The archive.

CVE-2025-45018 · mitre

A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management Sy…

CVE-2025-44192 · mitre

SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in /barangay_management/admin/?page=view_clearance.

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-45019 · mitre

A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management System v2.0.

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-48905 · mitre

Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint.

EPSS 0.4%public exploit CVSS 9.1

PCMan4 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-4079 · PCMan FTP Server

PCMan FTP Server RENAME Command buffer overflow

CVE-2025-4158 · PCMan FTP Server

PCMan FTP Server PROMPT Command buffer overflow

CVE-2025-4159 · PCMan FTP Server

PCMan FTP Server GLOB Command buffer overflow

CVE-2025-4160 · PCMan FTP Server

PCMan FTP Server LS Command buffer overflow

PHPGurukul6 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-4074 · PHPGurukul Curfew e-Pass Management System

PHPGurukul Curfew e-Pass Management System pass-bwdates-report.php sql injection

CVE-2025-4108 · PHPGurukul Student Record System

PHPGurukul Student Record System add-subject.php sql injection

CVE-2025-4112 · PHPGurukul Student Record System

PHPGurukul Student Record System add-course.php sql injection

CVE-2025-4151 · PHPGurukul Curfew e-Pass Management System

PHPGurukul Curfew e-Pass Management System pass-bwdates-reports-details.php sql injection

CVE-2025-4153 · PHPGurukul Park Ticketing Management System

PHPGurukul Park Ticketing Management System profile.php sql injection

CVE-2025-4152 · PHPGurukul Online Birth Certificate System

PHPGurukul Online Birth Certificate System bwdates-reports-details.php sql injection

EPSS 0.4%public exploit CVSS 9.8

YesWiki2 vulnerabilities on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2025-46348 · YesWiki yeswiki

YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download

EPSS 0.7%public exploit CVSS 10.0

CVE-2025-46347 · YesWiki yeswiki

YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution

Ladybird1 vulnerability on this pageMax CVSS 9.0Priority 48KEV 0

CVE-2025-47154 · Ladybird Ladybird

LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that arguments_list references, leading to a use-after-free, and al…

EPSS 0.7%public exploit CVSS 9.0

Netgear15 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-4121 · Netgear JWNR2000v2

Netgear JWNR2000v2 cmd_wireless command injection

EPSS 3%CVSS 9.8

CVE-2025-4148 · Netgear EX6200

Netgear EX6200 sub_503FC buffer overflow

CVE-2025-4149 · Netgear EX6200

Netgear EX6200 sub_54014 buffer overflow

CVE-2025-4150 · Netgear EX6200

Netgear EX6200 sub_54340 buffer overflow

CVE-2025-4146 · Netgear EX6200

Netgear EX6200 sub_41940 buffer overflow

CVE-2025-4114 · Netgear JWNR2000v2

Netgear JWNR2000v2 check_language_file buffer overflow

CVE-2025-4140 · Netgear EX6120

Netgear EX6120 sub_30394 buffer overflow

CVE-2025-4141 · Netgear EX6200

Netgear EX6200 sub_3C03C buffer overflow

CVE-2025-4142 · Netgear EX6200

Netgear EX6200 sub_3C8EC buffer overflow

CVE-2025-4145 · Netgear EX6200

Netgear EX6200 sub_3D0BC buffer overflow

CVE-2025-4147 · Netgear EX6200

Netgear EX6200 sub_47F7C buffer overflow

CVE-2025-4115 · Netgear JWNR2000v2

Netgear JWNR2000v2 default_version_is_new buffer overflow

CVE-2025-4116 · Netgear JWNR2000v2

Netgear JWNR2000v2 get_cur_lang_ver buffer overflow

CVE-2025-4120 · Netgear JWNR2000v2

Netgear JWNR2000v2 sub_4238E8 buffer overflow

CVE-2025-4117 · Netgear JWNR2000v2

Netgear JWNR2000v2 sub_41A914 buffer overflow

EPSS 0.6%CVSS 9.8

vllm-project1 vulnerability on this pageMax CVSS 10.0Priority 46KEV 0

CVE-2025-32444 · vllm-project vllm

vLLM Vulnerable to Remote Code Execution via Mooncake Integration

EPSS 2%CVSS 10.0

xwiki-contrib1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2025-46558 · xwiki-contrib syntax-markdown

org.xwiki.contrib.markdown:syntax-markdown-commonmark12 vulnerable to XSS via Markdown content

EPSS 0.5%public exploit CVSS 9.1

xwiki3 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-32973 · xwiki xwiki-platform

org.xwiki.platform:xwiki-platform-component-wiki provides no warning when granting XWiki.ComponentClass programming right

EPSS 0.4%public exploit CVSS 9.1

CVE-2025-32974 · xwiki xwiki-platform

org.xwiki.platform:xwiki-platform-security-requiredrights-default required rights analysis doesn't consider TextAreas with default content type

EPSS 0.4%public exploit CVSS 9.1

CVE-2025-46557 · xwiki xwiki-platform

Any user with view access to the XWiki space can change the authenticator

EPSS 0.6%CVSS 9.8

Microsoft3 vulnerabilities on this pageMax CVSS 9.9Priority 43KEV 0

CVE-2025-30392 · Microsoft Azure AI Bot Service

Azure AI Bot Elevation of Privilege Vulnerability

CVE-2025-30390 · Microsoft Azure Machine Learning

Azure ML Compute Elevation of Privilege Vulnerability

EPSS 1.0%CVSS 9.9

CVE-2025-30389 · Microsoft Azure AI Bot Service

Azure Bot Framework SDK Elevation of Privilege Vulnerability

EPSS 0.9%CVSS 9.8

cloudflare1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-4144 · cloudflare

PKCE bypass via downgrade attack

EPSS 0.6%CVSS 9.8

Weitong1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2025-4118 · Weitong Mall

Weitong Mall Product History historyList access control

EPSS 0.7%CVSS 9.1

Delta Electronics5 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-22882 · Delta Electronics ISPSoft

ISPSoft File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2025-22883 · Delta Electronics ISPSoft

ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2025-22884 · Delta Electronics ISPSoft

ISPSoft File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2025-4124 · Delta Electronics ISPSoft

ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2025-4125 · Delta Electronics ISPSoft

ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

openfga1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-46331 · openfga openfga

OpenFGA Authorization Bypass