Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,608

Export CSV
CVE-2025-69212

OpenSTAManager has an OS Command Injection in P7M File Processing

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server.

CVSS 4.0 · 9.4 Critical EPSS 1.9% KEV · Not listed
Vendors
Devcode
Products
Openstamanager
CVE-2025-48780

Soar Cloud HRD Human Resource Management System - Deserialization of Untrusted Data

A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a crafted serialized object.

CVSS 4.0 · 9.9 Critical EPSS < 1% KEV · Not listed
Vendors
Scshr
Products
Hr Portal
CVE-2025-48782

Soar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous Type

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file.

CVSS 4.0 · 9.9 Critical EPSS < 1% KEV · Not listed
Vendors
Scshr
Products
Hr Portal
CVE-2025-5192

Soar Cloud HRD Human Resource Management System - Missing Authentication for Critical Function

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Scshr
Products
Hr Portal
CVE-2021-47851

Mini Mouse 9.2.0 - Remote Code Execution

Mini Mouse 9.2.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands through an unauthenticated HTTP endpoint. Attackers can leverage the /op=command endpoint to download and execute payloads by sending crafted JSON requests with malicious script commands.

CVSS 4.0 · 9.3 Critical EPSS 1.2% KEV · Not listed
Vendors
Yodinfo
Products
Mini Mouse
CVE-2024-2422

LenelS2 NetBox Improper Neutralization of Argumented Delimiters

LenelS2 NetBox access control and event monitoring system was discovered to contain an authenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious commands.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Honeywell
Products
Lenels2 Netbox
CVE-2024-2421

LenelS2 NetBox Improper Neutralization of Special Elements

LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious commands with elevated permissions.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Honeywell
Products
Lenels2 Netbox
CVE-2025-41375

SQL Injection in Limesurvey

SQL Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability allows an attacker to retrieve, create, update and delete database via 'token' parameter in '/index.php' endpoint.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Limesurvey
Products
Limesurvey
CVE-2024-50388

HBS 3 Hybrid Backup Sync

An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.1.673 and later

CVSS 4.0 · 9.5 Critical EPSS 2.3% KEV · Not listed
Vendors
Qnap
Products
Hbs 3 Hybrid Backup Sync
CVE-2025-54942

SUNNET Corporate Training Management System - Missing Authentication for Critical Function

A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Sun.net
Products
Ehrd Ctms
CVE-2025-54946

SUNNET Corporate Training Management System - SQL Injection

A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Sun.net
Products
Ehrd Ctms
CVE-2025-54945

SUNNET Corporate Training Management System - External Control of File Name or Path

An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via a malicious file by controlling the destination file path.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Sun.net
Products
Ehrd Ctms
CVE-2025-54943

SUNNET Corporate Training Management System - Missing Authorization

A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Sun.net
Products
Ehrd Ctms
CVE-2025-14306

Directory Traversal in Robocode's CacheCleaner Component

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the file path, leading to potential unauthorized file deletions. https://robo-code.blogspot.com/

CVSS 4.0 · 10 Critical EPSS 1.1% KEV · Not listed
Vendors
Robocode Robocode Project
Products
Robocode Robocode
CVE-2025-0103

Expedition: SQL Injection Vulnerability

An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. This vulnerability also enables attackers to create and read arbitrary files on the Expedition system.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Paloaltonetworks
Products
Expedition
CVE-2025-34026

Versa Concerto Actuator Authentication Bypass Information Leak

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable.

CVSS 4.0 · 9.2 Critical EPSS 81.8% KEV · Listed
Vendors
Versa Versa-networks
Products
Concerto Concerto
CVE-2025-61937

AVEVA Process Optimization Code Injection

The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS system privileges of “taoimr” service, potentially resulting in complete compromise of the  model application server.

CVSS 4.0 · 10 Critical EPSS 1.5% KEV · Not listed
Vendors
Aveva
Products
Process Optimization
CVE-2025-61943

AVEVA Process Optimization SQL Injection

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Standard User) to tamper with queries in Captive Historian and achieve code execution under SQL Server administrative privileges, potentially resulting in complete compromise of the SQL Server.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Aveva
Products
Historian Process Optimization
CVE-2025-64691

AVEVA Process Optimization Code Injection

The vulnerability, if exploited, could allow an authenticated miscreant (OS standard user) to tamper with TCL Macro scripts and escalate privileges to OS system, potentially resulting in complete compromise of the model application server.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Aveva
Products
Process Optimization
CVE-2025-65118

AVEVA Process Optimization Uncontrolled Search Path Element

The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to trick Process Optimization services into loading arbitrary code and escalate privileges to OS System, potentially resulting in complete compromise of the Model Application Server.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Aveva
Products
Application Server Process Optimization