The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

39,101 matching vulnerabilities · Page 379 of 783

mitre17 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2024-55556 · mitre

A vulnerability in Crater Invoice allows an unauthenticated attacker with knowledge of the APP_KEY to achieve remote command execution on…

EPSS 44%public exploit CVSS 9.8

CVE-2024-54819 · mitre

I, Librarian before and including 5.11.1 is vulnerable to Server-Side Request Forgery (SSRF) due to improper input validation in classes/…

EPSS 21%public exploit CVSS 9.1

CVE-2024-56828 · mitre

File Upload vulnerability in ChestnutCMS through 1.5.0.

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-55507 · mitre

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e.php component.

EPSS 0.6%public exploit CVSS 9.8

CVE-2022-41573 · mitre

An issue was discovered in Ovidentia 8.3.

EPSS 1%CVSS 9.8

CVE-2024-55414 · mitre

A vulnerability exits in driver SmSerl64.sys in Motorola SM56 Modem WDM Driver v6.12.23.0, which allows low-privileged users to mapping p…

EPSS 1%CVSS 9.8

CVE-2024-50658 · mitre

Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsB…

EPSS 0.8%CVSS 9.8

CVE-2024-50660 · mitre

File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the file upload functionality

EPSS 0.9%CVSS 9.8

CVE-2024-54879 · mitre

SeaCMS V13.1 is vulnerable to Incorrect Access Control.

EPSS 0.9%CVSS 9.1

CVE-2024-55078 · mitre

An arbitrary file upload vulnerability in the component /adminUser/updateImg of WukongCRM-11.0-JAVA v11.3.3 allows attackers to execute a…

EPSS 0.7%CVSS 9.8

CVE-2022-41572 · mitre

An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

EPSS 0.6%CVSS 9.8

CVE-2024-46622 · mitre

An Escalation of Privilege security vulnerability was found in SecureAge Security Suite software 7.0.x before 7.0.38, 7.1.x before 7.1.11…

EPSS 0.6%CVSS 9.8

CVE-2024-54880 · mitre

SeaCMS V13.1 is vulnerable to Incorrect Access Control.

EPSS 0.9%CVSS 9.1

CVE-2024-55529 · mitre

Z-BlogPHP 1.7.3 is vulnerable to arbitrary code execution via \zb_users\theme\shell\template.

EPSS 0.6%CVSS 9.8

CVE-2024-35532 · mitre

An XML External Entity (XXE) injection vulnerability in Intersec Geosafe-ea 2022.12, 2022.13, and 2022.14 allows attackers to perform arb…

EPSS 0.5%CVSS 9.1

CVE-2024-53931 · mitre

The com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) application through 1.1 for Android enables any application (with no p…

EPSS 0.4%CVSS 9.1

CVE-2024-53932 · mitre

The com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme) application through 21.1.9 for Android ena…

EPSS 0.4%CVSS 9.1

Campcodes4 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-0210 · Campcodes School Faculty Scheduling System

Campcodes School Faculty Scheduling System ajax.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-0211 · Campcodes School Faculty Scheduling System

Campcodes School Faculty Scheduling System index.php file inclusion

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-0212 · Campcodes Student Grading System

Campcodes Student Grading System view_students.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-0213 · Campcodes Project Management System

Campcodes Project Management System update_forms.php unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

code-projects7 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-0203 · code-projects Student Management System

code-projects Student Management System DbFunction.php showSubject1 sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-0204 · code-projects Online Shoe Store

code-projects Online Shoe Store details.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-0207 · code-projects Online Shoe Store

code-projects Online Shoe Store login.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-0229 · code-projects Travel Management System

code-projects Travel Management System enquiry.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-0230 · code-projects Responsive Hotel Site

code-projects Responsive Hotel Site print.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-0205 · code-projects Online Shoe Store

code-projects Online Shoe Store details2.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-0208 · code-projects Online Shoe Store

code-projects Online Shoe Store summary.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-8855 · Unknown WordPress Auction Plugin

WordPress Auction <= 3.7 - Editor+ SQL Injection

EPSS 0.6%public exploit CVSS 9.8

wangl19891 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-13136 · wangl1989 mysiteforme

wangl1989 mysiteforme ShiroConfig.java rememberMeManager deserialization

EPSS 0.6%public exploit CVSS 9.8

Grocy project1 vulnerability on this pageMax CVSS 9.0Priority 48KEV 0

CVE-2024-55074 · Grocy project Grocy

The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG…

EPSS 0.7%public exploit CVSS 9.0

redis1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-46981 · redis redis

Redis' Lua library commands may lead to remote code execution

EPSS 8%CVSS 9.8

seobeginner1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-12252 · seobeginner SEO LAT Auto Post

SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)

EPSS 3%CVSS 9.8

zhenfeng132 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-13144 · zhenfeng13 My-Blog

zhenfeng13 My-Blog BlogController.java uploadFileByEditomd unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

CVE-2024-13145 · zhenfeng13 My-Blog

zhenfeng13 My-Blog uploadController. java upload unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

Moxa1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-9140 · Moxa EDR-8010 Series

Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140.

EPSS 2%CVSS 9.8

alexacrm1 vulnerability on this pageMax CVSS 9.9Priority 44KEV 0

CVE-2024-12583 · alexacrm Dynamics 365 Integration

Dynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template Injection

EPSS 1%CVSS 9.9

go-git1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2025-21613 · go-git go-git

go-git has an Argument Injection via the URL field

EPSS 1%CVSS 9.8

Ludwig You1 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2024-56249 · Ludwig You WPMasterToolKit

WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerability

EPSS 1%CVSS 9.1

payuplugin1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-12264 · payuplugin PayU CommercePro Plugin

PayU CommercePro Plugin <= 3.8.3 - Unauthenticated Privilege Escalation

EPSS 0.8%CVSS 9.8

Codezips1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-0233 · Codezips Project Management System

Codezips Project Management System course.php sql injection

EPSS 0.6%CVSS 9.8

themesawesome1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-12470 · themesawesome School Management System – SakolaWP

School Management System – SakolaWP <= 1.0.8 - Unauthenticated Privilege Escalation

EPSS 0.7%CVSS 9.8

themescoder1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-12402 · themescoder TC Ecommerce – Create Android & iOS Apps for WooCommerce

Themes Coder – Create Android & iOS Apps For Your Woocommerce Site <= 1.3.4 - Insecure Direct Object Reference to Password Change/Account Takeover/Privilege Escalation

EPSS 0.6%CVSS 9.8

gocd1 vulnerability on this pageMax CVSS 9.4Priority 39KEV 0

CVE-2024-56320 · gocd gocd

GoCD vulnerable to admin privilege escalation by a malicious internal/existing authenticated user

EPSS 0.7%CVSS 9.4

OpenVPN1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2024-5594 · OpenVPN OpenVPN

OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected…

EPSS 0.8%CVSS 9.1

iTerm21 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2025-22275 · iTerm2 iTerm2

iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by rea…

EPSS 0.5%CVSS 9.3

siyuan-note1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2025-21609 · siyuan-note siyuan

SiYuan has an arbitrary file deletion vulnerability

EPSS 0.6%CVSS 9.1

Analytify1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2022-45830 · Analytify Analytify

WordPress Analytify - Google Analytics Dashboard plugin <= 4.2.3 - Privilege Escalation vulnerability

EPSS 0.4%CVSS 9.8

Google1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2024-53842 · Google Android

In cc_SendCcImsInfoIndMsg of cc_MmConManagement.c, there is a possible out of bounds write due to a missing bounds check.

EPSS 0.3%CVSS 9.8

MediaTek, Inc.1 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2024-20148 · MediaTek, Inc. MT3603, MT6835, MT6878, MT6886, MT6897, MT7902, MT7920, MT7922, MT8518S, MT8532, MT8766, MT8768, MT8775, MT8796, MT8798

In wlan STA FW, there is a possible out of bounds write due to improper input validation.

EPSS 0.3%CVSS 9.8