The archive.

CVE-2025-4442 · D-Link DIR-605L

D-Link DIR-605L formSetWAN_Wizard55 buffer overflow

CVE-2025-4449 · D-Link DIR-619L

D-Link DIR-619L formEasySetupWizard3 buffer overflow

CVE-2025-4450 · D-Link DIR-619L

D-Link DIR-619L formSetEasy_Wizard buffer overflow

itsourcecode4 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2025-4463 · itsourcecode Gym Management System

itsourcecode Gym Management System ajax.php sql injection

CVE-2025-4464 · itsourcecode Gym Management System

itsourcecode Gym Management System ajax.php sql injection

CVE-2025-4465 · itsourcecode Gym Management System

itsourcecode Gym Management System ajax.php sql injection

CVE-2025-4466 · itsourcecode Gym Management System

itsourcecode Gym Management System ajax.php sql injection

Project Worlds2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2025-4456 · Project Worlds Car Rental Project

Project Worlds Car Rental Project signup.php sql injection

CVE-2025-4457 · Project Worlds Car Rental Project

Project Worlds Car Rental Project approve.php sql injection

mitre10 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-28200 · mitre

Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address.

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-45885 · mitre

PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file.

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-46191 · mitre

Arbitrary File Upload in user_payment_update.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to…

CVE-2025-46193 · mitre

SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in user_proposal_up…

CVE-2025-46188 · mitre

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php.

EPSS 0.7%CVSS 9.8

CVE-2025-45513 · mitre

Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter.

EPSS 0.6%CVSS 9.8

CVE-2025-46189 · mitre

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_order_customer_update.php via the order_id PO…

EPSS 0.5%CVSS 9.8

CVE-2025-46190 · mitre

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_delivery_update.php via the order_id POST par…

EPSS 0.4%CVSS 9.8

CVE-2025-46192 · mitre

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_payment_update.php via the order_id POST para…

EPSS 0.4%CVSS 9.8

CVE-2025-45887 · mitre

Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent.

EPSS 0.4%CVSS 9.1

Geal1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-47737 · Geal trailer

lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.

EPSS 0.6%public exploit CVSS 9.8

arkenon1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-3605 · arkenon Login, Registration and Lost Password Blocks

Frontend Login and Registration Blocks <= 1.1.1 - Unauthenticated Privilege Escalation via Account Takeover

EPSS 8%CVSS 9.8

Microsoft5 vulnerabilities on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2025-29972 · Microsoft Azure Storage Resource Provider (SRP)

Azure Storage Resource Provider Spoofing Vulnerability

EPSS 3%CVSS 9.9

CVE-2025-47732 · Microsoft Microsoft Dataverse

Microsoft Dataverse Remote Code Execution Vulnerability

CVE-2025-29813 · Microsoft Azure DevOps

Azure DevOps Elevation of Privilege Vulnerability

EPSS 2%CVSS 10.0

CVE-2025-29827 · Microsoft Azure Automation

Azure Automation Elevation of Privilege Vulnerability

EPSS 2%CVSS 9.9

CVE-2025-47733 · Microsoft Microsoft Power Pages

Microsoft Power Apps Information Disclosure Vulnerability

EPSS 2%CVSS 9.1

ATEN3 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-3710 · ATEN CL5708IM

ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow

EPSS 2%CVSS 9.8

CVE-2025-3711 · ATEN CL5708IM

ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow

EPSS 2%CVSS 9.8

CVE-2025-3714 · ATEN CL5708IM

ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow

EPSS 2%CVSS 9.8

Nugine1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-47735 · Nugine wgp

inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks drop_slow thread synchronization.

EPSS 0.3%public exploit CVSS 9.8

ThemeKalia1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-11617 · ThemeKalia Envolve Plugin

Envolve Plugin <= 1.0 - Unauthenticated Arbitrary File Upload via language_file and fonts_file

SourceCodester2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2025-4467 · SourceCodester Online Student Clearance System

SourceCodester Online Student Clearance System edit-admin.php sql injection

CVE-2025-4468 · SourceCodester Online Student Clearance System

SourceCodester Online Student Clearance System edit-photo.php unrestricted upload

Arista Networks3 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-11186 · Arista Networks CloudVision Portal

On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-prem

EPSS 0.8%CVSS 10.0

CVE-2025-0505 · Arista Networks CloudVision Portal

On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary, which can be used to query or manipulate system state

EPSS 0.7%CVSS 10.0

CVE-2024-12378 · Arista Networks CloudVision Portal

On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.

EPSS 0.5%CVSS 9.1

imithemes1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-2253 · imithemes IMITHEMES Listing

IMITHEMES Listing <= 3.3 - Unauthenticated Privilege Escalation via Unverified Password Reset

iqonicdesign2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-3810 · iqonicdesign WPBookit

WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover

CVE-2025-3811 · iqonicdesign WPBookit

WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update