The archive.

CVE-2025-24102 · Apple iPadOS

The issue was addressed with improved checks.

EPSS 1.0%CVSS 9.8

CVE-2025-24093 · Apple macOS

A permissions issue was addressed with additional restrictions.

EPSS 0.8%CVSS 9.8

CVE-2025-24146 · Apple macOS

This issue was addressed with improved redaction of sensitive information.

EPSS 0.9%CVSS 9.8

CVE-2025-24154 · Apple iOS and iPadOS

An out-of-bounds write was addressed with improved input validation.

EPSS 1%CVSS 9.1

CVE-2025-24103 · Apple macOS

This issue was addressed with improved validation of symlinks.

EPSS 0.6%CVSS 9.8

CVE-2025-24130 · Apple macOS

The issue was addressed with improved checks.

EPSS 0.6%CVSS 9.8

CVE-2024-54507 · Apple iOS and iPadOS

A type confusion issue was addressed with improved memory handling.

EPSS 0.9%CVSS 9.1

CVE-2024-54542 · Apple Safari

An authentication issue was addressed with improved state management.

EPSS 0.7%CVSS 9.1

CVE-2025-24109 · Apple macOS

A downgrade issue was addressed with additional code-signing restrictions.

CVE-2024-54530 · Apple iOS and iPadOS

The issue was addressed with improved checks.

EPSS 0.6%CVSS 9.1

CVE-2024-54512 · Apple iOS and iPadOS

The issue was addressed by removing the relevant flags.

EPSS 0.4%CVSS 9.1

CVE-2024-54523 · Apple iOS and iPadOS

The issue was addressed with improved bounds checks.

EPSS 0.4%CVSS 9.1

TandoorRecipes1 vulnerability on this pageMax CVSS 10.0Priority 58KEV 0

CVE-2025-23211 · TandoorRecipes recipes

Tandoor Recipes - SSTI - Remote Code Execution

EPSS 4%public exploit CVSS 10.0

MicroWorld1 vulnerability on this pageMax CVSS 9.2Priority 57KEV 0

CVE-2025-0798 · MicroWorld eScan Antivirus

MicroWorld eScan Antivirus Quarantine rtscanner os command injection

EPSS 7%public exploit CVSS 9.2

Cacti1 vulnerability on this pageMax CVSS 9.1Priority 56KEV 0

CVE-2025-22604 · Cacti cacti

Cacti has Authenticated RCE via multi-line SNMP responses

EPSS 5%public exploit CVSS 9.1

mitre7 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-57590 · mitre

TRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl interface "ntp_sync.cgi",which allows remote…

EPSS 1%public exploit CVSS 9.8

CVE-2024-57595 · mitre

DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apc_client_pin.cgi, which allows remote a…

EPSS 1%public exploit CVSS 9.8

CVE-2024-54852 · mitre

When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injec…

EPSS 0.8%public exploit CVSS 9.8

CVE-2024-57395 · mitre

Password Vulnerability in Safety production process management system v1.0 allows a remote attacker to escalate privileges, execute arbit…

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-57665 · mitre

JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java.

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-57548 · mitre

CMSimple 5.16 allows the user to edit log.php file via print page.

EPSS 0.5%public exploit CVSS 9.1

CVE-2024-57052 · mitre

An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php f…

Codezips1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-0803 · Codezips Gym Management System

Codezips Gym Management System submit_plan_new.php sql injection

EPSS 0.7%public exploit CVSS 9.8

ESAFENET3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-0793 · ESAFENET CDG

ESAFENET CDG todoDetail.jsp sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-0791 · ESAFENET CDG

ESAFENET CDG sdDoneDetail.jsp sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-0792 · ESAFENET CDG

ESAFENET CDG sdTodoDetail.jsp sql injection

EPSS 0.6%public exploit CVSS 9.8

ABB2 vulnerabilities on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2024-48841 · ABB FLXEON

Remote Code Execution (RCE) Vulnerabilities

EPSS 4%CVSS 10.0

CVE-2024-48849 · ABB FLXEON

Authentication and Authorization Issues

EPSS 0.9%CVSS 9.4

Emote Interactive1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2022-3365 · Emote Interactive Remote Mouse Server

Emote Interactive Remote Mouse Server command injection due to weak encoding

EPSS 2%CVSS 9.8

Canon Inc.3 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-12647 · Canon Inc. Satera MF656Cdw

Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker…

CVE-2024-12648 · Canon Inc. Satera MF656Cdw

Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker…

CVE-2024-12649 · Canon Inc. Satera MF656Cdw

Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on t…

ThemeREX1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-13448 · ThemeREX ThemeREX Addons

ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data

EPSS 0.9%CVSS 9.8

Pdfcrowd Dev Team1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-24671 · Pdfcrowd Dev Team Save as PDF

WordPress Save as PDF Plugin by Pdfcrowd Plugin <= 4.4.0 - PHP Object Injection vulnerability

Rockwell Automation1 vulnerability on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2025-24480 · Rockwell Automation FactoryTalk® View Machine Edition

FactoryTalk® View Machine Editon - Remote Code Execution

EPSS 0.7%CVSS 9.3

cvat-ai1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-23045 · cvat-ai cvat

CVAT allows remote code execution via tracker Nuclio functions

ThimPress1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-24601 · ThimPress FundPress

WordPress FundPress plugin <= 2.0.6 - PHP Object Injection vulnerability

axios1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-57965 · axios axios

In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwante…

EPSS 0.4%CVSS 9.8

FlightGear1 vulnerability on this pageMax CVSS 9.9Priority 36KEV 0

CVE-2025-0781 · FlightGear SimGear

Incorrect Authorization in SimGear

EPSS 0.4%CVSS 9.9

IBM3 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2023-50316 · IBM Sterling B2B Integrator

IBM Sterling B2B Integrator information disclosure

EPSS 0.4%CVSS 9.8

CVE-2023-35907 · IBM Aspera Faspex

IBM Aspera Faspex information disclosure

EPSS 0.3%CVSS 9.8

CVE-2023-37398 · IBM Aspera Faspex

IBM Aspera Faspex information disclosure

EPSS 0.3%CVSS 9.8

enituretechnology3 vulnerabilities on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2025-24664 · enituretechnology LTL Freight Quotes – Worldwide Express Edition

WordPress LTL Freight Quotes Plugin <= 5.0.20 - SQL Injection vulnerability

CVE-2025-24665 · enituretechnology Small Package Quotes – Unishippers Edition

WordPress Small Package Quotes Plugin <= 2.4.8 - SQL Injection vulnerability

CVE-2025-24667 · enituretechnology Small Package Quotes – Worldwide Express Edition

WordPress Small Package Quotes Plugin <= 5.2.17 - SQL Injection vulnerability

Ihor Kit1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2025-24612 · Ihor Kit Shipping for Nova Poshta

WordPress Shipping for Nova Poshta plugin <= 1.19.6 - SQL Injection vulnerability