by Kastro CVE-2025-30065 · Apache Software Foundation Apache Parquet Java
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,091 matching vulnerabilities · Page 350 of 782
Apache Software Foundation
CVE-2024-56325 · Apache Software Foundation Apache Pinot
Apache Pinot: Authentication bypass issue. If the path does not contain / and contain . authentication is not required
mitre
CVE-2025-29085 · mitre
SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboar…
CVE-2025-29062 · mitre
An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the set_LimitClie…
CVE-2025-29063 · mitre
An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/set…
CVE-2024-38392 · mitre
Pexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of resources, and thus remote attackers can…
nasa
Project Worlds
CVE-2025-3040 · Project Worlds Online Time Table Generator
Project Worlds Online Time Table Generator add_student.php unrestricted upload
CVE-2025-3041 · Project Worlds Online Time Table Generator
Project Worlds Online Time Table Generator updatestudent.php unrestricted upload
CVE-2025-3042 · Project Worlds Online Time Table Generator
Project Worlds Online Time Table Generator updateprofile.php unrestricted upload
oretnom23
CVE-2025-3045 · oretnom23 Apartment Visitor Management System
oretnom23/SourceCodester Apartment Visitor Management System remove-apartment.php sql injection
Rometheme
Apple
CVE-2025-24232 · Apple macOS
This issue was addressed through improved state management.
CVE-2025-24238 · Apple iOS and iPadOS
A logic issue was addressed with improved checks.
CVE-2025-30426 · Apple iOS and iPadOS
This issue was addressed with additional entitlement checks.
CVE-2025-30430 · Apple iOS and iPadOS
This issue was addressed through improved state management.
CVE-2025-24167 · Apple Safari
This issue was addressed through improved state management.
CVE-2025-24233 · Apple macOS
A permissions issue was addressed with additional restrictions.
CVE-2025-24264 · Apple Safari
The issue was addressed with improved memory handling.
CVE-2025-24265 · Apple macOS
An out-of-bounds read was addressed with improved bounds checking.
CVE-2025-24259 · Apple iPadOS
This issue was addressed with additional entitlement checks.
CVE-2025-24263 · Apple macOS
A privacy issue was addressed by moving sensitive data to a protected location.
SourceCodester
CVE-2025-3096 · SourceCodester Clinic's Patient Management System
Clinics Patient Management System SQL Injection
adamskaat
CVE-2025-30841 · adamskaat Countdown & Clock
WordPress Countdown & Clock plugin <=2.8.8 - Remote Code Execution (RCE) vulnerability
g5theme
CVE-2025-30849 · g5theme Essential Real Estate
WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability
kellydiek
CVE-2025-30580 · kellydiek DigiWidgets Image Editor
WordPress DigiWidgets Image Editor plugin <= 1.10 - Remote Code Execution (RCE) Vulnerability
WP Travel Engine
CVE-2025-30870 · WP Travel Engine WP Travel Engine
WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability
Hossein
CVE-2025-31095 · Hossein Material Dashboard
WordPress Material Dashboard plugin <= 1.4.5 - Privilege Escalation Vulnerability
Sabuj Kundu
silverplugins217
CVE-2025-31087 · silverplugins217 Multiple Shipping And Billing Address For Woocommerce
WordPress Multiple Shipping And Billing Address For Woocommerce plugin <= 1.5 - PHP Object Injection Vulnerability
sunshinephotocart
CVE-2025-31084 · sunshinephotocart Sunshine Photo Cart
WordPress Sunshine Photo Cart plugin <= 3.4.10 - PHP Object Injection Vulnerability
cozyvision1
CVE-2024-13553 · cozyvision1 SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery
SMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege Escalation
JoomSky
Linux
ApusThemes
click5
CVE-2025-31531 · click5 History Log by click5
WordPress History Log by click5 plugin <= 1.0.13 - SQL Injection vulnerability
davidfcarr
EXEIdeas International
CVE-2025-31579 · EXEIdeas International WP AutoKeyword
WordPress WP AutoKeyword plugin <= 1.0 - SQL Injection vulnerability
Martin Nguyen
CVE-2025-30807 · Martin Nguyen Next-Cart Store to WooCommerce Migration
WordPress Next-Cart Store to WooCommerce Migration plugin <= 3.9.4 - SQL Injection vulnerability
Salesmate.io
CVE-2025-31551 · Salesmate.io Salesmate Add-On for Gravity Forms
WordPress Salesmate Add-On for Gravity Forms plugin <= 2.0.3 - SQL Injection vulnerability
shopperdotcom
CVE-2025-31534 · shopperdotcom Shopper
WordPress Shopper plugin <= 3.2.5 - SQL Injection vulnerability
WPFactory
CVE-2025-31553 · WPFactory Advanced WooCommerce Product Sales Reporting
WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerability
Ads by WPQuads
CVE-2025-30876 · Ads by WPQuads Ads by WPQuads
WordPress Ads by WPQuads plugin <= 2.0.87.1 - SQL Injection Vulnerability
Ays Pro
Xavi Ivars
CVE-2025-30971 · Xavi Ivars XV Random Quotes