CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 19)
Page 19 of 55 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-14514 | High | 7.3 | 2025-12-11 | A flaw has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/add_distributor.php. This manipulation of… |
CVE-2025-14485 | Medium | 5.0 | 2025-12-11 | A weakness has been identified in EFM ipTIME A3004T 14.19.0. This vulnerability affects the function show_debug_screen of the file /sess-bin/timepro.cgi of the… |
CVE-2025-14337 | High | 7.3 | 2025-12-09 | A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /new_grade.php. This manipulation of the… |
CVE-2025-14336 | High | 7.3 | 2025-12-09 | A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The man… |
CVE-2025-14335 | High | 7.3 | 2025-12-09 | A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /new_schoo… |
CVE-2025-14334 | High | 7.3 | 2025-12-09 | A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /new_adviser.php. Executing manipulation of th… |
CVE-2024-56840 | High | 7.2 | 2025-12-09 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2024-56839 | High | 7.2 | 2025-12-09 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2024-56838 | High | 7.2 | 2025-12-09 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2024-56835 | High | 8.8 | 2025-12-09 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2025-14285 | High | 7.3 | 2025-12-09 | A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file edit_personnel.php. The manipula… |
CVE-2025-14276 | Medium | 5.6 | 2025-12-08 | A vulnerability was determined in Ilevia EVE X1 Server up to 4.6.5.0.eden. Impacted is an unknown function of the file /ajax/php/leaf_search.php. This manipula… |
CVE-2025-14259 | Medium | 6.3 | 2025-12-08 | A vulnerability was found in Jihai Jshop MiniProgram Mall System 2.9.0. Affected by this issue is some unknown functionality of the file /index.php/api.html. T… |
CVE-2025-14258 | High | 7.3 | 2025-12-08 | A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /newsubjec… |
CVE-2025-14257 | High | 7.3 | 2025-12-08 | A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /newrecord.php. Executing manipulation of the… |
CVE-2025-14256 | High | 7.3 | 2025-12-08 | A vulnerability was detected in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /newcurriculm.php. Performing manipula… |
CVE-2025-14251 | High | 7.3 | 2025-12-08 | A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component A… |
CVE-2025-14250 | High | 7.3 | 2025-12-08 | A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /user_contact.php. This man… |
CVE-2025-14249 | High | 7.3 | 2025-12-08 | A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /user_school.php. The… |
CVE-2025-14248 | High | 7.3 | 2025-12-08 | A vulnerability was identified in code-projects Simple Shopping Cart 1.0. Impacted is an unknown function of the file /adminlogin.php. The manipulation of the… |
CVE-2025-14247 | Medium | 6.3 | 2025-12-08 | A vulnerability was determined in code-projects Simple Shopping Cart 1.0. This issue affects some unknown processing of the file /Admin/additems.php. Executing… |
CVE-2025-14246 | Medium | 6.3 | 2025-12-08 | A vulnerability was found in code-projects Simple Shopping Cart 1.0. This vulnerability affects unknown code of the file /Customers/settings.php. Performing ma… |
CVE-2025-14245 | High | 7.3 | 2025-12-08 | A vulnerability has been found in IdeaCMS up to 1.8. This affects the function whereRaw of the file app/common/logic/index/Coupon.php. Such manipulation of the… |
CVE-2025-14230 | Medium | 6.3 | 2025-12-08 | A vulnerability was detected in code-projects Daily Time Recording System 4.5.0. The impacted element is an unknown function of the file /admin/add_payroll.php… |
CVE-2025-14229 | Medium | 4.7 | 2025-12-08 | A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the component SVC… |
CVE-2025-14227 | Medium | 6.3 | 2025-12-08 | A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of… |
CVE-2025-14226 | High | 7.3 | 2025-12-08 | A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /edit_user.php. The manipulat… |
CVE-2025-14225 | Medium | 6.3 | 2025-12-08 | A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of the component alphapd. Executing manipul… |
CVE-2025-14223 | High | 7.3 | 2025-12-08 | A vulnerability has been found in code-projects Simple Leave Manager 1.0. Affected by this vulnerability is an unknown functionality of the file /request.php… |
CVE-2025-14222 | Medium | 6.3 | 2025-12-08 | A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /print_personnel_report.php. This ma… |
CVE-2025-14218 | High | 7.3 | 2025-12-08 | A security flaw has been discovered in code-projects Currency Exchange System 1.0. The affected element is an unknown function of the file /editotheraccount.ph… |
CVE-2025-14217 | High | 7.3 | 2025-12-08 | A vulnerability was identified in code-projects Currency Exchange System 1.0. Impacted is an unknown function of the file /edittrns.php. Such manipulation of t… |
CVE-2025-14216 | High | 7.3 | 2025-12-08 | A vulnerability was determined in code-projects Currency Exchange System 1.0. This issue affects some unknown processing of the file /viewserial.php. This mani… |
CVE-2025-14215 | High | 7.3 | 2025-12-08 | A vulnerability was found in code-projects Currency Exchange System 1.0. This vulnerability affects unknown code of the file /edit.php. The manipulation of the… |
CVE-2025-14214 | Medium | 6.3 | 2025-12-08 | A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /section_edit1.php. The manipulation of… |
CVE-2025-14212 | High | 7.3 | 2025-12-08 | A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /member_search… |
CVE-2025-14211 | High | 7.3 | 2025-12-08 | A vulnerability was detected in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /d… |
CVE-2025-14210 | High | 7.3 | 2025-12-08 | A security vulnerability has been detected in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /delete_member… |
CVE-2025-14209 | High | 7.3 | 2025-12-08 | A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.php. This manipulatio… |
CVE-2025-14208 | Medium | 6.3 | 2025-12-08 | A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulat… |
CVE-2025-14207 | High | 7.3 | 2025-12-08 | A vulnerability was identified in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. The impacted element is an unknown functi… |
CVE-2025-14203 | Medium | 6.3 | 2025-12-07 | A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This ma… |
CVE-2025-14193 | Medium | 6.3 | 2025-12-07 | A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /view_personnel.php… |
CVE-2025-14192 | High | 7.3 | 2025-12-07 | A vulnerability was found in RashminDungrani online-banking up to 2337ad552ea9d385b4e07b90e6f32d011b7c68a2. This affects an unknown part of the file /site/dist… |
CVE-2025-14190 | High | 7.3 | 2025-12-07 | A flaw has been found in Chanjet TPlus up to 20251121. Affected by this vulnerability is an unknown functionality of the file /tplus/ajaxpro/Ufida.T.SM.UIP.Mul… |
CVE-2025-14189 | High | 7.3 | 2025-12-07 | A vulnerability was detected in Chanjet CRM up to 20251121. Affected is an unknown function of the file /tools/jxf_dump_table_demo.php. The manipulation of the… |
CVE-2025-14188 | High | 7.2 | 2025-12-07 | A security vulnerability has been detected in UGREEN DH2100+ up to 5.3.0.251125. This impacts the function handler_file_backup_create of the file /v1/file/back… |
CVE-2025-14186 | Low | 3.5 | 2025-12-07 | A security flaw has been discovered in Grandstream GXP1625 1.0.7.4. The impacted element is an unknown function of the file /cgi-bin/api.values.post of the com… |
CVE-2025-14185 | Medium | 6.3 | 2025-12-07 | A vulnerability was identified in Yonyou U8 Cloud 5.0/5.0sp/5.1/5.1sp. The affected element is an unknown function of the file nc/pubitf/erm/mobile/appservice/… |
CVE-2025-14184 | Medium | 6.3 | 2025-12-07 | A vulnerability was determined in SGAI Space1 NAS N1211DS up to 1.0.915. Impacted is the function RENAME_FILE/OPERATE_FILE/NGNIX_UPLOAD of the file /cgi-bin/JS… |
CVE-2025-14108 | High | 8.8 | 2025-12-05 | A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this issue is the function zfilev2_api.OpenSafe of the file /v2/file/safe/open… |
CVE-2025-14107 | High | 8.8 | 2025-12-05 | A security flaw has been discovered in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this vulnerability is the function zfilev2_api.SafeStatus of the file /v2/… |
CVE-2025-14106 | High | 8.8 | 2025-12-05 | A vulnerability was identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected is the function zfilev2_api.CloseSafe of the file /v2/file/safe/close of the compo… |
CVE-2025-14091 | High | 7.3 | 2025-12-05 | A weakness has been identified in TrippWasTaken PHP-Guitar-Shop up to 6ce0868889617c1975982aae6df8e49555d0d555. This vulnerability affects unknown code of the… |
CVE-2025-14090 | Medium | 4.7 | 2025-12-05 | A security flaw has been discovered in AMTT Hotel Broadband Operation System 1.0. This affects an unknown part of the file /manager/card/cardmake_down.php. Per… |
CVE-2025-14012 | Medium | 4.7 | 2025-12-04 | A vulnerability was determined in JIZHICMS up to 2.5.5. The affected element is the function deleteAll/findAll/delete of the file /index.php/admins/Comment/del… |
CVE-2025-14011 | Medium | 4.7 | 2025-12-04 | A vulnerability was found in JIZHICMS up to 2.5.5. Impacted is the function commentlist of the file /index.php/admins/Comment/addcomment.html of the component… |
CVE-2025-13811 | Medium | 6.3 | 2025-12-01 | A vulnerability was determined in jsnjfz WebStack-Guns 1.0. This vulnerability affects unknown code of the file src/main/java/com/jsnjfz/manage/core/common/con… |
CVE-2025-13800 | Medium | 6.3 | 2025-12-01 | A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c. This issue affects the function set_mesh_disconnect of the file /send_order.cgi. The manipulation… |
CVE-2025-13799 | Medium | 6.3 | 2025-12-01 | A vulnerability has been found in ADSLR NBR1005GPEV2 250814-r037c. This vulnerability affects the function ap_macfilter_del of the file /send_order.cgi. The ma… |
CVE-2025-13798 | Medium | 6.3 | 2025-12-01 | A flaw has been found in ADSLR NBR1005GPEV2 250814-r037c. This affects the function ap_macfilter_add of the file /send_order.cgi. Executing manipulation of the… |
CVE-2025-13797 | Medium | 6.3 | 2025-12-01 | A vulnerability was detected in ADSLR B-QE2W401 250814-r037c. Affected by this issue is the function parameterdel_swifimac of the file /send_order.cgi. Perform… |
CVE-2025-13792 | High | 7.3 | 2025-11-30 | A security flaw has been discovered in Qualitor up to 8.20.104/8.24.97. Affected by this vulnerability is the function eval of the file /html/st/stdeslocamento… |
CVE-2025-13788 | High | 7.3 | 2025-11-30 | A vulnerability has been found in Chanjet CRM up to 20251106. The impacted element is an unknown function of the file /tools/upgradeattribute.php. The manipula… |
CVE-2025-13786 | High | 7.3 | 2025-11-30 | A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fetch of the file /index.php. Performing… |
CVE-2025-13783 | Medium | 6.3 | 2025-11-30 | A security flaw has been discovered in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. This affects the function check/uncheck/delete of the file… |
CVE-2025-13782 | High | 7.3 | 2025-11-30 | A vulnerability was identified in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Affected by this issue is the function delete of the file applic… |
CVE-2025-66025 | Medium | 4.3 | 2025-11-26 | Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido’s Findings page improperly handled user-supplied Markdow… |
CVE-2025-13586 | Medium | 4.7 | 2025-11-24 | A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipu… |
CVE-2025-13585 | High | 7.3 | 2025-11-24 | A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of… |
CVE-2025-13583 | High | 7.3 | 2025-11-24 | A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST… |
CVE-2025-13582 | High | 7.3 | 2025-11-24 | A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the com… |
CVE-2025-13581 | Medium | 6.3 | 2025-11-24 | A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /schedule… |
CVE-2025-13580 | Medium | 6.3 | 2025-11-24 | A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID… |
CVE-2025-13579 | Medium | 6.3 | 2025-11-24 | A vulnerability was found in code-projects Library System 1.0. This impacts an unknown function of the file /return.php. The manipulation of the argument ID re… |
CVE-2025-13578 | High | 7.3 | 2025-11-24 | A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipul… |
CVE-2025-13575 | Medium | 6.3 | 2025-11-24 | A security vulnerability has been detected in code-projects Blog Site 1.0. Impacted is the function category_exists of the file /resources/functions/blog.php o… |
CVE-2025-13572 | High | 7.3 | 2025-11-23 | A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /delete_admin.php. The manipul… |
CVE-2025-13571 | Medium | 6.3 | 2025-11-23 | A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /listorder.ph… |
CVE-2025-13570 | Medium | 6.3 | 2025-11-23 | A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=state… |
CVE-2025-13569 | Medium | 6.3 | 2025-11-23 | A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/?page=city. Such manipulation of t… |
CVE-2025-13568 | Medium | 6.3 | 2025-11-23 | A flaw has been found in itsourcecode COVID Tracking System 1.0. This impacts an unknown function of the file /admin/?page=people. This manipulation of the arg… |
CVE-2025-13567 | Medium | 6.3 | 2025-11-23 | A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This affects an unknown function of the file /admin/?page=establishment. The manipulati… |
CVE-2025-13562 | High | 7.3 | 2025-11-23 | A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument serv… |
CVE-2025-13561 | High | 7.3 | 2025-11-23 | A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulati… |
CVE-2025-13560 | High | 7.3 | 2025-11-23 | A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of th… |
CVE-2025-13557 | High | 7.3 | 2025-11-23 | A vulnerability has been found in Campcodes Online Polling System 1.0. Affected by this issue is some unknown functionality of the file /registeracc.php. The m… |
CVE-2025-13556 | High | 7.3 | 2025-11-23 | A flaw has been found in Campcodes Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/checklogin.php. Exe… |
CVE-2025-13555 | High | 7.3 | 2025-11-23 | A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Per… |
CVE-2025-13554 | High | 7.3 | 2025-11-23 | A security vulnerability has been detected in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /index.php of the componen… |
CVE-2025-13546 | Medium | 6.3 | 2025-11-23 | A vulnerability was detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this issue is some unknown functionality… |
CVE-2025-13545 | Medium | 4.7 | 2025-11-23 | A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this vulnerability is an u… |
CVE-2025-13485 | High | 7.3 | 2025-11-21 | A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=… |
CVE-2025-64428 | Critical | 9.8 | 2025-11-20 | Dataease is an open source data visualization analysis tool. Versions prior to 2.10.17 are vulnerable to JNDI injection. A blacklist was added in the patch for… |
CVE-2025-13451 | High | 7.3 | 2025-11-20 | A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulatio… |
CVE-2025-13449 | High | 7.3 | 2025-11-20 | A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the… |
CVE-2025-13442 | High | 7.3 | 2025-11-20 | A security vulnerability has been detected in UTT 进取 750W up to 3.2.2-191225. Affected by this vulnerability is the function system of the file /goform/formPdb… |
CVE-2025-13424 | Medium | 4.7 | 2025-11-20 | A vulnerability has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_product.php. The manipulati… |
CVE-2025-13422 | High | 7.3 | 2025-11-20 | A vulnerability was detected in freeprojectscodes Sports Club Management System 1.0. The affected element is an unknown function of the file /dashboard/admin/c… |
CVE-2025-13421 | High | 7.3 | 2025-11-19 | A security vulnerability has been detected in itsourcecode Human Resource Management System 1.0. Impacted is an unknown function of the file /src/store/NoticeS… |