CWE-94 · Code Injection (page 21)
Page 21 of 69 — CVEs classified under CWE-94, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-6778 | Low | 2.4 | 2025-06-27 | A vulnerability, which was classified as problematic, was found in code-projects Food Distributor Site 1.0. Affected is an unknown function of the file /admin/… |
CVE-2025-28993 | High | 8.6 | 2025-06-27 | Improper Control of Generation of Code ('Code Injection') vulnerability in Jose Mortellaro Content No Cache content-no-cache allows Code Injection.This issue a… |
CVE-2025-6700 | Medium | 4.3 | 2025-06-26 | A vulnerability classified as problematic was found in Xuxueli xxl-sso 1.1.0. This vulnerability affects unknown code of the file /xxl-sso-server/login. The ma… |
CVE-2025-6699 | Low | 3.5 | 2025-06-26 | A vulnerability classified as problematic has been found in LabRedesCefetRJ WeGIA 3.4.0. This affects an unknown part of the file /html/funcionario/cadastro_fu… |
CVE-2025-6698 | Low | 3.5 | 2025-06-26 | A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /h… |
CVE-2025-6697 | Low | 3.5 | 2025-06-26 | A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of th… |
CVE-2025-6696 | Low | 3.5 | 2025-06-26 | A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been classified as problematic. Affected is an unknown function of the file /html/atendido/Cad… |
CVE-2025-53002 | High | 8.3 | 2025-06-26 | LLaMA-Factory is a tuning library for large language models. A remote code execution vulnerability was discovered in LLaMA-Factory versions up to and including… |
CVE-2025-6695 | Low | 3.5 | 2025-06-26 | A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0 and classified as problematic. This issue affects some unknown processing of the file /html/matPat/adi… |
CVE-2025-6694 | Low | 3.5 | 2025-06-26 | A vulnerability has been found in LabRedesCefetRJ WeGIA 3.4.0 and classified as problematic. This vulnerability affects unknown code of the file /html/matPat/a… |
CVE-2025-6613 | Low | 3.5 | 2025-06-25 | A vulnerability classified as problematic was found in PHPGurukul Hospital Management System 4.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2024-37743 | Critical | 9.8 | 2025-06-24 | An issue in mmzdev KnowledgeGPT V.0.0.5 allows a remote attacker to execute arbitrary code via the Document Display Component. |
CVE-2025-23265 | High | 7.8 | 2025-06-24 | NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious… |
CVE-2025-23264 | High | 7.8 | 2025-06-24 | NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious… |
CVE-2025-6569 | Medium | 4.3 | 2025-06-24 | A vulnerability classified as problematic was found in code-projects School Fees Payment System 1.0. Affected by this vulnerability is an unknown functionality… |
CVE-2025-6551 | Low | 3.5 | 2025-06-24 | A vulnerability was found in java-aodeng Hope-Boot 1.0.0 and classified as problematic. This issue affects the function Login of the file /src/main/java/com/ho… |
CVE-2023-47030 | Critical | 9.8 | 2025-06-23 | An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a GET request to a UserService… |
CVE-2025-6509 | Low | 3.5 | 2025-06-23 | A vulnerability was found in seaswalker spring-analysis up to 4379cce848af96997a9d7ef91d594aa129be8d71. It has been declared as problematic. Affected by this v… |
CVE-2023-47032 | Critical | 9.8 | 2025-06-23 | Password Vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the UserService SOAP API func… |
CVE-2023-48978 | Critical | 9.8 | 2025-06-23 | An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camera URL component. |
CVE-2025-6512 | Critical | 10.0 | 2025-06-23 | On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights. |
CVE-2025-6477 | Low | 2.4 | 2025-06-22 | A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unk… |
CVE-2025-6475 | Low | 2.4 | 2025-06-22 | A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of t… |
CVE-2025-6473 | Medium | 4.3 | 2025-06-22 | A vulnerability, which was classified as problematic, was found in code-projects School Fees Payment System 1.0. This affects an unknown part of the file /fees… |
CVE-2025-6452 | Low | 2.4 | 2025-06-22 | A vulnerability was found in CodeAstro Patient Record Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of th… |
CVE-2025-6353 | Low | 3.5 | 2025-06-20 | A vulnerability classified as problematic was found in code-projects Responsive Blog 1.0. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2025-49132 | Critical | 10.0 | 2025-06-20 | Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query p… |
CVE-2025-6347 | Low | 2.4 | 2025-06-20 | A vulnerability was found in code-projects Responsive Blog 1.0/1.12.4/3.3.4. It has been declared as problematic. This vulnerability affects unknown code of th… |
CVE-2025-6345 | Low | 3.5 | 2025-06-20 | A vulnerability was found in SourceCodester My Food Recipe 1.0 and classified as problematic. Affected by this issue is the function addRecipeModal of the file… |
CVE-2025-6340 | Low | 3.5 | 2025-06-20 | A vulnerability classified as problematic has been found in code-projects School Fees Payment System 1.0. This affects an unknown part of the file /branch.php… |
CVE-2025-6301 | Low | 2.4 | 2025-06-20 | A vulnerability, which was classified as problematic, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the f… |
CVE-2025-6288 | Low | 2.4 | 2025-06-20 | A vulnerability, which was classified as problematic, has been found in PHPGurukul Bus Pass Management System 1.0. Affected by this issue is some unknown funct… |
CVE-2025-6287 | Low | 3.5 | 2025-06-20 | A vulnerability classified as problematic was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functiona… |
CVE-2025-6285 | Medium | 4.3 | 2025-06-19 | A vulnerability was found in PHPGurukul COVID19 Testing Management System 2021. It has been rated as problematic. This issue affects some unknown processing of… |
CVE-2025-6268 | Medium | 4.3 | 2025-06-19 | A vulnerability classified as problematic has been found in Luna Imaging up to 7.5.5.6. Affected is an unknown function of the file /luna/servlet/view/search… |
CVE-2025-24287 | Medium | 6.1 | 2025-06-19 | A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with elevated permissions. |
CVE-2025-23121 | High | 8.8 | 2025-06-19 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user |
CVE-2025-32798 | Critical | 9.8 | 2025-06-16 | Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build recipe processing logic has been found to be vulnerab… |
CVE-2025-6131 | Low | 2.4 | 2025-06-16 | A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store… |
CVE-2025-5309 | Critical | 9.8 | 2025-06-16 | The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead t… |
CVE-2025-6127 | Low | 3.5 | 2025-06-16 | A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown fun… |
CVE-2025-6126 | Medium | 4.3 | 2025-06-16 | A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown func… |
CVE-2025-6125 | Low | 2.4 | 2025-06-16 | A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /ad… |
CVE-2025-6101 | Medium | 5.5 | 2025-06-16 | A vulnerability classified as critical has been found in letta-ai letta up to 0.4.1. Affected is the function function_message of the file letta/letta/interfac… |
CVE-2025-6092 | Medium | 4.3 | 2025-06-15 | A vulnerability was found in comfyanonymous comfyui up to 0.3.39. It has been declared as problematic. Affected by this vulnerability is an unknown functionali… |
CVE-2025-49581 | High | 8.8 | 2025-06-13 | XWiki is a generic wiki platform. Any user with edit right on a page (could be the user's profile) can execute code (Groovy, Python, Velocity) with programming… |
CVE-2025-28386 | Critical | 9.8 | 2025-06-13 | A remote code execution (RCE) vulnerability in the Plugin Management component of OpenC3 COSMOS v6.0.0 allows attackers to execute arbitrary code via uploading… |
CVE-2025-29902 | Critical | 10.0 | 2025-06-13 | Remote code execution that allows unauthorized users to execute arbitrary code on the server machine. |
CVE-2025-30085 | | 2025-06-11 | Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered. The issue occurs within the submission export feature and… | |
CVE-2025-5984 | Low | 3.5 | 2025-06-10 | A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic. Affected by this vulnerability is an unknow… |
CVE-2025-5976 | Low | 3.5 | 2025-06-10 | A vulnerability has been found in PHPGurukul Rail Pass Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file… |
CVE-2025-5975 | Medium | 4.3 | 2025-06-10 | A vulnerability, which was classified as problematic, was found in PHPGurukul Rail Pass Management System 1.0. This affects an unknown part of the file /rpms/d… |
CVE-2025-5974 | Low | 3.5 | 2025-06-10 | A vulnerability, which was classified as problematic, has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this issue is some unknown… |
CVE-2025-5973 | Low | 2.4 | 2025-06-10 | A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionali… |
CVE-2025-5972 | Low | 2.4 | 2025-06-10 | A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/… |
CVE-2025-5970 | Low | 2.4 | 2025-06-10 | A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality… |
CVE-2025-5887 | Low | 3.5 | 2025-06-09 | A vulnerability was found in jsnjfz WebStack-Guns 1.0. It has been classified as problematic. Affected is an unknown function of the file UserMgrController.jav… |
CVE-2025-5886 | Low | 3.5 | 2025-06-09 | A vulnerability was found in Emlog up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin/article.php. The ma… |
CVE-2025-48140 | Critical | 9.9 | 2025-06-09 | Improper Control of Generation of Code ('Code Injection') vulnerability in metalpriceapi MetalpriceAPI metalpriceapi allows Code Injection.This issue affects M… |
CVE-2025-48123 | Critical | 10.0 | 2025-06-09 | Improper Control of Generation of Code ('Code Injection') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Lig… |
CVE-2025-5884 | Low | 3.5 | 2025-06-09 | A vulnerability, which was classified as problematic, was found in Konica Minolta bizhub up to 20250202. This affects an unknown part of the component Display… |
CVE-2025-5879 | Low | 3.5 | 2025-06-09 | A vulnerability, which was classified as problematic, was found in WuKongOpenSource WukongCRM 9.0. This affects an unknown part of the file AdminSysConfigContr… |
CVE-2025-49013 | Critical | 9.9 | 2025-06-09 | WilderForge is a Wildermyth coremodding API. A critical vulnerability has been identified in multiple projects across the WilderForge organization. The issue a… |
CVE-2025-5797 | Low | 3.5 | 2025-06-06 | A vulnerability was found in code-projects Laundry System 1.0 and classified as problematic. This issue affects some unknown processing of the file /data/inser… |
CVE-2025-5796 | Low | 3.5 | 2025-06-06 | A vulnerability has been found in code-projects Laundry System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /data/edi… |
CVE-2025-5765 | Low | 3.5 | 2025-06-06 | A vulnerability was found in code-projects Laundry System 1.0. It has been classified as problematic. This affects an unknown part of the file /data/edit_laund… |
CVE-2025-5764 | Low | 3.5 | 2025-06-06 | A vulnerability was found in code-projects Laundry System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /… |
CVE-2025-49250 | Medium | 4.3 | 2025-06-06 | Improper Control of Generation of Code ('Code Injection') vulnerability in cmoreira Team Showcase team-showcase-cm allows Code Injection.This issue affects Tea… |
CVE-2025-41365 | | 2025-06-06 | Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that… | |
CVE-2025-41362 | | 2025-06-06 | Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that… | |
CVE-2025-5757 | Low | 3.5 | 2025-06-06 | A vulnerability was found in code-projects Traffic Offense Reporting System 1.0. It has been rated as problematic. Affected by this issue is some unknown funct… |
CVE-2025-5727 | Low | 2.4 | 2025-06-06 | A vulnerability classified as problematic has been found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /scri… |
CVE-2025-5726 | Low | 2.4 | 2025-06-06 | A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown func… |
CVE-2025-5725 | Low | 2.4 | 2025-06-06 | A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unk… |
CVE-2025-5724 | Low | 2.4 | 2025-06-06 | A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been classified as problematic. Affected is an unknown function of the… |
CVE-2025-5723 | Low | 2.4 | 2025-06-06 | A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of t… |
CVE-2025-5722 | Low | 2.4 | 2025-06-06 | A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as problematic. This vulnerability affects unknown code of… |
CVE-2025-5721 | Low | 2.4 | 2025-06-06 | A vulnerability, which was classified as problematic, was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the fil… |
CVE-2025-5713 | Low | 3.5 | 2025-06-06 | A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250519 and classified as problematic. Affected by this issue is some unknown functionality of th… |
CVE-2025-5661 | Low | 2.4 | 2025-06-05 | A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part of the file… |
CVE-2025-5651 | Low | 3.5 | 2025-06-05 | A vulnerability, which was classified as problematic, has been found in code-projects Traffic Offense Reporting System 1.0. This issue affects some unknown pro… |
CVE-2025-5628 | Low | 3.5 | 2025-06-05 | A vulnerability, which was classified as problematic, has been found in SourceCodester Food Menu Manager 1.0. Affected by this issue is some unknown functional… |
CVE-2025-5584 | Low | 2.4 | 2025-06-04 | A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as problematic. Affected is an unknown function of the file /doc… |
CVE-2025-5543 | Low | 2.4 | 2025-06-03 | A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been declared as problematic. Affected by this vulnerability is an unknown functional… |
CVE-2025-5542 | Low | 2.4 | 2025-06-03 | A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been classified as problematic. Affected is an unknown function of the file /boafrm/f… |
CVE-2025-5523 | Low | 3.5 | 2025-06-03 | A vulnerability classified as problematic has been found in enilu web-flash 1.0. This affects the function fileService.upload of the file src/main/java/cn/enil… |
CVE-2025-35036 | High | 7.3 | 2025-06-03 | Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with… |
CVE-2025-5516 | Low | 2.4 | 2025-06-03 | A vulnerability, which was classified as problematic, was found in TOTOLINK X2000R 1.0.0-B20230726.1108. This affects an unknown part of the file /boafrm/formF… |
CVE-2025-5513 | Low | 3.5 | 2025-06-03 | A vulnerability has been found in quequnlong shiyi-blog up to 1.2.1 and classified as problematic. Affected by this vulnerability is an unknown functionality o… |
CVE-2025-32106 | Critical | 9.8 | 2025-06-03 | In Audiocodes Mediapack MP-11x through 6.60A.369.002, a crafted POST request request may result in an unauthenticated remote user's ability to execute unauthor… |
CVE-2025-5508 | Low | 2.4 | 2025-06-03 | A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been rated as problematic. Affected by this issue is some unknown functionality of t… |
CVE-2025-5507 | Low | 2.4 | 2025-06-03 | A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been declared as problematic. Affected by this vulnerability is an unknown functiona… |
CVE-2025-25021 | High | 7.2 | 2025-06-03 | IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a privileged execute code in case ma… |
CVE-2025-5506 | Low | 2.4 | 2025-06-03 | A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been classified as problematic. Affected is an unknown function of the component NAT… |
CVE-2025-5505 | Low | 2.4 | 2025-06-03 | A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011 and classified as problematic. This issue affects some unknown processing of the file /boafr… |
CVE-2025-5420 | Low | 3.5 | 2025-06-02 | A vulnerability classified as problematic was found in juzaweb CMS up to 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-c… |
CVE-2025-5412 | Low | 3.5 | 2025-06-02 | A vulnerability classified as problematic has been found in Mist Community Edition up to 4.7.1. Affected is the function Login of the file src/mist/api/views.p… |
CVE-2025-5411 | Low | 3.5 | 2025-06-01 | A vulnerability was found in Mist Community Edition up to 4.7.1. It has been rated as problematic. This issue affects the function tag_resources of the file sr… |
CVE-2025-5407 | Low | 2.4 | 2025-06-01 | A vulnerability has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513 and classified as problematic. Affected by this vulnera… |
CVE-2025-5405 | Low | 3.5 | 2025-06-01 | A vulnerability, which was classified as problematic, has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This issue affec… |