|
cve-2025-40554
|
SolarWinds web_help_desk Weak Authentication |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2026-05-01 |
|
cve-2021-27358
|
grafana: snapshot feature allow an unauthenticated remote attacker to trigger a DoS via a remote API call |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-03-21 |
|
cve-2026-33478
|
wwbn avideo Improper Neutralization of Special Elements used in an OS Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2026-2025
|
Exposure of Sensitive Information to an Unauthorized Actor |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2026-1969
|
Unrestricted Upload of File with Dangerous Type |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2026-1890
|
LeadConnector Unathenticated API Data Overwrite Vulnerability |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2025-71284
|
Synway smg_gateway_management_software Improper Neutralization of Special Elements used in an OS Command |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2025-58179
|
CVE-2025-58179 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2025-56132
|
liquidfiles liquidfiles Authentication Bypass by Primary Weakness |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2025-53558
|
Use of Weak Credentials |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2025-4078
|
Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2025-24963
|
vitest.dev vitest Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2025-15488
|
Responsive Plus Ajax Action Arbitrary Shortcode Execution Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2023-6909
|
lfprojects MLflow Path Traversal: '\..\filename' |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2022-50993
|
Weaver e-office Unrestricted Upload of File with Dangerous Type |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2022-50992
|
Weaver e-cology Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
8.7
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2022-4059
|
blocksera cryptocurrency_widgets_pack Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2026-42647
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beardev JoomSpo... |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-10-26 |
|
cve-2026-41940
|
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-04-30 |
|
cve-2026-42208
|
BerriAI LiteLLM SQL Injection Vulnerability |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-05-08 |
|
cve-2026-4047
|
Qinglong Case-sensitive Path Matching Authentication Bypass |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-26 |
|
cve-2023-3793
|
Weaver e-cology Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-26 |
|
cve-2026-29014
|
MetInfo MetInfo Improper Control of Generation of Code |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-25 |
|
cve-2025-69985
|
frangoteam fuxa Authentication Bypass Using an Alternate Path or Channel |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-24 |
|
cve-2026-3844
|
Cloudways breeze_wordpress_plugin Unrestricted Upload of File with Dangerous Type |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-23 |
|
cve-2026-23541
|
wpfunnels mail_mint Missing Authorization |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-23 |
|
cve-2025-67945
|
mailerlite mailerlite Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-23 |
|
cve-2025-64375
|
adreastrian wp_social_ninja Missing Authorization |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-23 |
|
cve-2025-49867
|
inspirythemes realhomes Incorrect Privilege Assignment |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-23 |
|
cve-2025-31918
|
QuantumCloud simple_business_directory_pro Incorrect Privilege Assignment |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-23 |
ndaal KEV