Critical vulnerability archive — page 333

mitre6 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-45779 · mitre

Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter.

EPSS 7%public exploit CVSS 9.8

CVE-2025-44022 · mitre

An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism.

EPSS 1%public exploit CVSS 9.8

CVE-2025-44830 · mitre

EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface.

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-56523 · mitre

Radware Cloud Web Application Firewall (WAF) before 2025-05-07 allows remote attackers to bypass firewall filters by placing random data…

EPSS 0.6%CVSS 9.1

CVE-2024-56524 · mitre

Radware Cloud Web Application Firewall (WAF) before 2025-05-07 allows remote attackers to bypass firewall filters by adding a special cha…

EPSS 0.6%CVSS 9.1

CVE-2025-26846 · mitre

An issue was discovered in Znuny before 7.1.4.

EPSS 0.4%CVSS 9.8

TOTOLINK1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2025-4496 · TOTOLINK T10

TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow

EPSS 1%public exploit CVSS 9.8

Campcodes10 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-4489 · Campcodes Online Food Ordering System

Campcodes Online Food Ordering System user-router.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-4490 · Campcodes Online Food Ordering System

Campcodes Online Food Ordering System view-ticket-admin.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-4491 · Campcodes Online Food Ordering System

Campcodes Online Food Ordering System ticket-status.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-4492 · Campcodes Online Food Ordering System

Campcodes Online Food Ordering System ticket-message.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4502 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System creditor_add.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4503 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System customer_update.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4506 · Campcodes Online Food Ordering System

Campcodes Online Food Ordering System menu-router.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4507 · Campcodes Online Food Ordering System

Campcodes Online Food Ordering System add-item.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4548 · Campcodes Online Food Ordering System

Campcodes Online Food Ordering System router.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4549 · Campcodes Online Food Ordering System

Campcodes Online Food Ordering System register-router.php sql injection

EPSS 0.6%public exploit CVSS 9.8

itsourcecode6 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4483 · itsourcecode Gym Management System

itsourcecode Gym Management System view_pdetails.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4484 · itsourcecode Gym Management System

itsourcecode Gym Management System ajax.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4485 · itsourcecode Gym Management System

itsourcecode Gym Management System ajax.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4486 · itsourcecode Gym Management System

itsourcecode Gym Management System ajax.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4487 · itsourcecode Gym Management System

itsourcecode Gym Management System ajax.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4488 · itsourcecode Gym Management System

itsourcecode Gym Management System ajax.php sql injection

EPSS 0.6%public exploit CVSS 9.8

PHPGurukul6 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4505 · PHPGurukul Apartment Visitors Management System

PHPGurukul Apartment Visitors Management System category.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4508 · PHPGurukul e-Diary Management System

PHPGurukul e-Diary Management System my-profile.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4509 · PHPGurukul e-Diary Management System

PHPGurukul e-Diary Management System manage-notes.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4550 · PHPGurukul Apartment Visitors Management System

PHPGurukul Apartment Visitors Management System pass-details.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4553 · PHPGurukul Apartment Visitors Management System

PHPGurukul Apartment Visitors Management System bwdates-reports-details.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4554 · PHPGurukul Apartment Visitors Management System

PHPGurukul Apartment Visitors Management System bwdates-passreports-details.php sql injection

EPSS 0.6%public exploit CVSS 9.8

Project Worlds1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4482 · Project Worlds Student Project Allocation System

Project Worlds Student Project Allocation System forgot_password_sql.php sql injection

EPSS 0.6%public exploit CVSS 9.8

SourceCodester2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4481 · SourceCodester Apartment Visitor Management System

SourceCodester Apartment Visitor Management System search-result.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4504 · SourceCodester Online College Library System

SourceCodester Online College Library System index.php sql injection

EPSS 0.6%public exploit CVSS 9.8

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-4538 · VulDB

kkFileView fileUpload unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

Zhengzhou Jiuhua Electronic Technology1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-4514 · Zhengzhou Jiuhua Electronic Technology mayicms

Zhengzhou Jiuhua Electronic Technology mayicms javascript.php sql injection

EPSS 0.4%public exploit CVSS 9.8

glenwpcoder1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-4403 · glenwpcoder Drag and Drop Multiple File Upload for WooCommerce

Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function

EPSS 2%CVSS 9.8

EnerSys2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-11861 · EnerSys AMPA

Command injection in EnerSys AMPA 22.09 and prior versions

EPSS 1%CVSS 9.8

CVE-2024-12442 · EnerSys AMPA

Command injection in EnerSys AMPA versions 24.04 through 24.16, inclusive

EPSS 1%CVSS 9.8

GNU3 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-47814 · GNU PSPP

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from s…

EPSS 0.3%public exploit CVSS 9.8

CVE-2025-47815 · GNU PSPP

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from z…

EPSS 0.3%public exploit CVSS 9.8

CVE-2025-47816 · GNU PSPP

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, relate…

EPSS 0.4%public exploit CVSS 9.1

JAdmin-JAVA1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-4494 · JAdmin-JAVA JAdmin

JAdmin-JAVA JAdmin Admin Backend NoNeedLoginController.java toLogin improper authentication

EPSS 0.8%CVSS 9.8

Kong Inc.1 vulnerability on this pageMax CVSS 9.3Priority 41KEV 0

CVE-2025-1087 · Kong Inc. Insomnia

Arbitrary Code Execution in Kong Insomnia Desktop Application

EPSS 1%CVSS 9.3

ZONG YU3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-4556 · ZONG YU Okcat Parking Management Platform

ZONG YU Okcat Parking Management Platform - Arbitrary File Upload

EPSS 0.8%CVSS 9.8

CVE-2025-4555 · ZONG YU Okcat Parking Management Platform

ZONG YU Okcat Parking Management Platform - Missing Authentication

EPSS 0.6%CVSS 9.8

CVE-2025-4557 · ZONG YU Parking Management System

ZONG YU Parking Management System - Missing Authentication

EPSS 0.5%CVSS 9.1

Netvision1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-4559 · Netvision ISOinsight

Netvision ISOinsight - SQL Injection

EPSS 0.5%CVSS 9.8

WormHole Tech1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-4558 · WormHole Tech GPM

WormHole Tech GPM - Unverified Password Change

EPSS 0.5%CVSS 9.8

Dígitro1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-4528 · Dígitro NGC Explorer

Dígitro NGC Explorer session expiration

EPSS 0.4%CVSS 9.8

Cozy Vision1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-47682 · Cozy Vision SMS Alert Order Notifications

WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.8.1 - SQL Injection Vulnerability

EPSS 0.4%CVSS 9.8

Digi International1 vulnerability on this pageMax CVSS 9.4Priority 33KEV 0

CVE-2025-3659 · Digi International Digi PortServer TS

Improper authentication handling for Digi PortServer TS; Digi One SP, SP IA, IA; Digi One IAP

EPSS 0.3%CVSS 9.4

The archive.