CWE-73

519 vulnerabilities with CWE-73

CVE-2025-10058 HIGH

WP Import - Ultimate CSV XML Importer <7.27 - Privilege Escalation

CVSS 8.1

CVE-2025-8422 HIGH

Propovoice: All-in-One Client Management System <=1.7.6.7 - Arbitrary File Read

CVSS 7.5

CVE-2025-59049 HIGH

Mockoon < 9.2.0 - Path Traversal and Local File Inclusion via Static File Serving Configuration

CVSS 7.5

CVE-2025-58762 CRITICAL

Tautulli < 2.16.0 - Authenticated Path Traversal and Remote Code Execution via pms_image_proxy Endpoint

CVSS 9.1

CVE-2025-55316 HIGH

Azure Connected Machine Agent < 1.56 - Authenticated Privilege Escalation via External Control of File Name or Path

CVSS 7.8

CVE-2025-10134 CRITICAL

Goza - Nonprofit Charity WordPress Theme <3.2.2 - Privilege Escalation

CVSS 9.1

CVE-2025-9920 MEDIUM

Campcodes Recruitment Management System 1.0 - File Inclusion

CVSS 4.7

CVE-2025-54945 CRITICAL

SUNNET Corporate Training Management System <10.11 - Path-Controlled File Command Execution

CVSS 9.8

CVE-2025-58158 HIGH

Harness Open Source <3.3.0 - Command Injection

CVSS 8.8

CVE-2025-9529 HIGH

Campcodes Payroll Management System 1.0 - File Inclusion

CVSS 7.3

CVE-2025-9048 HIGH

Wptobe-memberships <3.4.2 - Privilege Escalation

CVSS 8.1

CVE-2025-53363 MEDIUM

dpanel 1.2.0-1.7.2 - Authenticated Path Traversal via /api/app/compose/get-from-uri Endpoint

CVE-2025-55746 CRITICAL

Directus 10.8.0-11.9.2 - Unauthenticated Arbitrary File Upload via File Update Mechanism

CVSS 9.3

CVE-2025-20269 MEDIUM

Cisco EPNM/Prime Infrastructure - Info Disclosure

CVSS 6.5

CVE-2025-53769 MEDIUM

Windows Security App - Path Traversal

CVSS 5.5

CVE-2025-29866 HIGH

TAGFREE X-Free Uploader <1.0.1.0085 - Path Traversal

CVE-2025-54780 HIGH

GLPI glpi-screenshot-plugin <2.0.2 - Info Disclosure

CVSS 7.7

CVE-2025-4674 HIGH

Go - Code Injection

CVSS 8.6

CVE-2025-5393 CRITICAL

Alone - Charity Multipurpose Non-profit WordPress Theme <7.8.3 - Pa...

CVSS 9.1

CVE-2025-6691 HIGH

SureForms <= 1.7.3 - Unauthenticated Arbitrary File Deletion

CVSS 8.1

CVE-2025-48385 HIGH

Git Bundle URI - Protocol Injection Arbitrary Code Execution

CVE-2025-49760 LOW

Microsoft Windows Storage - Spoofing via External Control of File Name or Path

CVSS 3.5

CVE-2025-49588 HIGH

Linkwarden <2.10.2 - Info Disclosure

CVE-2025-6463 HIGH

Forminator Forms < 1.44.3 - Unauthenticated Arbitrary File Deletion via Entry Upload Path Manipulation

CVSS 8.8

CVE-2025-33117 CRITICAL

IBM QRadar SIEM <7.5.0 Update Package 12 - Privilege Escalation

CVSS 9.1