Critical vulnerability archive — page 331

invisioncommunity1 vulnerability on this pageMax CVSS 10.0Priority 60KEV 0

CVE-2025-47916 · invisioncommunity Invision Power Board

Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php.

EPSS 84%public exploit CVSS 10.0

Unknown4 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2024-6159 · Unknown Push Notification for Post and BuddyPress

Push Notification for Post and BuddyPress <=1.93 - Multiple Unauthenticated SQLi

EPSS 3%public exploit CVSS 9.8

CVE-2024-8673 · Unknown Z-Downloads

Z-Downloads < 1.11.7 - Admin+ Stored XSS via SVG Upload

EPSS 2%public exploit CVSS 9.1

CVE-2024-6809 · Unknown Simple Video Directory

Simple Video Directory < 1.4.3 - Unauthenticated SQLi

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-6584 · Unknown Jetpack Boost

Jetpack Boost < 3.4.7 - Admin+ SSRF

EPSS 0.6%public exploit CVSS 9.1

emlog2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-47787 · emlog emlog

Emlog Pro Contains a File Upload Vulnerability

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-47784 · emlog emlog

Emlog vulnerable to Deserialization of Untrusted Data

EPSS 0.5%CVSS 9.8

Campcodes14 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-4712 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System account_summary.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-4713 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System print.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-4714 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System reprint.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-4707 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System transaction_add.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4708 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System sales_add.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4709 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System transaction_del.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4710 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System transaction.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4711 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System stockin_add.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4715 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System view_application.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4716 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System credit_transaction_add.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4718 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System customer_add.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4719 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System cash_transaction.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4734 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System ci_update.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4741 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System purchase_add.php sql injection

EPSS 0.6%public exploit CVSS 9.8

itsourcecode6 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4721 · itsourcecode Placement Management System

itsourcecode Placement Management System drive.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4722 · itsourcecode Placement Management System

itsourcecode Placement Management System edit_profile.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4723 · itsourcecode Placement Management System

itsourcecode Placement Management System all_student.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4724 · itsourcecode Placement Management System

itsourcecode Placement Management System student_profile.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4725 · itsourcecode Placement Management System

itsourcecode Placement Management System view_drive.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4726 · itsourcecode Placement Management System

itsourcecode Placement Management System view_student.php sql injection

EPSS 0.6%public exploit CVSS 9.8

PHPGurukul8 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4697 · PHPGurukul Directory Management System

PHPGurukul Directory Management System edit-directory.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4702 · PHPGurukul Vehicle Parking Management System

PHPGurukul Vehicle Parking Management System add-category.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4703 · PHPGurukul Vehicle Parking Management System

PHPGurukul Vehicle Parking Management System admin-profile.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4705 · PHPGurukul Vehicle Parking Management System

PHPGurukul Vehicle Parking Management System view-incomingvehicle-detail.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4717 · PHPGurukul Company Visitor Management System

PHPGurukul Company Visitor Management System visitors-form.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4736 · PHPGurukul Daily Expense Tracker

PHPGurukul Daily Expense Tracker register.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4698 · PHPGurukul Directory Management System

PHPGurukul Directory Management System forget-password.php sql injection

EPSS 0.6%CVSS 9.8

CVE-2025-4699 · PHPGurukul Apartment Visitors Management System

PHPGurukul Apartment Visitors Management System visitors-form.php sql injection

EPSS 0.6%CVSS 9.8

projectworlds2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4706 · projectworlds Online Examination System

projectworlds Online Examination System Procedure3b_yearwiseVisit.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4739 · projectworlds Hospital Database Management System

projectworlds Hospital Database Management System medicines_info.php sql injection

EPSS 0.6%public exploit CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4728 · SourceCodester Best Online News Portal

SourceCodester Best Online News Portal search.php sql injection

EPSS 0.6%public exploit CVSS 9.8

mitre1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-46052 · mitre

An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensiti…

EPSS 0.5%public exploit CVSS 9.8

Atheos1 vulnerability on this pageMax CVSS 9.4Priority 47KEV 0

CVE-2025-47788 · Atheos Atheos

Missing Path Validation Enables Path Traversal in Controller.php

EPSS 0.5%public exploit CVSS 9.4

spotipy-dev1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2025-47928 · spotipy-dev spotipy

Spotipy repo vulnerable to secrets exfiltration via `pull_request_target`

EPSS 0.6%public exploit CVSS 9.1

I-O DATA DEVICE, INC.1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-32002 · I-O DATA DEVICE, INC. HDL-TC1

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard…

EPSS 2%CVSS 9.8

facturaone1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2025-4564 · facturaone TicketBAI Facturas para WooCommerce

TicketBAI Facturas para WooCommerce <= 3.18 - Unauthenticated Arbitrary File Deletion

EPSS 1%CVSS 9.8

kelerkgibo1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-3917 · kelerkgibo SEO合集(支持百度/Google/Bing/头条推送)

百度站长SEO合集(支持百度/神马/Bing/头条推送) <= 2.0.6 - Unauthenticated Arbitrary File Upload

EPSS 0.9%CVSS 9.8

Jenkins Project2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-47889 · Jenkins Project Jenkins WSO2 Oauth Plugin

In Jenkins WSO2 Oauth Plugin 1.0 and earlier, authentication claims are accepted without validation by the "WSO2 Oauth" security realm, a…

EPSS 0.6%CVSS 9.8

CVE-2025-47884 · Jenkins Project Jenkins OpenID Connect Provider Plugin

In Jenkins OpenID Connect Provider Plugin 96.vee8ed882ec4d and earlier the generation of build ID Tokens uses potentially overridden valu…

EPSS 0.6%CVSS 9.1

auth01 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2025-47275 · auth0 auth0-PHP

Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK

EPSS 0.5%CVSS 9.1

Dell1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-30475 · Dell PowerScale InsightIQ

Dell PowerScale InsightIQ, versions 5.0 through 5.2, contains an improper privilege management vulnerability.

EPSS 0.4%CVSS 9.8

aomedia1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2025-48174 · aomedia libavif

In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.

EPSS 0.4%CVSS 9.1

Rustaurius1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2025-47580 · Rustaurius Front End Users

WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability

EPSS 0.3%CVSS 9.8

The archive.