by Kastro CVE-2025-23006 · SonicWall SMA1000
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,101 matching vulnerabilities · Page 372 of 783
SonicWall
coollabsio
CVE-2025-22609 · coollabsio coolify
Coolify Vulnerable to Private Key Hijacking / Remote Command Execution (RCE)
CVE-2025-22612 · coollabsio coolify
Coolify Vulnerable to Private Key Enumeration on Onboarding resulting in Remote Command Execution (RCE)
CVE-2025-22611 · coollabsio coolify
Coolify vulnerable to Privilege Escalation resulting in Remote Command Execution (RCE)
mitre
CVE-2024-55192 · mitre
OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char c…
CVE-2024-55194 · mitre
OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component /OpenImageIO/fmath.h.
CVE-2024-55193 · mitre
OpenImageIO v3.1.0.0dev was discovered to contain a segmentation violation via the component /OpenImageIO/string_view.h.
CVE-2024-57328 · mitre
A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0.
CVE-2023-46401 · mitre
KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function.
CVE-2024-55228 · mitre
A cross-site scripting (XSS) vulnerability in the Product module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scrip…
CVE-2024-55227 · mitre
A cross-site scripting (XSS) vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web…
CVE-2023-46400 · mitre
KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function.
CVE-2024-55573 · mitre
An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before…
CVE-2024-55971 · mitre
SQL Injection vulnerability in the default configuration of the Logitime WebClock application <= 5.43.0 allows an unauthenticated user to…
CVE-2024-50694 · mitre
In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does n…
CVE-2024-50695 · mitre
SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to stack-based buffer overflow when parsing MQTT messages, due to miss…
CVE-2024-50698 · mitre
SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow due to bounds checks of the MQTT message…
CVE-2023-37777 · mitre
A SQL injection vulnerability exists in Synnefo Internet Management Software (IMS) version 2023 and earlier.
CVE-2024-53923 · mitre
An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24.
ECOVACS
CVE-2024-52325 · ECOVACS GOAT G1
ECOVACS robot lawnmowers and vacuums command injection
CVE-2024-52329 · ECOVACS ECOVACS HOME
ECOVACS HOME mobile app plugins do not properly validate TLS certificates
CVE-2024-52330 · ECOVACS DEEBOT X5 PRO PLUS
ECOVACS lawnmowers and vacuums do not properly validate TLS certificates
ngocuct0912
CVE-2025-23942 · ngocuct0912 WP Load Gallery
WordPress WP Load Gallery Plugin <= 2.1.6 - Arbitrary File Upload vulnerability
eminozlem
CVE-2024-13545 · eminozlem Bootstrap Ultimate
Bootstrap Ultimate <= 1.4.9 - Unauthenticated Limited Local File Inclusion
Cisco
CVE-2025-20156 · Cisco Cisco Meeting Management
Cisco Meeting Management Client-Server Privilege Escalation Vulnerability
Iqonic Design
CVE-2025-0357 · Iqonic Design WPBookit
WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload
Marko-M
Oracle Corporation
CVE-2025-21524 · Oracle Corporation JD Edwards EnterpriseOne Tools
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).
CVE-2025-21535 · Oracle Corporation Oracle WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
CVE-2025-21556 · Oracle Corporation Oracle Agile PLM Framework
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Agile Integration Services).
CVE-2025-21547 · Oracle Corporation Oracle Hospitality OPERA 5
Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet).
QuantumCloud
CVE-2024-13091 · QuantumCloud WPBot Pro Wordpress Chatbot
WPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File Upload
Scriptonite
Enrico Sandoli
CVE-2025-23918 · Enrico Sandoli Smallerik File Browser
WordPress Smallerik File Browser plugin <= 1.1 - Arbitrary File Upload vulnerability
OneIdentity
muzaara
CVE-2025-23914 · muzaara Muzaara Google Ads Report
WordPress Muzaara Google Ads Report Plugin <= 3.1 - PHP Object Injection vulnerability
WC Product Table
CVE-2025-24596 · WC Product Table WooCommerce Product Table Lite
WordPress WooCommerce Product Table Lite plugin <= 3.8.7 - Broken Access Control vulnerability
Apache Software Foundation
CVE-2024-45479 · Apache Software Foundation Apache Ranger
Apache Ranger: SSRF in Edit Service page - Add logic to filter requests to localhost
CVE-2024-49747 · Google Android
In gatts_process_read_by_type_req of gatt_sr.cc, there is a possible out of bounds write due to a logic error in the code.
CVE-2024-49748 · Google Android
In gatts_process_primary_service_req of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow.
Themefic
woobewoo
CVE-2024-13234 · woobewoo Product Table for WooCommerce by WBW
Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection
Oliver Fuhrmann
CVE-2025-23931 · Oliver Fuhrmann WordPress Local SEO
WordPress WordPress Local SEO plugin <= 2.3 - SQL Injection vulnerability
Xerox
CVE-2024-55926 · Xerox Xerox Workplace Suite
Arbitrary file upload, deletion and read through header manipulation
CVE-2024-55930 · Xerox Xerox Workplace Suite
Weak default folder permissions
sh1zen
CVE-2025-23921 · sh1zen Multi Uploader for Gravity Forms