The archive.

CVE-2025-3400 · ESAFENET CDG

ESAFENET CDG UnChkMailApplication.jsp sql injection

CVE-2025-3401 · ESAFENET CDG

ESAFENET CDG getLimitIPList.jsp sql injection

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-3383 · SourceCodester Web-based Pharmacy Product Management System

SourceCodester Web-based Pharmacy Product Management System search_sales.php sql injection

1000 Projects1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-3384 · 1000 Projects Human Resource Management System

1000 Projects Human Resource Management System employee.php sql injection

EPSS 0.6%public exploit CVSS 9.8

Adobe4 vulnerabilities on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2025-30281 · Adobe ColdFusion

ColdFusion | Improper Access Control (CWE-284)

EPSS 24%CVSS 9.1

CVE-2025-24447 · Adobe ColdFusion

ColdFusion | Deserialization of Untrusted Data (CWE-502)

EPSS 2%CVSS 9.1

CVE-2025-24446 · Adobe ColdFusion

ColdFusion | Improper Input Validation (CWE-20)

EPSS 2%CVSS 9.1

CVE-2025-30282 · Adobe ColdFusion

ColdFusion | Improper Authentication (CWE-287)

EPSS 2%CVSS 9.1

Fortinet1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2024-48887 · Fortinet FortiSwitch

A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passw…

EPSS 16%CVSS 9.3

ConnMan1 vulnerability on this pageMax CVSS 9.0Priority 46KEV 0

CVE-2025-32743 · ConnMan ConnMan

In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty string when the TC (Truncated) bit is set i…

EPSS 0.5%public exploit CVSS 9.0

HGiga3 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-3361 · HGiga iSherlock 4.5

HGiga iSherlock - OS Command Injection

CVE-2025-3362 · HGiga iSherlock 4.5

HGiga iSherlock - OS Command Injection

CVE-2025-3363 · HGiga iSherlock 4.5

HGiga iSherlock - OS Command Injection

Ivanti1 vulnerability on this pageMax CVSS 9.6Priority 43KEV 0

CVE-2025-22466 · Ivanti Endpoint Manager

Reflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to o…

EPSS 1%CVSS 9.6

Inaba Denki Sangyo Co., Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-27797 · Inaba Denki Sangyo Co., Ltd. AC-WPS-11ac

OS command injection vulnerability in the specific service exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'.

Tiki1 vulnerability on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2025-32461 · Tiki Tiki

wikiplugin_includetpl in lib/wiki-plugins/wikiplugin_includetpl.php in Tiki before 28.3 mishandles input to an eval.

EPSS 0.9%CVSS 9.9

SAP_SE3 vulnerabilities on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2025-27429 · SAP_SE SAP S/4HANA (Private Cloud)

Code Injection Vulnerability in SAP S/4HANA (Private Cloud or On-Premise)

EPSS 0.8%CVSS 9.9

CVE-2025-31330 · SAP_SE SAP Landscape Transformation (Analysis Platform)

Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)

EPSS 0.8%CVSS 9.9

CVE-2025-30016 · SAP_SE SAP Financial Consolidation

Authentication Bypass Vulnerability in SAP Financial Consolidation

Siemens6 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-54092 · Siemens Industrial Edge Device Kit - arm64 V1.17

A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device Kit - arm64 V1.18…

EPSS 0.8%CVSS 9.8

CVE-2024-41788 · Siemens SENTRON 7KT PAC1260 Data Manager

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions).

EPSS 0.9%CVSS 9.4

CVE-2024-41789 · Siemens SENTRON 7KT PAC1260 Data Manager

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions).

EPSS 0.9%CVSS 9.4

CVE-2024-41790 · Siemens SENTRON 7KT PAC1260 Data Manager

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions).

EPSS 0.9%CVSS 9.4

CVE-2024-41794 · Siemens SENTRON 7KT PAC1260 Data Manager

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions).

EPSS 0.6%CVSS 10.0

CVE-2024-41792 · Siemens SENTRON 7KT PAC1260 Data Manager

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions).

EPSS 0.6%CVSS 9.2

Spotfire2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-3115 · Spotfire Spotfire Statistics Services

Spotfire Data Function Vulnerability

EPSS 0.7%CVSS 9.8

CVE-2025-3114 · Spotfire Spotfire Enterprise Runtime for R

Spotfire Code Execution Vulnerability

EPSS 0.6%CVSS 9.4

Elastic1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-12556 · Elastic Kibana

Kibana Prototype Pollution can lead to code injection

Go standard library1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2025-22871 · Go standard library net/http/internal

Request smuggling due to acceptance of invalid chunked data in net/http

EPSS 0.8%CVSS 9.1

Mestres do WP1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-32695 · Mestres do WP Checkout Mestres WP

WordPress Checkout Mestres WP plugin <= 8.7.5 - Privilege Escalation Vulnerability

mitre1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-55210 · mitre

An issue in TOTVS Framework (Linha Protheus) 12.1.2310 allows attackers to bypass multi-factor authentication (MFA) via a crafted websock…

Nirmal Kumar Ram1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2025-32140 · Nirmal Kumar Ram WP Remote Thumbnail

WordPress WP Remote Thumbnail Plugin <= 1.3.2 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 9.9

wpminds1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2025-2004 · wpminds Simple WP Events

Simple WP Events <= 1.8.17 - Unauthenticated Arbitrary File Deletion

EPSS 0.9%CVSS 9.1

Bogdan Bendziukov1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2025-31002 · Bogdan Bendziukov Squeeze

WordPress Squeeze plugin <= 1.6 - Arbitrary File Upload vulnerability

EPSS 0.7%CVSS 9.1

Dell1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-27690 · Dell PowerScale OneFS

Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability.

EPSS 0.5%CVSS 9.8

Joomla! Project1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-25226 · Joomla! Project Joomla! Framework

[20250401] - Joomla Framework - SQL injection vulnerability in quoteNameStr method of Database package

EPSS 0.5%CVSS 9.8

lenve1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-3398 · lenve VBlog

lenve VBlog WebSecurityConfig.java configure access control

EPSS 0.5%CVSS 9.8

Adam Nowak1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-31033 · Adam Nowak Buddypress Humanity

WordPress Buddypress Humanity plugin <= 1.2 - CSRF to Privilege Escalation vulnerability

EPSS 0.4%CVSS 9.8

Brian Batt - elearningfreak.com1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2025-32202 · Brian Batt - elearningfreak.com Insert or Embed Articulate Content into WordPress

WordPress Insert or Embed Articulate Content into WordPress plugin <= 4.3000000025 - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 9.1

appsbd1 vulnerability on this pageMax CVSS 9.6Priority 34KEV 0

CVE-2025-32642 · appsbd Vite Coupon

WordPress Vite Coupon plugin <= 1.0.9 - CSRF to Remote Code Execution (RCE) vulnerability

GraphicsMagick1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2025-32460 · GraphicsMagick GraphicsMagick

GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.

EPSS 0.4%CVSS 9.1

Guichaguri1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-32020 · Guichaguri crud-query-parser

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in crud-query-parser

EPSS 0.4%CVSS 9.3

Agence web Eoxia - Montpellier1 vulnerability on this pageMax CVSS 9.6Priority 33KEV 0

CVE-2025-32576 · Agence web Eoxia - Montpellier WP shop

WordPress WP shop plugin <= 2.6.1 - CSRF to Arbitrary File Upload vulnerability

anantaddons1 vulnerability on this pageMax CVSS 9.6Priority 33KEV 0

CVE-2025-32641 · anantaddons Anant Addons for Elementor

WordPress Anant Addons for Elementor plugin <= 1.1.8 - CSRF to Arbitrary Plugin Installation vulnerability

Uncodethemes1 vulnerability on this pageMax CVSS 9.6Priority 33KEV 0

CVE-2025-32496 · Uncodethemes Ultra Demo Importer

WordPress Ultra Demo Importer plugin <= 1.0.5 - CSRF to RCE vulnerability