CWE-94 · Code Injection (page 25)
Page 25 of 69 — CVEs classified under CWE-94, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-2214 | Low | 3.5 | 2025-03-12 | A vulnerability was found in Microweber 2.0.19. It has been rated as problematic. This issue affects some unknown processing of the file userfiles/modules/sett… |
CVE-2025-2213 | Low | 2.4 | 2025-03-11 | A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been declared as problematic. This vulnerability affects unknown code of the file /wlan… |
CVE-2025-2212 | Low | 2.4 | 2025-03-11 | A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been classified as problematic. This affects an unknown part of the file /RgSwInfo.asp… |
CVE-2025-2211 | Low | 2.4 | 2025-03-11 | A vulnerability was found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /… |
CVE-2025-2210 | Low | 2.4 | 2025-03-11 | A vulnerability has been found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-2209 | Low | 2.4 | 2025-03-11 | A vulnerability, which was classified as problematic, was found in aitangbao springboot-manager 3.0. Affected is an unknown function of the file /sysDict/add… |
CVE-2025-2208 | Low | 2.4 | 2025-03-11 | A vulnerability, which was classified as problematic, has been found in aitangbao springboot-manager 3.0. This issue affects some unknown processing of the fil… |
CVE-2025-2207 | Low | 2.4 | 2025-03-11 | A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0. This vulnerability affects unknown code of the file /sys/dept. The man… |
CVE-2025-2206 | Low | 2.4 | 2025-03-11 | A vulnerability classified as problematic has been found in aitangbao springboot-manager 3.0. This affects an unknown part of the file /sys/permission. The man… |
CVE-2025-25680 | High | 7.7 | 2025-03-11 | LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuya_ipc_direct_connect function of the anyka_ipc process. The vulnerabil… |
CVE-2025-2196 | Low | 3.5 | 2025-03-11 | A vulnerability was found in MRCMS 3.1.2. It has been declared as problematic. Affected by this vulnerability is the function upload of the file /admin/file/up… |
CVE-2025-2195 | Low | 3.5 | 2025-03-11 | A vulnerability was found in MRCMS 3.1.2. It has been classified as problematic. Affected is the function rename of the file /admin/file/rename.do of the compo… |
CVE-2025-2194 | Low | 3.5 | 2025-03-11 | A vulnerability was found in MRCMS 3.1.2 and classified as problematic. This issue affects the function list of the file /admin/file/list.do of the component o… |
CVE-2025-2191 | Low | 2.4 | 2025-03-11 | A vulnerability, which was classified as problematic, has been found in Claro A7600-A1 RNR4-A72T-2x16_v2110403_CLA_32_160817. Affected by this issue is some un… |
CVE-2025-1550 | Critical | 9.8 | 2025-03-11 | The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By al… |
CVE-2025-2169 | High | 7.3 | 2025-03-11 | The The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and includin… |
CVE-2025-26936 | Critical | 10.0 | 2025-03-10 | Improper Control of Generation of Code ('Code Injection') vulnerability in FRESHFACE Fresh Framework fresh-framework allows Code Injection.This issue affects F… |
CVE-2025-1497 | Critical | 9.8 | 2025-03-10 | A vulnerability, that could result in Remote Code Execution (RCE), has been found in PlotAI. Lack of validation of LLM-generated output allows attacker to exec… |
CVE-2025-2133 | Low | 2.4 | 2025-03-10 | A vulnerability classified as problematic was found in ftcms 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/index.php/news/… |
CVE-2025-2131 | Low | 2.4 | 2025-03-09 | A vulnerability was found in dayrui XunRuiCMS up to 4.6.3. It has been rated as problematic. This issue affects some unknown processing of the component Friend… |
CVE-2025-2130 | Low | 3.5 | 2025-03-09 | A vulnerability was found in OpenXE up to 1.12. It has been declared as problematic. This vulnerability affects unknown code of the component Ticket Bearbeiten… |
CVE-2025-2127 | Medium | 4.3 | 2025-03-09 | A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as problematic. Affected is an unknown function of the file /exte… |
CVE-2025-2124 | Low | 3.5 | 2025-03-09 | A vulnerability, which was classified as problematic, was found in Control iD RH iD 25.2.25.0. This affects an unknown part of the file /v2/customerdb/person.s… |
CVE-2025-2123 | Low | 3.5 | 2025-03-09 | A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function get_var of the file /contri… |
CVE-2024-13895 | Medium | 4.3 | 2025-03-08 | The The Code Snippets CPT plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.1.0. This is due to the s… |
CVE-2024-13890 | High | 7.2 | 2025-03-08 | The Allow PHP Execute plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0. This is due to allowing PHP code to b… |
CVE-2024-42733 | Critical | 9.8 | 2025-03-07 | An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script to the UNC path input |
CVE-2024-53693 | High | 7.1 | 2025-03-07 | An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited… |
CVE-2024-50405 | Medium | 5.5 | 2025-03-07 | An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited… |
CVE-2025-2087 | Low | 3.5 | 2025-03-07 | A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /adm… |
CVE-2025-2086 | Low | 3.5 | 2025-03-07 | A vulnerability classified as problematic was found in StarSea99 starsea-mall 1.0. This vulnerability affects unknown code of the file /admin/indexConfigs/upda… |
CVE-2025-2085 | Low | 3.5 | 2025-03-07 | A vulnerability classified as problematic has been found in StarSea99 starsea-mall 1.0. This affects an unknown part of the file /admin/carousels/save. The man… |
CVE-2025-2084 | Low | 3.5 | 2025-03-07 | A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been classified as problematic. Affected is an unknown func… |
CVE-2025-2061 | Medium | 4.3 | 2025-03-07 | A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code o… |
CVE-2025-2049 | Low | 3.5 | 2025-03-06 | A vulnerability classified as problematic has been found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file AB+.php. The manip… |
CVE-2025-2047 | Low | 3.5 | 2025-03-06 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /sea… |
CVE-2024-13902 | Low | 2.4 | 2025-03-06 | A vulnerability, which was classified as problematic, was found in huang-yk student-manage 1.0. This affects an unknown part of the component Edit a Student In… |
CVE-2025-25362 | Critical | 9.8 | 2025-03-05 | A Server-Side Template Injection (SSTI) vulnerability in Spacy-LLM v0.7.2 allows attackers to execute arbitrary code via injecting a crafted payload into the t… |
CVE-2024-13815 | Medium | 6.5 | 2025-03-05 | The The Listingo theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.2.7. This is due to the software al… |
CVE-2025-27678 | Critical | 9.8 | 2025-03-05 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001. |
CVE-2025-27657 | Critical | 9.8 | 2025-03-05 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Code Execution V-2023-008. |
CVE-2025-1967 | Low | 3.5 | 2025-03-05 | A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown… |
CVE-2025-1957 | Low | 3.5 | 2025-03-04 | A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /BBfile/Blood/o… |
CVE-2025-1955 | Low | 3.5 | 2025-03-04 | A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic. Affected by this issue is some unknow… |
CVE-2025-1949 | Medium | 4.3 | 2025-03-04 | A vulnerability, which was classified as problematic, has been found in ZZCMS 2025. This issue affects some unknown processing of the file /3/ucenter_api/code/… |
CVE-2025-26182 | Medium | 6.5 | 2025-03-04 | An issue in xxyopen novel plus v.4.4.0 and before allows a remote attacker to execute arbitrary code via the PageController.java file |
CVE-2024-50707 | Critical | 10.0 | 2025-03-04 | Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-… |
CVE-2024-50704 | Critical | 10.0 | 2025-03-04 | Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially craf… |
CVE-2025-1905 | Low | 3.5 | 2025-03-04 | A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file empl… |
CVE-2025-1904 | Low | 3.5 | 2025-03-04 | A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by this issue is some unknown functionali… |
CVE-2025-1892 | Low | 2.4 | 2025-03-04 | A vulnerability was found in shishuocms 1.1. It has been classified as problematic. Affected is an unknown function of the file /manage/folder/add.json of the… |
CVE-2025-26970 | Critical | 10.0 | 2025-03-03 | Improper Control of Generation of Code ('Code Injection') vulnerability in FRESHFACE Ark Theme Core ark-core allows Code Injection.This issue affects Ark Theme… |
CVE-2024-53386 | Medium | 4.9 | 2025-03-03 | Stage.js through 0.8.10 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because doc… |
CVE-2024-53382 | Medium | 4.9 | 2025-03-03 | Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript)… |
CVE-2025-1842 | Medium | 4.3 | 2025-03-03 | A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the f… |
CVE-2025-1830 | Low | 2.4 | 2025-03-02 | A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as problematic. This issue affects some unknown processing of the component Customer Inf… |
CVE-2025-1817 | Low | 2.4 | 2025-03-02 | A vulnerability classified as problematic was found in Mini-Tmall up to 20250211. This vulnerability affects unknown code of the file /admin of the component A… |
CVE-2025-1810 | Medium | 4.3 | 2025-03-02 | A vulnerability was found in Pixsoft Vivaz 6.0.11. It has been classified as problematic. Affected is an unknown function of the file /servlet?act=login&submit… |
CVE-2024-13806 | Medium | 6.5 | 2025-03-01 | The The Authors List plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0.6. This is due to the softwa… |
CVE-2025-27554 | Critical | 9.9 | 2025-03-01 | ToDesktop before 2024-10-03, as used by Cursor before 2024-10-03 and other applications, allows remote attackers to execute arbitrary commands on the build ser… |
CVE-2025-26264 | High | 8.8 | 2025-02-27 | GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a Remote Code Execution (RCE) vulnerability within its Notification Settings fea… |
CVE-2024-53944 | Critical | 9.8 | 2025-02-27 | An issue was discovered on Tuoshi/Dionlink LT15D 4G Wi-Fi devices through M7628NNxlSPv2xUI_v1.0.1802.10.08_P4 and LT21B devices through M7628xUSAxUIv2_v1.0.148… |
CVE-2025-1742 | Medium | 4.3 | 2025-02-27 | A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is some unknown functionality of the file… |
CVE-2024-9285 | Medium | 4.3 | 2025-02-27 | A vulnerability was found in Tu Yafeng Via Browser up to 5.9.0 on Android. It has been rated as problematic. This issue affects some unknown processing of the… |
CVE-2025-25789 | Critical | 9.8 | 2025-02-26 | FoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the index() method at \controller\Sitemap.php. |
CVE-2024-52925 | Medium | 6.8 | 2025-02-26 | In OPSWAT MetaDefender Kiosk before 4.7.0, arbitrary code execution can be performed by an attacker via the MD Kiosk Unlock Device feature for software encrypt… |
CVE-2024-47051 | Critical | 9.1 | 2025-02-26 | This advisory addresses two critical security vulnerabilities present in Mautic versions before 5.2.3. These vulnerabilities could be exploited by authenticate… |
CVE-2025-1618 | Medium | 4.3 | 2025-02-24 | A vulnerability has been found in vTiger CRM 6.4.0/6.5.0 and classified as problematic. This vulnerability affects unknown code of the file /modules/Mobile/ind… |
CVE-2025-1617 | Low | 2.4 | 2025-02-24 | A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. Th… |
CVE-2025-1615 | Low | 2.4 | 2025-02-24 | A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-1614 | Low | 2.4 | 2025-02-24 | A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected is an unknown function of the file /goform/portForwa… |
CVE-2025-1613 | Low | 2.4 | 2025-02-24 | A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects some unknown processing of the file /go… |
CVE-2025-1612 | Low | 3.5 | 2025-02-24 | A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unknown code of the file wireless5g_basic… |
CVE-2025-1597 | Low | 3.5 | 2025-02-23 | A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been classified as problematic. Affected is an unknown function of the… |
CVE-2025-1592 | Low | 2.4 | 2025-02-23 | A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown funct… |
CVE-2025-1591 | Low | 2.4 | 2025-02-23 | A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown f… |
CVE-2025-1589 | Medium | 4.3 | 2025-02-23 | A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /regist… |
CVE-2025-1586 | Low | 3.5 | 2025-02-23 | A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /Blo… |
CVE-2025-1585 | Low | 2.4 | 2025-02-23 | A vulnerability, which was classified as problematic, has been found in otale tale up to 2.0.5. This issue affects the function OptionsService of the file src/… |
CVE-2025-1579 | Low | 2.4 | 2025-02-23 | A vulnerability was found in code-projects Blood Bank System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/u… |
CVE-2025-1577 | Low | 3.5 | 2025-02-23 | A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by this issue is some unknown functionali… |
CVE-2025-1553 | Low | 3.5 | 2025-02-22 | A vulnerability was found in pankajindevops scale up to 3633544a00245d3df88b6d13d9b3dd0f411be7f6. It has been classified as problematic. Affected is an unknown… |
CVE-2025-1510 | High | 7.3 | 2025-02-22 | The The Custom Post Type Date Archives plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.7.1. This is… |
CVE-2025-1509 | High | 7.3 | 2025-02-22 | The The Show Me The Cookies plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0. This is due to the s… |
CVE-2019-8900 | Medium | 6.8 | 2025-02-21 | A vulnerability in the SecureROM of some Apple devices can be exploited by an unauthenticated local attacker to execute arbitrary code upon booting those devic… |
CVE-2025-26014 | Critical | 9.8 | 2025-02-21 | A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter. |
CVE-2025-25507 | Medium | 6.5 | 2025-02-21 | There is a RCE vulnerability in Tenda AC6 15.03.05.16_multi. In the formexeCommand function, the parameter cmdinput will cause remote command execution. |
CVE-2025-1548 | Low | 3.5 | 2025-02-21 | A vulnerability was found in iteachyou Dreamer CMS 4.1.3. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/archi… |
CVE-2024-13900 | Medium | 4.1 | 2025-02-21 | The Head, Footer and Post Injections plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.3.0. This makes it possib… |
CVE-2025-25675 | Critical | 9.8 | 2025-02-20 | Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter fr… |
CVE-2024-54756 | Critical | 9.8 | 2025-02-20 | A remote code execution (RCE) vulnerability in the ZScript function of ZDoom Team GZDoom v4.13.1 allows attackers to execute arbitrary code via supplying a cra… |
CVE-2025-24893 | Critical | 9.8 | 2025-02-20 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution… |
CVE-2025-0161 | High | 7.8 | 2025-02-20 | IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on… |
CVE-2023-51331 | Medium | 6.5 | 2025-02-20 | PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exis… |
CVE-2023-51324 | Medium | 6.5 | 2025-02-20 | PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exi… |
CVE-2023-51320 | Medium | 5.3 | 2025-02-20 | PHPJabbers Night Club Booking Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exi… |
CVE-2023-51317 | Medium | 6.5 | 2025-02-20 | PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms… |
CVE-2024-57401 | Critical | 9.8 | 2025-02-20 | SQL Injection vulnerability in Uniclare Student portal v.2 and before allows a remote attacker to execute arbitrary code via the Forgot Password function. |
CVE-2023-51313 | High | 8.8 | 2025-02-20 | PHPJabbers Restaurant Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exist… |
CVE-2024-13792 | High | 7.3 | 2025-02-20 | The WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including… |