Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2025-02-03 CVE-2025-20634 Out-of-bounds Write vulnerability in Mediatek Nr16, Nr17 and Nr17R
In Modem, there is a possible out of bounds write due to a missing bounds check.
network
low complexity
mediatek CWE-787
critical
 9.8
9.8
2025-02-01 CVE-2025-0950 SQL Injection vulnerability in Angeljudesuarez Tailoring Management System 1.0
A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical.
network
low complexity
angeljudesuarez CWE-89
critical
 9.8
9.8
2025-02-01 CVE-2025-0946 SQL Injection vulnerability in Angeljudesuarez Tailoring Management System 1.0
A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0.
network
low complexity
angeljudesuarez CWE-89
critical
 9.8
9.8
2025-02-01 CVE-2025-0945 SQL Injection vulnerability in Angeljudesuarez Tailoring Management System 1.0
A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0.
network
low complexity
angeljudesuarez CWE-89
critical
 9.8
9.8
2025-02-01 CVE-2025-0944 SQL Injection vulnerability in Angeljudesuarez Tailoring Management System 1.0
A vulnerability was found in itsourcecode Tailoring Management System 1.0.
network
low complexity
angeljudesuarez CWE-89
critical
 9.8
9.8
2025-02-01 CVE-2025-0943 SQL Injection vulnerability in Angeljudesuarez Tailoring Management System 1.0
A vulnerability was found in itsourcecode Tailoring Management System 1.0.
network
low complexity
angeljudesuarez CWE-89
critical
 9.8
9.8
2025-01-31 CVE-2025-0493 The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Limited Local File Inclusion in all versions up to, and including, 4.2.14 via the tabname parameter.
network
low complexity
CWE-22
critical
 9.8
9.8
2025-01-30 CVE-2025-0880 SQL Injection vulnerability in Codezips GYM Management System 1.0
A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical.
network
low complexity
codezips CWE-89
critical
 9.8
9.8
2025-01-30 CVE-2025-0881 SQL Injection vulnerability in Codezips GYM Management System 1.0
A vulnerability was found in Codezips Gym Management System 1.0.
network
low complexity
codezips CWE-89
critical
 9.8
9.8
2025-01-30 CVE-2025-0874 SQL Injection vulnerability in Fabianros Simple CAR Rental System 1.0
A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0.
network
low complexity
fabianros CWE-89
critical
 9.8
9.8