Critical vulnerability archive — page 318

mitre10 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-45988 · mitre

Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC…

EPSS 10%public exploit CVSS 9.8

CVE-2025-45985 · mitre

Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC…

EPSS 7%public exploit CVSS 9.8

CVE-2025-45984 · mitre

Blink routers BL-WR9000 V2.4.9, BL-AC1900 V1.0.2, BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 V1.0.5, BL-LTE300 V1.2.3, BL-F1200_AT1 V1.0.0, BL-X26_…

EPSS 2%public exploit CVSS 9.8

CVE-2025-45986 · mitre

Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC…

EPSS 2%public exploit CVSS 9.8

CVE-2025-45987 · mitre

Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC…

EPSS 2%public exploit CVSS 9.8

CVE-2025-28386 · mitre

A remote code execution (RCE) vulnerability in the Plugin Management component of OpenC3 COSMOS v6.0.0 allows attackers to execute arbitr…

EPSS 1%public exploit CVSS 9.8

CVE-2025-46060 · mitre

Buffer Overflow vulnerability in TOTOLINK N600R v4.3.0cu.7866_B2022506 allows a remote attacker to execute arbitrary code via the UPLOAD_…

EPSS 1%public exploit CVSS 9.8

CVE-2025-28388 · mitre

OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-28384 · mitre

An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.

EPSS 0.9%public exploit CVSS 9.1

CVE-2025-28389 · mitre

Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.

EPSS 0.6%public exploit CVSS 9.8

codesiddhant1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2025-6095 · codesiddhant Jasmin Ransomware

codesiddhant Jasmin Ransomware checklogin.php sql injection

EPSS 3%public exploit CVSS 9.8

geoserver2 vulnerabilities on this pageMax CVSS 9.9Priority 50KEV 0

CVE-2025-30220 · geoserver geoserver

GeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handling

EPSS 44%CVSS 9.9

CVE-2024-34711 · geoserver geoserver

GeoServer has improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF)

EPSS 0.3%CVSS 9.3

UTT2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-6097 · UTT 进取 750W

UTT 进取 750W Administrator Password setSysAdm formDefineManagement unverified password change

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-6098 · UTT 进取 750W

UTT 进取 750W API setSysAdm strcpy buffer overflow

EPSS 1%CVSS 9.8

code-projects3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-5977 · code-projects School Fees Payment System

code-projects School Fees Payment System datatable.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-5979 · code-projects School Fees Payment System

code-projects School Fees Payment System branch.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-5980 · code-projects Restaurant Order System

code-projects Restaurant Order System order.php sql injection

EPSS 0.6%public exploit CVSS 9.8

Wazuh1 vulnerability on this pageMax CVSS 9.5Priority 49KEV 0

CVE-2024-1243 · Wazuh Wazuh Agent

Remote code execution and local privilege escalation in Wazuh Windows agent via NetNTLMv2 hash theft

EPSS 0.7%public exploit CVSS 9.5

modelcontextprotocol1 vulnerability on this pageMax CVSS 9.4Priority 48KEV 0

CVE-2025-49596 · modelcontextprotocol inspector

MCP Inspector proxy server lacks authentication between the Inspector client and proxy

EPSS 40%CVSS 9.4

Microsoft1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2025-32711 · Microsoft Microsoft 365 Copilot

M365 Copilot Information Disclosure Vulnerability

EPSS 7%CVSS 9.3

MIK2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-40912 · MIK CryptX

CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-40914 · MIK CryptX

Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow

EPSS 0.6%CVSS 9.8

Telex1 vulnerability on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2025-29902 · Telex Remote Dispatch Console Server

Remote code execution that allows unauthorized users to execute arbitrary code on the server machine.

EPSS 1%CVSS 10.0

Ricoh Company, Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-46783 · Ricoh Company, Ltd. RICOH Streamline NX V3 PC Client

Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0.

EPSS 0.9%CVSS 9.8

VMware1 vulnerability on this pageMax CVSS 9.6Priority 42KEV 0

CVE-2024-38824 · VMware SALT

CVE-2024-38824 salt advisory

EPSS 1%CVSS 9.6

BlackBerry1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-2474 · BlackBerry QNX Software Development Platform (SDP)

Vulnerability in PCX Image Codec Impacts QNX Software Development Platform

EPSS 0.8%CVSS 9.8

Mozilla2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-49709 · Mozilla Firefox

Memory corruption in canvas surfaces

EPSS 0.7%CVSS 9.8

CVE-2025-49710 · Mozilla Firefox

Integer overflow in OrderedHashTable

EPSS 0.7%CVSS 9.8

weboccults1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-5288 · weboccults REST API | Custom API Generator For Cross Platform And Import Export In WP

REST API | Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - Missing Authorization to Unauthenticated Privilege Escalation via process_handler Function

EPSS 0.7%CVSS 9.8

Weidmueller1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-41663 · Weidmueller IE-SR-2TX-WL

Weidmueller: Security routers IE-SR-2TX are affected by Command Injection

EPSS 0.6%CVSS 9.8

wework4web1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2025-6065 · wework4web Image Resizer On The Fly

Image Resizer On The Fly <= 1.1 - Unauthenticated Arbitrary File Deletion

EPSS 1%CVSS 9.1

KIA1 vulnerability on this pageMax CVSS 9.4Priority 39KEV 0

CVE-2025-6029 · KIA Aftermarket Generic Smart Keyless Entry System

KIA-branded Aftermarket Generic Smart Keyless Entry System Replay Attack

EPSS 0.7%CVSS 9.4

SICK AG4 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-49182 · SICK AG SICK Media Server

Credential disclosure

EPSS 0.6%CVSS 9.8

CVE-2025-49195 · SICK AG SICK Media Server

No protection against brute-force attacks

EPSS 0.5%CVSS 9.8

CVE-2025-49199 · SICK AG SICK Field Analytics

Backup files can be modified and uploaded

EPSS 0.3%CVSS 9.8

CVE-2025-49196 · SICK AG SICK Field Analytics

Deprecated TLS version supported

EPSS 0.3%CVSS 9.1

xwiki1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-56158 · xwiki xwiki-platform

XWiki allows SQL injection in query endpoint of REST API with Oracle

EPSS 0.5%CVSS 9.8

AmentoTech1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-4973 · AmentoTech Workreap

Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account'

EPSS 0.5%CVSS 9.8

HAMASTAR Technology1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-6169 · HAMASTAR Technology WIMP

HAMASTAR Technology WIMP website co-construction management platform - SQL Injection

EPSS 0.5%CVSS 9.8

vantage61 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-43863 · vantage6 vantage6

vantage6 lacks brute-force protection on change password functionality

EPSS 0.5%CVSS 9.8

ETJ1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2022-4976 · ETJ Archive::Unzip::Burst

Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities

EPSS 0.4%CVSS 9.8

rsjoomla.com1 vulnerability on this pageMax CVSS 9.2Priority 37KEV 0

CVE-2025-30085 · rsjoomla.com RSform!Pro component for Joomla

Extension - rsjoomla.com - Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla

EPSS 0.6%CVSS 9.2

Siemens1 vulnerability on this pageMax CVSS 9.9Priority 37KEV 0

CVE-2025-40585 · Siemens Energy Services

A vulnerability has been identified in Energy Services (All versions with G5DFR).

EPSS 0.4%CVSS 9.9

ClickandPledge1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-49455 · ClickandPledge WordPress-WPJobBoard

WordPress WordPress-WPJobBoard <= 25.07010000-WP6.8.1-JB5.11.5 - SQL Injection Vulnerability

EPSS 0.4%CVSS 9.3

IBM1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-36041 · IBM MQ Operator

IBM MQ improper certificate validation

EPSS 0.4%CVSS 9.8

OSSEC1 vulnerability on this pageMax CVSS 9.5Priority 35KEV 0

CVE-2024-1244 · OSSEC OSSEC-HIDS Agent

Remote code execution and local privilege escalation due to UNC access and NetNTLMv2 hash theft

EPSS 0.4%CVSS 9.5

jevents.net / GWE Systems Ltd1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2025-49467 · jevents.net / GWE Systems Ltd JEvents component for Joomla

Joomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla

EPSS 0.3%CVSS 9.3

Niklas Portmann1 vulnerability on this pageMax CVSS 9.4Priority 32KEV 0

CVE-2025-36852 · Niklas Portmann Azure Based Remote Cache Plugin for Nx

Build Cache Poisoning via Untrusted Pull Requests

EPSS 0.3%CVSS 9.4

Autoeastern1 vulnerability on this pageMax CVSS 9.4Priority 31KEV 0

CVE-2025-6030 · Autoeastern Cyclone Matrix TRF

Autoeastern Smart Keyless Entry System Replay Attack

EPSS 0.2%CVSS 9.4

The archive.