by Kastro CVE-2025-25579 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,091 matching vulnerabilities · Page 352 of 782
mitre
CVE-2025-22939 · mitre
A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root…
CVE-2024-54805 · mitre
Netgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection.
CVE-2024-54807 · mitre
In Netgear WNR854T 1.5.2 (North America), the UPNP service is vulnerable to command injection in the function addmap_exec which parses th…
CVE-2025-22941 · mitre
A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root a…
CVE-2024-54803 · mitre
Netgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection.
CVE-2024-54804 · mitre
Netgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection.
CVE-2024-54806 · mitre
Netgear WNR854T 1.5.2 (North America) is vulnerable to Arbitrary command execution in cmd.cgi which allows for the execution of system co…
CVE-2025-28256 · mitre
An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file…
CVE-2024-24292 · mitre
A Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows an attacker to execute arbitrary code via the aim function in the aim.js co…
CVE-2024-38985 · mitre
janryWang products depath v1.0.6 and cool-path v1.1.2 were discovered to contain a prototype pollution via the set() method at setIn (lib…
CVE-2024-38988 · mitre
alizeait unflatto <= 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/index.js.
CVE-2024-54808 · mitre
Netgear WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in the SetDefaultConnectionService function du…
CVE-2024-54802 · mitre
In Netgear WNR854T 1.5.2 (North America), the UPNP service (/usr/sbin/upnp) is vulnerable to stack-based buffer overflow in the M-SEARCH…
CVE-2024-54809 · mitre
Netgear Inc WNR854T 1.5.2 (North America) contains a stack-based buffer overflow vulnerability in the parse_st_header function due to use…
CVE-2025-22937 · mitre
An issue in Adtran 411 ONT vL80.00.0011.M2 allows attackers to escalate privileges via unspecified vectors.
CVE-2025-22938 · mitre
Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.
CVE-2025-28219 · mitre
Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary…
CVE-2025-28087 · mitre
Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php.
CVE-2025-22940 · mitre
Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the admin password.
CVE-2025-22953 · mitre
A SQL injection vulnerability exists in Epicor HCM 2021 1.9, with patches available: 5.16.0.1033/HCM2022, 5.17.0.1146/HCM2023, and 5.18.0…
CVE-2025-28089 · mitre
maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled Task function.
CVE-2025-28090 · mitre
maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) in the Collection Custom Interface feature.
CVE-2025-28091 · mitre
maccms10 v2025.1000.4047 has a Server-Side Request Forgery (SSRF) vulnerability via Add Article.
CVE-2024-56975 · mitre
InvoicePlane (all versions tested as of December 2024) v.1.6.11 and before contains a remote code execution vulnerability in the upload_f…
ESAFENET
LabRedesCefetRJ
CVE-2025-30364 · LabRedesCefetRJ WeGIA
WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario
CVE-2025-30365 · LabRedesCefetRJ WeGIA
SQL Injection in query_geracao_auto.php
CVE-2025-30361 · LabRedesCefetRJ WeGIA
WeGIA Vulnerable to Broken Authentication - Old Password Validation
CVE-2025-30367 · LabRedesCefetRJ WeGIA
WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint
emlog
extendthemes
CVE-2025-2294 · extendthemes Kubio AI Page Builder
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
Bluestar
Hewlett Packard Enterprise
CVE-2024-13804 · Hewlett Packard Enterprise HPE Insight Cluster Management Utility (CMU)
Unauthenticated RCE in HPE Insight Cluster Management Utility
Dell
CVE-2025-22398 · Dell Unity
Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Inject…
CVE-2024-49601 · Dell Unity
Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Inject…
CVE-2025-24383 · Dell Unity
Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Inject…
PHP Group
Canon Inc.
CVE-2025-1268 · Canon Inc. Generic Plus PCL6 Printer Driver
Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic P…
John Darrel
CVE-2025-26909 · John Darrel Hide My WP Ghost
WordPress Hide My WP Ghost plugin <= 5.4.01 - Local File Inclusion to RCE vulnerability
mestresdowp
CVE-2025-2266 · mestresdowp Checkout Mestres do WP for WooCommerce
Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update
Linux
mywebtonet
CVE-2025-22526 · mywebtonet PHP/MySQL CPU performance statistics