · PHPGurukul Employee Record Management System

PHPGurukul Employee Record Management System editempeducation.php sql injection

Teledyne FLIR1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6266 · Teledyne FLIR AX8

Teledyne FLIR AX8 upload.php unrestricted upload

amans2k1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-1562 · amans2k FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce

Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation

EPSS 3%CVSS 9.8

cryptpad1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2025-49591 · cryptpad cryptpad

CryptPad 2FA Bypass Vulnerability

EPSS 0.5%public exploit CVSS 9.1

Cisco1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-20260 · Cisco ClamAV

ClamAV PDF Scanning Buffer Overflow Vulnerability