by Kastro CVE-2025-1974 · kubernetes ingress-nginx
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,091 matching vulnerabilities · Page 353 of 782
kubernetes
mitre
CVE-2024-55030 · mitre
A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands.
CVE-2025-28138 · mitre
The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg fu…
CVE-2024-48818 · mitre
An issue in IIT Bombay, Mumbai, India Bodhitree of cs101 version allows a remote attacker to execute arbitrary code.
CVE-2024-55028 · mitre
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a craf…
CVE-2024-42533 · mitre
SQL injection vulnerability in the authentication module in Convivance StandVoice 4.5 through 6.2 allows remote attackers to execute arbi…
CVE-2025-29306 · mitre
An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.
CVE-2024-55964 · mitre
An issue was discovered in Appsmith before 1.52.
CVE-2025-25373 · mitre
The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to gain an RCE on t…
CVE-2025-25535 · mitre
HTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 allows a remote attacker to escalate privileges via a crafted request.
CVE-2025-27832 · mitre
An issue was discovered in Artifex Ghostscript before 10.05.0.
CVE-2025-26003 · mitre
Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized command execution vulnerability when requesting the admin.cgi parameter with…
CVE-2025-27831 · mitre
An issue was discovered in Artifex Ghostscript before 10.05.0.
CVE-2025-27836 · mitre
An issue was discovered in Artifex Ghostscript before 10.05.0.
CVE-2025-27837 · mitre
An issue was discovered in Artifex Ghostscript before 10.05.0.
CVE-2025-25686 · mitre
semcms <=5.0 is vulnerable to SQL Injection in SEMCMS_Fuction.php.
CVE-2025-26002 · mitre
Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with set…
CVE-2025-26004 · mitre
Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack buffer overflow vulnerability when requesting admin.cgi parameter with s…
CVE-2025-26005 · mitre
Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack overflow vulnerability when requesting admin.cgi parameter with setNtp.
CVE-2025-26006 · mitre
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setAutorest.
CVE-2025-26007 · mitre
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login interface when requesting systemtil.cgi.
CVE-2025-26008 · mitre
In Telesquare TLR-2005KSH 1.1.4, an unauthorized stack overflow vulnerability exists when requesting admin.cgi parameter with setSyncTime…
CVE-2025-26010 · mitre
Telesquare TLR-2005KSH 1.1.4 allows unauthorized password modification when requesting the admin.cgi parameter with setUserNamePassword.
CVE-2025-26011 · mitre
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setUsernamePas…
nasa
SourceCodester
CVE-2025-2846 · SourceCodester Online Eyewear Shop
SourceCodester Online Eyewear Shop Registration Users.php registration sql injection
PHPGurukul
CVE-2025-2734 · PHPGurukul Old Age Home Management System
PHPGurukul Old Age Home Management System aboutus.php sql injection
CVE-2025-2735 · PHPGurukul Old Age Home Management System
PHPGurukul Old Age Home Management System add-services.php sql injection
CVE-2025-2736 · PHPGurukul Old Age Home Management System
PHPGurukul Old Age Home Management System bwdates-report-details.php sql injection
CVE-2025-2739 · PHPGurukul Old Age Home Management System
PHPGurukul Old Age Home Management System manage-services.php sql injection
CVE-2025-2737 · PHPGurukul Old Age Home Management System
PHPGurukul Old Age Home Management System contactus.php sql injection
CVE-2025-2738 · PHPGurukul Old Age Home Management System
PHPGurukul Old Age Home Management System manage-scdetails.php sql injection
zhijiantianya
CVE-2025-2707 · zhijiantianya ruoyi-vue-pro
zhijiantianya ruoyi-vue-pro Front-End Store upload path traversal
CVE-2025-2708 · zhijiantianya ruoyi-vue-pro
zhijiantianya ruoyi-vue-pro Backend File Upload upload path traversal
mingyuefusu 明月复苏
CVE-2025-2831 · mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统
mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 bookList getBookList sql injection
Mozilla
Govind
Rashid
smackcoders
CVE-2025-2332 · smackcoders Export All Posts, Products, Orders, Refunds & Users
Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection
NetApp
Tiny
Kingsoft
andy_moyle
CVE-2025-26941 · andy_moyle Church Admin
WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability
origincode
CVE-2025-30524 · origincode Product Catalog
WordPress Product Catalog plugin <= 1.0.4 - SQL Injection vulnerability
Trust Payments
CVE-2025-28942 · Trust Payments Trust Payments Gateway for WooCommerce
WordPress Trust Payments Gateway for WooCommerce plugin <= 1.1.4 - SQL Injection vulnerability
WPExperts.io
CVE-2025-28898 · WPExperts.io WP Multistore Locator
WordPress WP Multistore Locator plugin <= 2.5.2 - SQL Injection vulnerability
B&R Industrial Automation
CVE-2024-45480 · B&R Industrial Automation B&R APROL
Unauthorized local file reading in B&R APROL
Infonet Projekt SA
CVE-2025-1542 · Infonet Projekt SA OXARI ServiceDesk
Improper permission control in OXARI ServiceDesk
Shamalli
CVE-2025-28904 · Shamalli Web Directory Free