The archive.

CVE-2025-26607 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIA

CVE-2025-26608 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIA

CVE-2025-26609 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIA

CVE-2025-26611 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIA

CVE-2025-26612 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIA

CVE-2025-26617 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIA

CVE-2025-26610 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'restaurar_produto_desocultar.php' parameter 'id_produto' in WeGIA

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-26614 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'deletar_documento.php' parameter 'id_cargo' in WeGIA

EPSS 0.6%public exploit CVSS 9.4

ChurchCRM1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2025-1023 · ChurchCRM ChurchCRM

SQL Injection in ChurchCRM newCountName Parameter via EditEventTypes.php

EPSS 2%public exploit CVSS 9.8

Exiv21 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2025-26623 · Exiv2 exiv2

Use After Free in Exiv2

EPSS 0.9%public exploit CVSS 9.8

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-1379 · code-projects Real Estate Property Management System

code-projects Real Estate Property Management System CustomerReport.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Codezips1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-1380 · Codezips Gym Management System

Codezips Gym Management System del_plan.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Hirsch1 vulnerability on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2025-26793 · Hirsch Enterphone MESH

The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with default credentials (us…

EPSS 2%CVSS 10.0

italia2 vulnerabilities on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2025-24894 · italia spid-aspnetcore

SAML Response Signature Verification Bypass in SPID.AspNetCore.Authentication

EPSS 0.6%public exploit CVSS 9.1

CVE-2025-24895 · italia cie-aspnetcore

SAML Response Signature Verification Bypass in CIE.AspNetCore.Authentication

EPSS 0.6%public exploit CVSS 9.1

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-52577 · Apache Software Foundation Apache Ignite

Apache Ignite: Possible RCE when deserializing incoming messages by the server node

EPSS 3%CVSS 9.5

CVE-2024-56180 · Apache Software Foundation Apache EventMesh

Apache EventMesh: raft Hessian Deserialization Vulnerability allowing remote code execution

EPSS 0.8%CVSS 9.8

Extra Innovation Inc.1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2021-46686 · Extra Innovation Inc. acmailer CGI

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and ear…

infusionsoft1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-13725 · infusionsoft Keap Official Opt-in Forms

Keap Official Opt-in Forms <= 2.0.1 - Unauthenticated Limited Local File Inclusion

HP, Inc.3 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2025-26506 · HP, Inc. Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers

Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege

CVE-2025-26507 · HP, Inc. Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers

Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege

EPSS 0.9%CVSS 9.8

CVE-2025-26508 · HP, Inc. Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers

Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege

EPSS 1.0%CVSS 9.8

xmlsoft1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-56171 · xmlsoft libxml2

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xm…

kodeshpa1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2025-22654 · kodeshpa Simplified

WordPress Simplified Plugin Plugin <= 1.0.6 - Arbitrary File Upload vulnerability

EPSS 1.0%CVSS 10.0

needyamin1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-1355 · needyamin Library Card System

needyamin Library Card System Add Picture signup.php unrestricted upload

EPSS 0.9%CVSS 9.8

WP Sharks1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-12562 · WP Sharks s2Member Pro

s2Member Pro <= 241216 - Unauthenticated PHP Object Injection

EPSS 0.9%CVSS 9.8

oliverpos1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-13513 · oliverpos Oliver POS – A WooCommerce Point of Sale (POS)

Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 - Sensitive Information Exposure to Privilege Escalation

EPSS 0.8%CVSS 9.8

SICK AG1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2025-0867 · SICK AG SICK MEAC300

Privilege Escalation in MEAC300

EPSS 0.6%CVSS 9.9

BSS Software1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-13152 · BSS Software Mobuy Online Machinery Monitoring Panel

SQLi in BSS Software's Mobuy Online Machinery Monitoring Panel

EPSS 0.5%CVSS 10.0

Learning Digital1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-1387 · Learning Digital Orca HCM

Learning Digital Orca HCM - Improper Authentication

EPSS 0.6%CVSS 9.8

PressLayouts1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-13797 · PressLayouts PressMart - Modern Elementor WooCommerce WordPress Theme

PressMart - Modern Elementor WooCommerce WordPress Theme <= 1.2.16 - Unauthenticated Arbitrary Shortcode Execution

wecantrack1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-13556 · wecantrack Affiliate Links – Link Cloaking and Management

Affiliate Links: WordPress Plugin for Link Cloaking and Link Management <= 3.0.1 - Missing Authorization to Unauthenticated Import/Export and PHP Object Injection

EPSS 0.6%CVSS 9.8

eng1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2024-57971 · eng KNOWAGE

DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30 does not ensure that java:comp/env/jdbc/ oc…

EPSS 0.7%CVSS 9.1

LuxSoft2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-25221 · LuxSoft The LuxCal Web Calendar

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in p…

CVE-2025-25222 · LuxSoft The LuxCal Web Calendar

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in r…

scriptsbundle1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-12860 · scriptsbundle CarSpot – Dealership Wordpress Classified Theme

CarSpot – Dealership Wordpress Classified Theme <= 2.4.3 - Unauthenticated Arbitrary Password Reset/Account Takeover

SeventhQueen1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-56000 · SeventhQueen K Elements

WordPress K Elements plugin < 5.4.0 - Unauthenticated Account Takeover vulnerability