The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

39,101 matching vulnerabilities · Page 369 of 783

Advantive1 vulnerability on this pageMax CVSS 9.9Priority 99KEV 1

CVE-2024-57968 · Advantive VeraCore

Advantive VeraCore Unrestricted File Upload Vulnerability

KEV · due 31 Mar EPSS 32%public exploit SSVC act CVSS 9.9

Four-Faith2 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2024-9643 · Four-Faith F3x36

Four-Faith F3x36 Hidden Debug Credentials

EPSS 3%public exploit CVSS 9.8

CVE-2024-9644 · Four-Faith F3x36

Four-Faith F3x36 bapply.cgi Auth Bypass

EPSS 0.7%CVSS 9.8

DumbWareio1 vulnerability on this pageMax CVSS 9.5Priority 56KEV 0

CVE-2025-24971 · DumbWareio DumbDrop

OS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop

EPSS 3%public exploit CVSS 9.5

mitre12 vulnerabilities on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2024-48445 · mitre

An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary code via the rid, tid, et, and ts parameters.

EPSS 2%public exploit CVSS 9.8

CVE-2022-40916 · mitre

Tiny File Manager v2.4.7 and below is vulnerable to session fixation.

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-57430 · mitre

An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate da…

EPSS 0.9%public exploit CVSS 9.8

CVE-2020-36084 · mitre

SQL Injection vulnerability in SourceCodester Responsive E-Learning System 1.0 allows remote attackers to inject sql query in /elearning/…

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-57428 · mitre

A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload…

EPSS 0.8%public exploit CVSS 9.3

CVE-2025-22978 · mitre

eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module.

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-22992 · mitre

A SQL Injection vulnerability exists in the /feed/insert.json endpoint of the Emoncms project >= 11.6.9.

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-36554 · mitre

Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Forever KidsWatch Call Me KW-60 R36CW_YDE_S4_A29_2_V…

EPSS 0.4%public exploit CVSS 9.8

CVE-2024-36555 · mitre

Built-in SMS-configuration command in Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Forever KidsWat…

EPSS 0.4%public exploit CVSS 9.8

CVE-2024-57077 · mitre

The latest version of utils-extend (1.0.8) is vulnerable to Prototype Pollution through the entry function(s) lib.extend.

EPSS 0.5%public exploit CVSS 9.1

CVE-2024-57520 · mitre

Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the action_createconfig function.

EPSS 1%CVSS 9.8

CVE-2024-36556 · mitre

Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h, and Forever KidsWatch Call Me 2 KW60 R36CW_YDE_S4_A29_2_…

EPSS 0.4%CVSS 9.1

BigAntSoft1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2025-0364 · BigAntSoft BigAnt Server

BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE

EPSS 2%public exploit CVSS 9.8

Mozilla7 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2025-1009 · Mozilla Firefox

Use-after-free in XSLT

EPSS 1%public exploit CVSS 9.8

CVE-2025-1011 · Mozilla Firefox

A bug in WebAssembly code generation could result in a crash

EPSS 0.6%CVSS 9.8

CVE-2025-1016 · Mozilla Firefox

Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7

EPSS 0.6%CVSS 9.8

CVE-2025-1017 · Mozilla Firefox

Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7

EPSS 0.6%CVSS 9.8

CVE-2025-1020 · Mozilla Firefox

Memory safety bugs fixed in Firefox 135 and Thunderbird 135

EPSS 0.5%CVSS 9.8

CVE-2025-1010 · Mozilla Firefox

Use-after-free in Custom Highlight

EPSS 0.5%CVSS 9.8

CVE-2025-1012 · Mozilla Firefox

Use-after-free during concurrent delazification

EPSS 0.5%CVSS 9.8

LabRedesCefetRJ6 vulnerabilities on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2025-24906 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIA

EPSS 0.6%public exploit CVSS 10.0

CVE-2025-24957 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIA

EPSS 0.6%public exploit CVSS 10.0

CVE-2025-24905 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIA

EPSS 0.5%public exploit CVSS 10.0

CVE-2025-24901 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'deletar_permissao.php' parameter 'c', 'a', 'r' in WeGIA

EPSS 0.6%public exploit CVSS 9.4

CVE-2025-24902 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'salvar_cargo.php' parameter 'id_cargo' in WeGIA

EPSS 0.6%public exploit CVSS 9.4

CVE-2025-24958 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'salvar_tag.php' parameter 'id_tag' in WeGIA

EPSS 0.6%public exploit CVSS 9.4

vitest-dev1 vulnerability on this pageMax CVSS 9.7Priority 50KEV 0

CVE-2025-24964 · vitest-dev vitest

Remote Code Execution when accessing a malicious website while Vitest API server is listening

EPSS 0.7%public exploit CVSS 9.7

Cisco2 vulnerabilities on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2025-20124 · Cisco Cisco Identity Services Engine Software

Cisco Identity Services Engine Java Deserialization Vulnerability

EPSS 19%CVSS 9.9

CVE-2025-20125 · Cisco Cisco Identity Services Engine Software

Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability

EPSS 16%CVSS 9.1

Zyxel1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-0890 · Zyxel VMG4325-B10A firmware

UNSUPPORTED WHEN ASSIGNED Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware vers…

EPSS 14%CVSS 9.8

adamghill1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2025-24370 · adamghill django-unicorn

Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass

EPSS 0.5%public exploit CVSS 9.3

AutomationDirect1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-0960 · AutomationDirect C-more EA9 HMI EA9-T6CL

AutomationDirect C-more EA9 HMI Classic Buffer Overflow

EPSS 0.9%CVSS 9.8

MediaTek, Inc.1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-20634 · MediaTek, Inc. MT2737, MT6813, MT6835, MT6835T, MT6878, MT6878M, MT6879, MT6886, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8676, MT8678, MT8795T, MT8798, MT8863

In Modem, there is a possible out of bounds write due to a missing bounds check.

EPSS 0.8%CVSS 9.8

regularlabs.com1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-22204 · regularlabs.com Sourcerer for Joomla

Extension - regularlabs.com - Remote code execution vulnerability in the Sourcerer extensions < 12.0.0 for Joomla

EPSS 0.8%CVSS 9.8

IBM1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2024-51450 · IBM Security Verify Directory

IBM Security Verify Directory Command Execution

EPSS 1%CVSS 9.1

ABB1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-51547 · ABB ASPECT-Enterprise

Credentials Disclosure - keys

EPSS 0.6%CVSS 9.8

Qualcomm, Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-45569 · Qualcomm, Inc. Snapdragon

Improper Validation of Array Index in WLAN Host Communication

EPSS 0.6%CVSS 9.8

CVE-2024-49839 · Qualcomm, Inc. Snapdragon

Buffer Over-read in WLAN Host Cmn

EPSS 0.3%CVSS 9.8

wpspin1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2025-24677 · wpspin Post/Page Copying Tool

WordPress Post/Page Copying Tool to Export and Import post/page for Cross site Migration Plugin <= 2.0.3 - Remote Code Execution (RCE) vulnerability

EPSS 0.5%CVSS 9.9

averta1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-50500 · averta Shortcodes and extra features for Phlox theme

WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability

EPSS 0.4%CVSS 9.8

openPLC1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-1066 · openPLC OpenPLC

CVE-2025-1066

EPSS 0.5%CVSS 9.8

Veeam1 vulnerability on this pageMax CVSS 9.0Priority 37KEV 0

CVE-2025-23114 · Veeam Backup for AWS

A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server.

EPSS 0.6%CVSS 9.0

Google Cloud1 vulnerability on this pageMax CVSS 10.0Priority 34KEV 0

CVE-2025-0982 · Google Cloud Application Integration

Sandbox Escape in Google Cloud Application Integration's JavaScript Task (Rhino Engine)

EPSS 0.3%CVSS 10.0

shinetheme1 vulnerability on this pageMax CVSS 9.0Priority 34KEV 0

CVE-2025-22699 · shinetheme Traveler Code

WordPress Traveler Code plugin < 3.1.2 - Unauthenticated Arbitrary SQL Execution vulnerability

EPSS 0.4%CVSS 9.0

Huawei2 vulnerabilities on this pageMax CVSS 9.8Priority 32KEV 0

CVE-2024-57959 · Huawei HarmonyOS

Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perf…

EPSS 0.2%CVSS 9.8

CVE-2024-57958 · Huawei HarmonyOS

Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to per…

EPSS 0.2%CVSS 9.1