The archive.

aimhubio1 vulnerability on this pageMax CVSS 9.9Priority 50KEV 0

CVE-2025-5321 · aimhubio aim

aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalation

EPSS 0.6%public exploit CVSS 9.9

Lovable1 vulnerability on this pageMax CVSS 9.3Priority 50KEV 0

CVE-2025-48757 · Lovable Lovable

An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write…

EPSS 0.8%public exploit CVSS 9.3

Campcodes7 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-5359 · Campcodes Online Hospital Management System

Campcodes Online Hospital Management System appointment-history.php sql injection

CVE-2025-5360 · Campcodes Online Hospital Management System

Campcodes Online Hospital Management System book-appointment.php sql injection

CVE-2025-5361 · Campcodes Online Hospital Management System

Campcodes Online Hospital Management System contact.php sql injection

CVE-2025-5362 · Campcodes Online Hospital Management System

Campcodes Online Hospital Management System doctor-specilization.php sql injection

CVE-2025-5363 · Campcodes Online Hospital Management System

Campcodes Online Hospital Management System index.php sql injection

CVE-2025-5364 · Campcodes Online Hospital Management System

Campcodes Online Hospital Management System add-patient.php sql injection

CVE-2025-5365 · Campcodes Online Hospital Management System

Campcodes Online Hospital Management System patient-search.php sql injection

PHPGurukul3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-5358 · PHPGurukul Cyber Cafe Management System

PHPGurukul/Campcodes Cyber Cafe Management System bwdates-reports-details.php sql injection

CVE-2025-5367 · PHPGurukul Online Shopping Portal Project

PHPGurukul Online Shopping Portal Project category.php sql injection

CVE-2025-5370 · PHPGurukul News Portal

PHPGurukul News Portal forgot-password.php sql injection

SourceCodester3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-5371 · SourceCodester Health Center Patient Record Management System

SourceCodester Health Center Patient Record Management System admin.php sql injection

CVE-2025-5369 · SourceCodester PHP Display Username After Login

SourceCodester PHP Display Username After Login login.php sql injection

CVE-2025-5376 · SourceCodester Health Center Patient Record Management System

SourceCodester Health Center Patient Record Management System patient.php sql injection

zhilink 智互联(深圳)科技有限公司1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-5325 · zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台

zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 testService special elements used in a template engine

navidrome1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-48949 · navidrome navidrome

Navidrome allows SQL Injection via role parameter

fabiolb1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2025-48865 · fabiolb fabio

Fabio allows HTTP clients to manipulate custom headers it adds

EPSS 0.5%public exploit CVSS 9.1

Instantel1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-1907 · Instantel Micromate

Instantel Micromate Missing Authentication for Critical Function

EPSS 0.8%CVSS 9.8

unitybusinesstechnology1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-4631 · unitybusinesstechnology The E-Commerce ERP: Purchasing, Inventory, Fulfillment, Manufacturing, BOM, Accounting, Sales Analysis

Profitori 2.0.6.0 - 2.1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via stocktend_object Endpoint

EPSS 0.8%CVSS 9.8

Consilium Safety2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-41438 · Consilium Safety CS5000 Fire Panel

Consilium Safety CS5000 Fire Panel Initialization of a Resource with an Insecure Default

EPSS 0.7%CVSS 9.8

CVE-2025-46352 · Consilium Safety CS5000 Fire Panel

Consilium Safety CS5000 Fire Panel Use of Hard-coded Credentials

EPSS 0.7%CVSS 9.8

TIMLEGGE1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2020-36846 · TIMLEGGE IO::Compress::Brotli

IO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library

EPSS 0.7%CVSS 9.8

traefik1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2025-47952 · traefik traefik

Traefik allows path traversal using url encoding

EPSS 1.0%CVSS 9.1

cli1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-48938 · cli go-gh

Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

EPSS 0.6%CVSS 9.8

empoweringprowebsite1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-4607 · empoweringprowebsite PSW Front-end Login & Registration

PSW Front-end Login & Registration <= 1.12 - Insufficiently Random Values to Unauthenticated Account Takeover/Privilege Escalation via customer_registration Function

EPSS 0.6%CVSS 9.8

ThimPress1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-48336 · ThimPress Course Builder

WordPress Course Builder < 3.6.6 - PHP Object Injection Vulnerability

EPSS 0.5%CVSS 9.8

VulDB7 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-5385 · VulDB

JeeWMS cgformTemplateController.do doAdd path traversal

EPSS 0.5%CVSS 9.8

CVE-2025-5387 · VulDB

JeeWMS File generateController.do dogenerate access control

CVE-2025-5388 · VulDB

JeeWMS generateController.do dogenerate sql injection

CVE-2025-5389 · VulDB

JeeWMS File generateController.do dogenerateOne2Many access control

CVE-2025-5384 · VulDB

JeeWMS cgAutoListController.do CgAutoListController sql injection

CVE-2025-5386 · VulDB

JeeWMS cgformTransController.do transEditor sql injection

CVE-2025-5390 · VulDB

JeeWMS File filedeal.do filedeal access control

Esri1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2025-4967 · Esri Portal for ArcGIS

Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS

EPSS 0.6%CVSS 9.1

argoproj1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2025-47933 · argoproj argo-cd

Argo CD allows cross-site scripting on repositories page

EPSS 0.5%CVSS 9.1

mitre1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2025-44619 · mitre

Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the net…

EPSS 0.5%CVSS 9.1

Yandex1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2023-26226 · Yandex Browser

A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682

Apple2 vulnerabilities on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2025-30466 · Apple Safari

This issue was addressed through improved state management.

CVE-2025-31263 · Apple macOS

The issue was addressed with improved memory handling.

EPSS 0.4%CVSS 9.1

HCL Software2 vulnerabilities on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2024-42190 · HCL Software HCL Traveler for Microsoft Outlook (HTMO)

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking

CVE-2024-42191 · HCL Software HCL Traveler for Microsoft Outlook (HTMO)

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijacking