Latest vulnerabilities

6.5

First published (updated )

CVE-2025-4851

TOTOLINK N300RHTOTOLINK N300RH cstecgi.cgi setUnloadUserData command injection

6.5

First published (updated )

CVE-2025-4850

TOTOLINK N300RHTOTOLINK N300RH cstecgi.cgi CloudACMunualUpdateUserdata command injection

6.5

First published (updated )

CVE-2025-4849

Freefloat FTP ServerFreeFloat FTP Server RECV Command buffer overflow

7.5

First published (updated )

CVE-2025-4848

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Freefloat FTP ServerFreeFloat FTP Server MLS Command buffer overflow

7.5

First published (updated )

CVE-2025-4847

Freefloat FTP ServerFreeFloat FTP Server MPUT Command buffer overflow

7.5

First published (updated )

CVE-2025-4846

Freefloat FTP ServerFreeFloat FTP Server TRACE Command buffer overflow

7.5

First published (updated )

CVE-2025-4845

Freefloat FTP ServerFreeFloat FTP Server CD Command buffer overflow

7.5

First published (updated )

CVE-2025-4844

dlink DCS-932LD-Link DCS-932L udev SubUPnPCSInit stack-based overflow

9

First published (updated )

CVE-2025-4843

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

dlink DCS-932LD-Link DCS-932L ucp isUCPCameraNameChanged stack-based overflow

9

First published (updated )

CVE-2025-4842

dlink DCS-932LD-Link DCS-932L gpio sub_404780 stack-based overflow

9

First published (updated )

CVE-2025-4841

itwanger paicodingitwanger paicoding CrossUtil.java cross-domain policy

low

3.1

First published (updated )

CVE-2025-4839

kanwangzjm Funiturekanwangzjm Funiture Login LoginServlet.java doPost redirect

5.3

First published (updated )

CVE-2025-4838

projectworlds Student Project Allocation Systemprojectworlds Student Project Allocation System make_group_sql.php sql injection

7.5

First published (updated )

CVE-2025-4837

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

CVE-2024-13964Rejected reason: wrong year

First published (updated )

CVE-2024-13964

CVE-2024-13965Rejected reason: wrong year

First published (updated )

CVE-2024-13965

Life Insurance Management SystemProjectworlds Life Insurance Management System deleteAgent.php sql injection

7.5

First published (updated )

CVE-2025-4836

Totolink A702r FirmwareTOTOLINK A702R/A3002R/A3002RU HTTP POST Request formWlanRedirect buffer overflow

9

First published (updated )

CVE-2025-4835

Totolink A702r FirmwareTOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSetLg buffer overflow

9

First published (updated )

CVE-2025-4834

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cocotais BotCocotais Bot has builtin .echo command injection

7.2

First published (updated )

CVE-2025-47948

DonetickDonetick Has Weak Default JWT Secret

9.1

First published (updated )

CVE-2025-47945

Totolink A702r FirmwareTOTOLINK A702R/A3002R/A3002RU HTTP POST Request formNtp buffer overflow

9

First published (updated )

CVE-2025-4833

Totolink A702r FirmwareTOTOLINK A702R/A3002R/A3002RU HTTP POST Request formDosCfg buffer overflow

9

First published (updated )

CVE-2025-4832

Totolink A702r FirmwareTOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSiteSurveyProfile buffer overflow

9

First published (updated )

CVE-2025-4831

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

LibreNMSLibreNMS stored Cross-site Scripting vulnerability in poller group name

low

2.1

First published (updated )

CVE-2025-47931

setuptoolssetuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

7.7

First published (updated )

CVE-2025-47273

Totolink A702r FirmwareTOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSysCmd buffer overflow

9

First published (updated )

CVE-2025-4830

composer/auth0/loginOverview Session cookies of applications using the laravel-auth0 SDK configured with CookieStore…

9.1

First published (updated )

GHSA-9fwj-9mjf-rhj3

composer/auth0/wordpressOverview Session cookies of applications using the Auth0 Wordpress plugin configured with Cookie…

9.1

First published (updated )

GHSA-2f4r-34m4-3w8q

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.