|
cve-2025-2746
|
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-10-20 |
|
cve-2025-2636
|
InstaWP instawp_connect Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-04-11 |
|
cve-2025-1661
|
pluginus husky_-_products_filter_professional_for_woocommerce Improper Limitation of a Pathname to a Restricted Directory |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-03-10 |
|
cve-2025-14611
|
Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2025-12-12 |
|
cve-2025-11371
|
In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local ... |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-10-08 |
|
cve-2024-8529
|
thimpress learnpress Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2024-09-12 |
|
cve-2024-53900
|
mongoosejs mongoose Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-11-27 |
|
cve-2024-5276
|
Fortra filecatalyst_workflow Improper Input Validation |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-10-17 |
|
cve-2024-50340
|
sensiolabs symfony Improper Neutralization of Special Elements in Output Used by a Downstream Component |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-09-10 |
|
cve-2024-38856
|
Apache OFBiz Incorrect Authorization Vulnerability |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2024-08-19 |
|
cve-2024-37259
|
wpextended wp_extended Improper Neutralization of Input During Web Page Generation |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2024-06-27 |
|
cve-2024-36412
|
salesagility suitecrm Improper Neutralization of Special Elements used in an SQL Command |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-09-10 |
|
cve-2024-31982
|
XWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2024-06-26 |
|
cve-2024-29198
|
OSGeo GeoServer Server-Side Request Forgery |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-07-31 |
|
cve-2024-24112
|
exrick xmall Improper Neutralization of Special Elements used in an SQL Command |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-09-14 |
|
cve-2023-54399
|
hrp2000 e-hr Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2023-10-14 |
|
cve-2023-47105
|
Improper Neutralization of Special Elements used in an OS Command |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
2025-06-08 |
|
cve-2023-46359
|
hardy-barth cph2_echarge_firmware Improper Neutralization of Special Elements used in an OS Command |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-09-18 |
|
cve-2023-38950
|
ZKTeco BioTime Path Traversal Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-05-02 |
|
cve-2023-38203
|
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2023-07-17 |
|
cve-2023-29827
|
ejs ejs Improper Neutralization of Special Elements in Output Used by a Downstream Component |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-09-18 |
|
cve-2023-27524
|
Apache Superset Insecure Default Initialization of Resource Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2024-01-08 |
|
cve-2022-45362
|
paytm payment_gateway Server-Side Request Forgery |
HIGH
|
7.2
|
N/A
|
cvelistv5 |
2026-09-17 |
|
cve-2022-35405
|
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2022-09-22 |
|
cve-2022-32028
|
car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-09-14 |
|
cve-2022-32025
|
car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-09-14 |
|
cve-2022-32024
|
car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-09-14 |
|
cve-2022-29272
|
Nagios Nagios XI URL Redirection to Untrusted Site |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-10-20 |
|
cve-2022-1609
|
weblizar school_management Improper Control of Generation of Code |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2022-05-20 |
|
cve-2022-1057
|
varktech pricing_deals_for_woocommerce Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-09-10 |
ndaal KEV