The archive.

CVE-2024-36046 · mitre

Infoblox NIOS through 8.6.4 executes with more privileges than required.

CVE-2024-36047 · mitre

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation.

CVE-2024-37566 · mitre

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids.

CVE-2024-37567 · mitre

Infoblox NIOS through 8.6.4 has Improper Access Control for Grids.

EPSS 0.4%CVSS 9.1

WP Swings1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-8425 · WP Swings WooCommerce Ultimate Gift Card

WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload

EPSS 4%CVSS 9.8

creativeon1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-9193 · creativeon WHMpress - WHMCS WordPress Integration Plugin

WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update

EPSS 3%CVSS 9.8

Mautic1 vulnerability on this pageMax CVSS 9.9Priority 45KEV 0

CVE-2024-47051 · Mautic mautic/core

Remote Code Execution & File Deletion in Asset Uploads

EPSS 2%CVSS 9.9

mmaitre3141 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-1716 · mmaitre314 picklescan

picklescan - Security scanning bypass via 'pip main'

EPSS 2%CVSS 9.8

Linux18 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2022-49407 · Linux Linux

dlm: fix plock invalid read

EPSS 0.9%CVSS 9.8

CVE-2022-49561 · Linux Linux

netfilter: conntrack: re-fetch conntrack after insertion

EPSS 0.8%CVSS 9.8

CVE-2022-49093 · Linux Linux

skbuff: fix coalescing for page_pool fragment recycling

CVE-2022-49094 · Linux Linux

net/tls: fix slab-out-of-bounds bug in decrypt_internal

CVE-2022-49194 · Linux Linux

net: bcmgenet: Use stronger register read/writes to assure ordering

CVE-2022-49260 · Linux Linux

crypto: hisilicon/sec - fix the aead software fallback for engine

CVE-2022-49280 · Linux Linux

NFSD: prevent underflow in nfssvc_decode_writeargs()

CVE-2022-49356 · Linux Linux

SUNRPC: Trap RDMA segment overflows

CVE-2022-49362 · Linux Linux

NFSD: Fix potential use-after-free in nfsd_file_put()

CVE-2025-21796 · Linux Linux

nfsd: clear acl_access/acl_default after releasing them

CVE-2022-49058 · Linux Linux

cifs: potential buffer overflow in handling symlinks

EPSS 0.9%CVSS 9.1

CVE-2025-21707 · Linux Linux

mptcp: consolidate suboption status

CVE-2025-21748 · Linux Linux

ksmbd: fix integer overflows on 32 bit systems

CVE-2022-49149 · Linux Linux

rxrpc: Fix call timer start racing with call destruction

CVE-2022-49201 · Linux Linux

ibmvnic: fix race between xmit and reset

CVE-2022-49418 · Linux Linux

NFSv4: Fix free of uninitialized nfs4_label on referral lookup.

CVE-2025-21805 · Linux Linux

RDMA/rtrs: Add missing deinit() call

CVE-2024-58006 · Linux Linux

PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()

EPSS 0.3%CVSS 9.6

ToDesktop1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2025-27554 · ToDesktop ToDesktop

ToDesktop before 2024-10-03, as used by Cursor before 2024-10-03 and other applications, allows remote attackers to execute arbitrary com…

EPSS 0.8%CVSS 9.9

IBM2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-0159 · IBM Storage Virtualize

IBM FlashSystem authentication bypass

EPSS 0.9%CVSS 9.1

CVE-2025-0160 · IBM Storage Virtualize

IBM FlashSystem code execution

libmodbus1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-10918 · libmodbus libmodbus

Stack-based Buffer Overflow in libmodbus library

radareorg1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2025-1744 · radareorg radare2

Out-of-bounds Write in radare2

EPSS 0.5%CVSS 10.0

SiteSao1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-8420 · SiteSao DHVC Form

DHVC Form <= 2.4.7 - Unauthenticated Privilege Escalation

spotipy-dev1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-27154 · spotipy-dev spotipy

Spotipy's cache file, containing spotify auth token, is created with overly broad permissions

ATISoluciones1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-1751 · ATISoluciones CIGES

SQL Injection CIGES

CyberArk1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2025-22273 · CyberArk Endpoint Privilege Manager

Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager

EPSS 0.6%CVSS 9.3

Melapress1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-0767 · Melapress WP Activity Log

WP Activity Log 5.3.2 - Insecure deserialization

Ubiquiti Inc1 vulnerability on this pageMax CVSS 9.0Priority 38KEV 0

CVE-2025-23115 · Ubiquiti Inc UniFi Protect Cameras

A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor with access to Uni…

EPSS 0.7%CVSS 9.0

wpwax1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-1570 · wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP

Yukseloglu Filter1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-13148 · Yukseloglu Filter B2B Login Platform

SQLi in Yukseloglu Filter's B2B Login Platform