2025 CVEs (page 108)
Page 108 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-40936 | High | 7.8 | 2025-11-17 | A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Femap (All versions < V2512.0003), Solid Ed… |
CVE-2025-40834 | Medium | 5.7 | 2025-11-17 | A vulnerability has been identified in Mendix RichText (All versions >= V4.0.0 < V4.6.1). Affected widget does not properly neutralize the input. This could al… |
CVE-2025-13277 | High | 7.3 | 2025-11-17 | A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipula… |
CVE-2025-11681 | Medium | 6.5 | 2025-11-17 | Denial-of-service condition in M-Files Server versions before 25.11.15392.1, before 25.2 LTS SR2 and before 25.8 LTS SR2 allows an authenticated user to cause… |
CVE-2025-13276 | High | 7.3 | 2025-11-17 | A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the… |
CVE-2025-13275 | Medium | 4.7 | 2025-11-17 | A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of th… |
CVE-2025-13274 | Medium | 6.3 | 2025-11-17 | A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.p… |
CVE-2025-13273 | Medium | 6.3 | 2025-11-17 | A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2025-13272 | High | 7.3 | 2025-11-17 | A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /manage_course.php. Such man… |
CVE-2025-13271 | High | 7.3 | 2025-11-17 | A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. Thi… |
CVE-2025-65073 | High | 7.5 | 2025-11-17 | OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorizatio… |
CVE-2025-13270 | Medium | 6.3 | 2025-11-17 | A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=save_course. Th… |
CVE-2025-13269 | Medium | 6.3 | 2025-11-17 | A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action… |
CVE-2025-13268 | Medium | 6.3 | 2025-11-17 | A flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/d… |
CVE-2025-13267 | Medium | 6.3 | 2025-11-17 | A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0. Impacted is an unknown function of the file /success.php. Perf… |
CVE-2025-13165 | High | 7.5 | 2025-11-17 | EasyFlow GP developed by Digiwin has a Denial of service vulnerability, allowing unauthenticated remote attackers to send specific requests that result in deni… |
CVE-2025-13164 | Medium | 4.9 | 2025-11-17 | EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext credential… |
CVE-2025-13163 | Medium | 4.9 | 2025-11-17 | EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database a… |
CVE-2025-9501 | Critical | 9.0 | 2025-11-17 | The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc function, allowing unauthenticated users to e… |
CVE-2025-60022 | Medium | 4.8 | 2025-11-17 | Improper certificate validation vulnerability exists in 'デジラアプリ' App for iOS prior to ver.80.10.00. If this vulnerability is exploited, a man-in-the-middle att… |
CVE-2025-13266 | Medium | 5.3 | 2025-11-17 | A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike… |
CVE-2025-13265 | Medium | 6.3 | 2025-11-17 | A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/ser… |
CVE-2025-13264 | Medium | 6.3 | 2025-11-17 | A security flaw has been discovered in SourceCodester Online Magazine Management System 1.0. This affects an unknown part of the file /view_magazine.php. The m… |
CVE-2025-13263 | Medium | 6.3 | 2025-11-17 | A vulnerability was identified in SourceCodester Online Magazine Management System 1.0. Affected by this issue is some unknown functionality of the file /categ… |
CVE-2025-13262 | High | 7.3 | 2025-11-17 | A vulnerability was determined in lsfusion platform up to 6.1. Affected by this vulnerability is the function UploadFileRequestHandler of the file platform/web… |
CVE-2025-13284 | Critical | 9.8 | 2025-11-17 | ThinPLUS developed by ThinPLUS has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute… |
CVE-2025-13283 | High | 7.1 | 2025-11-17 | TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Copy and Paste vulnerability. The application sets up a simple local web server and provi… |
CVE-2025-13282 | High | 8.1 | 2025-11-17 | TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs… |
CVE-2025-13261 | Medium | 5.3 | 2025-11-17 | A vulnerability was found in lsfusion platform up to 6.1. Affected is the function DownloadFileRequestHandler of the file web-client/src/main/java/lsfusion/htt… |
CVE-2025-13260 | Medium | 6.3 | 2025-11-17 | A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/edit_product.php. Such m… |
CVE-2025-13259 | Medium | 6.3 | 2025-11-17 | A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit_unit.php. This manipulation… |
CVE-2025-13258 | High | 8.8 | 2025-11-17 | A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipulation of… |
CVE-2025-10460 | | 2025-11-17 | A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, allows an unautho… | |
CVE-2025-13257 | High | 7.3 | 2025-11-17 | A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user… |
CVE-2025-13256 | Medium | 6.3 | 2025-11-17 | A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrow.php. Executing a ma… |
CVE-2025-13255 | Medium | 6.3 | 2025-11-17 | A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some unknown processing of the file /book_searc… |
CVE-2025-13254 | Medium | 6.3 | 2025-11-17 | A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /add_member.php. Su… |
CVE-2025-13253 | Medium | 6.3 | 2025-11-17 | A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /add_librarian.php. This manip… |
CVE-2025-13252 | High | 7.3 | 2025-11-16 | A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functiona… |
CVE-2025-13251 | Medium | 6.3 | 2025-11-16 | A flaw has been found in WeiYe-Jing datax-web up to 2.1.2. Affected is an unknown function. Executing manipulation can lead to sql injection. The attack may be… |
CVE-2025-13250 | Medium | 6.3 | 2025-11-16 | A vulnerability was detected in WeiYe-Jing datax-web up to 2.1.2. This impacts the function remove/update/pause/start/triggerJob of the component Job Handler… |
CVE-2025-13249 | Medium | 6.3 | 2025-11-16 | A security vulnerability has been detected in Jiusi OA up to 20251102. This affects an unknown function of the file /OfficeServer?isAjaxDownloadTemplate=false… |
CVE-2025-13248 | High | 7.3 | 2025-11-16 | A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /ph… |
CVE-2025-13247 | High | 7.3 | 2025-11-16 | A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.p… |
CVE-2025-13246 | Medium | 6.3 | 2025-11-16 | A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationF… |
CVE-2025-13245 | Low | 3.5 | 2025-11-16 | A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such… |
CVE-2025-13244 | Medium | 4.3 | 2025-11-16 | A vulnerability was determined in code-projects Student Information System 2.0. The affected element is an unknown function of the file /register.php. This man… |
CVE-2025-13243 | Medium | 6.3 | 2025-11-16 | A vulnerability was found in code-projects Student Information System 2.0. Impacted is an unknown function of the file /editprofile.php. The manipulation resul… |
CVE-2025-13242 | High | 7.3 | 2025-11-16 | A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manip… |
CVE-2025-13241 | High | 7.3 | 2025-11-16 | A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation o… |
CVE-2025-13240 | High | 7.3 | 2025-11-16 | A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulatio… |
CVE-2025-13239 | Medium | 4.3 | 2025-11-16 | A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. Affected by this issue is some unknown f… |
CVE-2025-13238 | Medium | 6.3 | 2025-11-16 | A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit… |
CVE-2025-13237 | High | 7.3 | 2025-11-16 | A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipul… |
CVE-2025-12482 | High | 7.5 | 2025-11-16 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the ‘search’ parameter in all versions up to… |
CVE-2025-13236 | Medium | 6.3 | 2025-11-16 | A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edi… |
CVE-2025-13235 | High | 7.3 | 2025-11-16 | A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipu… |
CVE-2025-13234 | Medium | 6.3 | 2025-11-16 | A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Perfor… |
CVE-2025-13233 | High | 7.3 | 2025-11-16 | A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-ite… |
CVE-2025-13232 | Low | 3.5 | 2025-11-16 | A flaw has been found in projectsend up to r1720. Impacted is an unknown function of the component File Editor/Custom Download Aliases. This manipulation cause… |
CVE-2025-13221 | Medium | 5.3 | 2025-11-15 | A weakness has been identified in Intelbras UnniTI 24.07.11. The affected element is an unknown function of the file /xml/sistema/usuarios.xml. Executing manip… |
CVE-2025-13210 | Medium | 4.7 | 2025-11-15 | A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index… |
CVE-2025-13209 | Medium | 6.3 | 2025-11-15 | A weakness has been identified in bestfeng oa_git_free up to 9.5. This affects the function updateWriteBack of the file yimioa-oa9.5\server\c-flow\src\main\jav… |
CVE-2025-13208 | Medium | 6.3 | 2025-11-15 | A security flaw has been discovered in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. The impacted element is an unknown function o… |
CVE-2025-13203 | High | 7.3 | 2025-11-15 | A weakness has been identified in code-projects Simple Cafe Ordering System 1.0. This vulnerability affects unknown code of the file /addmem.php. Executing man… |
CVE-2025-13202 | Low | 3.5 | 2025-11-15 | A security flaw has been discovered in code-projects Simple Cafe Ordering System 1.0. This affects an unknown part of the file /add_to_cart. Performing manipul… |
CVE-2025-13201 | High | 7.3 | 2025-11-15 | A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /login.php. S… |
CVE-2025-13200 | Medium | 5.3 | 2025-11-15 | A vulnerability was determined in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality. This manipulation caus… |
CVE-2025-13199 | Medium | 5.3 | 2025-11-15 | A vulnerability was found in code-projects Email Logging Interface 2.0. Affected is an unknown function of the file signup.cpp. The manipulation of the argumen… |
CVE-2025-13198 | Medium | 4.7 | 2025-11-15 | A vulnerability has been found in DouPHP up to 1.8 Release 20251022. This impacts an unknown function of the file upload/include/file.class.php. The manipulati… |
CVE-2025-12983 | Low | 3.5 | 2025-11-15 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allow… |
CVE-2025-7736 | Low | 3.1 | 2025-11-15 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allow… |
CVE-2025-7000 | Medium | 4.3 | 2025-11-15 | An issue has been discovered in GitLab CE/EE affecting all versions from 17.6 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that, under specific… |
CVE-2025-6945 | Low | 3.5 | 2025-11-15 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed… |
CVE-2025-6171 | Medium | 5.3 | 2025-11-15 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allow… |
CVE-2025-2615 | Medium | 4.3 | 2025-11-15 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that could have all… |
CVE-2025-11990 | Low | 3.1 | 2025-11-15 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated use… |
CVE-2025-11865 | Medium | 4.3 | 2025-11-15 | An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that, under certain circum… |
CVE-2025-13191 | High | 8.8 | 2025-11-15 | A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. This issue affects the function soapcgi_main of the file /soap.cgi. This manipulation causes s… |
CVE-2025-13190 | High | 8.8 | 2025-11-15 | A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. This vulnerability affects the function scandir_main of the file /portal/__ajax_exporer.sgi. The ma… |
CVE-2025-12849 | Medium | 5.3 | 2025-11-15 | The Contest Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 28.0.2. This is due to the plugin register… |
CVE-2025-8994 | Medium | 6.5 | 2025-11-15 | The Project Management, Team Collaboration, Kanban Board, Gantt Charts, Task Manager and More – WP Project Manager plugin for WordPress is vulnerable to time-b… |
CVE-2025-13189 | High | 8.8 | 2025-11-15 | A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta. This affects the function genacgi_main of the file gena.cgi. The manipulation of the argument… |
CVE-2025-12847 | Medium | 4.3 | 2025-11-15 | The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to unauthorized arbitrary media attachment… |
CVE-2025-12494 | Medium | 4.3 | 2025-11-15 | The Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the aj… |
CVE-2025-12182 | Medium | 4.3 | 2025-11-15 | The Qi Blocks plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `resize_image_callback()` function in all vers… |
CVE-2025-9317 | High | 8.4 | 2025-11-15 | The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache files to reverse engineer Edge users' a… |
CVE-2025-8386 | Medium | 6.9 | 2025-11-15 | The vulnerability, if exploited, could allow an authenticated miscreant (with privilege of "aaConfigTools") to tamper with App Objects' help files and persis… |
CVE-2025-64309 | High | 7.4 | 2025-11-15 | The affected product discloses device telemetry, configuration, and sensitive information via WebSocket traffic to unauthenticated users when they connect to a… |
CVE-2025-64308 | Medium | 6.5 | 2025-11-15 | The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal. |
CVE-2025-64307 | Medium | 6.5 | 2025-11-15 | The Brightpick Internal Logic Control web interface is accessible without requiring user authentication. An unauthorized user could exploit this interface to m… |
CVE-2025-62765 | High | 7.5 | 2025-11-15 | General Industrial Controls Lynx+ Gateway is vulnerable to a cleartext transmission vulnerability that could allow an attacker to observe network traffic to o… |
CVE-2025-59780 | High | 7.5 | 2025-11-15 | General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to send GET requests to… |
CVE-2025-58083 | Critical | 10.0 | 2025-11-15 | General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to remotely reset the d… |
CVE-2025-55034 | High | 8.2 | 2025-11-15 | General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may allow an attacker to execute a brute-force att… |
CVE-2025-13188 | Critical | 9.8 | 2025-11-14 | A vulnerability was detected in D-Link DIR-816L 2_06_b09_beta. Affected by this vulnerability is the function authenticationcgi_main of the file /authenticatio… |
CVE-2025-13187 | Medium | 5.3 | 2025-11-14 | A security vulnerability has been detected in Intelbras ICIP 2.0.20. Affected is an unknown function of the file /xml/sistema/acessodeusuario.xml. Such manipul… |
CVE-2025-13186 | Low | 2.4 | 2025-11-14 | A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0. This impacts an unknown function of the file… |
CVE-2025-64084 | Medium | 5.4 | 2025-11-14 | An authenticated SQL injection vulnerability exists in Cloudlog 2.7.5 and earlier. The vucc_details_ajax function in application/controllers/Awards.php does no… |
CVE-2025-63891 | High | 7.5 | 2025-11-14 | Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose ful… |