Critical vulnerability archive — page 357

D-Link2 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-2359 · D-Link DIR-823G

D-Link DIR-823G DDNS Service HNAP1 SetDDNSSettings improper authorization

EPSS 15%public exploit CVSS 9.8

CVE-2025-2360 · D-Link DIR-823G

D-Link DIR-823G UPnP Service HNAP1 SetUpnpSettings improper authorization

EPSS 4%CVSS 9.8

node-saml2 vulnerabilities on this pageMax CVSS 9.3Priority 57KEV 0

CVE-2025-29774 · node-saml xml-crypto

xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References

EPSS 9%public exploit CVSS 9.3

CVE-2025-29775 · node-saml xml-crypto

xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment

EPSS 10%public exploit CVSS 9.3

nasa4 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

TOTOLINK2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2025-2369 · TOTOLINK EX1800T

TOTOLINK EX1800T cstecgi.cgi setPasswordCfg stack-based overflow

EPSS 1%public exploit CVSS 9.8

CVE-2025-2370 · TOTOLINK EX1800T

TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig stack-based overflow

EPSS 1%public exploit CVSS 9.8

mitre8 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-57169 · mitre

A file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload.php.

EPSS 1.0%public exploit CVSS 9.8

CVE-2025-25914 · mitre

SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-25650 · mitre

An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produce cloned NFC card…

EPSS 0.9%public exploit CVSS 9.1

CVE-2025-25595 · mitre

A lack of rate limiting in the login page of Safe App version a3.0.9 allows attackers to bypass authentication via a brute force attack.

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-30113 · mitre

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820.

EPSS 0.4%CVSS 9.8

CVE-2025-30115 · mitre

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820.

EPSS 0.4%CVSS 9.8

CVE-2025-30122 · mitre

An issue was discovered on ROADCAM X3 devices.

EPSS 0.4%CVSS 9.8

CVE-2025-30114 · mitre

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820.

EPSS 0.5%CVSS 9.1

2740566753 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-2320 · 274056675 springboot-openai-chatgpt

274056675 springboot-openai-chatgpt User submit improper authorization

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-2322 · 274056675 springboot-openai-chatgpt

274056675 springboot-openai-chatgpt OpenController.java hard-coded credentials

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-2334 · 274056675 springboot-openai-chatgpt

274056675 springboot-openai-chatgpt Chat History chat deleteChat access control

EPSS 0.6%public exploit CVSS 9.1

lenve1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-2363 · lenve VBlog

lenve VBlog ArticleController.java uploadImg path traversal

EPSS 0.7%public exploit CVSS 9.8

code-projects2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-2385 · code-projects Modern Bag

code-projects Modern Bag login.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2391 · code-projects Blood Bank Management System

code-projects Blood Bank Management System Admin Login Page admin_login.php sql injection

EPSS 0.6%public exploit CVSS 9.8

PHPGurukul9 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-2362 · PHPGurukul Pre-School Enrollment System

PHPGurukul Pre-School Enrollment System contact-us.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2372 · PHPGurukul Human Metapneumovirus Testing Management System

PHPGurukul Human Metapneumovirus Testing Management System Password Recovery Page password-recovery.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2379 · PHPGurukul Apartment Visitors Management System

PHPGurukul Apartment Visitors Management System create-pass.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2380 · PHPGurukul Apartment Visitors Management System

PHPGurukul Apartment Visitors Management System admin-profile.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2381 · PHPGurukul Curfew e-Pass Management System

PHPGurukul Curfew e-Pass Management System search-pass.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2382 · PHPGurukul Online Banquet Booking System

PHPGurukul Online Banquet Booking System booking-search.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2383 · PHPGurukul Doctor Appointment Management System

PHPGurukul Doctor Appointment Management System search.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2386 · PHPGurukul Local Services Search Engine Management System

PHPGurukul Local Services Search Engine Management System serviceman-search.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-2472 · PHPGurukul Apartment Visitors Management System

PHPGurukul Apartment Visitors Management System Sign In index.php sql injection

EPSS 0.5%public exploit CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-2387 · SourceCodester Online Food Ordering System

SourceCodester Online Food Ordering System ajax.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Pandora FMS1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-12992 · Pandora FMS Pandora FMS

Remote Code Execution leads to Command Injection

EPSS 1%CVSS 9.8

IBM1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-2000 · IBM Qiskit SDK

Qiskit SDK code execution

EPSS 0.8%CVSS 9.8

IROAD1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-2345 · IROAD Dash Cam X5

IROAD Dash Cam X5/Dash Cam X6 improper authorization

EPSS 0.8%CVSS 9.8

Potenzaglobalsolutions1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-13824 · Potenzaglobalsolutions CiyaShop - Multipurpose WooCommerce Theme

CiyaShop - Multipurpose WooCommerce Theme <= 4.19.0 - Unauthenticated PHP Object Injection

EPSS 0.7%CVSS 9.8

ShineTheme1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-1771 · ShineTheme Travel Booking WordPress Theme

Traveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_post

EPSS 0.7%CVSS 9.8

e-Excellence1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-2395 · e-Excellence U-Office Force

e-Excellence U-Office Force - Improper Authentication

EPSS 0.6%CVSS 9.8

PureThemes1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-2232 · PureThemes Realteo

Realteo - Real Estate Plugin by Purethemes <= 1.2.8 - Authentication Bypass via 'do_register_user'

EPSS 0.6%CVSS 9.8

SICK AG2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-27595 · SICK AG SICK DL100-2xxxxxxx

Weak hashing alghrythm

EPSS 0.5%CVSS 9.8

CVE-2025-27593 · SICK AG SICK DL100-2xxxxxxx

RCE due to Device Driver

EPSS 0.4%CVSS 9.3

Fortinet1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-55594 · Fortinet FortiWeb

An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.…

EPSS 0.5%CVSS 9.8

owen23451 vulnerability on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2025-2304 · owen2345 camaleon-cms

Camaleon CMS Privilege Escalation

EPSS 0.6%CVSS 9.4

Solid Plugins1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-13321 · Solid Plugins AnalyticsWP

AnalyticsWP <= 2.0.0 - Unauthenticated SQL Injection

EPSS 0.5%CVSS 9.8

uxper1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-13771 · uxper Civi - Job Board & Freelance Marketplace WordPress Theme

Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Authentication Bypass via Password Update

EPSS 0.4%CVSS 9.8

Innovación y Cualificación2 vulnerabilities on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-2199 · Innovación y Cualificación ajax.php plugin

SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php

EPSS 0.3%CVSS 9.3

CVE-2025-2200 · Innovación y Cualificación IcProgreso plugin

SQL injection vulnerability in the Innovación y Cualificación IcProgreso plugin

EPSS 0.3%CVSS 9.3

silverplugins2171 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2025-26875 · silverplugins217 Multiple Shipping And Billing Address For Woocommerce

WordPress Multiple Shipping And Billing Address For Woocommerce Plugin <= 1.3 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

The archive.