İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2025: sömürülen ve yeni ciddi CVE kayıtları

207 kayıt · 26 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 3

  • CVE-2025-2359
    32İzleyin

    D-Link DIR-823G DDNS Service HNAP1 SetDDNSSettings improper authorization

    OrtaCVSS 6,9İstismar yokEPSS %15

    dlink · dir-823g firmware17 Mar 2025

  • CVE-2024-12971
    52Planlayın

    QuickShell Authenticated Command Injection

    YüksekCVSS 8,6SilahlaştırılmışEPSS %61

    artica · pandora fms17 Mar 2025

  • CVE-2025-25612
    28İzleyin

    FS Inc S3150-8T2F prior to version S3150-8T2F_2.2.0D_135103 is vulnerable to Cross Site Scripting (XSS) in the Time Range Configuration func

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    17 Mar 2025

  • CVE-2025-25618
    13İzleyin

    Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teache

    DüşükCVSS 3,3Kavram kanıtıEPSS %0

    changeweb · unifiedtransform17 Mar 2025

  • CVE-2025-25621
    17İzleyin

    Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers.

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    changeweb · unifiedtransform17 Mar 2025

  • CVE-2025-25650
    36İzleyin

    An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produce cloned NFC cards t

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    17 Mar 2025

  • CVE-2025-26125
    29İzleyin

    An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate pri

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    17 Mar 2025

  • CVE-2024-40635
    31İzleyin

    containerd has an integer overflow in User ID handling

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linuxfoundation · containerd17 Mar 2025

  • CVE-2025-2473
    28İzleyin

    PHPGurukul Company Visitor Management System Sign In index.php sql injection

    OrtaCVSS 6,9Kavram kanıtıEPSS %2

    phpgurukul · company visitor management system17 Mar 2025

  • CVE-2025-2449
    45Planlayın

    NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %33

    ni · flexlogger18 Mar 2025

  • CVE-2024-44313
    32İzleyin

    TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    tastyigniter · tastyigniter18 Mar 2025

  • CVE-2025-24799
    65Bu hafta

    GLPI allows unauthenticated SQL injection through the inventory endpoint

    KritikCVSS 9,8SilahlaştırılmışEPSS %86

    glpi-project · glpi18 Mar 2025

  • CVE-2025-24801
    41Planlayın

    GLPI allows authenticated remote code execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %20

    glpi-project · glpi18 Mar 2025

  • CVE-2024-50629
    31İzleyin

    Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology

    OrtaCVSS 5,3Kavram kanıtıEPSS %31

    synology · beestation os19 Mar 2025

  • CVE-2024-50630
    37İzleyin

    Missing authentication for critical function vulnerability in the webapi component in Synology Drive Server before 3.0.4-12699, 3.2.1-23280,

    YüksekCVSS 7,5İstismar yokEPSS %24

    synology · drive server19 Mar 2025

  • CVE-2024-50631
    38İzleyin

    Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in the system syncing daemon in Synology

    YüksekCVSS 7,5İstismar yokEPSS %26

    synology · drive server19 Mar 2025

  • CVE-2025-1232
    36İzleyin

    Site Reviews < 7.2.5 - Unauthenticated Stored XSS

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    geminilabs · site reviews19 Mar 2025

  • CVE-2025-2512
    39İzleyin

    File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated File Upload via upload Function

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    file away project · file away19 Mar 2025

  • CVE-2025-30144
    26İzleyin

    Fast-JWT Improperly Validates iss Claims

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    nearform · fast-jwt19 Mar 2025

  • CVE-2025-30154
    65Bu hafta

    Multiple Reviewdog actions were compromised during a specific time period

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %2

    reviewdog · action-ast-grep19 Mar 2025

  • CVE-2025-29925
    34İzleyin

    XWiki allows unregistered users to access private pages information through REST endpoint

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    xwiki · xwiki19 Mar 2025

  • CVE-2025-27415
    30İzleyin

    Nuxt allows DOS via cache poisoning with payload rendering response

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    nuxt · nuxt19 Mar 2025

  • CVE-2025-2505
    40Planlayın

    Age Gate <= 3.5.3 - Unauthenticated Local PHP File Inclusion via 'lang'

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    philsbury · age gate20 Mar 2025

  • CVE-2024-10762
    32İzleyin

    Missing Authorization in lunary-ai/lunary

    YüksekCVSS 8,1İstismar yokEPSS %0

    lunary · lunary20 Mar 2025

  • CVE-2024-10812
    24İzleyin

    Open Redirect in binary-husky/gpt_academic

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    binary-husky · gpt academic20 Mar 2025

  • CVE-2024-10821
    30İzleyin

    Denial of Service (DoS) in invoke-ai/invokeai

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    invoke-ai · invoke-ai/invokeai20 Mar 2025

  • CVE-2024-10829
    30İzleyin

    Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    dbgpt · db-gpt20 Mar 2025

  • CVE-2024-10908
    24İzleyin

    Open Redirect in lm-sys/fastchat

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    lm-sys · fastchat20 Mar 2025

  • CVE-2024-11042
    36İzleyin

    Arbitrary File Delete in invoke-ai/invokeai

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    invoke-ai · invoke-ai/invokeai20 Mar 2025

  • CVE-2024-11044
    24İzleyin

    Open Redirect in automatic1111/stable-diffusion-webui

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    automatic1111 · stable-diffusion-webui20 Mar 2025

  • CVE-2024-12029
    60Bu hafta

    Remote Code Execution via Model Deserialization in invoke-ai/invokeai

    KritikCVSS 9,8SilahlaştırılmışEPSS %5

    invoke-ai · invoke-ai/invokeai20 Mar 2025

  • CVE-2024-12886
    30İzleyin

    Out-Of-Memory (OOM) Vulnerability in ollama/ollama

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    ollama · ollama/ollama20 Mar 2025

  • CVE-2024-4990
    60Bu hafta

    Unsafe Reflection in base Component class in yiisoft/yii2

    KritikCVSS 9,1İstismar yokEPSS %80

    yiiframework · yii20 Mar 2025

  • CVE-2024-6842
    39İzleyin

    Exposure of Sensitive Information in mintplex-labs/anything-llm

    YüksekCVSS 7,5Kavram kanıtıEPSS %31

    mintplexlabs · anythingllm20 Mar 2025

  • CVE-2024-8021
    24İzleyin

    Open Redirect in gradio-app/gradio

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    gradio project · gradio20 Mar 2025

  • CVE-2024-8859
    31İzleyin

    Path Traversal in mlflow/mlflow

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    lfprojects · mlflow20 Mar 2025

  • CVE-2024-9362
    31İzleyin

    Directory Traversal in polyaxon/polyaxon

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    polyaxon · polyaxon/polyaxon20 Mar 2025

  • CVE-2024-9617
    27İzleyin

    IDOR in danswer-ai/danswer

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    danswer-ai · danswer-ai/danswer20 Mar 2025

  • CVE-2025-0184
    26İzleyin

    Server-Side Request Forgery (SSRF) in langgenius/dify

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    langgenius · dify20 Mar 2025

  • CVE-2025-0317
    34İzleyin

    Divide By Zero in ollama/ollama

    YüksekCVSS 7,5İstismar yokEPSS %14

    ollama · ollama20 Mar 2025

  • CVE-2025-0453
    33İzleyin

    Denial of Service through Batched Queries in GraphQL in mlflow/mlflow

    YüksekCVSS 7,5İstismar yokEPSS %11

    lfprojects · mlflow20 Mar 2025

  • CVE-2025-27888
    24İzleyin

    Apache Druid: Server-Side Request Forgery and Cross-Site Scripting

    OrtaCVSS 5,8Kavram kanıtıEPSS %1

    apache · druid20 Mar 2025

  • CVE-2025-2539
    31İzleyin

    File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    file away project · file away20 Mar 2025

  • CVE-2024-48590
    39İzleyin

    Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery (SSRF) via the NewsReaderService.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    inflectra · spirateam20 Mar 2025

  • CVE-2024-48591
    24İzleyin

    Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting (XSS).

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    inflectra · spirateam20 Mar 2025

  • CVE-2025-2546
    24İzleyin

    D-Link DIR-618/DIR-605L Firewall Service formAdvFirewall access control

    OrtaCVSS 5,3İstismar yokEPSS %10

    dlink · dir-605l firmware20 Mar 2025

  • CVE-2025-23120
    42Planlayın

    A vulnerability allowing remote code execution (RCE) for domain users.

    YüksekCVSS 8,8İstismar yokEPSS %24

    veeam · veeam backup \& replication20 Mar 2025

  • CVE-2025-29927
    66Bu hafta

    Authorization Bypass in Next.js Middleware

    KritikCVSS 9,1SilahlaştırılmışEPSS %99

    vercel · next.js21 Mar 2025

  • CVE-2025-2598
    22İzleyin

    AWS CDK CLI prints AWS credentials retrieved by custom credential plugins

    OrtaCVSS 5,7Kavram kanıtıEPSS %0

    amazon · aws cloud development kit21 Mar 2025

  • CVE-2025-30349
    37İzleyin

    Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted t

    YüksekCVSS 7,2Kavram kanıtıEPSS %31

    horde · imp21 Mar 2025

  • CVE-2025-2609
    24İzleyin

    MagnusBilling Stored Cross-Site Scripting in Login Logs

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    magnussolution · magnusbilling21 Mar 2025

  • CVE-2025-2610
    21İzleyin

    MagnusBilling Stored Cross-Site Scripting in Alarm Module

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    magnussolution · magnusbilling21 Mar 2025

  • CVE-2025-2620
    40Planlayın

    D-Link DAP-1620 Authentication storage mod_graph_auth_uri_handler stack-based overflow

    KritikCVSS 9,3Kavram kanıtıEPSS %8

    dlink · dap-1620 firmware22 Mar 2025

  • CVE-2023-25610
    44Planlayın

    A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, vers

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    fortinet · fortiweb24 Mar 2025

  • CVE-2025-30208
    52Planlayın

    Vite bypasses server.fs.deny when using `?raw??`

    YüksekCVSS 7,5Kavram kanıtıEPSS %74

    vitejs · vite24 Mar 2025

  • CVE-2025-22223
    21İzleyin

    Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods.

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    spring · spring security24 Mar 2025

  • CVE-2025-2746
    91Hemen

    Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %74

    kentico · xperience24 Mar 2025

  • CVE-2025-2747
    98Hemen

    Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    kentico · xperience24 Mar 2025

  • CVE-2025-2748
    42Planlayın

    Kentico Xperience stored cross-site scripting in multiple-file upload functionality

    OrtaCVSS 6,1Kavram kanıtıEPSS %60

    kentico · xperience24 Mar 2025

  • CVE-2025-2749
    59Planlayın

    Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %4

    kentico · xperience24 Mar 2025

  • CVE-2025-2709
    21İzleyin

    Yonyou UFIDA ERP-NC login.jsp cross site scripting

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    yonyou · ufida erp-nc24 Mar 2025

  • CVE-2025-2710
    21İzleyin

    Yonyou UFIDA ERP-NC menu.jsp cross site scripting

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    yonyou · ufida erp-nc24 Mar 2025

  • CVE-2025-2711
    21İzleyin

    Yonyou UFIDA ERP-NC systop.jsp cross site scripting

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    yonyou · ufida erp-nc24 Mar 2025

  • CVE-2025-2712
    21İzleyin

    Yonyou UFIDA ERP-NC top.jsp cross site scripting

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    yonyou · ufida erp-nc24 Mar 2025

  • CVE-2025-1097
    45Planlayın

    ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation

    YüksekCVSS 8,8Kavram kanıtıEPSS %33

    kubernetes · ingress-nginx24 Mar 2025

  • CVE-2025-1098
    60Bu hafta

    ingress-nginx controller - configuration injection via unsanitized mirror annotations

    YüksekCVSS 8,8Kavram kanıtıEPSS %82

    kubernetes · ingress-nginx24 Mar 2025

  • CVE-2025-1974
    69Bu hafta

    ingress-nginx admission controller RCE escalation

    KritikCVSS 9,8Kavram kanıtıEPSS %99

    kubernetes · ingress-nginx24 Mar 2025

  • CVE-2025-24514
    44Planlayın

    ingress-nginx controller - configuration injection via unsanitized auth-url annotation

    YüksekCVSS 8,8Kavram kanıtıEPSS %30

    kubernetes · ingress-nginx24 Mar 2025

  • CVE-2025-29635
    84Hemen

    A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %87

    dlink · dir-823x firmware25 Mar 2025

  • CVE-2025-30567
    31İzleyin

    WordPress WP01 plugin <= 2.6.2 - Arbitrary File Download Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    wp01 · wp0125 Mar 2025

  • CVE-2025-30216
    37İzleyin

    CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length

    KritikCVSS 9,1Kavram kanıtıEPSS %2

    nasa · cryptolib25 Mar 2025

  • CVE-2025-1913
    28İzleyin

    Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    webtoffee · product import export for woocommerce26 Mar 2025

  • CVE-2025-2783
    66Bu hafta

    Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker

    YüksekCVSS 8,3KEVSilahlaştırılmışEPSS %9

    google · chrome26 Mar 2025

  • CVE-2024-55963
    35İzleyin

    An issue was discovered in Appsmith before 1.51.

    OrtaCVSS 6,5Kavram kanıtıEPSS %30

    appsmith · appsmith26 Mar 2025

  • CVE-2024-55964
    60Bu hafta

    An issue was discovered in Appsmith before 1.52.

    KritikCVSS 9,8SilahlaştırılmışEPSS %6

    appsmith · appsmith26 Mar 2025

  • CVE-2025-20229
    37İzleyin

    Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise

    YüksekCVSS 8,0İstismar yokEPSS %16

    splunk · splunk26 Mar 2025

  • CVE-2024-45352
    35İzleyin

    Xiaomi smarthome application Webview has code execution vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    xiaomi · xiaomi smarthome application26 Mar 2025

  • CVE-2025-30772
    35İzleyin

    WordPress WPC Smart Upsell Funnel for WooCommerce plugin <= 3.0.4 - Arbitrary Option Update to Privilege Escalation vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    wpclever · wpc smart upsell funnel for woocommerce27 Mar 2025

  • CVE-2025-30921
    30İzleyin

    WordPress Newsletters plugin <= 4.9.9.7 - SQL Injection vulnerability

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    tribulant software · newsletters27 Mar 2025

  • CVE-2025-31140
    32İzleyin

    In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page

    OrtaCVSS 6,1İstismar yokEPSS %28

    jetbrains · teamcity27 Mar 2025

  • CVE-2025-22652
    30İzleyin

    WordPress Payment Forms for Paystack plugin <= 4.0.1 - SQL Injection vulnerability

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    kendysond · payment forms for paystack27 Mar 2025

  • CVE-2025-22783
    35İzleyin

    WordPress SEO Plugin by Squirrly SEO plugin <= 12.4.03 - SQL Injection vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    squirrly · seo plugin by squirrly seo27 Mar 2025

  • CVE-2024-12905
    31İzleyin

    An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Tra

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    27 Mar 2025

  • CVE-2025-29306
    53Planlayın

    An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.

    KritikCVSS 9,8Kavram kanıtıEPSS %46

    foxcms · foxcms27 Mar 2025

  • CVE-2025-2294
    63Bu hafta

    Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

    KritikCVSS 9,8Kavram kanıtıEPSS %78

    extendthemes · kubio ai page builder28 Mar 2025

  • CVE-2025-28219
    43Planlayın

    Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary co

    KritikCVSS 9,8İstismar yokEPSS %12

    netgear · dc112a firmware28 Mar 2025

  • CVE-2025-22953
    40Planlayın

    A SQL injection vulnerability exists in Epicor HCM 2021 1.9, with patches available: 5.16.0.1033/HCM2022, 5.17.0.1146/HCM2023, and 5.18.0.57

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    epicor · human capital management28 Mar 2025

  • CVE-2025-2927
    27İzleyin

    ESAFENET CDG getFileTypeList.jsp sql injection

    OrtaCVSS 6,9İstismar yokEPSS %0

    esafenet · cdg28 Mar 2025

  • CVE-2025-25579
    42Planlayın

    TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.

    KritikCVSS 9,8İstismar yokEPSS %10

    totolink · a3002r firmware28 Mar 2025

  • CVE-2025-2249
    35İzleyin

    SoJ Soundslides <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    sojweb · soj soundslides29 Mar 2025

  • CVE-2025-2266
    39İzleyin

    Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    mestresdowp · checkout mestres do wp for woocommerce29 Mar 2025

  • CVE-2025-1219
    25İzleyin

    libxml streams use wrong content-type header when requesting a redirected resource

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    php · php30 Mar 2025

  • CVE-2025-2975
    20İzleyin

    GFI KerioConnect Signature EditHtmlSource cross site scripting

    OrtaCVSS 5,1İstismar yokEPSS %0

    gfi · kerio connect31 Mar 2025

  • CVE-2025-2993
    30İzleyin

    Tenda FH1202 default.cfg access control

    OrtaCVSS 6,9İstismar yokEPSS %10

    tenda · fh1202 firmware31 Mar 2025

  • CVE-2025-2995
    27İzleyin

    Tenda FH1202 Web Management Interface SysToolChangePwd access control

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    tenda · fh1202 firmware31 Mar 2025

  • CVE-2025-30161
    36İzleyin

    OpenEMR Stored XSS in OpenEMR Bronchitis Form

    YüksekCVSS 8,4İstismar yokEPSS %10

    open-emr · openemr31 Mar 2025

  • CVE-2025-3002
    33İzleyin

    Digital China DCME-520 mon_merge_stat_hist.php os command injection

    OrtaCVSS 6,9İstismar yokEPSS %20

    digital china · dcme-52031 Mar 2025

  • CVE-2025-3047
    27İzleyin

    Path Traversal in AWS SAM CLI allows file copy to build container

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    aws · aws serverless application model command line interface31 Mar 2025

  • CVE-2025-2292
    40Planlayın

    Xorcom CompletePBX <= 5.2.35 Authenticated File Disclosure

    OrtaCVSS 6,5SilahlaştırılmışEPSS %1

    xorcom · completepbx31 Mar 2025

  • CVE-2025-30004
    40Planlayın

    Xorcom CompletePBX <= 5.2.35 Task Scheduler Authenticated Command Injection

    YüksekCVSS 8,8SilahlaştırılmışEPSS %4

    xorcom · completepbx31 Mar 2025