by Kastro CVE-2025-0108 · Palo Alto Networks Cloud NGFW
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,101 matching vulnerabilities · Page 367 of 783
Palo Alto Networks
PHP Group
mitre
CVE-2024-56973 · mitre
Insecure Permissions vulnerability in Alvaria, Inc Unified IP Unified Director before v.7.2SP2 allows a remote attacker to execute arbitr…
CVE-2025-25388 · mitre
A SQL Injection vulnerability was found in /admin/edit-propertytype.php in PHPGurukul Land Record System v1.0, which allows remote attack…
CVE-2025-25389 · mitre
A SQL Injection vulnerability was found in /admin/forgot-password.php in Phpgurukul Land Record System v1.0, which allows remote attacker…
CVE-2025-25742 · mitre
D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the AccountPassword parameter in th…
CVE-2025-25744 · mitre
D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetDy…
CVE-2025-25746 · mitre
D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWa…
CVE-2025-25351 · mitre
PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter.
CVE-2023-34399 · mitre
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.
Codezips
CVE-2025-1183 · CodeZips Gym Management System
CodeZips Gym Management System more-userprofile.php sql injection
CVE-2025-1188 · Codezips Gym Management System
Codezips Gym Management System updateroutine.php sql injection
mySCADA
CVE-2025-24865 · mySCADA myPRO Manager
mySCADA myPRO Manager Missing Authentication for Critical Function
CVE-2025-22896 · mySCADA myPRO Manager
mySCADA myPRO Manager Cleartext Storage of Sensitive Information
CVE-2025-25067 · mySCADA myPRO Manager
mySCADA myPRO Manager OS Command Injection
Orthanc
CVE-2025-0896 · Orthanc Orthanc server
Orthanc Server Missing Authentication for Critical Function
themefusion
CVE-2024-13346 · ThemeFusion Avada | Website Builder For WordPress & WooCommerce
Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-13345 · themefusion Avada (Fusion) Builder
Avada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution
cleantalk
CVE-2024-13365 · cleantalk Login Security, FireWall, Malware removal by CleanTalk
Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Upload
Apache Software Foundation
CVE-2024-32838 · Apache Software Foundation Apache Fineract
Apache Fineract: SQL injection vulnerabilities in offices API endpoint
Marketing Fire
CVE-2025-22630 · Marketing Fire Widget Options
WordPress Widget Options Plugin <= 4.1.0 - Arbitrary Code Execution vulnerability
Q-Free
CVE-2025-26339 · Q-Free MaxTime
A CWE-306 "Missing Authentication for Critical Function" in maxtime/handleRoute.lua in Q-Free MaxTime less than or equal to version 2.11.…
CVE-2025-26341 · Q-Free MaxTime
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q-Free MaxTime less than or equal to versio…
CVE-2025-26342 · Q-Free MaxTime
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q-Free MaxTime less than or equal to versio…
CVE-2025-26344 · Q-Free MaxTime
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/guest-mode/routes.lua in Q-Free MaxTime less than or equal to vers…
CVE-2025-26345 · Q-Free MaxTime
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/menu/routes.lua in Q-Free MaxTime less than or equal to version 2.…
CVE-2025-26347 · Q-Free MaxTime
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/menu/routes.lua in Q-Free MaxTime less than or equal to version 2.…
CVE-2025-26359 · Q-Free MaxTime
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q-Free MaxTime less than or equal to versio…
CVE-2025-1100 · Q-Free MaxTime
A CWE-259 "Use of Hard-coded Password" for the root account in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthentica…
CVE-2025-26361 · Q-Free MaxTime
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2…
Islandora
themefusecom
CVE-2024-10960 · themefusecom Brizy – Page Builder
Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads
contempoinc
CVE-2024-13421 · contempoinc Real Estate 7 WordPress
Real Estate 7 WordPress <= 3.5.1 - Unauthenticated Privilege Escalation to Administrator
ThemeREX
CVE-2024-13770 · ThemeREX Puzzles | WP Magazine / Review with Store WordPress Theme + RTL
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Unauthenticated PHP Object Injection
Chimpstudio
CVE-2024-13182 · Chimpstudio WP Directorybox Manager
WP Directorybox Manager <= 2.5 - Authentication Bypass
http://apusthemes.com/
CVE-2024-12213 · http://apusthemes.com/ WP Job Board Pro
WP Job Board Pro < 1.2.85 - Unauthenticated Privilege Escalation via process_register
Dingtian
enituretechnology
CVE-2024-13477 · enituretechnology LTL Freight Quotes – Unishippers Edition
LTL Freight Quotes – Unishippers Edition <= 2.5.8 - Unauthenticated SQL Injection
gchq
Outback Power
CVE-2025-24861 · Outback Power Mojave Inverter
Outback Power Mojave Inverter Command Injection
Cacti
TECNO
Lexmark
CVE-2025-1127 · Lexmark CX, XC, CS, MS, MX, XM, et. al.
Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server
Progress Software
CVE-2025-0332 · Progress Software Progress® Telerik® UI for WinForms