Critical vulnerability archive — page 317

NetScaler1 vulnerability on this pageMax CVSS 9.3Priority 98KEV 1

CVE-2025-5777 · NetScaler ADC

NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

KEV · due 11 Jul ransomware use EPSS 100%public exploit SSVC act CVSS 9.3

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2025-6121 · D-Link DIR-632

D-Link DIR-632 HTTP POST Request get_pure_content stack-based overflow

EPSS 3%public exploit CVSS 9.8

conda3 vulnerabilities on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2025-32799 · conda conda-build

Conda-build Vulnerable to Path Traversal via Malicious Tar File

EPSS 1%public exploit CVSS 9.8

CVE-2025-32798 · conda conda-build

Conda-build Allows Arbitrary Code Execution via Malicious Recipe Selectors

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-32800 · conda conda-build

Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI

EPSS 0.6%CVSS 9.8

themanojdesai1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-6167 · themanojdesai python-a2a

themanojdesai python-a2a api.py create_workflow path traversal

EPSS 0.8%public exploit CVSS 9.8

SourceCodester2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-6161 · SourceCodester Simple Food Ordering System

SourceCodester Simple Food Ordering System editproduct.php unrestricted upload

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-6160 · SourceCodester Client Database Management System

SourceCodester Client Database Management System user_customer_create_order.php sql injection

EPSS 0.6%public exploit CVSS 9.8

Steel1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-6152 · Steel Browser

Steel Browser files.routes.ts handleFileUpload path traversal

EPSS 0.6%public exploit CVSS 9.8

Chanjet1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6132 · Chanjet CRM

Chanjet CRM departmentsetting.php sql injection

EPSS 0.5%public exploit CVSS 9.8

code-projects3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6123 · code-projects Restaurant Order System

code-projects Restaurant Order System payment.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6124 · code-projects Restaurant Order System

code-projects Restaurant Order System tablelow.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6159 · code-projects Hostel Management System

code-projects Hostel Management System allocate_room.php sql injection

EPSS 0.5%public exploit CVSS 9.8

glenwpcoder1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-3515 · glenwpcoder Drag and Drop Multiple File Upload for Contact Form 7

Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks

EPSS 6%CVSS 9.8

PHPGurukul4 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6153 · PHPGurukul Hostel Management System

PHPGurukul Hostel Management System students.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6154 · PHPGurukul Hostel Management System

PHPGurukul Hostel Management System login.inc.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6155 · PHPGurukul Hostel Management System

PHPGurukul Hostel Management System login-hm.inc.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6157 · PHPGurukul Nipah Virus Testing Management System

PHPGurukul Nipah Virus Testing Management System registered-user-testing.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Projectworlds4 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-6133 · Projectworlds Life Insurance Management System

Projectworlds Life Insurance Management System insertagent.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6134 · Projectworlds Life Insurance Management System

Projectworlds Life Insurance Management System insertClient.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6135 · Projectworlds Life Insurance Management System

Projectworlds Life Insurance Management System insertNominee.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-6136 · Projectworlds Life Insurance Management System

Projectworlds Life Insurance Management System insertPayment.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Das3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-6116 · Das Parking Management System 停车场管理系统

Das Parking Management System 停车场管理系统 API Search sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-6117 · Das Parking Management System 停车场管理系统

Das Parking Management System 停车场管理系统 API Search sql injection

EPSS 0.4%CVSS 9.8

CVE-2025-6118 · Das Parking Management System 停车场管理系统

Das Parking Management System 停车场管理系统 API search sql injection

EPSS 0.4%CVSS 9.8

Red Hat3 vulnerabilities on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2025-4404 · Red Hat Red Hat Enterprise Linux 10

Freeipa: idm: privilege escalation from host to domain admin in freeipa

EPSS 2%CVSS 9.1

CVE-2025-49796 · Red Hat Red Hat Enterprise Linux 10

Libxml: type confusion leads to denial of service (dos)

EPSS 2%CVSS 9.1

CVE-2025-49794 · Red Hat Red Hat Enterprise Linux 10

Libxml: heap use after free (uaf) leads to denial of service (dos)

EPSS 0.8%CVSS 9.1

BeyondTrust1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-5309 · BeyondTrust Remote support & Privileged Remote Access

Remote Support & Privileged Remote Access server side template injection

EPSS 0.9%CVSS 9.8

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-47868 · Apache Software Foundation Apache NuttX RTOS: tools/bdf-converter.

Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.

EPSS 0.7%CVSS 9.8

CVE-2025-47869 · Apache Software Foundation Apache NuttX RTOS

Apache NuttX RTOS: examples/xmlrpc: Fix calls buffers size.

EPSS 0.7%CVSS 9.8

cloudflare1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2025-6087 · cloudflare

SSRF vulnerability in opennextjs-cloudflare via /_next/image endpoint

EPSS 1.0%CVSS 9.1

Liferay1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-3594 · Liferay Portal

Path traversal vulnerability with the downloading and installation of Xuggler in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.…

EPSS 0.7%CVSS 9.8

CRM Perks1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-49330 · CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin

WordPress Integration for Contact Form 7 and Zoho CRM, Bigin plugin <= 1.3.0 - PHP Object Injection Vulnerability

EPSS 0.6%CVSS 9.8

NasaTheme1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2025-49071 · NasaTheme Flozen

WordPress Flozen < 1.5.1 - Arbitrary File Upload Vulnerability

EPSS 0.5%CVSS 10.0

ovatheme1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2025-32510 · ovatheme Ovatheme Events Manager

WordPress Ovatheme Events Manager plugin <= 1.8.4 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

RexTheme1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2025-47452 · RexTheme WP VR

WordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload Vulnerability

EPSS 0.5%CVSS 9.9

RomanCode1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2025-47559 · RomanCode MapSVG

WordPress MapSVG plugin < 8.7.4 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 9.9

themeton1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-31919 · themeton Spare

WordPress Spare <= 1.7 - PHP Object Injection Vulnerability

EPSS 0.5%CVSS 9.8

yuliaz1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-30618 · yuliaz Rapyd Payment Extension for WooCommerce

WordPress Rapyd Payment Extension for WooCommerce plugin <= 1.2.0 - PHP Object Injection Vulnerability

EPSS 0.5%CVSS 9.8

TECNO1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-6172 · TECNO com.afmobi.boomplayer

Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operation.

EPSS 0.5%CVSS 9.8

Fastw3b LLC1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2025-49447 · Fastw3b LLC FW Food Menu

WordPress FW Food Menu <= 6.0.0 - Arbitrary File Upload Vulnerability

EPSS 0.4%CVSS 10.0

merkulove1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2025-49444 · merkulove Reformer for Elementor

WordPress Reformer for Elementor plugin <= 1.0.5 - Arbitrary File Upload Vulnerability

EPSS 0.4%CVSS 10.0

mojoomla2 vulnerabilities on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-47573 · mojoomla School Management

WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.3

CVE-2025-24773 · mojoomla WPCRM - CRM for Contact form CF7 & WooCommerce

WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - SQL Injection Vulnerability

EPSS 0.4%CVSS 9.3

GRYPHON1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2025-40916 · GRYPHON Mojolicious::Plugin::CaptchaPNG

Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text

EPSS 0.4%CVSS 9.1

smartiolabs1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2025-39479 · smartiolabs Smart Notification

WordPress Smart Notification Plugin <= 10.3 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

wpjobportal1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-48274 · wpjobportal WP Job Portal

WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability

EPSS 0.3%CVSS 9.3

Adrian Ladó1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2025-49452 · Adrian Ladó PostaPanduri

WordPress PostaPanduri plugin <= 2.1.3 - SQL Injection Vulnerability

EPSS 0.3%CVSS 9.3

Google1 vulnerability on this pageMax CVSS 9.8Priority 32KEV 0

CVE-2025-6179 · Google ChromeOS

ChromeOS Extension Disablement and Developer Mode Bypass via ExtHang3r and ExtPrint3r Exploits

EPSS 0.2%CVSS 9.8

The archive.