The archive.

CVE-2025-0873 · itsourcecode Tailoring Management System

itsourcecode Tailoring Management System customeredit.php sql injection

CVE-2025-0943 · itsourcecode Tailoring Management System

itsourcecode Tailoring Management System deldoc.php sql injection

CVE-2025-0945 · itsourcecode Tailoring Management System

itsourcecode Tailoring Management System typedelete.php sql injection

CVE-2025-0946 · itsourcecode Tailoring Management System

itsourcecode Tailoring Management System templatedelete.php sql injection

CVE-2025-0950 · itsourcecode Tailoring Management System

itsourcecode Tailoring Management System staffview.php sql injection

mitre11 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-55062 · mitre

Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitr…

EPSS 1%public exploit CVSS 9.8

CVE-2024-53356 · mitre

Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to generate JWT for privilege e…

CVE-2024-57099 · mitre

ClassCMS v4.8 has a code execution vulnerability.

CVE-2024-57450 · mitre

ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function.

CVE-2024-47857 · mitre

SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on public key signatures when using native…

CVE-2024-53584 · mitre

OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter.

EPSS 4%CVSS 9.8

CVE-2024-57098 · mitre

Moss v0.1.3 version has an SQL injection vulnerability that allows attackers to inject carefully designed payloads into the order parameter.

EPSS 0.4%public exploit CVSS 9.8

CVE-2024-53537 · mitre

An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager.

EPSS 2%CVSS 9.1

CVE-2025-22957 · mitre

A SQL injection vulnerability exists in the front-end of the website in ZZCMS <= 2023, which can be exploited without any authentication.

CVE-2024-53320 · mitre

Qualisys C++ SDK commit a32a21a was discovered to contain multiple stack buffer overflows via the GetCurrentFrame, SaveCapture, and LoadP…

EPSS 0.5%CVSS 9.8

CVE-2024-57587 · mitre

Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to exec…

EPSS 0.6%CVSS 9.1

Tenda1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2025-0848 · Tenda A18

Tenda A18 HTTP POST Request SetCmdlineRun stack-based overflow

EPSS 1%public exploit CVSS 9.8

1000 Projects2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-0847 · 1000 Projects Employee Task Management System

1000 Projects Employee Task Management System Login index.php sql injection

CVE-2025-0846 · 1000 Projects Employee Task Management System

1000 Projects Employee Task Management System AdminLogin.php sql injection

DumbWareio1 vulnerability on this pageMax CVSS 9.7Priority 50KEV 0

CVE-2025-24891 · DumbWareio DumbDrop

Dumb Drop has an arbitrary file overwrite and path traversal for root shell

EPSS 0.7%public exploit CVSS 9.7

needyamin2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-0842 · needyamin Library Card System

needyamin Library Card System Login admin.php sql injection

CVE-2025-0843 · needyamin Library Card System

needyamin Library Card System Admin Panel admindashboard.php sql injection

AWS1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-0851 · AWS DeepJavaLibrary

Path traversal issue in Deep Java Library

EPSS 26%CVSS 9.8

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-0874 · code-projects Simple Plugins Car Rental Management

code-projects Simple Plugins Car Rental Management approve.php sql injection

Codezips2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-0880 · Codezips Gym Management System

Codezips Gym Management System updateplan.php sql injection

CVE-2025-0881 · Codezips Gym Management System

Codezips Gym Management System saveroutine.php sql injection

EPSS 0.4%public exploit CVSS 9.8

ABB1 vulnerability on this pageMax CVSS 9.4Priority 45KEV 0

CVE-2024-48852 · ABB FLXEON

Information disclosures

EPSS 2%CVSS 9.4

Contec Health1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-12248 · Contec Health CMS8000 Patient Monitor

Out-of-bounds Write vulnerability in Contec Health CMS8000 Patient Monitor

mySCADA2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2025-20014 · mySCADA myPRO Manager

mySCADA myPRO Manager OS Command Injection

CVE-2025-20061 · mySCADA myPRO Manager

mySCADA myPRO Manager OS Command Injection

Microsoft1 vulnerability on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2025-21415 · Microsoft Azure AI Face Service

Azure AI Face Service Elevation of Privilege Vulnerability

EPSS 1.0%CVSS 9.9

wcmp1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-0493 · wcmp MultiVendorX – WooCommerce Multivendor Marketplace Solutions

MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion

Canonical Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2022-1736 · Canonical Ltd. Ubuntu's gnome-control-center

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default.

EPSS 0.8%CVSS 9.8

Lewe1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-0929 · Lewe TeamCal Neo

SQL injection vulnerability in TeamCal Neo

EPSS 0.9%CVSS 9.8

paultgoodchild1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-13742 · paultgoodchild iControlWP

iControlWP – Multiple WordPress Site Manager <= 4.4.5 - Unauthenticated PHP Object Injection

EPSS 0.9%CVSS 9.8

New Rock Technologies1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-0680 · New Rock Technologies OM500 IP-PBX

New Rock Technologies Cloud Connected Devices has a Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

DeluxeThemes1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-12822 · DeluxeThemes Media Manager for UserPro

Media Manager for UserPro <= 3.12.0 - Missing Authorization to Unauthenticated Arbitrary Options Update

Zoom Communications, Inc1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-0147 · Zoom Communications, Inc Zoom Workplace App for Linux

Zoom Workplace App for Linux - Type Confusion