CVEs: Exploit-DB, page 3
582 CVEs with a public exploit on Exploit-DB, sorted by threat level then EPSS. Showing 241-360. Use search to combine filters.
CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2019-16693CVE-2019-16693: phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter…
phpipam · phpipam · EPSS 4.34% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2024-53584CVE-2024-53584: OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the t…
openpanel · openpanel · EPSS 4.19% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2026-7567CVE-2026-7567: The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in version…
Unknown · · EPSS 2.93% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2026-2624CVE-2026-2624: Missing Authentication for Critical Function vulnerability in ePati Cyber Security Techn…
epati · antikor next generation firewall · EPSS 2.65% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2024-44541CVE-2024-44541: evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "us…
Unknown · · EPSS 2.58% · Threat 57CRITICAL 9.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-32746CVE-2026-32746: telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Se…
gnu · inetutils · EPSS 2.54% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2025-47917CVE-2025-47917: Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that a…
arm · mbed tls · EPSS 2.44% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2024-38944CVE-2024-38944: An issue in Intelight X-1L Traffic controller Maxtime v.1.9.6 allows a remote attacker to …
Unknown · · EPSS 2.37% · Threat 57CRITICAL 9.9
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-38526CVE-2026-38526: An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint…
Unknown · · EPSS 2.35% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2025-57174CVE-2025-57174: An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmw…
Unknown · · EPSS 2.21% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2026-44596CVE-2026-44596: Yamcs is a mission control framework. Prior to 5.12.7, the authentication endpoint POST /a…
spaceapplications · yamcs · EPSS 2.06% · Threat 57CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2024-48445CVE-2024-48445: An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary co…
Unknown · · EPSS 1.99% · Threat 57MEDIUM 5.3
Metasploit moduleExploit-DBATT&CK inferred
CVE-2025-27218CVE-2025-27218: Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow …
Unknown · · EPSS 65.00% · Threat 56HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2023-32235CVE-2023-32235: Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active them…
ghost · ghost · EPSS 39.08% · Threat 56HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2025-7769CVE-2025-7769: Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobil…
Unknown · · EPSS 19.10% · Threat 56HIGH 7.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred
CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
Red Hat · Automatic Bug Reporting Tool · EPSS 5.00% · Threat 56CRITICAL 9.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-48909CVE-2026-48909: SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without …
Unknown · · EPSS 4.94% · Threat 56CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2024-50672CVE-2024-50672: A NoSQL injection vulnerability in Adapt Learning Adapt Authoring Tool <= 0.11.3 allows un…
Unknown · · EPSS 1.57% · Threat 56CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2025-32370CVE-2025-32370: Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file exten…
kentico · xperience · EPSS 1.55% · Threat 56CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2026-15013CVE-2026-15013: The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication B…
Unknown · · EPSS 1.50% · Threat 56CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2024-48573CVE-2024-48573: A NoSQL injection vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated att…
aquila-cms · aquilacms · EPSS 1.03% · Threat 56CRITICAL 9.8
Exploit-DBATT&CK inferred
CVE-2026-25544CVE-2026-25544: Payload is a free and open source headless content management system. Prior to 3.73.0, whe…
payloadcms · payload · EPSS 0.96% · Threat 56HIGH 7.2
Exploit-DBPublic PoCATT&CK inferred
CVE-2020-14008CVE-2020-14008: Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user…
zohocorp · manageengine applications manager · EPSS 39.57% · Threat 55HIGH 8.1
Metasploit moduleExploit-DBATT&CK inferred
CVE-2025-50286CVE-2025-50286: A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated ad…
getgrav · grav · EPSS 13.64% · Threat 55HIGH 7.4
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred
CVE-2015-3246Red Hat Libuser Race Condition Vulnerability
Red Hat · Libuser · EPSS 8.50% · Threat 55CRITICAL 9.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-80428CVE-2026-80428: ILIAS before versions 9.22, 10.10, and 11.3 contains an unauthenticated PHP object injecti…
Unknown · · EPSS 4.67% · Threat 55CRITICAL 9.4
Exploit-DBATT&CK inferred
CVE-2026-44262CVE-2026-44262: Scramble generates API documentation for Laravel project. From 0.13.2 to before 0.13.22, w…
Unknown · · EPSS 3.87% · Threat 55CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2026-49952CVE-2026-49952: Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerab…
Unknown · · EPSS 3.65% · Threat 55CRITICAL 9.4
Exploit-DBATT&CK inferred
CVE-2025-8311CVE-2025-8311: dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in…
Unknown · · EPSS 1.71% · Threat 55HIGH 7.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-11001CVE-2025-11001: 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulne…
7-zip · 7-zip · EPSS 27.39% · Threat 54HIGH 8.5
Exploit-DBATT&CK inferred
CVE-2024-9054CVE-2024-9054: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
microchip · timeprovider 4100 firmware · EPSS 15.63% · Threat 54HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2026-27483CVE-2026-27483: MindsDB is a platform for building artificial intelligence from enterprise data. Prior to …
mindsdb · mindsdb · EPSS 9.83% · Threat 54HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2025-52089CVE-2025-52089: A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware v…
totolink · n300rb firmware · EPSS 9.69% · Threat 54CRITICAL 9.1
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-18963CVE-2026-18963: A flaw was found in the reset-credentials flow of the keycloak-services component, which i…
Unknown · · EPSS 6.41% · Threat 54CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2024-30896CVE-2024-30896: InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default…
Unknown · · EPSS 5.31% · Threat 54CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2026-25643CVE-2026-25643: Frigate is a network video recorder (NVR) with realtime local object detection for IP came…
frigate · frigate · EPSS 4.16% · Threat 54CRITICAL 9.2
Exploit-DBATT&CK inferred
CVE-2026-58480CVE-2026-58480: Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbit…
Unknown · · EPSS 3.57% · Threat 54CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2026-36356CVE-2026-36356: The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-S…
Unknown · · EPSS 3.56% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2026-26335CVE-2026-26335: Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values config…
calero · verasmart · EPSS 2.90% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2024-48839CVE-2024-48839: Improper Input Validation vulnerability allows Remote Code Execution. Affected products: …
abb · aspect-ent-2 firmware · EPSS 2.83% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2026-65008CVE-2026-65008: Grav 2.0.4 (fixed in 2.0.7) contains a remote code execution vulnerability in Blueprint::d…
Unknown · · EPSS 2.49% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2026-61459CVE-2026-61459: MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structu…
suyogs · mcp-server-kubernetes · EPSS 2.36% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2024-48840CVE-2024-48840: Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB…
abb · aspect-ent-2 firmware · EPSS 2.06% · Threat 54CRITICAL 9.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-9074CVE-2025-9074: A vulnerability was identified in Docker Desktop that allows local running Linux container…
Unknown · · EPSS 1.83% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2024-48845CVE-2024-48845: Weak Password Reset Rules vulnerabilities where found providing a potiential for the stor…
abb · aspect-ent-2 firmware · EPSS 1.82% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2024-51550CVE-2024-51550: Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsan…
abb · aspect-ent-12 firmware · EPSS 1.81% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2026-44225CVE-2026-44225: Pulpy is a lightweight, cross-platform desktop application packager for web apps. Prior to…
Unknown · · EPSS 1.40% · Threat 54CRITICAL 9.4
Exploit-DBATT&CK inferred
CVE-2026-61876CVE-2026-61876: LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status ta…
Unknown · · EPSS 1.28% · Threat 54CRITICAL 9.3
Exploit-DBATT&CK inferred
CVE-2024-6516CVE-2024-6516: Cross Site Scripting vulnerabilities where found providing a potential for malicious scrip…
abb · aspect-ent-2 firmware · EPSS 1.08% · Threat 54CRITICAL 9.4
Exploit-DBATT&CK inferred
CVE-2025-62360CVE-2025-62360: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language u…
wegia · wegia · EPSS 0.89% · Threat 54CRITICAL 9.4
Exploit-DBATT&CK inferred
CVE-2026-25047CVE-2026-25047: deepHas provides a test for the existence of a nested object key and optionally returns th…
sharpred · deephas · EPSS 0.81% · Threat 54HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2002-0082CVE-2002-0082: The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1…
apache-ssl · apache-ssl · EPSS 29.66% · Threat 53HIGH 7.7
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2024-46987CVE-2024-46987: Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A…
tuzitio · camaleon cms · EPSS 14.56% · Threat 53HIGH 8.7
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-7771CVE-2025-7771: ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary r…
Unknown · · EPSS 8.14% · Threat 53HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2026-46368CVE-2026-46368: luci-app-https-dns-proxy through 2025.12.29-5 — an optional LuCI web UI add-on for the htt…
Unknown · · EPSS 7.83% · Threat 53HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-11392CVE-2024-11392: Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execut…
huggingface · transformers · EPSS 7.26% · Threat 53HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2023-33177CVE-2023-33177: Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xi…
xibosignage · xibo · EPSS 7.04% · Threat 53HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-24409CVE-2024-24409: Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege E…
zohocorp · manageengine admanager plus · EPSS 6.20% · Threat 53HIGH 8.9
Exploit-DBATT&CK inferred
CVE-2025-8730CVE-2025-8730: A vulnerability was found in Belkin F9K1009 and F9K1010 2.00.04/2.00.09 and classified as …
Unknown · · EPSS 3.53% · Threat 53CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2024-26503CVE-2024-26503: Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 an…
openeclass · openeclass · EPSS 2.96% · Threat 53CRITICAL 9
Exploit-DBATT&CK inferred
CVE-2024-35540CVE-2024-35540: A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to ex…
typecho · typecho · EPSS 2.83% · Threat 53CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2024-53537CVE-2024-53537: An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal i…
openpanel · openpanel · EPSS 2.36% · Threat 53CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2026-42607CVE-2026-42607: Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with admin…
Unknown · · EPSS 2.25% · Threat 53CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2024-42049CVE-2024-42049: TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pip…
Unknown · · EPSS 2.15% · Threat 53CRITICAL 9.1
Exploit-DBATT&CK inferred
CVE-2025-50455CVE-2025-50455: SQL injection vulnerability exists in the order_by parameter of the /customers/search endp…
Unknown · · EPSS 1.10% · Threat 53HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-56902CVE-2024-56902: Information disclosure vulnerability in Geovision GV-ASManager web application with the ve…
Unknown · · EPSS 23.41% · Threat 52HIGH 7.2
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-60787CVE-2025-60787: MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration para…
motioneye project · motioneye · EPSS 18.46% · Threat 52HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2024-11237CVE-2024-11237: A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) …
tp-link · vn020-f3v\(t\) firmware · EPSS 5.33% · Threat 52HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2025-49484CVE-2025-49484: A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows…
Unknown · · EPSS 4.94% · Threat 52HIGH 8.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-5027CVE-2026-5027: The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the mult…
langflow · langflow · EPSS 4.76% · Threat 52HIGH 8.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-32462CVE-2025-32462: Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither …
sudo project · sudo · EPSS 4.48% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2025-60690CVE-2025-60690: A stack-based buffer overflow exists in the get_merge_ipaddr function of the httpd binary …
linksys · e1200 firmware · EPSS 4.15% · Threat 52HIGH 8.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-59827CVE-2026-59827: Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.5…
metabase · metabase · EPSS 3.79% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-6244CVE-2024-6244: The PZ Frontend Manager WordPress plugin before 1.0.6 does not have CSRF checks in some pl…
projectzealous · pz frontend manager · EPSS 3.52% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2025-54769CVE-2025-54769: An authenticated, read-only user can upload a file and perform a directory traversal to ha…
xorux · lpar2rrd · EPSS 3.40% · Threat 52HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2024-52302CVE-2024-52302: common-user-management is a robust Spring Boot application featuring user management servi…
Unknown · · EPSS 3.36% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2026-24897CVE-2026-24897: Erugo is a self-hosted file-sharing platform. In versions up to and including 0.2.14, an a…
erugo · erugo · EPSS 3.27% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-39304CVE-2024-39304: ChurchCRM is an open-source church management system. Versions of the application prior to…
churchcrm · churchcrm · EPSS 2.98% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-48827CVE-2024-48827: An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code a…
sbond · watcharr · EPSS 2.79% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-56898CVE-2024-56898: Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. T…
Unknown · · EPSS 2.58% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2019-13961CVE-2019-13961: A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary …
flatcore · flatcore · EPSS 2.25% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-56901CVE-2024-56901: A Cross-Site Request Forgery (CSRF) vulnerability in Geovision GV-ASWeb application with t…
Unknown · · EPSS 1.81% · Threat 52HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-50858CVE-2024-50858: Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF).…
gestioip · gestioip · EPSS 1.78% · Threat 52HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2025-58180CVE-2025-58180: OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint version…
octoprint · octoprint · EPSS 22.14% · Threat 51HIGH 8.3
Exploit-DBATT&CK inferred
CVE-2025-29471CVE-2025-29471: Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attac…
nagios · log server · EPSS 7.28% · Threat 51HIGH 7
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2025-62215Microsoft Windows Race Condition Vulnerability
Microsoft · Windows · EPSS 4.46% · Threat 51HIGH 8.6
Exploit-DBATT&CK inferred
CVE-2025-10162CVE-2025-10162: The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin t…
Unknown · · EPSS 4.44% · Threat 51HIGH 8.6
Exploit-DBATT&CK inferred
CVE-2026-56766CVE-2026-56766: Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authe…
Unknown · · EPSS 2.44% · Threat 51HIGH 8.6
Exploit-DBATT&CK inferred
CVE-2026-44403CVE-2026-44403: Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability…
wftpserver · wing ftp server · EPSS 2.28% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2026-26235CVE-2026-26235: JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows una…
jung-group · smart visu server firmware · EPSS 2.20% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2026-67206CVE-2026-67206: Wolf CMS through 0.8.3.1 contains a remote code execution vulnerability in FileManagerCont…
Unknown · · EPSS 2.13% · Threat 51HIGH 8.6
Exploit-DBATT&CK inferred
CVE-2025-7766CVE-2025-7766: Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configurati…
Unknown · · EPSS 2.05% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2026-25099CVE-2026-25099: Bludit’s API plugin allows an authenticated attacker with a valid API token to upload file…
bludit · bludit · EPSS 1.99% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2024-4007CVE-2024-4007: Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3…
abb · aspect-ent-12 firmware · EPSS 1.51% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2024-51546CVE-2024-51546: Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. …
abb · aspect-ent-12 firmware · EPSS 1.47% · Threat 51HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2017-15808CVE-2017-15808: In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php.
phpmyfaq · phpmyfaq · EPSS 1.17% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2025-41373CVE-2025-41373: A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version …
tesigandia · gandia integra total · EPSS 1.16% · Threat 51HIGH 8.8
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-25198CVE-2025-25198: mailcow: dockerized is an open source groupware/email suite based on docker. Prior to vers…
mailcow · mailcow\ · EPSS 1.12% · Threat 51HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2017-15734CVE-2017-15734: In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.ph…
phpmyfaq · phpmyfaq · EPSS 1.10% · Threat 51HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2017-15735CVE-2017-15735: In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a gloss…
phpmyfaq · phpmyfaq · EPSS 1.10% · Threat 51HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2024-48849CVE-2024-48849: Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was no…
Unknown · · EPSS 0.92% · Threat 51HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2023-44088CVE-2023-44088: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne…
pandorafms · pandora fms · EPSS 0.73% · Threat 51HIGH 8.7
Exploit-DBATT&CK inferred
CVE-2025-40677CVE-2025-40677: SQL injection vulnerability in Summar Software´s Portal del Empleado. This vulnerability a…
Unknown · · EPSS 0.65% · Threat 51HIGH 8.8
Exploit-DBATT&CK inferred
CVE-2025-12744CVE-2025-12744: A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT cop…
Unknown · · EPSS 0.63% · Threat 51HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2024-58258CVE-2024-58258: SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limi…
Unknown · · EPSS 22.38% · Threat 50HIGH 7.5
Exploit-DBPublic PoCATT&CK inferred
CVE-2024-4956CVE-2024-4956: Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read s…
Unknown · · EPSS 18.25% · Threat 50HIGH 8.1
Exploit-DBATT&CK inferred
CVE-2025-2594CVE-2025-2594: The User Registration & Membership WordPress plugin before 4.1.3 does not properly validat…
wpeverest · user registration \& membership · EPSS 9.52% · Threat 50HIGH 8.1
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-42167CVE-2026-42167: mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a u…
proftpd · proftpd · EPSS 7.31% · Threat 50HIGH 8.4
Exploit-DBATT&CK inferred
CVE-2024-46278CVE-2024-46278: Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.
sismics · teedy · EPSS 2.83% · Threat 50HIGH 7.8
Metasploit moduleExploit-DBATT&CK inferred
CVE-2026-43500CVE-2026-43500: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare D…
linux · linux kernel · EPSS 2.62% · Threat 50HIGH 7.8
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2026-46300CVE-2026-46300: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve…
linux · linux kernel · EPSS 2.43% · Threat 50HIGH 8.5
Exploit-DBATT&CK inferred
CVE-2025-4971CVE-2025-4971: Broadcom Automic Automation Agent Unix versions < 24.3.0 HF4 and < 21.0.13 HF1 allow low p…
Unknown · · EPSS 0.59% · Threat 50MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2024-55963CVE-2024-55963: An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admi…
appsmith · appsmith · EPSS 30.66% · Threat 49HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2025-20124CVE-2025-20124: A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to ex…
cisco · identity services engine · EPSS 18.48% · Threat 49HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2025-27210CVE-2025-27210: An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affectin…
Unknown · · EPSS 14.34% · Threat 49HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2024-11728CVE-2024-11728: The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable…
iqonic · kivicare · EPSS 13.63% · Threat 49HIGH 7.2
Metasploit moduleExploit-DBATT&CK inferred
CVE-2026-3576CVE-2026-3576: The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Req…
Unknown · · EPSS 8.81% · Threat 49HIGH 8.2
Exploit-DBATT&CK inferred
CVE-2025-44177CVE-2025-44177: A directory traversal vulnerability was discovered in White Star Software Protop version 4…
wss · protop · EPSS 4.43% · Threat 49HIGH 8.3
Exploit-DBATT&CK inferred
CVE-2026-58289CVE-2026-58289: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-…
microsoft · edge chromium · EPSS 1.99% · Threat 49HIGH 8.2
Exploit-DBATT&CK inferred
CVE-2024-35133