İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2025: sömürülen ve yeni ciddi CVE kayıtları

335 kayıt · 14 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 4

  • CVE-2025-1727
    28İzleyin

    End-of-Train and Head-of-Train Remote Linking Protocol Weak Authentication

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    end-of-train and head-of-train remote linking protocol · end-of-train and head-of-train remote linking protocol10 Tem 2025

  • CVE-2025-7401
    39İzleyin

    Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read and Write via remote_tunnel.php

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    aa-team · premium age verification / restriction for wordpress11 Tem 2025

  • CVE-2025-6851
    26İzleyin

    Broken Link Notifier <= 1.3.0 - Unauthenticated Server-Side Request Forgery

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    pluginrx · broken link notifier11 Tem 2025

  • CVE-2025-50121
    45Planlayın

    A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause u

    KritikCVSS 9,5İstismar yokEPSS %22

    schneider electric · ecostruxure™ it data center expert11 Tem 2025

  • CVE-2025-51591
    14İzleyin

    A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via inj

    DüşükCVSS 3,7Kavram kanıtıEPSS %0

    11 Tem 2025

  • CVE-2025-48924
    22İzleyin

    Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs

    OrtaCVSS 5,3Kavram kanıtıEPSS %2

    apache · commons lang11 Tem 2025

  • CVE-2025-52089
    38İzleyin

    A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenticated attacker to ex

    YüksekCVSS 8,8Kavram kanıtıEPSS %9

    totolink · n300rb firmware11 Tem 2025

  • CVE-2025-7026
    32İzleyin

    SMM Arbitrary Write via Unchecked RBX Pointer in CommandRcx0

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    gigabyte · uefi-genericcomponentsmmentry11 Tem 2025

  • CVE-2025-7029
    32İzleyin

    SMM Arbitrary Write via Unchecked OcHeader Buffer in Platform Configuration Handler

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    gigabyte · uefi-overclocksmihandler11 Tem 2025

  • CVE-2013-3307
    52Planlayın

    Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell met

    YüksekCVSS 8,3Kavram kanıtıEPSS %63

    linksys · e100011 Tem 2025

  • CVE-2025-6058
    41Planlayın

    WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    iqonic · wpbookit12 Tem 2025

  • CVE-2025-7461
    22İzleyin

    code-projects Modern Bag action.php sql injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    code-projects · modern bag12 Tem 2025

  • CVE-2020-36847
    60Bu hafta

    Simple File List < 4.2.3 - Remote Code Execution

    KritikCVSS 9,8SilahlaştırılmışEPSS %43

    simplefilelist · simple file list12 Tem 2025

  • CVE-2020-36848
    60Bu hafta

    Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download

    YüksekCVSS 7,5SilahlaştırılmışEPSS %1

    boldgrid · total upkeep12 Tem 2025

  • CVE-2020-36849
    60Bu hafta

    AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8SilahlaştırılmışEPSS %8

    ait-themes · csv import \/ export12 Tem 2025

  • CVE-2024-58258
    35İzleyin

    SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur.

    YüksekCVSS 7,2Kavram kanıtıEPSS %22

    sugarcrm · sugarcrm13 Tem 2025

  • CVE-2025-7558
    8İzleyin

    code-projects Voting System positions_add.php sql injection

    DüşükCVSS 2,1Kavram kanıtıEPSS %0

    fabian · voting system13 Tem 2025

  • CVE-2025-7545
    7İzleyin

    GNU Binutils objcopy.c copy_section heap-based overflow

    DüşükCVSS 1,9Kavram kanıtıEPSS %0

    gnu · binutils13 Tem 2025

  • CVE-2024-26291
    34İzleyin

    Authenticated Arbitrary File Read affecting Avid NEXIS

    YüksekCVSS 8,7Kavram kanıtıEPSS %1

    avid · avid nexis e-series14 Tem 2025

  • CVE-2025-7605
    22İzleyin

    code-projects AVL Rooms profile.php sql injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    anisha · avl rooms14 Tem 2025

  • CVE-2025-7606
    22İzleyin

    code-projects AVL Rooms city.php sql injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    anisha · avl rooms14 Tem 2025

  • CVE-2025-53640
    21İzleyin

    Indico vulnerable to user enumeration via API endpoint

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    cern · indico14 Tem 2025

  • CVE-2025-53833
    43Planlayın

    LaRecipe is vulnerable to Server-Side Template Injection attacks

    KritikCVSS 10,0Kavram kanıtıEPSS %9

    saleem-hadad · larecipe14 Tem 2025

  • CVE-2025-53887
    21İzleyin

    Directus's exact version number is exposed by the OpenAPI Spec

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    monospace · directus14 Tem 2025

  • CVE-2025-5394
    54Planlayın

    Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation

    KritikCVSS 9,8Kavram kanıtıEPSS %51

    bearsthemes · alone – charity multipurpose non-profit wordpress theme15 Tem 2025

  • CVE-2025-7340
    40Planlayın

    HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    hasthemes · download contact form 7 widget for elementor page builder \& gutenberg blocks15 Tem 2025

  • CVE-2025-34103
    60Bu hafta

    WePresent WiPG-1000 Unauthenticated Command Injection in via rdfs.cgi

    KritikCVSS 9,3SilahlaştırılmışEPSS %5

    wepresent (barco) · wipg-100015 Tem 2025

  • CVE-2025-34104
    40Planlayın

    Piwik Authenticated RCE via Custom Plugin Upload

    KritikCVSS 9,4SilahlaştırılmışEPSS %1

    piwik (now matomo) · web analytics platform15 Tem 2025

  • CVE-2025-34105
    60Bu hafta

    DiskBoss Enterprise Stack-Based Buffer Overflow RCE

    KritikCVSS 10,0SilahlaştırılmışEPSS %1

    flexense · diskboss enterprise15 Tem 2025

  • CVE-2025-34106
    40Planlayın

    PDF Shaper v3.5/3.6 Buffer Overflow via Convert to Image Feature

    YüksekCVSS 8,4SilahlaştırılmışEPSS %0

    burnaware · pdf shaper15 Tem 2025

  • CVE-2025-34107
    60Bu hafta

    WinaXe 7.7 FTP Client Remote Buffer Overflow

    YüksekCVSS 8,7SilahlaştırılmışEPSS %1

    labf · winaxe ftp client15 Tem 2025

  • CVE-2025-34108
    60Bu hafta

    Disk Pulse Enterprise 9.0.34 Login Stack Buffer Overflow

    YüksekCVSS 8,6SilahlaştırılmışEPSS %1

    falconstor software · disk pulse enterprise15 Tem 2025

  • CVE-2025-34109
    40Planlayın

    Panda Security PSEvents.exe Insecure DLL Loading Privilege Escalation

    YüksekCVSS 8,5SilahlaştırılmışEPSS %0

    panda security · panda global protection 201615 Tem 2025

  • CVE-2025-34110
    60Bu hafta

    ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information Disclosure

    KritikCVSS 9,3SilahlaştırılmışEPSS %1

    coloradoftp · server15 Tem 2025

  • CVE-2025-34111
    60Bu hafta

    Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE

    KritikCVSS 9,3SilahlaştırılmışEPSS %2

    tiki · tikiwiki cms\/groupware15 Tem 2025

  • CVE-2025-34112
    60Bu hafta

    Riverbed SteelCentral NetProfiler / NetExpress 10.8.7 RCE

    KritikCVSS 10,0SilahlaştırılmışEPSS %2

    riverbed technology · steelcentral netexpress15 Tem 2025

  • CVE-2025-34113
    40Planlayın

    Tiki Wiki CMS Authenticated Command Injection in Calendar Module

    YüksekCVSS 8,7SilahlaştırılmışEPSS %2

    tiki software community association · wiki cms groupware15 Tem 2025

  • CVE-2025-34115
    40Planlayın

    OP5 Monitor <= 7.1.9 Authenticated Command Execution via command_test.php

    YüksekCVSS 8,7SilahlaştırılmışEPSS %3

    itrs group · op5 monitor15 Tem 2025

  • CVE-2025-34116
    40Planlayın

    IPFire < 2.19 Core Update 101 proxy.cgi RCE

    YüksekCVSS 8,7SilahlaştırılmışEPSS %1

    ipfire project · ipfire15 Tem 2025

  • CVE-2025-52376
    43Planlayın

    An authentication bypass vulnerability in the /web/um_open_telnet.cgi endpoint in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and

    KritikCVSS 9,8İstismar yokEPSS %13

    15 Tem 2025

  • CVE-2025-52377
    25İzleyin

    Command injection vulnerability in Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below, allowing authenticated attackers to exe

    OrtaCVSS 5,4İstismar yokEPSS %14

    15 Tem 2025

  • CVE-2025-52378
    26İzleyin

    Cross-Site Scripting (XSS) vulnerability in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below allowing attackers to inject Ja

    OrtaCVSS 5,4İstismar yokEPSS %17

    15 Tem 2025

  • CVE-2025-52379
    26İzleyin

    Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below contains an authenticated command injection vulnerability in the firmware u

    OrtaCVSS 5,4İstismar yokEPSS %15

    15 Tem 2025

  • CVE-2025-7656
    38İzleyin

    Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a craft

    YüksekCVSS 8,8İstismar yokEPSS %10

    google · chrome15 Tem 2025

  • CVE-2025-6965
    50Planlayın

    Integer Truncation on SQLite

    YüksekCVSS 7,2Kavram kanıtıEPSS %73

    sqlite · sqlite15 Tem 2025

  • CVE-2025-30749
    32İzleyin

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

    YüksekCVSS 8,1Kavram kanıtıEPSS %1

    oracle · jre15 Tem 2025

  • CVE-2025-53024
    32İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    oracle · vm virtualbox15 Tem 2025

  • CVE-2025-6558
    68Bu hafta

    Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentiall

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %10

    google · chrome15 Tem 2025

  • CVE-2025-52688
    50Planlayın

    Command Injection Vulnerability in the OmniAccess Stellar Web Management Interface

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    alcatel-lucent · omniaccess stellar products16 Tem 2025

  • CVE-2025-52689
    44Planlayın

    Weak Session ID Check in the OmniAccess Stellar Web Management Interface

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    alcatel-lucent · omniaccess stellar products16 Tem 2025

  • CVE-2025-52690
    36İzleyin

    Command Injection Vulnerability in the OmniAccess Stellar over UDP Service

    YüksekCVSS 8,1İstismar yokEPSS %14

    alcatel-lucent · omniaccess stellar products16 Tem 2025

  • CVE-2025-29009
    40Planlayın

    WordPress Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Arbitrary File Upload Vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    webkul · medical prescription attachment plugin for woocommerce16 Tem 2025

  • CVE-2025-34300
    64Bu hafta

    Sawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE

    KritikCVSS 10,0SilahlaştırılmışEPSS %81

    sawtooth software · lighthouse studio16 Tem 2025

  • CVE-2025-20283
    32İzleyin

    Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %13

    cisco · identity services engine16 Tem 2025

  • CVE-2025-20284
    36İzleyin

    Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %25

    cisco · identity services engine16 Tem 2025

  • CVE-2025-20337
    92Hemen

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %74

    cisco · identity services engine16 Tem 2025

  • CVE-2025-34117
    60Bu hafta

    Netcore / Netis Routers RCE via UDP Port 53413 Backdoor

    KritikCVSS 9,3SilahlaştırılmışEPSS %20

    netcore technology · router firmware16 Tem 2025

  • CVE-2025-34118
    60Bu hafta

    Linknat VOS Manager Path Traversal File Disclosure

    YüksekCVSS 8,7SilahlaştırılmışEPSS %2

    linknat technology · vos manager16 Tem 2025

  • CVE-2025-34119
    60Bu hafta

    EasyCafe Server 2.2.14 Remote File Disclosure via Opcode 0x43

    YüksekCVSS 8,8SilahlaştırılmışEPSS %2

    tinasoft · easycafe server16 Tem 2025

  • CVE-2025-34120
    60Bu hafta

    LimeSurvey 2.0+ - 2.06+ Unauthenticated Arbitrary File Download via Serialized Backup Payload

    YüksekCVSS 8,7SilahlaştırılmışEPSS %1

    limesurvey gmbh · limesurvey16 Tem 2025

  • CVE-2025-34121
    60Bu hafta

    Idera Up.Time ≤ 7.2 post2file.php Arbitrary File Upload RCE

    KritikCVSS 9,3SilahlaştırılmışEPSS %2

    idera · up.time monitoring station16 Tem 2025

  • CVE-2025-34123
    40Planlayın

    VideoCharge Studio 2.12.3.685 SEH Buffer Overflow via .VSC File

    YüksekCVSS 8,4SilahlaştırılmışEPSS %0

    videocharge software · studio16 Tem 2025

  • CVE-2025-34124
    40Planlayın

    Heroes of Might and Magic III .h3m Map File Buffer Overflow

    YüksekCVSS 8,4SilahlaştırılmışEPSS %0

    the 3do company · heroes of might and magic iii16 Tem 2025

  • CVE-2025-34125
    60Bu hafta

    D-Link DSP-W110A1 Cookie Command Injection

    KritikCVSS 9,3SilahlaştırılmışEPSS %4

    d-link · dsp-w110a116 Tem 2025

  • CVE-2025-34126
    60Bu hafta

    RIPS Scanner v0.54 Path Traversal

    YüksekCVSS 8,7SilahlaştırılmışEPSS %2

    rips technologies · rips scanner16 Tem 2025

  • CVE-2025-34127
    60Bu hafta

    Achat v0.150 SEH Buffer Overflow via UDP

    KritikCVSS 9,3SilahlaştırılmışEPSS %1

    achat software · achat chat server16 Tem 2025

  • CVE-2025-34128
    60Bu hafta

    X360 VideoPlayer ActiveX Control Buffer Overflow via ConvertFile()

    YüksekCVSS 8,6SilahlaştırılmışEPSS %1

    x360soft · x360 videoplayer activex control16 Tem 2025

  • CVE-2025-4302
    21İzleyin

    Stop User Enumeration < 1.7.3 - Protection Bypass

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    fullworksplugins · stop user enumeration17 Tem 2025

  • CVE-2025-3415
    17İzleyin

    Grafana is an open-source platform for monitoring and observability.

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    grafana · grafana17 Tem 2025

  • CVE-2025-25257
    99Hemen

    An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet For

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    fortinet · fortiweb17 Tem 2025

  • CVE-2025-7338
    30İzleyin

    Multer vulnerable to Denial of Service via unhandled exception from malformed request

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    expressjs · multer17 Tem 2025

  • CVE-2025-54068
    95Hemen

    Livewire vulnerable to remote command execution during property update hydration

    KritikCVSS 9,2KEVSilahlaştırılmışEPSS %96

    laravel · livewire17 Tem 2025

  • CVE-2025-0886
    34İzleyin

    An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to esc

    YüksekCVSS 8,5Kavram kanıtıEPSS %0

    lenovo · elliptic virtual lock sensor service for thinkpad p1 gen 6 (type 21fv, 21fw)17 Tem 2025

  • CVE-2025-23266
    37İzleyin

    NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could

    KritikCVSS 9,0Kavram kanıtıEPSS %3

    nvidia · container toolkit17 Tem 2025

  • CVE-2025-53964
    38İzleyin

    GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    goldendict · goldendict17 Tem 2025

  • CVE-2025-7753
    22İzleyin

    code-projects Online Appointment Booking System adddoctor.php sql injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    anisha · online appointment booking system17 Tem 2025

  • CVE-2025-7431
    17İzleyin

    Knowledge Base <= 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slug

    OrtaCVSS 4,4Kavram kanıtıEPSS %0

    ajay · knowledge base17 Tem 2025

  • CVE-2025-6023
    47Planlayın

    An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks.

    YüksekCVSS 7,6İstismar yokEPSS %57

    grafana · grafana18 Tem 2025

  • CVE-2025-6197
    37İzleyin

    An open redirect vulnerability has been identified in Grafana OSS organization switching functionality.

    OrtaCVSS 4,2Kavram kanıtıEPSS %70

    grafana · grafana18 Tem 2025

  • CVE-2025-49484
    35İzleyin

    Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.1 for Joomla

    YüksekCVSS 8,7Kavram kanıtıEPSS %4

    joomsky.com · js jobs component for joomla18 Tem 2025

  • CVE-2025-54073
    33İzleyin

    mcp-package-docs vulnerable to command injection in several tools

    YüksekCVSS 7,5İstismar yokEPSS %11

    sammcj · mcp-package-docs18 Tem 2025

  • CVE-2025-7783
    38İzleyin

    Usage of unsafe random function in form-data for choosing boundary

    KritikCVSS 9,4Kavram kanıtıEPSS %1

    18 Tem 2025

  • CVE-2025-7795
    30İzleyin

    Tenda FH451 P2pListFilter fromP2pListFilter stack-based overflow

    YüksekCVSS 7,4Kavram kanıtıEPSS %3

    tenda · fh451 firmware18 Tem 2025

  • CVE-2025-54309
    97Hemen

    CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %93

    crushftp · crushftp18 Tem 2025

  • CVE-2025-27210
    34İzleyin

    An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX.

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    nodejs · node18 Tem 2025

  • CVE-2012-10019
    60Bu hafta

    Front-end Editor < 2.3 - Arbitrary File Upload

    KritikCVSS 9,8SilahlaştırılmışEPSS %3

    scribu · front-end editor19 Tem 2025

  • CVE-2015-10133
    40Planlayın

    Subscribe to Comments <= 2.1.2 - Local File Includion

    YüksekCVSS 7,2SilahlaştırılmışEPSS %2

    markjaquith · subscribe to comments19 Tem 2025

  • CVE-2015-10134
    60Bu hafta

    Simple Backup <= 2.7.10 - Arbitrary File Download via Path Traversal

    YüksekCVSS 7,5SilahlaştırılmışEPSS %1

    mywebsiteadvisor · simple backup19 Tem 2025

  • CVE-2015-10135
    60Bu hafta

    WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload

    KritikCVSS 9,8SilahlaştırılmışEPSS %4

    eoxia · wpshop 219 Tem 2025

  • CVE-2015-10136
    60Bu hafta

    GI-Media Library < 3.0 - Directory Traversal

    YüksekCVSS 7,5SilahlaştırılmışEPSS %3

    zishanj · gi-media-library19 Tem 2025

  • CVE-2016-15043
    60Bu hafta

    WP Mobile Detector <= 3.5 - Arbitrary File Upload

    KritikCVSS 9,8SilahlaştırılmışEPSS %8

    wp mobile detector project · wp mobile detector19 Tem 2025

  • CVE-2015-10138
    60Bu hafta

    Work The Flow File Upload <= 2.5.2 - Arbitrary File Upload

    KritikCVSS 9,8SilahlaştırılmışEPSS %3

    lyntonreed · work the flow file upload19 Tem 2025

  • CVE-2015-10139
    40Planlayın

    WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation

    YüksekCVSS 8,8SilahlaştırılmışEPSS %1

    vibethemes · wordpress learning management system 19 Tem 2025

  • CVE-2025-54313
    61Bu hafta

    eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise.

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %4

    prettier · eslint-config-prettier19 Tem 2025

  • CVE-2025-7840
    8İzleyin

    Campcodes Online Movie Theater Seat Reservation System Reserve Your Seat Page index.php cross site scripting

    DüşükCVSS 2,0Kavram kanıtıEPSS %0

    campcodes · online movie theater seat reservation system19 Tem 2025

  • CVE-2025-53770
    99Hemen

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    microsoft · sharepoint server19 Tem 2025

  • CVE-2025-7892
    7İzleyin

    IDnow App de.idnow AndroidManifest.xml improper export of android application components

    DüşükCVSS 1,9Kavram kanıtıEPSS %0

    idnow · idnow20 Tem 2025

  • CVE-2025-7901
    21İzleyin

    yangzongzhuan RuoYi Swagger UI index.html cross site scripting

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    ruoyi · ruoyi20 Tem 2025

  • CVE-2025-47917
    40Planlayın

    Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    arm · mbed tls20 Tem 2025

  • CVE-2025-53771
    60Bu hafta

    Microsoft SharePoint Server Spoofing Vulnerability

    OrtaCVSS 6,5SilahlaştırılmışEPSS %99

    microsoft · sharepoint server20 Tem 2025