The archive.

FreeFloat4 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-5109 · FreeFloat FTP Server

FreeFloat FTP Server STATUS Command buffer overflow

CVE-2025-5110 · FreeFloat FTP Server

FreeFloat FTP Server VERBOSE Command buffer overflow

CVE-2025-5111 · FreeFloat FTP Server

FreeFloat FTP Server TYPE Command buffer overflow

CVE-2025-5112 · FreeFloat FTP Server

FreeFloat FTP Server MGET Command buffer overflow

1000 Projects1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-5205 · 1000 Projects Daily College Class Work Report Book

1000 Projects Daily College Class Work Report Book dcwr_entry.php sql injection

EPSS 0.6%public exploit CVSS 9.8

ScriptAndTools1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-5128 · ScriptAndTools Real-Estate-website-in-PHP

ScriptAndTools Real-Estate-website-in-PHP Admin Login Panel admin sql injection

EPSS 0.7%public exploit CVSS 9.8

Sony1 vulnerability on this pageMax CVSS 9.2Priority 50KEV 0

CVE-2025-5124 · Sony SNC-M1

Sony SNC-M1 Administrative Interface default credentials

EPSS 1%public exploit CVSS 9.2

Emlog1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-5119 · Emlog Pro

Emlog Pro api_controller.php sql injection

EPSS 0.6%public exploit CVSS 9.8

easysoft1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2025-5114 · easysoft zentaopms

easysoft zentaopms Editor index.php edit deserialization

EPSS 0.6%public exploit CVSS 9.1

VulDB2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-5206 · VulDB

Pixelimity Installation index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-5172 · VulDB

Econtrata valida sql injection

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-35003 · Apache Software Foundation Apache NuttX RTOS

Apache NuttX RTOS: NuttX Bluetooth Stack HCI and UART DoS/RCE Vulnerabilities.

EPSS 2%CVSS 9.8

emagicone3 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-4336 · emagicone eMagicOne Store Manager for WooCommerce

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file()

EPSS 1%CVSS 9.8

CVE-2025-5058 · emagicone eMagicOne Store Manager for WooCommerce

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_image()

EPSS 1%CVSS 9.8

CVE-2025-4603 · emagicone eMagicOne Store Manager for WooCommerce

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Deletion

EPSS 2%CVSS 9.1

Canon Inc.1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-2146 · Canon Inc. Satera MF656Cdw

Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an a…

EPSS 0.9%CVSS 9.8

Mikado-Themes1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-39494 · Mikado-Themes Wilmër

WordPress Wilmër theme < 3.4.2 - Local File Inclusion Vulnerability

EPSS 0.7%CVSS 9.8

AncoraThemes3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-31423 · AncoraThemes Umberto

WordPress Umberto theme <= 1.2.8 - PHP Object Injection Vulnerability

CVE-2025-31631 · AncoraThemes Fish House

WordPress Fish House theme <= 1.2.7 - PHP Object Injection Vulnerability

CVE-2025-32292 · AncoraThemes Jarvis – Night Club, Concert, Festival WordPress

WordPress Jarvis – Night Club, Concert, Festival WordPress theme <= 1.8.11 - PHP Object Injection Vulnerability

BoldThemes2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-39495 · BoldThemes Avantage

WordPress Avantage Theme <= 2.4.9 - PHP Object Injection vulnerability

CVE-2025-39499 · BoldThemes Medicare

WordPress Medicare Theme <= 2.1.0 - PHP Object Injection vulnerability

Realce Tecnologia2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-5178 · Realce Tecnologia Queue Ticket Kiosk

Realce Tecnologia Queue Ticket Kiosk Image File ajax.php unrestricted upload

CVE-2025-5176 · Realce Tecnologia Queue Ticket Kiosk

Realce Tecnologia Queue Ticket Kiosk Admin Login Page index.php sql injection

EPSS 0.5%CVSS 9.1

SUSE1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-23394 · SUSE openSUSE Tumbleweed

daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root

ThemeGoods1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-39485 · ThemeGoods Grand Tour

WordPress GrandTour theme <= 5.6 - PHP Object Injection vulnerability

ThemeMakers1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-39480 · ThemeMakers Car Dealer

WordPress Car Dealer theme < 1.6.8 - PHP Object Injection vulnerability

themeton4 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-31049 · themeton Dash

WordPress Dash <= 1.3 - PHP Object Injection Vulnerability

CVE-2025-31069 · themeton HotStar – Multi-Purpose Business Theme

WordPress HotStar – Multi-Purpose Business Theme <= 1.4 - PHP Object Injection Vulnerability

CVE-2025-31430 · themeton The Business

WordPress The Business <= 1.6.1 - PHP Object Injection Vulnerability

CVE-2025-31927 · themeton Acerola

WordPress Acerola <= 1.6.5 - PHP Object Injection Vulnerability

llisoft2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-5170 · llisoft MTA Maita Training System

llisoft MTA Maita Training System AdminShitiController.java AdminShitiListRequestVo sql injection

CVE-2025-5171 · llisoft MTA Maita Training System

llisoft MTA Maita Training System OpenController.java this.fileService.download unrestricted upload

pebas1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-39489 · pebas CouponXL

WordPress CouponXL theme <= 4.5.0 - Privilege Escalation Vulnerability

quantumcloud1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-31918 · quantumcloud Simple Business Directory Pro

WordPress Simple Business Directory Pro plugin < 15.6.9 - Privilege Escalation vulnerability

TCMAN3 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-40664 · TCMAN GIM

Missing authentication vulnerability in TCMAN GIM v11

EPSS 0.6%CVSS 9.3

CVE-2025-40665 · TCMAN GIM

Time-based blind SQL injection vulnerability in TCMAN GIM v11

CVE-2025-40666 · TCMAN GIM

Time-based blind SQL injection vulnerability in TCMAN GIM v11

AES Multimedia1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-40671 · AES Multimedia Gestnet

SQL injection vulnerability in AES Multimedia's Gestnet

EPSS 0.4%CVSS 9.3

kamleshyadav1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-31914 · kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder

WordPress Pixel Form BuilderPlugin & Autoresponder plugin <= 1.0.2 - SQL Injection Vulnerability

EPSS 0.5%CVSS 9.3

smartcms1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-31397 · smartcms Bus Ticket Booking with Seat Reservation for WooCommerce

WordPress Bus Ticket Booking with Seat Reservation for WooCommerce plugin <= 1.7 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.3

Techspawn1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-31056 · Techspawn WhatsCart - Whatsapp Abandoned Cart Recovery, Order Notifications, Chat Box, OTP for WooCommerce

WordPress WhatsCart plugin <= 1.1.0 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.3

blyssprivacy1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-48755 · blyssprivacy sdk

In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type).

Forestryks1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-48752 · Forestryks process-sync-rs

In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthread_mutex is unlocked.