The archive.

CVE-2025-27641 · mitre

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.951 Application 20.0.2368 allows Unauthenticated APIs for Single-…

CVE-2025-27642 · mitre

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package E…

CVE-2025-27643 · mitre

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006.

CVE-2025-27640 · mitre

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows SQL Injection V-2024-012.

EPSS 0.7%CVSS 9.8

CVE-2024-50706 · mitre

Unauthenticated SQL injection vulnerability in Uniguest Tripleplay version 23.1+ allows remote attackers to execute arbitrary SQL queries…

EPSS 0.5%CVSS 9.8

CVE-2025-26136 · mitre

A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.

hzmanyun2 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-1946 · hzmanyun Education and Training System

hzmanyun Education and Training System exportPDF command injection

EPSS 5%public exploit CVSS 9.8

CVE-2025-1947 · hzmanyun Education and Training System

hzmanyun Education and Training System UploadImageController.java scorm command injection

EPSS 5%public exploit CVSS 9.8

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2025-1876 · D-Link DAP-1562

D-Link DAP-1562 HTTP Header http_request_parse stack-based overflow

EPSS 4%public exploit CVSS 9.8

Codezips2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-1903 · Codezips Online Shopping Website

Codezips Online Shopping Website cart_add.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-1959 · Codezips Gym Management System

Codezips Gym Management System change_s_pwd.php sql injection

aaluoxiang1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-1958 · aaluoxiang oa_system

aaluoxiang oa_system address-mapper.xml sql injection

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-1956 · code-projects Shopping Portal

code-projects Shopping Portal Login index.php sql injection

PHPGurukul7 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-1894 · PHPGurukul Restaurant Table Booking System

PHPGurukul Restaurant Table Booking System search-result.php sql injection

CVE-2025-1900 · PHPGurukul Restaurant Table Booking System

PHPGurukul Restaurant Table Booking System add-table.php sql injection

CVE-2025-1901 · PHPGurukul Restaurant Table Booking System

PHPGurukul Restaurant Table Booking System check_availability.php sql injection

CVE-2025-1902 · PHPGurukul Student Record System

PHPGurukul Student Record System password-recovery.php sql injection

CVE-2025-1952 · PHPGurukul Restaurant Table Booking System

PHPGurukul Restaurant Table Booking System password-recovery.php sql injection

CVE-2025-1954 · PHPGurukul Human Metapneumovirus Testing Management System

PHPGurukul Human Metapneumovirus Testing Management System login.php sql injection

CVE-2025-1906 · PHPGurukul Restaurant Table Booking System

PHPGurukul Restaurant Table Booking System profile.php sql injection

projectworlds1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-1962 · projectworlds Online Hotel Booking

projectworlds Online Hotel Booking addroom.php sql injection

conda-forge1 vulnerability on this pageMax CVSS 9.3Priority 48KEV 0

CVE-2025-27510 · conda-forge conda-forge-metadata

RCE in the package conda-forge-metadata

EPSS 0.6%public exploit CVSS 9.3

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-1890 · VulDB

shishuocms ManageUpLoadAction.java handleRequest unrestricted upload

LabRedesCefetRJ1 vulnerability on this pageMax CVSS 9.2Priority 47KEV 0

CVE-2025-27419 · LabRedesCefetRJ WeGIA

Denial of Service (DoS) in WeGIA due to Recursive Crawling of Dynamic URLs

EPSS 0.6%public exploit CVSS 9.2

spicethemes1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-1307 · spicethemes Newscrunch

Newscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload

EPSS 2%CVSS 9.8

stellarwp1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-0912 · stellarwp GiveWP – Donation Plugin and Fundraising Platform

GiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injection

EPSS 1%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-55532 · Apache Software Foundation Apache Ranger

Apache Ranger: Improper Neutralization of Formula Elements in a CSV File

EPSS 0.8%CVSS 9.8

FRESHFACE1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2025-26970 · FRESHFACE Ark Theme Core

WordPress Ark Theme Core plugin < 1.71.0 - Unauthenticated Remote Code Execution (RCE) vulnerability

EPSS 0.7%CVSS 10.0

GMOD1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-23410 · GMOD Apollo

GMOD Apollo Relative Path Traversal

EPSS 0.7%CVSS 9.8

Miniaudio1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-41147 · Miniaudio Miniaudio

An out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality of Miniaudio miniaudio v0.11.21.

EPSS 0.7%CVSS 9.8

Proliz Software1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-8262 · Proliz Software OBS

Path Traversal in Proliz Software's OBS

EPSS 0.6%CVSS 9.8

Kingsoft1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2024-11957 · Kingsoft WPS Office

Arbitrary Code Execution in WPS Office

EPSS 0.1%public exploit CVSS 9.3

Mozilla2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-1942 · Mozilla Firefox

Disclosure of uninitialized memory when .toUpperCase() causes string to get longer

EPSS 0.5%CVSS 9.8

CVE-2025-1941 · Mozilla Firefox

Lock screen setting bypass in Firefox Focus for Android

EPSS 0.4%CVSS 9.1

CodeSolz1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2025-26535 · CodeSolz Bitcoin / AltCoin Payment Gateway for WooCommerce

WordPress Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop plugin <= 1.7.6 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.3

Cozy Vision1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2025-26988 · Cozy Vision SMS Alert Order Notifications

WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.3

enituretechnology2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-27268 · enituretechnology Small Package Quotes – Worldwide Express Edition

WordPress Small Package Quotes – Worldwide Express Edition Plugin <= 5.2.18 - SQL Injection vulnerability

EPSS 0.5%CVSS 9.3

CVE-2025-27270 · enituretechnology Residential Address Detection

WordPress Residential Address Detection Plugin <= 2.5.4 - Arbitrary Option Update to Privilege Escalation vulnerability

EPSS 0.5%CVSS 9.8

zitadel1 vulnerability on this pageMax CVSS 9.0Priority 37KEV 0

CVE-2025-27507 · zitadel zitadel

IDOR Vulnerabilities in ZITADEL's Admin API that Primarily Impact LDAP Configurations

EPSS 0.6%CVSS 9.0

Checkmk1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-47092 · Checkmk

Insecure deserialization and improper certificate validation in Checkmk Exchange plugin check-mk-api

mmaitre3141 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-1889 · mmaitre314 picklescan

picklescan - Security scanning bypass via non-standard file extensions