İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2025: sömürülen ve yeni ciddi CVE kayıtları

335 kayıt · 14 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 3 / 4

  • CVE-2025-54352
    14İzleyin

    WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via pingback.ping XML-RPC requests.

    DüşükCVSS 3,7Kavram kanıtıEPSS %0

    wordpress · wordpress21 Tem 2025

  • CVE-2025-2301
    17İzleyin

    IDOR in Akbim Software's Online Exam Registration

    OrtaCVSS 4,4Kavram kanıtıEPSS %0

    akbim software · online exam registration21 Tem 2025

  • CVE-2024-13973
    31İzleyin

    A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to adminis

    YüksekCVSS 7,2İstismar yokEPSS %10

    sophos · firewall firmware21 Tem 2025

  • CVE-2024-55040
    24İzleyin

    Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    sensaphone · web600 firmware21 Tem 2025

  • CVE-2025-36845
    35İzleyin

    An issue was discovered in Eveo URVE Web Manager 27.02.2025.

    YüksekCVSS 8,6Kavram kanıtıEPSS %1

    eveo · urve web manager21 Tem 2025

  • CVE-2025-51396
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via in

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    livehelperchat · live helper chat21 Tem 2025

  • CVE-2025-51397
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrar

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    livehelperchat · live helper chat21 Tem 2025

  • CVE-2025-51398
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute ar

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    livehelperchat · live helper chat21 Tem 2025

  • CVE-2025-51400
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbi

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    livehelperchat · live helper chat21 Tem 2025

  • CVE-2025-51401
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitr

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    livehelperchat · live helper chat21 Tem 2025

  • CVE-2025-51403
    26İzleyin

    A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    livehelperchat · live helper chat21 Tem 2025

  • CVE-2025-51868
    30İzleyin

    Insecure Direct Object Reference (IDOR) vulnerability in Dippy (chat.dippy.ai) v2 allows attackers to gain sensitive information via the con

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    21 Tem 2025

  • CVE-2025-51869
    30İzleyin

    Insecure Direct Object Reference (IDOR) vulnerability in Liner thru 2025-06-03 allows attackers to gain sensitive information via crafted sp

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    21 Tem 2025

  • CVE-2012-10020
    60Bu hafta

    FoxyPress <= 0.4.2.1 - Arbitrary File Upload

    KritikCVSS 9,8SilahlaştırılmışEPSS %4

    webmovementllc · foxypress21 Tem 2025

  • CVE-2015-10137
    60Bu hafta

    Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload

    KritikCVSS 9,8SilahlaştırılmışEPSS %5

    najeebmedia · website contact form with file upload21 Tem 2025

  • CVE-2025-7952
    14İzleyin

    TOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injection

    DüşükCVSS 2,1İstismar yokEPSS %21

    totolink · t6 firmware21 Tem 2025

  • CVE-2025-38352
    61Bu hafta

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    linux · linux kernel22 Tem 2025

  • CVE-2025-6082
    21İzleyin

    Birth Chart Compatibility <= 2.0 - Unauthenticated Full Path Exposure

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    mia4 · birth chart compatibility22 Tem 2025

  • CVE-2025-34141
    21İzleyin

    ETQ Reliance CG < SE.2025.1 Reflected XSS in `SQLConverterServlet`

    OrtaCVSS 5,1Kavram kanıtıEPSS %2

    etq · reliance cg (legacy)22 Tem 2025

  • CVE-2025-34143
    47Planlayın

    ETQ Reliance CG Authentication Bypass via Trailing Space RCE

    KritikCVSS 9,3Kavram kanıtıEPSS %34

    etq · reliance cg (legacy)22 Tem 2025

  • CVE-2015-10140
    40Planlayın

    Ajax Load More < 2.8.1.2 - Subscriber+ File Upload & Deletion

    YüksekCVSS 8,8SilahlaştırılmışEPSS %1

    connekthq · ajax load more22 Tem 2025

  • CVE-2025-51867
    26İzleyin

    Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfiction.ai) thru June 3, 2025, allowing attackers to chat with

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    22 Tem 2025

  • CVE-2025-8017
    32İzleyin

    Tenda AC7 httpd setMacFilterCfg formSetMacFilterCfg stack-based overflow

    YüksekCVSS 7,4İstismar yokEPSS %11

    tenda · ac7 firmware22 Tem 2025

  • CVE-2025-51858
    24İzleyin

    Self Cross-Site Scripting (XSS) vulnerability in ChatPlayground.ai through 2025-05-24, allows attackers to execute arbitrary code and gain s

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    22 Tem 2025

  • CVE-2025-51859
    26İzleyin

    Stored Cross-Site Scripting (XSS) vulnerability in Chaindesk thru 2025-05-26 in its agent chat component.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    22 Tem 2025

  • CVE-2025-51860
    24İzleyin

    Stored Cross-Site Scripting (XSS) in TelegAI (telegai.com) 2025-05-26 in its chat component and character container component.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    22 Tem 2025

  • CVE-2025-51862
    24İzleyin

    Insecure Direct Object Reference (IDOR) vulnerability in TelegAI (telegai.com) thru 2025-05-26 in its chat component.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    22 Tem 2025

  • CVE-2025-51863
    24İzleyin

    Self Cross Site Scripting (XSS) vulnerability in ChatGPT Unli (ChatGPTUnli.com) thru 2025-05-26 allows attackers to execute arbitrary code v

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    22 Tem 2025

  • CVE-2025-51864
    26İzleyin

    A reflected cross-site scripting (XSS) vulnerability exists in AIBOX LLM chat (chat.aibox365.cn) through 2025-05-27, allowing attackers to h

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    22 Tem 2025

  • CVE-2025-51865
    35İzleyin

    Ai2 playground web service (playground.allenai.org) LLM chat through 2025-06-03 is vulnerable to Insecure Direct Object Reference (IDOR), al

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    22 Tem 2025

  • CVE-2025-8018
    8İzleyin

    code-projects Food Ordering Review System reservation_page.php sql injection

    DüşükCVSS 2,1Kavram kanıtıEPSS %0

    carmelo · food ordering review system22 Tem 2025

  • CVE-2025-51482
    36İzleyin

    Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows remote attackers to exe

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    letta · letta22 Tem 2025

  • CVE-2025-51471
    31İzleyin

    Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and

    OrtaCVSS 6,9Kavram kanıtıEPSS %13

    ollama · ollama22 Tem 2025

  • CVE-2025-51458
    26İzleyin

    SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via cr

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    dbgpt · db-gpt22 Tem 2025

  • CVE-2025-7766
    35İzleyin

    Lantronix Provisioning Manager Improper Restriction of XML External Entity Reference

    YüksekCVSS 8,6Kavram kanıtıEPSS %1

    lantronix · provisioning manager22 Tem 2025

  • CVE-2025-54439
    38İzleyin

    Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue aff

    YüksekCVSS 8,8İstismar yokEPSS %10

    samsung · magicinfo 9 server23 Tem 2025

  • CVE-2025-54441
    39İzleyin

    Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue aff

    YüksekCVSS 8,8İstismar yokEPSS %11

    samsung · magicinfo 9 server23 Tem 2025

  • CVE-2025-54445
    43Planlayın

    Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request For

    KritikCVSS 9,8İstismar yokEPSS %13

    samsung · magicinfo 9 server23 Tem 2025

  • CVE-2025-54453
    47Planlayın

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allow

    KritikCVSS 9,8İstismar yokEPSS %27

    samsung · magicinfo 9 server23 Tem 2025

  • CVE-2025-6174
    24İzleyin

    WordPress Qwizcards <= 3.9.4 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    unknown · qwizcards | online quizzes and flashcards23 Tem 2025

  • CVE-2025-31700
    32İzleyin

    A vulnerability has been found in Dahua products.

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    dahua · ipc23 Tem 2025

  • CVE-2010-10012
    60Bu hafta

    httpdASM 0.92 Path Traversal

    YüksekCVSS 8,7SilahlaştırılmışEPSS %2

    japheth · httpdasm23 Tem 2025

  • CVE-2015-10141
    60Bu hafta

    Xdebug Remote Debugger Unauthenticated OS Command Execution

    KritikCVSS 9,3SilahlaştırılmışEPSS %7

    xdebug · xdebug23 Tem 2025

  • CVE-2016-15045
    40Planlayın

    Deepin lastore-daemon Privilege Escalation via Unsigned .deb Installation

    YüksekCVSS 8,5SilahlaştırılmışEPSS %0

    wuhan deepin technology co., ltd. · deepin linux23 Tem 2025

  • CVE-2017-20198
    60Bu hafta

    DC/OS Marathon UI < 1.9.0 Unauthenticated RCE via Docker Mount Abuse

    KritikCVSS 9,3SilahlaştırılmışEPSS %1

    d2iq, inc. · dc/os marathon23 Tem 2025

  • CVE-2018-25113
    60Bu hafta

    Dicoogle PACS Web Server 2.5.0 Unauthenticated Path Traversal

    YüksekCVSS 8,7SilahlaştırılmışEPSS %1

    dicoogle project · pacs web server23 Tem 2025

  • CVE-2018-25114
    60Bu hafta

    osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution

    KritikCVSS 9,3SilahlaştırılmışEPSS %4

    oscommerce · online merchant23 Tem 2025

  • CVE-2022-4978
    60Bu hafta

    Steppschuh Remote Control Server 3.1.1.12 Unauthenticated RCE

    KritikCVSS 9,3SilahlaştırılmışEPSS %2

    steppschuh · remote control collection server23 Tem 2025

  • CVE-2025-40599
    40Planlayın

    An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface.

    KritikCVSS 9,1İstismar yokEPSS %14

    sonicwall · sma 210 firmware23 Tem 2025

  • CVE-2025-46099
    28İzleyin

    In Pluck CMS 4.7.20-dev, an authenticated attacker can upload or create a crafted PHP file under the albums module directory and access it v

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    pluck-cms · pluck23 Tem 2025

  • CVE-2025-40596
    46Planlayın

    A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Se

    YüksekCVSS 7,3İstismar yokEPSS %57

    sonicwall · sma 500v firmware23 Tem 2025

  • CVE-2025-40597
    39İzleyin

    A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Ser

    YüksekCVSS 7,5İstismar yokEPSS %31

    sonicwall · sma 500v firmware23 Tem 2025

  • CVE-2025-40598
    43Planlayın

    A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker t

    OrtaCVSS 6,1İstismar yokEPSS %64

    sonicwall · sma 500v firmware23 Tem 2025

  • CVE-2025-6018
    31İzleyin

    Pam-config: lpe from unprivileged to allow_active in pam

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    suse · pam-config23 Tem 2025

  • CVE-2025-46171
    21İzleyin

    vBulletin 3.8.7 is vulnerable to a denial-of-service condition via the misc.php?do=buddylist endpoint.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    vbulletin · vbulletin23 Tem 2025

  • CVE-2025-50481
    19İzleyin

    A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    jupo · mezzanine23 Tem 2025

  • CVE-2016-15044
    60Bu hafta

    Kaltura < 11.1.0-2 PHP Object Injection RCE

    KritikCVSS 9,3SilahlaştırılmışEPSS %2

    kaltura · video platform23 Tem 2025

  • CVE-2025-4822
    39İzleyin

    SQLi in Bayraktar Solar Energies' ScadaWatt Otopilot

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    bayraktar solar energies · scadawatt otopilot24 Tem 2025

  • CVE-2025-51087
    37İzleyin

    Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/saveParentControlInfo.

    YüksekCVSS 8,6İstismar yokEPSS %11

    tenda · ac8 firmware24 Tem 2025

  • CVE-2025-6998
    34İzleyin

    Calibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    calibre web · calibre web24 Tem 2025

  • CVE-2025-7404
    24İzleyin

    Calibre Web 0.6.24 & Autocaliweb 0.7.0 - Blind C

    OrtaCVSS 5,9Kavram kanıtıEPSS %2

    gelbphoenix · autocaliweb24 Tem 2025

  • CVE-2025-32429
    63Bu hafta

    XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter

    KritikCVSS 9,3Kavram kanıtıEPSS %87

    xwiki · xwiki24 Tem 2025

  • CVE-2015-10143
    60Bu hafta

    Platform < 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Options Update

    KritikCVSS 9,8SilahlaştırılmışEPSS %2

    pagelines · platform theme24 Tem 2025

  • CVE-2015-10144
    40Planlayın

    Responsive Thumbnail Slider < 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload

    YüksekCVSS 8,8SilahlaştırılmışEPSS %3

    i13websolution · thumbnail carousel slider24 Tem 2025

  • CVE-2019-25224
    60Bu hafta

    WP Database Backup < 5.2 - Unauthenticated OS Command Injection

    KritikCVSS 9,8SilahlaştırılmışEPSS %21

    wpseeds · wp database backup24 Tem 2025

  • CVE-2025-8155
    15İzleyin

    D-Link DCS-6010L Management Application vb.htm cross site scripting

    DüşükCVSS 2,0İstismar yokEPSS %21

    dlink · dcs-6010l firmware25 Tem 2025

  • CVE-2025-51411
    24İzleyin

    A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postqueryp

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    vishalmathur · institute-of-current-students25 Tem 2025

  • CVE-2025-44608
    26İzleyin

    CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    vishalmathur · cloudclassroom-php project25 Tem 2025

  • CVE-2025-45467
    28İzleyin

    Unitree Go1 <= Go1_2022_05_11 is vulnerable to Insecure Permissions as the firmware update functionality (via Wi-Fi/Ethernet) implements an

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    unitree · go1 firmware25 Tem 2025

  • CVE-2025-8159
    34İzleyin

    D-Link DIR-513 HTTP POST Request formLanguageChange stack-based overflow

    YüksekCVSS 7,4İstismar yokEPSS %17

    dlink · dir-513 firmware25 Tem 2025

  • CVE-2013-10032
    40Planlayın

    GetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload

    YüksekCVSS 8,7SilahlaştırılmışEPSS %3

    get-simple · getsimplecms25 Tem 2025

  • CVE-2014-125114
    40Planlayın

    i-Ftp 2.20 Schedule.xml Stack-Based Buffer Overflow

    YüksekCVSS 8,4SilahlaştırılmışEPSS %0

    i-ftp · i-ftp25 Tem 2025

  • CVE-2014-125115
    60Bu hafta

    Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE

    KritikCVSS 10,0SilahlaştırılmışEPSS %2

    artica st · pandora fms25 Tem 2025

  • CVE-2014-125116
    60Bu hafta

    HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection

    KritikCVSS 9,3SilahlaştırılmışEPSS %2

    hybridauth · hybridauth25 Tem 2025

  • CVE-2014-125117
    60Bu hafta

    D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE

    KritikCVSS 9,3SilahlaştırılmışEPSS %7

    dlink · dsp-w215 firmware25 Tem 2025

  • CVE-2014-125118
    40Planlayın

    eScan 5.5-2 Web Management Console Command Injection

    KritikCVSS 9,4SilahlaştırılmışEPSS %4

    microworld · escan web management console25 Tem 2025

  • CVE-2014-125119
    40Planlayın

    WinRAR < 5.00 Filename Spoofing RCE

    YüksekCVSS 8,4SilahlaştırılmışEPSS %1

    rarlab · winrar25 Tem 2025

  • CVE-2025-45466
    35İzleyin

    Unitree Go1 <= Go1_2022_05_11 is vulnerale to Incorrect Access Control due to authentication credentials being hardcoded in plaintext.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    unitree · go1 firmware25 Tem 2025

  • CVE-2025-29628
    37İzleyin

    A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Home

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    gardyn · home kit firmware25 Tem 2025

  • CVE-2025-45960
    24İzleyin

    Cross Site Scripting vulnerability in tawk.to Live Chat v.1.6.1 allows a remote attacker to execute arbitrary code via the web application s

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    tawk · tawk.to25 Tem 2025

  • CVE-2025-54415
    36İzleyin

    dag-factory's CI/CD Workflow Allows for Repository Takeover and Secret Exfiltration

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    astronomer · dag-factory26 Tem 2025

  • CVE-2025-54416
    36İzleyin

    tj-actions/branch-names Contains Command Injection Vulnerability

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    tj-actions · branch-names26 Tem 2025

  • CVE-2025-8180
    32İzleyin

    Tenda CH22 deleteUserName formdeleteUserName buffer overflow

    YüksekCVSS 7,4İstismar yokEPSS %10

    tenda · ch22 firmware26 Tem 2025

  • CVE-2025-8184
    33İzleyin

    D-Link DIR-513 HTTP POST Request formSetWanL2TPtriggers formSetWanL2TPcallback stack-based overflow

    YüksekCVSS 7,4İstismar yokEPSS %13

    dlink · dir-513 firmware26 Tem 2025

  • CVE-2025-8191
    9İzleyin

    macrozheng mall Swagger UI index.html cross site scripting

    DüşükCVSS 2,0Kavram kanıtıEPSS %1

    macrozheng · mall26 Tem 2025

  • CVE-2025-54597
    24İzleyin

    LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    linuxserver · heimdall application dashboard26 Tem 2025

  • CVE-2025-8220
    22İzleyin

    Engeman Web Password Recovery RecoveryPass sql injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    engeman · web27 Tem 2025

  • CVE-2025-5120
    48Planlayın

    Sandbox Escape Vulnerability in huggingface/smolagents

    KritikCVSS 10,0İstismar yokEPSS %26

    huggingface · smolagents27 Tem 2025

  • CVE-2025-8266
    8İzleyin

    yanyutao0402 ChanCMS collect.js getArticle deserialization

    DüşükCVSS 2,1Kavram kanıtıEPSS %1

    chancms · chancms28 Tem 2025

  • CVE-2025-54769
    36İzleyin

    KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal

    YüksekCVSS 8,8Kavram kanıtıEPSS %3

    xorux · lpar2rrd28 Tem 2025

  • CVE-2025-50738
    40Planlayın

    The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    usememos · memos29 Tem 2025

  • CVE-2025-51970
    30İzleyin

    A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper saniti

    YüksekCVSS 7,7Kavram kanıtıEPSS %0

    puneethreddyhc · online shopping system advanced29 Tem 2025

  • CVE-2025-44136
    40Planlayın

    MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting (XSS).

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    maptiler · tileserver php29 Tem 2025

  • CVE-2025-44137
    32İzleyin

    MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal.

    YüksekCVSS 8,2Kavram kanıtıEPSS %1

    maptiler · tileserver php29 Tem 2025

  • CVE-2024-43018
    25İzleyin

    Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters max_level and min_register.

    OrtaCVSS 6,4Kavram kanıtıEPSS %0

    piwigo · piwigo29 Tem 2025

  • CVE-2025-45346
    32İzleyin

    SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request.

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    bacula · bacula-web29 Tem 2025

  • CVE-2025-54381
    44Planlayın

    BentoML is Vulnerable to an SSRF Attack Through File Upload Processing

    KritikCVSS 9,9Kavram kanıtıEPSS %16

    bentoml · bentoml29 Tem 2025

  • CVE-2025-31277
    65Bu hafta

    The issue was addressed with improved memory handling.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %1

    apple · safari29 Tem 2025

  • CVE-2025-54430
    36İzleyin

    dedupe is vulnerable to secret exfiltration via `issue_comment`

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    dedupeio · dedupe30 Tem 2025

  • CVE-2025-46811
    40Planlayın

    SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    suse · container suse/manager/5.0/x86_64/server:5.0.5.7.30.130 Tem 2025