2025 CVEs (page 107)
Page 107 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-26391 | Medium | 5.4 | 2025-11-18 | SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. Th… |
CVE-2025-13088 | High | 8.8 | 2025-11-18 | The Category and Product Woocommerce Tabs plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0. This is due to… |
CVE-2025-12962 | Medium | 6.4 | 2025-11-18 | The Local Syndication plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5a via the `url` parameter in t… |
CVE-2025-12961 | Medium | 4.3 | 2025-11-18 | The Download Panel plugin for WordPress is vulnerable to unauthorized settings modification due to a missing capability check on the 'wp_ajax_save_settings' AJ… |
CVE-2025-12937 | Medium | 6.5 | 2025-11-18 | The ACF Flexible Layouts Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'acf_flm_upda… |
CVE-2025-12827 | Medium | 4.3 | 2025-11-18 | The Top Friends plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3. This is due to missing nonce valida… |
CVE-2025-12823 | Medium | 6.4 | 2025-11-18 | The CSV to SortTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csv' shortcode in all versions up to, and including, 4.2 due to… |
CVE-2025-12775 | High | 8.8 | 2025-11-18 | The WP Dropzone plugin for WordPress is vulnerable to authenticated arbitrary file upload in all versions up to, and including, 1.1.0 via the `ajax_upload_hand… |
CVE-2025-12528 | High | 8.1 | 2025-11-18 | The Pie Forms for WP plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6 via the format_classic function. Thi… |
CVE-2025-12411 | High | 7.1 | 2025-11-18 | The Premmerce Wholesale Pricing for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'ID' parameter in versions up to, and including, 1… |
CVE-2025-12406 | Medium | 6.1 | 2025-11-18 | The Project Honey Pot Spam Trap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to mi… |
CVE-2025-12404 | Medium | 6.1 | 2025-11-18 | The Like-it plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect non… |
CVE-2025-12372 | Medium | 4.3 | 2025-11-18 | The Permalinks Cascade plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.2. This is due to the plugin not pro… |
CVE-2025-12173 | Medium | 4.3 | 2025-11-18 | The WP Admin Microblog plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.1. This is due to missing or… |
CVE-2025-12078 | Medium | 6.1 | 2025-11-18 | The ArtiBot Free Chat Bot for WebSites plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all versions up to, and includin… |
CVE-2025-11868 | Medium | 6.4 | 2025-11-18 | The everviz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `everviz` shortcode attributes in versions up to, and including, 1.1. Thi… |
CVE-2025-11620 | High | 7.2 | 2025-11-18 | The Multiple Roles per User plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mrpu_add_multiple… |
CVE-2025-8727 | High | 7.2 | 2025-11-18 | There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F. After logging into the BMC Web server, an attacker can use a specially… |
CVE-2025-8404 | Medium | 5.5 | 2025-11-18 | Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library. An authenticated attacker with access to the BMC exploit stack buffer via a cr… |
CVE-2025-8076 | High | 7.2 | 2025-11-18 | There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F. After logging into the BMC Web server, an attacker can use a specially… |
CVE-2025-11267 | Medium | 6.4 | 2025-11-18 | The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_veu_custom_css' parameter in all versions up to, a… |
CVE-2025-11265 | Medium | 6.4 | 2025-11-18 | The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vkExUnit_cta_url' and 'vkExUnit_cta_button_text' pa… |
CVE-2025-10089 | High | 7.7 | 2025-11-18 | Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S Setting Application all versions, MILCO… |
CVE-2025-7623 | Medium | 5.4 | 2025-11-18 | Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMAS… |
CVE-2025-12524 | Medium | 5.4 | 2025-11-18 | The Post Type Switcher plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.0 due to missing validation… |
CVE-2025-48593 | High | 8.0 | 2025-11-18 | In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution… |
CVE-2025-64734 | Low | 2.4 | 2025-11-18 | Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-s… |
CVE-2025-52578 | Medium | 5.7 | 2025-11-18 | Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access… |
CVE-2025-52457 | Medium | 5.7 | 2025-11-18 | Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially c… |
CVE-2025-12974 | High | 8.1 | 2025-11-18 | The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the legacy chunked upload mechanism in al… |
CVE-2025-8693 | High | 8.8 | 2025-11-18 | A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an a… |
CVE-2025-6599 | Medium | 5.3 | 2025-11-18 | An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker t… |
CVE-2025-12792 | Low | 3.2 | 2025-11-18 | The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged acces… |
CVE-2025-13325 | Medium | 6.3 | 2025-11-18 | A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollment_edit1.php. E… |
CVE-2025-13323 | High | 7.3 | 2025-11-18 | A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /listorder.php. Performing m… |
CVE-2025-13306 | Medium | 6.3 | 2025-11-18 | A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /boafrm/formD… |
CVE-2025-13230 | High | 8.8 | 2025-11-18 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2025-13229 | High | 8.8 | 2025-11-18 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2025-13228 | High | 8.8 | 2025-11-18 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2025-13227 | High | 8.8 | 2025-11-18 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2025-13226 | High | 8.8 | 2025-11-18 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2025-7711 | Medium | 5.4 | 2025-11-17 | The The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up… |
CVE-2025-36553 | High | 8.8 | 2025-11-17 | A buffer overflow vulnerability exists in the CvManager functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47… |
CVE-2025-36463 | High | 7.3 | 2025-11-17 | Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior… |
CVE-2025-36462 | High | 7.3 | 2025-11-17 | Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior… |
CVE-2025-36461 | High | 7.3 | 2025-11-17 | Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior… |
CVE-2025-36460 | High | 7.3 | 2025-11-17 | Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior… |
CVE-2025-32089 | High | 8.8 | 2025-11-17 | A buffer overflow vulnerability exists in the CvManager_SBI functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36… |
CVE-2025-31649 | High | 8.7 | 2025-11-17 | A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus… |
CVE-2025-31361 | High | 8.7 | 2025-11-17 | A privilege escalation vulnerability exists in the ControlVault WBDI Driver WBIO_USH_ADD_RECORD functionality of Dell ControlVault3 prior to 5.15.14.19 and Del… |
CVE-2025-13305 | High | 8.8 | 2025-11-17 | A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown processing of the file /b… |
CVE-2025-13304 | High | 8.8 | 2025-11-17 | A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of th… |
CVE-2025-13224 | High | 8.8 | 2025-11-17 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2025-13223 | High | 8.8 | 2025-11-17 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2025-64766 | Medium | 5.3 | 2025-11-17 | NixOS's Onlyoffice is a software suite that offers online and offline tools for document editing, collaboration, and management. In versions from 22.11 to befo… |
CVE-2025-13303 | Medium | 6.3 | 2025-11-17 | A vulnerability was determined in code-projects Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /search-edit.ph… |
CVE-2025-13302 | Medium | 4.7 | 2025-11-17 | A vulnerability was identified in code-projects Courier Management System 1.0. This affects an unknown part of the file /add-new-officer.php. Such manipulation… |
CVE-2025-36118 | High | 7.5 | 2025-11-17 | IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive information from device memory via a Security As… |
CVE-2025-13301 | High | 7.3 | 2025-11-17 | A vulnerability was found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected by this vulnerability is an unknown functionality of th… |
CVE-2025-13300 | High | 7.3 | 2025-11-17 | A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected is an unknown function of the file /settings/contr… |
CVE-2025-36357 | High | 8.0 | 2025-11-17 | IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker could send a speci… |
CVE-2025-36299 | Medium | 4.3 | 2025-11-17 | IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system. |
CVE-2025-13299 | High | 7.3 | 2025-11-17 | A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. This impacts an unknown function of the file /user/controller.php. E… |
CVE-2025-13298 | High | 7.3 | 2025-11-17 | A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. This affects an unknown function of the file /enrollment/cont… |
CVE-2025-63292 | Low | 3.5 | 2025-11-17 | Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution r1–r3 (firmware = 4.7.x), Freebox Mini 4K (firmware = 4.7.x)… |
CVE-2025-64758 | Medium | 4.8 | 2025-11-17 | @dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to… |
CVE-2025-64756 | High | 7.5 | 2025-11-17 | Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection… |
CVE-2025-64342 | | 2025-11-17 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing… | |
CVE-2025-58407 | High | 7.4 | 2025-11-17 | Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or w… |
CVE-2025-55059 | Medium | 4.8 | 2025-11-17 | CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') |
CVE-2025-55058 | Medium | 4.5 | 2025-11-17 | CWE-20 Improper Input Validation |
CVE-2025-55057 | Medium | 4.5 | 2025-11-17 | Multiple CWE-352 Cross-Site Request Forgery (CSRF) |
CVE-2025-55056 | Medium | 4.8 | 2025-11-17 | Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') |
CVE-2025-55055 | Medium | 6.8 | 2025-11-17 | CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') |
CVE-2025-34323 | High | 7.8 | 2025-11-17 | Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration and group-writable ap… |
CVE-2025-34322 | High | 7.2 | 2025-11-17 | Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature… |
CVE-2025-13297 | High | 7.3 | 2025-11-17 | A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of… |
CVE-2025-63918 | Medium | 6.2 | 2025-11-17 | PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrar… |
CVE-2025-63917 | High | 7.1 | 2025-11-17 | PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. The application uses .NET's X… |
CVE-2025-62519 | High | 7.2 | 2025-11-17 | phpMyFAQ is an open source FAQ web application. Prior to version 4.0.14, an authenticated SQL injection vulnerability in the main configuration update function… |
CVE-2025-58410 | High | 7.5 | 2025-11-17 | Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. T… |
CVE-2025-13319 | High | 8.8 | 2025-11-17 | An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted… |
CVE-2025-13291 | High | 7.3 | 2025-11-17 | A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirm_order.php. Performing a m… |
CVE-2025-13290 | Medium | 6.3 | 2025-11-17 | A vulnerability has been found in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /saveorder.ph… |
CVE-2025-13193 | Medium | 5.5 | 2025-11-17 | A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible for unprivileged users… |
CVE-2025-65083 | Low | 3.2 | 2025-11-17 | GoSign Desktop through 2.4.1 disables TLS certificate validation when configured to use a proxy server. This can be problematic if the GoSign Desktop user sele… |
CVE-2025-64046 | Medium | 6.1 | 2025-11-17 | OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php. |
CVE-2025-63916 | High | 8.1 | 2025-11-17 | MyScreenTools v2.2.1.0 contains a critical OS command injection vulnerability in the GIF compression tool. The application fails to properly sanitize user-supp… |
CVE-2025-63748 | High | 8.8 | 2025-11-17 | QaTraq 6.9.2 allows authenticated users to upload arbitrary files via the "Add Attachment" feature in the "Test Script" module. The application fails to restri… |
CVE-2025-63747 | Critical | 9.8 | 2025-11-17 | QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login… |
CVE-2025-63708 | Medium | 6.1 | 2025-11-17 | Cross-Site Scripting (XSS) vulnerability exists in SourceCodester AI Font Matcher (nid=18425, 2025-10-10) that allows remote attackers to execute arbitrary Jav… |
CVE-2025-13289 | Medium | 6.3 | 2025-11-17 | A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /Teach… |
CVE-2025-13288 | High | 8.8 | 2025-11-17 | A security vulnerability has been detected in Tenda CH22 1.0.0.1. This impacts the function fromPptpUserSetting of the file /goform/PPTPUserSetting. The manipu… |
CVE-2025-4321 | | 2025-11-17 | In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP packets, only hard reset will bring the dev… | |
CVE-2025-13287 | Medium | 6.3 | 2025-11-17 | A weakness has been identified in itsourcecode Online Voting System 1.0. This affects an unknown function of the file /index.php?page=categories. Executing man… |
CVE-2025-13286 | Medium | 6.3 | 2025-11-17 | A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_use… |
CVE-2025-13285 | High | 7.3 | 2025-11-17 | A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation… |
CVE-2025-13280 | High | 7.3 | 2025-11-17 | A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Lo… |
CVE-2025-13279 | Medium | 6.3 | 2025-11-17 | A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Perfor… |
CVE-2025-13278 | Medium | 6.3 | 2025-11-17 | A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrowed_book_search.php… |