Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2025-03-04 CVE-2025-1900 Unspecified vulnerability in PHPgurukul Restaurant Table Booking System 1.0
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical.
network
low complexity
phpgurukul
critical
9.8
2025-03-04 CVE-2025-1901 Unspecified vulnerability in PHPgurukul Restaurant Table Booking System 1.0
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0.
network
low complexity
phpgurukul
critical
9.8
2025-03-04 CVE-2025-1902 Unspecified vulnerability in PHPgurukul Student Record System 3.2
A vulnerability was found in PHPGurukul Student Record System 3.2.
network
low complexity
phpgurukul
critical
9.8
2025-03-04 CVE-2025-1903 Unspecified vulnerability in Codezips Online Shopping Website 1.0
A vulnerability was found in Codezips Online Shopping Website 1.0.
network
low complexity
codezips
critical
9.8
2025-03-04 CVE-2025-1894 Injection vulnerability in PHPgurukul Restaurant Table Booking System 1.0
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0.
network
low complexity
phpgurukul CWE-74
critical
9.8
2025-03-04 CVE-2025-1890 Unrestricted Upload of File with Dangerous Type vulnerability in Shishuocms Project Shishuocms 1.1
A vulnerability has been found in shishuocms 1.1 and classified as critical.
network
low complexity
shishuocms-project CWE-434
critical
9.8
2025-03-03 CVE-2024-51962 SQL Injection vulnerability in Esri Arcgis Server 10.9.1/11.1
A SQL injection vulnerability in ArcGIS Server allows an EDIT operation to modify Column properties allowing for the execution of a SQL Injection by a remote authenticated user with elevated (non admin) privileges.  There is a high impact to integrity and confidentiality and no impact to availability.
network
low complexity
esri CWE-89
critical
9.6
2025-03-03 CVE-2025-1889 Unspecified vulnerability in Mmaitre314 Picklescan
picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan.
network
low complexity
mmaitre314
critical
9.8
2025-03-03 CVE-2025-26970 Unspecified vulnerability in Arktheme the ARK
Improper Control of Generation of Code ('Code Injection') vulnerability in NotFound Ark Theme Core ark-core allows Code Injection.This issue affects Ark Theme Core: from n/a before 1.71.0.
network
low complexity
arktheme
critical
9.8
2025-03-03 CVE-2025-1869 SQL Injection vulnerability in Mayurik Best Online News Portal 1.0
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/check_avalability.php.
network
low complexity
mayurik CWE-89
critical
9.8