by Kastro CVE-2025-2776 · SysAid SysAid On-Prem
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,091 matching vulnerabilities · Page 335 of 782
SysAid
CVE-2025-2775 · SysAid SysAid On-Prem
SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
CVE-2025-2777 · SysAid SysAid On-Prem
SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection
Cisco
CVE-2025-20188 · Cisco Cisco IOS XE Software
A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles featu…
CVE-2025-20221 · Cisco Cisco IOS XE Software
A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypas…
mitre
CVE-2025-45797 · mitre
TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability.
CVE-2025-45798 · mitre
A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112.
CVE-2023-31585 · mitre
Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php.
CVE-2025-45787 · mitre
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules.
CVE-2025-45788 · mitre
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules.
CVE-2025-45789 · mitre
TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules.
CVE-2025-45790 · mitre
TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cste_modules/fi…
CVE-2025-45841 · mitre
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg…
CVE-2025-26845 · mitre
An Eval Injection issue was discovered in Znuny through 7.1.3.
CVE-2025-26844 · mitre
An issue was discovered in Znuny through 7.1.3.
CVE-2025-26847 · mitre
An issue was discovered in Znuny before 7.1.5.
Tenda
CVE-2025-4357 · Tenda RX3
Tenda RX3 telnet command injection
CVE-2025-4356 · Tenda DAP-1520
Tenda DAP-1520 Authentication storage mod_graph_auth_uri_handler stack-based overflow
CVE-2025-4355 · Tenda DAP-1520
Tenda DAP-1520 api set_ws_action heap-based overflow
CVE-2025-4368 · Tenda AC8
Tenda AC8 MtuSetMacWan formGetRouterStatus buffer overflow
LabRedesCefetRJ
PHPGurukul
CVE-2025-4361 · PHPGurukul Company Visitor Management System
PHPGurukul Company Visitor Management System department.php sql injection
CVE-2025-4358 · PHPGurukul Company Visitor Management System
PHPGurukul Company Visitor Management System admin-profile.php sql injection
Elastic
itsourcecode
CVE-2025-4359 · itsourcecode Gym Management System
itsourcecode Gym Management System ajax.php sql injection
CVE-2025-4360 · itsourcecode Gym Management System
itsourcecode Gym Management System view_member.php sql injection
CVE-2025-4362 · itsourcecode Gym Management System
itsourcecode Gym Management System ajax.php sql injection
CVE-2025-4363 · itsourcecode Gym Management System
itsourcecode Gym Management System ajax.php sql injection
patrickhener
peprodev
CVE-2025-3844 · peprodev PeproDev Ultimate Profile Solutions
PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Authentication Bypass to Account Takeover
Potenza Global Solutions
CVE-2025-0855 · Potenza Global Solutions PGS Core
PGS Core <= 5.8.0 - Unauthenticated PHP Object Injection
Optigo Networks
CVE-2025-4041 · Optigo Networks ONS NC600
Use of Hard-coded Credentials Optigo Networks ONS NC600
vinoth06
Themefic
Saad Iqbal
CVE-2025-47688 · Saad Iqbal Advanced File Manager
WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerability
WPWebinarSystem
CVE-2025-47635 · WPWebinarSystem WebinarPress
WordPress WebinarPress plugin <= 1.33.28 - Server Side Request Forgery (SSRF) Vulnerability
auth0
CVE-2025-46572 · auth0 passport-wsfed-saml2
passport-wsfed-saml2 Has SAML Authentication Bypass via Signature Wrapping
Red Hat
CVE-2024-12225 · Red Hat Red Hat build of Quarkus
Io.quarkus:quarkus-security-webauthn: quarkus webauthn unexpected authentication bypass
RT-Labs
CVE-2025-32401 · RT-Labs P-Net
An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use t…
CVE-2025-32403 · RT-Labs P-Net
An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the libr…
CVE-2025-32404 · RT-Labs P-Net
An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the libr…
OpenText™
CVE-2025-3476 · OpenText™ Operations Bridge Manager
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager.
Productive Minds
CVE-2025-47657 · Productive Minds Productive Commerce
WordPress Productive Commerce plugin <= 1.1.40 - SQL Injection vulnerability
Varun Dubey
CVE-2025-47548 · Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress
WordPress Wbcom Designs - Activity Link Preview For BuddyPress plugin <= 1.4.4 - Server Side Request Forgery (SSRF) Vulnerability
Samsung Mobile
CVE-2025-20949 · Samsung Mobile Samsung Members
Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the pri…
CVE-2025-20968 · Samsung Mobile Samsung Gallery
Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5…
CVE-2025-20967 · Samsung Mobile Samsung Gallery