|
cve-2025-34047
|
Leadsec VPN Path Traversal Arbitrary File Read |
HIGH
|
8.7
|
0.51%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34046
|
Fanwei E-Office Unauthenticated File Upload |
CRITICAL
|
10.0
|
0.83%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34045
|
WeiPHP Path Traversal Arbitrary File Read |
HIGH
|
7.5
|
4.31%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34043
|
Vacron NVR Remote Command Execution |
CRITICAL
|
10.0
|
7.46%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34041
|
Sangfor Endpoint Detection and Response OS Command Injection |
CRITICAL
|
10.0
|
7.00%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34040
|
Seeyon Zhiyuan OA System Path Traversal File Upload |
CRITICAL
|
10.0
|
15.11%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34039
|
Yonyou NC BeanShell Command Injection |
CRITICAL
|
10.0
|
0.54%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34038
|
Weaver E-cology SQL Injection |
HIGH
|
7.5
|
2.03%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34037
|
Linksys Routers E/WAG/WAP/WES/WET/WRT-Series |
CRITICAL
|
10.0
|
90.94%
|
cvelistv5 |
2026-07-22 |
|
cve-2025-34036
|
Shenzhen TVT CCTV-DVR Command Injection |
CRITICAL
|
9.8
|
27.32%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34031
|
Moodle LMS Jmol Plugin Path Traversal |
HIGH
|
7.5
|
3.01%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34023
|
Karel IP Phone IP1211 Path Traversal |
HIGH
|
8.5
|
1.57%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-3248
|
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code |
CRITICAL
|
9.8
|
99.99%
|
cvelistv5 |
2026-07-14 |
|
cve-2025-27505
|
GeoServer Missing Authorization on REST API Index |
MEDIUM
|
5.3
|
1.15%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-26319
|
CVE-2025-26319 |
CRITICAL
|
9.8
|
55.87%
|
cvelistv5 |
|
|
cve-2025-25257
|
Fortinet FortiWeb SQL Injection Vulnerability |
HIGH
|
N/A
|
99.78%
|
cvelistv5 |
2025-07-18 |
|
cve-2025-25231
|
Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints. |
HIGH
|
7.5
|
22.29%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-25037
|
Aquatronica Controller System Complete Information Disclosure |
CRITICAL
|
9.3
|
1.57%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-25034
|
SugarCRM PHP Deserialization RCE |
CRITICAL
|
9.3
|
4.96%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-24893
|
XWiki Platform Eval Injection Vulnerability |
CRITICAL
|
9.8
|
99.86%
|
cvelistv5 |
2025-10-30 |
|
cve-2025-24799
|
GLPI allows unauthenticated SQL injection through the inventory endpoint |
HIGH
|
7.5
|
86.69%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-22214
|
CVE-2025-22214 |
HIGH
|
N/A
|
1.28%
|
cvelistv5 |
|
|
cve-2025-20362
|
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability |
MEDIUM
|
6.5
|
87.09%
|
cvelistv5 |
2025-09-25 |
|
cve-2025-15503
|
CVE-2025-15503 |
HIGH
|
N/A
|
2.07%
|
cvelistv5 |
|
|
cve-2025-1338
|
NUUO Camera handle_config.php print_file command injection |
HIGH
|
7.3
|
51.12%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-12480
|
Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete. |
CRITICAL
|
9.1
|
90.53%
|
cvelistv5 |
2026-06-17 |
|
cve-2025-10353
|
CVE-2025-10353 |
HIGH
|
N/A
|
2.66%
|
cvelistv5 |
|
|
cve-2025-10204
|
CVE-2025-10204 |
HIGH
|
7.1
|
0.48%
|
cvelistv5 |
|
|
cve-2025-0674
|
CVE-2025-0674 |
CRITICAL
|
9.8
|
3.65%
|
cvelistv5 |
|
|
cve-2025-0108
|
cve-2025-0108 |
CRITICAL
|
9.1
|
98.45%
|
cvelistv5 |
unknown |
ndaal KEV