by Kastro CVE-2024-57726 · SimpleHelp SimpleHelp
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,101 matching vulnerabilities · Page 374 of 783
SimpleHelp
Ivanti
Microsoft
CVE-2025-21298 · Microsoft Windows 10 Version 1507
Windows OLE Remote Code Execution Vulnerability
CVE-2025-21307 · Microsoft Windows 10 Version 1507
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2025-21311 · Microsoft Windows 11 Version 24H2
Windows NTLM V1 Elevation of Privilege Vulnerability
mitre
CVE-2024-57684 · mitre
An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set th…
CVE-2025-22905 · mitre
RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp.
CVE-2025-22968 · mitre
An issue in D-Link DWR-M972V 1.05SSG allows a remote attacker to execute arbitrary code via SSH using root account without restrictions
CVE-2025-22906 · mitre
RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN.
CVE-2025-22912 · mitre
RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.
CVE-2024-57575 · mitre
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
CVE-2024-57580 · mitre
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
CVE-2024-57581 · mitre
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.
CVE-2024-57582 · mitre
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the startIP parameter in the formSetPPTPServer function.
CVE-2025-22913 · mitre
RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function.
CVE-2024-57579 · mitre
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the limitSpeedUp parameter in the formSetClientState function.
CVE-2025-22904 · mitre
RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.
CVE-2025-22907 · mitre
RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function.
CVE-2025-22916 · mitre
RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function.
CVE-2024-57703 · mitre
Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability.
CVE-2024-57768 · mitre
JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component validRoleKey?sysRole.key.
CVE-2024-53553 · mitre
An issue in OPEXUS FOIAXPRESS PUBLIC ACCESS LINK v11.1.0 allows attackers to bypass authentication via crafted web requests.
CVE-2024-57583 · mitre
Tenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the usbName parameter in the formSetSambaConf fun…
CVE-2024-48126 · mitre
HI-SCAN 6040i Hitrax HX-03-19-I was discovered to contain hardcoded credentials for access to vendor support and service access.
Red Hat
CVE-2024-12084 · Red Hat Red Hat Enterprise Linux 10
Rsync: heap buffer overflow in rsync due to improper checksum length handling
Fanli2012
CVE-2025-0486 · Fanli2012 native-php-cms
Fanli2012 native-php-cms login.php sql injection
CVE-2025-0491 · Fanli2012 native-php-cms
Fanli2012 native-php-cms cat_dodel.php sql injection
CVE-2025-0487 · Fanli2012 native-php-cms
Fanli2012 native-php-cms cat_edit.php sql injection
mongoosejs
ComMotion
CVE-2025-22785 · ComMotion Course Booking System
WordPress Course Booking System plugin <= 6.0.6 - SQL Injection vulnerability
NetVision Information
CVE-2025-0456 · NetVision Information airPASS
NetVision Information airPASS - Missing Authentication
CVE-2025-0455 · NetVision Information airPASS
NetVision Information airPASS - SQL injection
pickplugins
CVE-2024-9636 · pickplugins Post Grid and Gutenberg Blocks – ComboBlocks
Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation
BlackBerry
CVE-2024-48856 · BlackBerry QNX Software Development Platform (SDP)
Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform
Linux
PMB Services
CVE-2025-0471 · PMB Services PMB platform
Unrestricted Upload of File with Dangerous Type vulnerability in PMB platform
RasaHQ
CVE-2024-49375 · RasaHQ rasa-pro-security-advisories
Remote Code Execution via Remote Model Loading in Rasa
Fortinet
CVE-2024-48885 · Fortinet FortiVoice
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.…
CVE-2024-50563 · Fortinet FortiAnalyzer
A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Clou…
Web Ready Now
CVE-2025-22782 · Web Ready Now WR Price List Manager For Woocommerce
WordPress WR Price List Manager For Woocommerce plugin <= 1.0.8 - Remote Code Execution (RCE) vulnerability
getsentry
Mike Selander
CVE-2025-23797 · Mike Selander WP Options Editor
WordPress WP Options Editor plugin <= 1.1 - CSRF to Privilege Escalation vulnerability
Apple
CVE-2024-44136 · Apple iOS and iPadOS