CVE-2025-40746 |
|
12.08.2025 |
9.4 |
CVE-2025-8059 |
B Blocks <= 2.0.6 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr_registration Function |
12.08.2025 |
9.8 |
CVE-2025-42950 |
Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform) |
12.08.2025 |
9.9 |
CVE-2025-42957 |
Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise) |
12.08.2025 |
9.9 |
CVE-2024-32640 |
MasaCMS SQL Injection vulnerability |
11.08.2025 |
9.8 |
CVE-2012-10037 |
PhpTax pfilez Parameter Exec Remote Code Injection |
11.08.2025 |
9.3 |
CVE-2012-10038 |
Auxilium RateMyPet Arbitrary File Upload RCE |
11.08.2025 |
9.3 |
CVE-2012-10039 |
ZEN Load Balancer Filelog Command Execution |
11.08.2025 |
9.4 |
CVE-2012-10040 |
Openfiler v2.x NetworkCard Command Execution |
11.08.2025 |
9.4 |
CVE-2025-8853 |
2100 Technology|Official Document Management System - Authentication Bypass |
11.08.2025 |
9.3 |
CVE-2025-54997 |
OpenBao: Privileged Operator May Execute Code on the Underlying Host |
11.08.2025 |
9.1 |
CVE-2010-10013 |
AjaXplorer < 2.6 checkInstall.php Unauthenticated RCE |
08.08.2025 |
9.3 |
CVE-2012-10036 |
Project Pier <= 0.8.8 Arbitrary File Upload RCE |
08.08.2025 |
9.3 |
CVE-2012-10041 |
WAN Emulator v2.3 Command Execution |
08.08.2025 |
9.3 |
CVE-2012-10043 |
ActFax 4.32 Client Importer Buffer Overflow |
08.08.2025 |
9.3 |
CVE-2012-10044 |
MobileCartly 1.0 savepage.php Arbitrary File Creation |
08.08.2025 |
10 |
CVE-2012-10045 |
XODA 0.4.5 Arbitrary PHP File Upload |
08.08.2025 |
9.3 |
CVE-2012-10046 |
E-Mail Security Virtual Appliance learn-msg.cgi Command Injection |
08.08.2025 |
9.3 |
CVE-2012-10047 |
Cyclope Employee Surveillance Solution v6.x SQL Injection |
08.08.2025 |
10 |
CVE-2012-10049 |
WebPageTest Arbitrary PHP File Upload RCE |
08.08.2025 |
9.3 |
CVE-2012-10050 |
CuteFlow <= 2.11.2 Arbitrary File Upload RCE |
08.08.2025 |
9.3 |
CVE-2012-10052 |
EGallery 1.2 Arbitrary PHP File Upload |
08.08.2025 |
9.3 |
CVE-2012-10053 |
Simple Web Server Connection Header Buffer Overflow |
08.08.2025 |
9.3 |
CVE-2025-5095 |
Burk Technology ARC Solo Missing Authentication for Critical Function |
08.08.2025 |
9.3 |
CVE-2025-46414 |
EG4 Electronics EG4 Inverters Improper Restriction of Excessive Authentication Attempts |
08.08.2025 |
9.2 |
CVE-2025-8284 |
Packet Power EMX and EG Missing Authentication for Critical Function |
08.08.2025 |
9.3 |
CVE-2025-8356 |
Path Traversal leading to RCE |
08.08.2025 |
9.8 |
CVE-2025-8731 |
TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials |
08.08.2025 |
9.3 |
CVE-2025-8730 |
Belkin F9K1009/F9K1010 Web Interface hard-coded credentials |
08.08.2025 |
9.3 |
CVE-2025-54887 |
jwe: Missing AES-GCM authentication tag validation in encrypted JWEs |
08.08.2025 |
9.1 |
CVE-2025-53767 |
Azure OpenAI Elevation of Privilege Vulnerability |
08.08.2025 |
10 |
CVE-2025-53792 |
Azure Portal Elevation of Privilege Vulnerability |
08.08.2025 |
9.1 |
CVE-2025-34148 |
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WISP SSID |
07.08.2025 |
9.4 |
CVE-2025-34149 |
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WPA2 Key |
07.08.2025 |
9.4 |
CVE-2025-34150 |
Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command Injection |
07.08.2025 |
9.4 |
CVE-2025-34151 |
Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection |
07.08.2025 |
9.4 |
CVE-2025-34152 |
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter |
07.08.2025 |
9.4 |
CVE-2025-7768 |
Use of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced |
06.08.2025 |
9.3 |
CVE-2025-23311 |
|
06.08.2025 |
9.8 |
CVE-2025-23317 |
|
06.08.2025 |
9.1 |
CVE-2025-23310 |
|
06.08.2025 |
9.8 |
CVE-2025-22470 |
|
06.08.2025 |
9.3 |