CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 18)
Page 18 of 55 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-15132 | Medium | 6.3 | 2025-12-28 | A vulnerability was determined in ZSPACE Z4Pro+ 1.0.0440024. The affected element is the function zfilev2_api_open of the file /v2/file/safe/open of the compon… |
CVE-2025-15131 | Medium | 6.3 | 2025-12-28 | A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2_api_SafeStatus of the file /v2/file/safe/status of the component HTTP… |
CVE-2025-15130 | Medium | 4.7 | 2025-12-28 | A vulnerability has been found in shanyu SyCms up to a242ef2d194e8bb249dc175e7c49f2c1673ec921. This issue affects the function addPost of the file Application/… |
CVE-2025-15129 | Medium | 6.3 | 2025-12-28 | A flaw has been found in ChenJinchuang Lin-CMS-TP5 up to 0.3.3. This vulnerability affects the function Upload of the file application/lib/file/LocalUploader.p… |
CVE-2025-15127 | High | 7.3 | 2025-12-28 | A security vulnerability has been detected in FantasticLBP Hotels_Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. Affected by this issue is some unknown… |
CVE-2025-15088 | Medium | 6.3 | 2025-12-25 | A vulnerability was detected in ketr JEPaaS up to 7.2.8. Affected by this vulnerability is the function postilService.loadPostils of the file /je/postil/postil… |
CVE-2025-15081 | Medium | 6.3 | 2025-12-25 | A vulnerability has been found in JD Cloud BE6500 4.4.1.r4308. This issue affects the function sub_4780 of the file /jdcapi. Such manipulation of the argument… |
CVE-2025-15078 | High | 7.3 | 2025-12-25 | A vulnerability was detected in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /list_report.php. The manip… |
CVE-2025-15077 | High | 7.3 | 2025-12-25 | A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /form137.php… |
CVE-2025-15075 | High | 7.3 | 2025-12-25 | A security flaw has been discovered in itsourcecode Student Management System 1.0. This issue affects some unknown processing of the file /student_p.php. Perfo… |
CVE-2025-15074 | High | 7.3 | 2025-12-25 | A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customer_details.p… |
CVE-2025-15073 | High | 7.3 | 2025-12-24 | A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contact_us.php. This manipula… |
CVE-2025-15053 | High | 7.3 | 2025-12-24 | A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing man… |
CVE-2025-15049 | High | 7.3 | 2025-12-23 | A vulnerability was identified in code-projects Online Farm System 1.0. Affected is an unknown function of the file /addProduct.php. The manipulation of the ar… |
CVE-2025-15048 | High | 7.3 | 2025-12-23 | A vulnerability was determined in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/CheckTools of the component HTTP Request Handler… |
CVE-2025-15034 | High | 7.3 | 2025-12-23 | A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of th… |
CVE-2024-27708 | Critical | 9.6 | 2025-12-22 | Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src pa… |
CVE-2025-15014 | Medium | 6.3 | 2025-12-22 | A security flaw has been discovered in loganhong php loganSite up to c035fb5c3edd0b2a5e32fd4051cbbc9e61a31426. This affects an unknown function of the file /in… |
CVE-2025-15012 | High | 7.3 | 2025-12-22 | A vulnerability was determined in code-projects Refugee Food Management System 1.0. The affected element is an unknown function of the file /home/home.php. Thi… |
CVE-2025-15011 | High | 7.3 | 2025-12-22 | A vulnerability was found in code-projects Simple Stock System 1.0. Impacted is an unknown function of the file /logout.php. The manipulation of the argument u… |
CVE-2025-15004 | Medium | 6.3 | 2025-12-22 | A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelist_main.php. The manipulation of the argument orde… |
CVE-2025-15003 | Medium | 4.7 | 2025-12-22 | A vulnerability was found in SeaCMS up to 13.3. The impacted element is an unknown function of the file admin_video.php. Performing a manipulation of the argum… |
CVE-2025-15002 | High | 7.3 | 2025-12-21 | A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Su… |
CVE-2025-14990 | High | 7.3 | 2025-12-21 | A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-a… |
CVE-2025-14989 | High | 7.3 | 2025-12-21 | A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/… |
CVE-2025-14968 | High | 7.3 | 2025-12-19 | A security flaw has been discovered in code-projects Simple Stock System 1.0. Affected by this issue is some unknown functionality of the file /market/update.p… |
CVE-2025-14967 | High | 7.3 | 2025-12-19 | A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidate… |
CVE-2025-14966 | Medium | 4.7 | 2025-12-19 | A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file application/common/controller/Backend.php of… |
CVE-2025-14961 | High | 7.3 | 2025-12-19 | A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0. The affected element is an unknown function of the file /editedcampaign… |
CVE-2025-14960 | High | 7.3 | 2025-12-19 | A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0. Impacted is an unknown function of the file /editeddonor… |
CVE-2025-14959 | High | 7.3 | 2025-12-19 | A weakness has been identified in code-projects Simple Stock System 1.0. This issue affects some unknown processing of the file /market/signup.php. Executing a… |
CVE-2025-14952 | High | 7.3 | 2025-12-19 | A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_category.php. Performing a ma… |
CVE-2025-14951 | High | 7.3 | 2025-12-19 | A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Su… |
CVE-2025-14950 | High | 7.3 | 2025-12-19 | A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /delete_post.php. This ma… |
CVE-2025-14940 | High | 7.3 | 2025-12-19 | A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /admin/delete_user.php. T… |
CVE-2025-14939 | Medium | 4.7 | 2025-12-19 | A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The man… |
CVE-2025-14900 | Medium | 4.7 | 2025-12-19 | A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /admin/userdelete.php of… |
CVE-2025-14899 | Medium | 4.7 | 2025-12-19 | A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the file /admin/stateadd.php of the componen… |
CVE-2025-14898 | Medium | 4.7 | 2025-12-19 | A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /admin/userbuilderdelete.php o… |
CVE-2025-14897 | Medium | 4.7 | 2025-12-19 | A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown function of the file /admin/useragentdelete.p… |
CVE-2025-14884 | High | 7.2 | 2025-12-18 | A vulnerability was detected in D-Link DIR-605 202WWB03. Affected by this issue is some unknown functionality of the component Firmware Update Service. Perform… |
CVE-2025-14877 | High | 7.3 | 2025-12-18 | A vulnerability was identified in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_retailer.php. The manipulat… |
CVE-2025-14856 | Medium | 6.3 | 2025-12-18 | A security vulnerability has been detected in y_project RuoYi up to 4.8.1. The affected element is an unknown function of the file /monitor/cache/getnames. Suc… |
CVE-2025-14837 | Medium | 4.7 | 2025-12-18 | A vulnerability has been found in ZZCMS 2025. Affected by this issue is the function stripfxg of the file /admin/siteconfig.php of the component Backend Websit… |
CVE-2025-14834 | Medium | 6.3 | 2025-12-17 | A weakness has been identified in code-projects Simple Stock System 1.0. This affects an unknown function of the file /checkuser.php. Executing a manipulation… |
CVE-2025-14833 | High | 7.3 | 2025-12-17 | A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/dele… |
CVE-2025-14832 | High | 7.3 | 2025-12-17 | A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?acti… |
CVE-2025-14780 | Medium | 6.3 | 2025-12-16 | A vulnerability was detected in Xiongwei Smart Catering Cloud Platform 2.1.6446.28761. The affected element is an unknown function of the file /dishtrade/dish_… |
CVE-2025-14730 | Medium | 4.7 | 2025-12-15 | A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_C… |
CVE-2025-14729 | Medium | 4.7 | 2025-12-15 | A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of… |
CVE-2025-14711 | High | 7.3 | 2025-12-15 | A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This vulnerability affects unknown code of the file /contro… |
CVE-2025-14710 | High | 7.3 | 2025-12-15 | A vulnerability was detected in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This affects an unknown part of the file /controller… |
CVE-2025-14707 | Critical | 9.8 | 2025-12-15 | A security flaw has been discovered in Shiguangwu sgwbox N3 2.0.25. Affected is an unknown function of the file /usr/sbin/http_eshell_server of the component D… |
CVE-2025-14706 | Critical | 9.8 | 2025-12-15 | A vulnerability was identified in Shiguangwu sgwbox N3 2.0.25. This impacts an unknown function of the file /usr/sbin/http_eshell_server of the component NETRE… |
CVE-2025-14705 | Critical | 9.8 | 2025-12-15 | A vulnerability was determined in Shiguangwu sgwbox N3 2.0.25. This affects an unknown function of the component SHARESERVER Feature. This manipulation of the… |
CVE-2025-14694 | Medium | 4.7 | 2025-12-15 | A vulnerability was found in ketr JEPaaS up to 7.2.8. This impacts the function readAllPostil of the file /je/postil/postil/readAllPostil. Performing a manipul… |
CVE-2025-14674 | Medium | 6.3 | 2025-12-14 | A vulnerability was found in aizuda snail-job up to 1.6.0. Affected by this vulnerability is the function QLExpressEngine.doEval of the file snail-job-common/s… |
CVE-2025-14668 | High | 7.3 | 2025-12-14 | A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of the file /query/loginExe.php. Performing… |
CVE-2025-14667 | High | 7.3 | 2025-12-14 | A security vulnerability has been detected in itsourcecode COVID Tracking System 1.0. The impacted element is an unknown function of the file /admin/?page=syst… |
CVE-2025-14666 | High | 7.3 | 2025-12-14 | A weakness has been identified in itsourcecode COVID Tracking System 1.0. The affected element is an unknown function of the file /admin/?page=user. This manip… |
CVE-2025-14664 | High | 7.3 | 2025-12-14 | A vulnerability was identified in Campcodes Supplier Management System 1.0. This issue affects some unknown processing of the file /admin/view_unit.php. The ma… |
CVE-2025-14661 | High | 7.3 | 2025-12-14 | A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown functionality of the file /advisers.php. Su… |
CVE-2025-14659 | High | 8.8 | 2025-12-14 | A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown function of the component DHCP Daemon. The manipulation… |
CVE-2025-14653 | High | 7.3 | 2025-12-14 | A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of… |
CVE-2025-14652 | High | 7.3 | 2025-12-14 | A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit… |
CVE-2025-14650 | High | 7.3 | 2025-12-14 | A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation o… |
CVE-2025-14649 | High | 7.3 | 2025-12-14 | A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/suppli… |
CVE-2025-14648 | Medium | 4.7 | 2025-12-14 | A security vulnerability has been detected in DedeBIZ up to 6.5.9. Affected by this vulnerability is an unknown functionality of the file /src/admin/catalog_ad… |
CVE-2025-14647 | High | 7.3 | 2025-12-14 | A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admin_delete.php. This manipulation of th… |
CVE-2025-14646 | High | 7.3 | 2025-12-14 | A security flaw has been discovered in code-projects Student File Management System 1.0. This impacts an unknown function of the file /admin/delete_student.php… |
CVE-2025-14645 | High | 7.3 | 2025-12-14 | A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown function of the file /admin/delete_user.php. The ma… |
CVE-2025-14644 | High | 7.3 | 2025-12-14 | A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /update_subject.php. Exec… |
CVE-2025-14643 | High | 7.3 | 2025-12-14 | A vulnerability was found in code-projects Simple Attendance Record System 2.0. The affected element is an unknown function of the file /check.php. Performing… |
CVE-2025-14640 | High | 7.3 | 2025-12-14 | A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /admin/save_student.php. Exe… |
CVE-2025-14639 | High | 7.3 | 2025-12-14 | A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of… |
CVE-2025-14638 | High | 7.3 | 2025-12-14 | A security vulnerability has been detected in itsourcecode Online Pet Shop Management System 1.0. This issue affects some unknown processing of the file /pet1/… |
CVE-2025-14637 | High | 7.3 | 2025-12-13 | A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. Thi… |
CVE-2025-14623 | High | 7.3 | 2025-12-13 | A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_studen… |
CVE-2025-14622 | High | 7.3 | 2025-12-13 | A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.p… |
CVE-2025-14621 | High | 7.3 | 2025-12-13 | A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipu… |
CVE-2025-14620 | High | 7.3 | 2025-12-13 | A vulnerability was determined in code-projects Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/log… |
CVE-2025-14619 | High | 7.3 | 2025-12-13 | A vulnerability was found in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login_que… |
CVE-2025-14590 | High | 7.3 | 2025-12-13 | A security vulnerability has been detected in code-projects Prison Management System 2.0. Impacted is an unknown function of the file /admin/search1.php. The m… |
CVE-2025-14589 | Medium | 6.3 | 2025-12-13 | A weakness has been identified in code-projects Prison Management System 2.0. This issue affects some unknown processing of the file /admin/search.php. Executi… |
CVE-2025-14588 | High | 7.3 | 2025-12-13 | A security flaw has been discovered in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /update_program.php. Per… |
CVE-2025-14587 | High | 7.3 | 2025-12-13 | A vulnerability was identified in itsourcecode Online Pet Shop Management System 1.0. This affects an unknown part of the file /pet1/available.php. Such manipu… |
CVE-2025-14585 | High | 7.3 | 2025-12-12 | A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=zone… |
CVE-2025-14584 | High | 7.3 | 2025-12-12 | A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin L… |
CVE-2025-14578 | High | 7.3 | 2025-12-12 | A weakness has been identified in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /update_account.php. This… |
CVE-2025-14571 | High | 7.3 | 2025-12-12 | A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /borro… |
CVE-2025-14570 | High | 7.3 | 2025-12-12 | A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_adm… |
CVE-2025-14568 | Medium | 6.3 | 2025-12-12 | A security vulnerability has been detected in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This impacts an unknown functio… |
CVE-2025-14566 | High | 7.3 | 2025-12-12 | A security flaw has been discovered in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. The impacted element is an unknown function… |
CVE-2025-14565 | High | 7.3 | 2025-12-12 | A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. The affected element is an unknown function of t… |
CVE-2025-14537 | High | 7.3 | 2025-12-11 | A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /prev… |
CVE-2025-14536 | High | 7.3 | 2025-12-11 | A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-14531 | Medium | 4.3 | 2025-12-11 | A vulnerability was found in code-projects Rental Management System 2.0. This affects an unknown function of the file Transaction.java of the component Log Han… |
CVE-2025-14529 | High | 7.3 | 2025-12-11 | A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The affected element is an unknown function of the file /admin/admin_running.php. T… |
CVE-2025-14527 | High | 7.3 | 2025-12-11 | A weakness has been identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /view_book.php. Exe… |
CVE-2025-14515 | High | 7.3 | 2025-12-11 | A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add_u… |