Critical vulnerability archive — page 354

Kentico2 vulnerabilities on this pageMax CVSS 9.8Priority 99KEV 2

CVE-2025-2746 · Kentico Xperience

Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass

KEV · due 10 Nov EPSS 74%public exploit SSVC act CVSS 9.8

CVE-2025-2747 · Kentico Xperience

Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass

KEV · due 10 Nov EPSS 97%public exploit SSVC act CVSS 9.8

AMTT1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-2701 · AMTT Hotel Broadband Operation System

AMTT Hotel Broadband Operation System port_setup.php popen os command injection

EPSS 7%public exploit CVSS 9.8

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2025-2621 · D-Link DAP-1620

D-Link DAP-1620 storage check_dws_cookie stack-based overflow

EPSS 2%public exploit CVSS 9.8

mitre5 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2025-29135 · mitre

A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack…

EPSS 1%public exploit CVSS 9.8

CVE-2025-29100 · mitre

Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the parameter list.

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-29315 · mitre

An issue in the Shiro-based RBAC (Role-based Access Control) mechanism of OpenDaylight Service Function Chaining (SFC) Subproject SFC Sod…

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-29312 · mitre

An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the lin…

EPSS 0.5%public exploit CVSS 9.1

CVE-2025-29310 · mitre

An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted LLDP packet.

EPSS 0.6%CVSS 9.8

Project Worlds3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-2661 · Project Worlds Online Time Table Generator

Project Worlds Online Time Table Generator index.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-2659 · Project Worlds Online Time Table Generator

Project Worlds Online Time Table Generator index.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2660 · Project Worlds Online Time Table Generator

Project Worlds Online Time Table Generator index.php sql injection

EPSS 0.5%public exploit CVSS 9.8

yiisoft2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-2689 · yiisoft Yii2

yiisoft Yii2 SortableIterator.php getIterator deserialization

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-2690 · yiisoft Yii2

yiisoft Yii2 MockClass.php generate deserialization

EPSS 0.7%public exploit CVSS 9.8

PHPGurukul27 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-2640 · PHPGurukul Doctor Appointment Management System

PHPGurukul Doctor Appointment Management System appointment-bwdates-reports-details.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2641 · PHPGurukul Art Gallery Management System

PHPGurukul Art Gallery Management System edit-artist-detail.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2642 · PHPGurukul Art Gallery Management System

PHPGurukul Art Gallery Management System edit-art-product-detail.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2643 · PHPGurukul Art Gallery Management System

PHPGurukul Art Gallery Management System edit-art-type-detail.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2644 · PHPGurukul Art Gallery Management System

PHPGurukul Art Gallery Management System add-art-product.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2646 · PHPGurukul Art Gallery Management System

PHPGurukul Art Gallery Management System admin-profile.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2656 · PHPGurukul Zoo Management System

PHPGurukul Zoo Management System login.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2658 · PHPGurukul Online Security Guards Hiring System

PHPGurukul Online Security Guards Hiring System search-request.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2663 · PHPGurukul Bank Locker Management System

PHPGurukul Bank Locker Management System search-locker-details.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2665 · PHPGurukul Online Security Guards Hiring System

PHPGurukul Online Security Guards Hiring System bwdates-reports-details.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2674 · PHPGurukul Bank Locker Management System

PHPGurukul Bank Locker Management System aboutus.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2675 · PHPGurukul Bank Locker Management System

PHPGurukul Bank Locker Management System add-lockertype.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2677 · PHPGurukul Bank Locker Management System

PHPGurukul Bank Locker Management System changeidproof.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2678 · PHPGurukul Bank Locker Management System

PHPGurukul Bank Locker Management System changeimage1.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2681 · PHPGurukul Bank Locker Management System

PHPGurukul Bank Locker Management System edit-locker.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2683 · PHPGurukul Bank Locker Management System

PHPGurukul Bank Locker Management System profile.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2684 · PHPGurukul Bank Locker Management System

PHPGurukul Bank Locker Management System search-report-details.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2627 · PHPGurukul Art Gallery Management System

PHPGurukul Art Gallery Management System contactus.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2628 · PHPGurukul Art Gallery Management System

PHPGurukul Art Gallery Management System art-enquiry.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2647 · PHPGurukul Art Gallery Management System

PHPGurukul Art Gallery Management System search.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2648 · PHPGurukul Art Gallery Management System

PHPGurukul Art Gallery Management System view-enquiry-detail.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2649 · PHPGurukul Doctor Appointment Management System

PHPGurukul Doctor Appointment Management System check-appointment.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2676 · PHPGurukul Bank Locker Management System

PHPGurukul Bank Locker Management System add-subadmin.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2679 · PHPGurukul Bank Locker Management System

PHPGurukul Bank Locker Management System contact-us.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2680 · PHPGurukul Bank Locker Management System

PHPGurukul Bank Locker Management System edit-assign-locker.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2682 · PHPGurukul Bank Locker Management System

PHPGurukul Bank Locker Management System edit-subadmin.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2687 · PHPGurukul eLearning System

PHPGurukul eLearning System Image index.php unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

projectworlds1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-2657 · projectworlds Apartment Visitors Management System

projectworlds Apartment Visitors Management System front.php sql injection

EPSS 0.5%public exploit CVSS 9.8

SourceCodester3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-2654 · SourceCodester AC Repair and Services System

SourceCodester AC Repair and Services System manage_service.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-2655 · SourceCodester AC Repair and Services System

SourceCodester AC Repair and Services System Users.php delete_users sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-2626 · SourceCodester Kortex Lite Advocate Office Management System

SourceCodester Kortex Lite Advocate Office Management System edit_case.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Fortinet1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2023-25610 · Fortinet FortiSwitchManager

A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, v…

EPSS 18%CVSS 9.3

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-1446 · Unknown Pods

Pods < 3.2.8.2 - Admin+ SQL Injection

EPSS 0.4%public exploit CVSS 9.8

snyk1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2025-2691 · snyk

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname…

EPSS 0.4%public exploit CVSS 9.1

Jacob Schwartz1 vulnerability on this pageMax CVSS 9.6Priority 32KEV 0

CVE-2025-30615 · Jacob Schwartz WP e-Commerce Style Email

WordPress WP e-Commerce Style Email plugin <= 0.6.2 - CSRF to Remote Code Execution vulnerability

EPSS 0.2%CVSS 9.6

wpshopee1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2025-30528 · wpshopee Awesome Logos

WordPress Awesome Logos plugin <= 1.2 - CSRF to SQL Injection vulnerability

EPSS 0.3%CVSS 9.3

The archive.