CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 38)
Page 38 of 51 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-1200 | Medium | 6.3 | 2025-02-12 | A vulnerability was found in SourceCodester Best Church Management Software 1.1. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2025-1199 | Medium | 6.3 | 2025-02-12 | A vulnerability was found in SourceCodester Best Church Management Software 1.1. It has been classified as critical. This affects an unknown part of the file /… |
CVE-2025-1197 | Medium | 6.3 | 2025-02-12 | A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unk… |
CVE-2025-1192 | Medium | 6.3 | 2025-02-12 | A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0. It has been classified as critical. Affected is an unknown function… |
CVE-2025-1191 | Medium | 6.3 | 2025-02-12 | A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0 and classified as critical. This issue affects some unknown processin… |
CVE-2025-1189 | Medium | 6.3 | 2025-02-12 | A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0. This affects an unknown part of the fi… |
CVE-2025-1188 | Medium | 6.3 | 2025-02-12 | A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by this issue is some unknown functionality o… |
CVE-2025-1185 | Medium | 6.3 | 2025-02-12 | A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModal_Sensor… |
CVE-2025-1184 | Medium | 6.3 | 2025-02-12 | A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax… |
CVE-2025-1183 | Medium | 6.3 | 2025-02-12 | A vulnerability has been found in CodeZips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-1173 | Medium | 4.7 | 2025-02-11 | A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file process… |
CVE-2025-1172 | Medium | 6.3 | 2025-02-11 | A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affected by this issue is some unknown func… |
CVE-2025-1168 | Medium | 6.3 | 2025-02-11 | A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code o… |
CVE-2025-1167 | Medium | 6.3 | 2025-02-11 | A vulnerability was found in Mayuri K Employee Management System up to 192.168.70.3 and classified as critical. Affected by this issue is some unknown function… |
CVE-2025-1162 | Medium | 6.3 | 2025-02-10 | A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. This affects an unknown part of the file /\_parse/load\_user-profil… |
CVE-2025-1158 | Medium | 6.3 | 2025-02-10 | A vulnerability was found in ESAFENET CDG 5.6.3.154.205_20250114. It has been classified as critical. Affected is an unknown function of the file addPolicyToSa… |
CVE-2025-1157 | Medium | 6.3 | 2025-02-10 | A vulnerability was found in Allims lab.online up to 20250201 and classified as critical. This issue affects some unknown processing of the file /model/model_r… |
CVE-2025-1156 | High | 7.3 | 2025-02-10 | A vulnerability has been found in Pix Software Vivaz 6.0.10 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login… |
CVE-2025-1154 | Medium | 6.3 | 2025-02-10 | A vulnerability, which was classified as critical, has been found in xxyopen Novel up to 3.4.1. Affected by this issue is some unknown functionality of the fil… |
CVE-2025-1117 | High | 7.3 | 2025-02-08 | A vulnerability, which was classified as critical, was found in CoinRemitter 0.0.1/0.0.2 on OpenCart. This affects an unknown part. The manipulation of the arg… |
CVE-2025-1116 | High | 7.3 | 2025-02-08 | A vulnerability, which was classified as critical, has been found in Dreamvention Live AJAX Search Free up to 1.0.6 on OpenCart. Affected by this issue is the… |
CVE-2025-24962 | High | 8.8 | 2025-02-03 | reNgine is an automated reconnaissance framework for web applications. In affected versions a user can inject commands via the nmap_cmd parameters. This issue… |
CVE-2025-22978 | Critical | 9.8 | 2025-02-03 | eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module. |
CVE-2025-0967 | Medium | 6.3 | 2025-02-02 | A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/add_chatroo… |
CVE-2025-0950 | Medium | 6.3 | 2025-02-01 | A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects some unknown processing of the file st… |
CVE-2025-0949 | Medium | 6.3 | 2025-02-01 | A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2025-0948 | Medium | 6.3 | 2025-02-01 | A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file incview… |
CVE-2025-0947 | Medium | 6.3 | 2025-02-01 | A vulnerability, which was classified as critical, has been found in itsourcecode Tailoring Management System 1.0. Affected by this issue is some unknown funct… |
CVE-2025-0946 | Medium | 6.3 | 2025-02-01 | A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-0945 | Medium | 6.3 | 2025-02-01 | A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file typedelete.p… |
CVE-2025-0944 | Medium | 6.3 | 2025-02-01 | A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the fil… |
CVE-2025-0943 | Medium | 6.3 | 2025-02-01 | A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the fil… |
CVE-2025-0934 | Medium | 6.3 | 2025-01-31 | A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. This affects an unknown part of the file /parse/_call_jo… |
CVE-2025-0882 | Medium | 6.3 | 2025-01-30 | A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-0881 | Medium | 6.3 | 2025-01-30 | A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/adm… |
CVE-2025-0880 | Medium | 6.3 | 2025-01-30 | A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/a… |
CVE-2025-0874 | Medium | 6.3 | 2025-01-30 | A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0. Affected by this issue is some unk… |
CVE-2025-0873 | Medium | 6.3 | 2025-01-30 | A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-0872 | Medium | 6.3 | 2025-01-30 | A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file /addpayment… |
CVE-2025-0847 | High | 7.3 | 2025-01-30 | A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of th… |
CVE-2025-0846 | High | 7.3 | 2025-01-30 | A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /a… |
CVE-2025-0843 | High | 7.3 | 2025-01-29 | A vulnerability was found in needyamin Library Card System 1.0. It has been classified as critical. Affected is an unknown function of the file admindashboard… |
CVE-2025-0842 | High | 7.3 | 2025-01-29 | A vulnerability was found in needyamin Library Card System 1.0 and classified as critical. This issue affects some unknown processing of the file admin.php of… |
CVE-2025-24374 | Medium | 4.3 | 2025-01-29 | Twig is a template language for PHP. When using the ?? operator, output escaping was missing for the expression on the left side of the operator. This vulnerab… |
CVE-2025-0803 | High | 7.3 | 2025-01-29 | A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by this issue is some unknown functionality o… |
CVE-2025-0793 | Medium | 6.3 | 2025-01-29 | A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /todoDetai… |
CVE-2025-0792 | Medium | 6.3 | 2025-01-29 | A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulatio… |
CVE-2025-0791 | Medium | 6.3 | 2025-01-29 | A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp… |
CVE-2025-0789 | Medium | 6.3 | 2025-01-28 | A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /doneDetail.jsp. The manipulation of the arg… |
CVE-2025-0788 | Medium | 6.3 | 2025-01-28 | A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /content_top.jsp… |
CVE-2025-0786 | Medium | 6.3 | 2025-01-28 | A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation… |
CVE-2024-11956 | Medium | 4.7 | 2025-01-28 | A vulnerability, which was classified as critical, has been found in Pimcore customer-data-framework up to 4.2.0. Affected by this issue is some unknown functi… |
CVE-2024-11954 | Low | 2.4 | 2025-01-28 | A vulnerability classified as problematic was found in Pimcore 11.4.2. Affected by this vulnerability is an unknown functionality of the component Search Docum… |
CVE-2025-24364 | High | 7.2 | 2025-01-27 | vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker with authenticated access to the vaultwarden… |
CVE-2017-20196 | Medium | 6.3 | 2025-01-26 | A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice… |
CVE-2025-0701 | Medium | 6.3 | 2025-01-24 | A vulnerability classified as critical has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This affects an unknown part of the… |
CVE-2025-0700 | Medium | 6.3 | 2025-01-24 | A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been rated as critical. Affected by this issue is some u… |
CVE-2025-0699 | Medium | 6.3 | 2025-01-24 | A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been declared as critical. Affected by this vulnerabilit… |
CVE-2025-0698 | Medium | 6.3 | 2025-01-24 | A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been classified as critical. Affected is an unknown func… |
CVE-2025-0697 | Medium | 5.3 | 2025-01-24 | A vulnerability, which was classified as problematic, was found in Telstra Smart Modem Gen 2 up to 20250115. This affects an unknown part of the component HTTP… |
CVE-2025-0579 | High | 7.3 | 2025-01-20 | A vulnerability was found in Shiprocket Module 3/4 on OpenCart. It has been declared as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-0565 | High | 7.3 | 2025-01-19 | A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php. The manipu… |
CVE-2025-0564 | High | 7.3 | 2025-01-19 | A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-0563 | Medium | 6.3 | 2025-01-19 | A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been classified as critical. Affected is an unknown function of the file /dash/update.ph… |
CVE-2025-0562 | Medium | 6.3 | 2025-01-19 | A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/a… |
CVE-2025-0561 | Medium | 6.3 | 2025-01-19 | A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-… |
CVE-2025-0558 | Medium | 6.3 | 2025-01-18 | A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest of the fi… |
CVE-2025-0541 | Medium | 6.3 | 2025-01-17 | A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/a… |
CVE-2025-0540 | Medium | 6.3 | 2025-01-17 | A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2025-0536 | Medium | 6.3 | 2025-01-17 | A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the fil… |
CVE-2025-0535 | Medium | 6.3 | 2025-01-17 | A vulnerability classified as critical has been found in Codezips Gym Management System 1.0. This affects an unknown part of the file /dashboard/admin/edit_mem… |
CVE-2025-0534 | High | 7.3 | 2025-01-17 | A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been rated as critical. Affected by this issue is some unk… |
CVE-2025-0533 | High | 7.3 | 2025-01-17 | A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been declared as critical. Affected by this vulnerability… |
CVE-2025-0532 | Medium | 6.3 | 2025-01-17 | A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/adm… |
CVE-2025-0531 | Medium | 6.3 | 2025-01-17 | A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/leaveroom.p… |
CVE-2025-0528 | High | 7.2 | 2025-01-17 | A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20. Affected by this issue is some unknown functionality… |
CVE-2025-0527 | High | 7.3 | 2025-01-17 | A vulnerability classified as critical was found in code-projects Admission Management System 1.0. Affected by this vulnerability is an unknown functionality o… |
CVE-2025-0491 | Medium | 6.3 | 2025-01-15 | A vulnerability, which was classified as critical, was found in Fanli2012 native-php-cms 1.0. Affected is an unknown function of the file /fladmin/cat_dodel.ph… |
CVE-2025-0490 | Medium | 6.3 | 2025-01-15 | A vulnerability, which was classified as critical, has been found in Fanli2012 native-php-cms 1.0. This issue affects some unknown processing of the file /flad… |
CVE-2025-0489 | Medium | 6.3 | 2025-01-15 | A vulnerability classified as critical was found in Fanli2012 native-php-cms 1.0. This vulnerability affects unknown code of the file /fladmin/friendlink_dodel… |
CVE-2025-0488 | Medium | 6.3 | 2025-01-15 | A vulnerability classified as critical has been found in Fanli2012 native-php-cms 1.0. This affects an unknown part of the file product_list.php. The manipulat… |
CVE-2025-0487 | Medium | 6.3 | 2025-01-15 | A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /fla… |
CVE-2025-0486 | High | 7.3 | 2025-01-15 | A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the… |
CVE-2024-53263 | | 2025-01-14 | Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to th… | |
CVE-2025-0462 | Medium | 6.3 | 2025-01-14 | A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0 and classified as critical. This issue affects some unknown pr… |
CVE-2024-39785 | Critical | 9.1 | 2025-01-14 | Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request… |
CVE-2024-39784 | Critical | 9.1 | 2025-01-14 | Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request… |
CVE-2024-39604 | Critical | 9.0 | 2025-01-14 | A command execution vulnerability exists in the update_filter_url.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can l… |
CVE-2024-36295 | Critical | 9.1 | 2025-01-14 | A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead… |
CVE-2024-34544 | Critical | 9.1 | 2025-01-14 | A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can… |
CVE-2024-21797 | Critical | 9.1 | 2025-01-14 | A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can le… |
CVE-2025-0410 | Medium | 6.3 | 2025-01-13 | A vulnerability classified as critical was found in liujianview gymxmjpa 1.0. This vulnerability affects the function MenberDaoInpl of the file src/main/java/c… |
CVE-2025-0409 | Medium | 6.3 | 2025-01-13 | A vulnerability classified as critical has been found in liujianview gymxmjpa 1.0. This affects the function MembertypeDaoImpl of the file src/main/java/com/li… |
CVE-2025-0408 | Medium | 6.3 | 2025-01-13 | A vulnerability was found in liujianview gymxmjpa 1.0. It has been rated as critical. Affected by this issue is the function LoosDaoImpl of the file src/main/j… |
CVE-2025-0407 | Medium | 6.3 | 2025-01-13 | A vulnerability was found in liujianview gymxmjpa 1.0. It has been declared as critical. Affected by this vulnerability is the function EquipmentDaoImpl of the… |
CVE-2025-0406 | Medium | 6.3 | 2025-01-13 | A vulnerability was found in liujianview gymxmjpa 1.0. It has been classified as critical. Affected is the function SubjectDaoImpl of the file src/main/java/co… |
CVE-2025-0405 | Medium | 6.3 | 2025-01-13 | A vulnerability was found in liujianview gymxmjpa 1.0 and classified as critical. This issue affects the function GoodsDaoImpl of the file src/main/java/com/li… |
CVE-2025-0404 | Medium | 6.3 | 2025-01-13 | A vulnerability has been found in liujianview gymxmjpa 1.0 and classified as critical. This vulnerability affects the function CoachController of the file src/… |
CVE-2025-0396 | High | 7.8 | 2025-01-12 | A vulnerability, which was classified as critical, has been found in exelban stats up to 2.11.21. This issue affects the function shouldAcceptNewConnection of… |
CVE-2025-0392 | Medium | 6.3 | 2025-01-11 | A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. Affected is the function datagrid… |