The archive.

CVE-2025-44884 · mitre

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the web_sys_infoContact_post function.

CVE-2025-44885 · mitre

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the remote_ip parameter in the web_snmpv3_remote_engineId_add_…

CVE-2025-44886 · mitre

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the byruleEditName parameter in the web_acl_mgmt_Rules_Edit_po…

CVE-2025-44887 · mitre

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radIpkey parameter in the web_radiusSrv_post function.

CVE-2025-44888 · mitre

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the stp_conf_name parameter in the web_stp_globalSetting_post…

CVE-2025-44890 · mitre

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_notifyv3_add_post function.

CVE-2025-44891 · mitre

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_v3host_add_post function.

CVE-2025-44894 · mitre

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radDftParamKey parameter in the web_radiusSrv_dftParam_pos…

CVE-2025-44896 · mitre

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bindEditMACName parameter in the web_acl_bindEdit_post fun…

CVE-2025-44897 · mitre

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bytftp_srvip parameter in the web_tool_upgradeManager_post…

CVE-2025-44898 · mitre

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName parameter in the web_aaa_loginAuthlistEdit fun…

Netgear1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-4978 · Netgear DGND3700

Netgear DGND3700 Basic Authentication BRS_top.html improper authentication

EPSS 22%public exploit CVSS 9.8

langroid1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-46724 · langroid langroid

Langroid has a Code Injection vulnerability in TableChatAgent

EPSS 0.8%public exploit CVSS 9.8

Linux4 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-37924 · Linux Linux

ksmbd: fix use-after-free in kerberos authentication

EPSS 25%CVSS 9.8

CVE-2025-37894 · Linux Linux

net: use sock_gen_put() when sk_state is TCP_TIME_WAIT

CVE-2025-37935 · Linux Linux

net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM

CVE-2025-37959 · Linux Linux

bpf: Scrub packet on bpf_redirect_peer

EPSS 0.4%CVSS 9.4

StylemixThemes1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4322 · StylemixThemes Motors - Car Dealer, Rental & Listing WordPress theme

Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

EPSS 15%CVSS 9.8

templateinvaders1 vulnerability on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2025-47577 · templateinvaders TI WooCommerce Wishlist

WordPress TI WooCommerce Wishlist plugin <= 2.9.2 - Arbitrary File Upload Vulnerability

EPSS 5%CVSS 10.0

gardener2 vulnerabilities on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2025-47283 · gardener gardener

Bypassing project secret validation can lead to privilege escalation

EPSS 0.7%CVSS 9.9

CVE-2025-47284 · gardener gardener

Gardener vulnerable to metadata injection for a project secret that can lead to privilege escalation

EPSS 0.5%CVSS 9.9

mojoomla6 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2025-39401 · mojoomla WPAMS

WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 10.0

CVE-2025-39406 · mojoomla WPAMS

WordPress WPAMS plugin <= 44.0 - Local File Inclusion to Privilege Escalation vulnerability

CVE-2025-39380 · mojoomla Hospital Management System

WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 10.0

CVE-2025-39402 · mojoomla WPAMS

WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 9.9

CVE-2025-39386 · mojoomla Hospital Management System

WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability

CVE-2025-39395 · mojoomla WPAMS

WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability

ThemeGoods4 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-32926 · ThemeGoods Grand Restaurant

WordPress Grand Restaurant WordPress theme <= 7.0 - Path Traversal to PHP Object Injection vulnerability

CVE-2025-32928 · ThemeGoods Altair

WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability

CVE-2025-39348 · ThemeGoods Grand Restaurant

WordPress Grand Restaurant WordPress theme <= 7.0 - PHP Object Injection vulnerability

CVE-2025-39354 · ThemeGoods Grand Conference

WordPress Grand Conference theme <= 5.3 - PHP Object Injection vulnerability

Chimpstudio2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-32927 · Chimpstudio FoodBakery

WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerability

CVE-2025-39356 · Chimpstudio Foodbakery Sticky Cart

WordPress Foodbakery Sticky Cart plugin <= 3.2 - PHP Object Injection vulnerability

elbisnero1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-47581 · elbisnero WordPress Events Calendar Registration & Tickets

WordPress WordPress Events Calendar Registration & Tickets plugin <= 2.6.0 - PHP Object Injection vulnerability

FantasticPlugins1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-32925 · FantasticPlugins SUMO Reward Points

WordPress SUMO Reward Points plugin <= 30.7.0 - Local File Inclusion vulnerability

Potenzaglobalsolutions1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-39349 · Potenzaglobalsolutions CiyaShop

WordPress CiyaShop theme <= 4.18.0 - PHP Object Injection vulnerability

themegusta1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-39410 · themegusta Smart Sections Theme Builder - WPBakery Page Builder Addon

WordPress Smart Sections Theme Builder - WPBakery Page Builder Addon plugin <= 1.7.8 - PHP Object Injection vulnerability

tngan1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2025-47949 · tngan samlify

samlify SAML Signature Wrapping attack

EPSS 0.5%CVSS 9.9

TP-Link1 vulnerability on this pageMax CVSS 9.2Priority 38KEV 0

CVE-2025-40634 · TP-Link Link Archer AX50

Stack-based buffer overflow in TP-Link Archer AX50

EPSS 0.7%CVSS 9.2

Schweitzer Engineering Laboratories1 vulnerability on this pageMax CVSS 9.0Priority 35KEV 0

CVE-2025-48017 · Schweitzer Engineering Laboratories SEL-5056 Software-Defined Network Flow Controller

Improper Limitation of a Pathname to a Restricted Directory

EPSS 0.5%CVSS 9.0

Comerzzia1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-40635 · Comerzzia Comerzzia Backoffice: Sales Orchestrator

SQL injection at Comerzzia

highwarden1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-39445 · highwarden Super Store Finder

WordPress Super Store Finder <= 7.2 - SQL Injection Vulnerability

Solid Plugins1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-39389 · Solid Plugins AnalyticsWP

WordPress AnalyticsWP <= 2.1.2 - SQL Injection Vulnerability