by Kastro CVE-2024-54085 · AMI MegaRAC-SPx
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,091 matching vulnerabilities · Page 358 of 782
AMI
Apache Software Foundation
Apple
SAML-Toolkits
mitre
CVE-2025-29384 · mitre
In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead…
CVE-2025-29385 · mitre
In Tenda AC9 v1.0 V15.03.05.14_multi, the cloneType parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can le…
CVE-2025-29386 · mitre
In Tenda AC9 v1.0 V15.03.05.14_multi, the mac parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to…
CVE-2025-25565 · mitre
SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in the Command.c file via the PtMakeCert and PtMakeCert2048 functions.
CVE-2025-25567 · mitre
SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in Internat.c via the UniToStrForSingleChars function.
CVE-2025-25568 · mitre
SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function.
CVE-2025-29029 · mitre
Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.
CVE-2025-29030 · mitre
Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.
CVE-2025-29031 · mitre
Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.
CVE-2025-26163 · mitre
CM Soluces Informatica Ltda Auto Atendimento 1.x.x was discovered to contain a SQL injection via the CPF parameter.
Santesoft
CVE-2025-2263 · Santesoft Sante PACS Server
Santesoft Sante PACS Server Stack-based Buffer Overflow
zzskzy
CVE-2025-2217 · zzskzy Warehouse Refinement Management System
zzskzy Warehouse Refinement Management System getAdyData.ashx ProcessRequest sql injection
CVE-2025-2216 · zzskzy Warehouse Refinement Management System
zzskzy Warehouse Refinement Management System SaveCrash.ashx UploadCrash unrestricted upload
Koha
dataease
realmag777
CVE-2025-1661 · realmag777 HUSKY – Products Filter Professional for WooCommerce
HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion
NVIDIA
CVE-2025-23242 · NVIDIA Riva
NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue.
CVE-2025-23243 · NVIDIA Riva
NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue.
CVE-2025-23360 · NVIDIA NeMo Framework
NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write.
rmosolgo
CVE-2025-27407 · rmosolgo graphql-ruby
Remote code execution when loading a crafted GraphQL schema
LoveCards
CVE-2025-2218 · LoveCards LoveCardsV2
LoveCards LoveCardsV2 Setting other access control
CVE-2025-2219 · LoveCards LoveCardsV2
LoveCards LoveCardsV2 image unrestricted upload
Theme Egg
CVE-2025-28915 · Theme Egg ThemeEgg ToolKit
WordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerability
Eclipse Foundation
CVE-2024-10838 · Eclipse Foundation Eclipse Cyclone DDS
Integer Underflow in DDS_Security_Deserialize_ methods may lead to OOB read
Wordfence
CVE-2024-11286 · Wordfence
WP JobHunt <= 7.1 - Authentication Bypass
CVE-2024-11284 · Wordfence
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover
CVE-2024-11285 · Wordfence
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Email Update/Account Takeover
Bitdefender
FRESHFACE
Siemens
CVE-2024-56336 · Siemens SINAMICS S200
A vulnerability has been identified in SINAMICS S200 (All versions with serial number beginning with SZVS8, SZVS9, SZVS0 or SZVSN and the…
CVE-2025-27494 · Siemens SiPass integrated AC5102 (ACC-G2)
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions…
CVE-2025-27493 · Siemens SiPass integrated AC5102 (ACC-G2)
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions…
jwpegram
CVE-2025-28872 · jwpegram Block Spam By Math Reloaded
WordPress Block Spam By Math Reloaded plugin <= 2.2.4 - Broken Access Control vulnerability
Linux
Percona
CVE-2025-26701 · Percona Monitoring and Management
An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova.
Schneider Electric
CVE-2025-1960 · Schneider Electric WebHMI – Deployed with EcoStruxure Power Automation System
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could cause an attacker to execute unauthorized…
AmentoTech
Pixflow
Fortinet
Optigo Networks
CVE-2025-2080 · Optigo Networks Visual BACnet Capture Tool