2025 CVEs (page 134)
Page 134 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-9978 | Medium | 6.8 | 2025-10-24 | The Jeg Kit for Elementor WordPress plugin before 2.7.0 does not sanitize SVG file contents when uploaded via xmlrpc.php, leading to a cross site scripting vu… |
CVE-2025-9158 | | 2025-10-24 | The Request Tracker software is vulnerable to a Stored XSS vulnerability in calendar invitation parsing feature, which displays invitation data without HTML sa… | |
CVE-2025-61931 | Medium | 5.4 | 2025-10-24 | Pleasanter contains a stored cross-site scripting vulnerability in Body, Description and Comments, which allows an attacker to execute an arbitrary script in a… |
CVE-2025-58070 | Medium | 6.1 | 2025-10-24 | Pleasanter contains a stored cross-site scripting vulnerability in Preview for Attachments, which allows an attacker to execute an arbitrary script in a logged… |
CVE-2025-10874 | Medium | 5.5 | 2025-10-24 | The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used… |
CVE-2025-10723 | Low | 2.7 | 2025-10-24 | The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate paths passed to function/s, allowing any… |
CVE-2025-7730 | Medium | 6.4 | 2025-10-23 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter in all versions up to, and including, 5… |
CVE-2025-62254 | High | 7.5 | 2025-10-23 | The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 through 2023… |
CVE-2025-60023 | Medium | 4.0 | 2025-10-23 | A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote atta… |
CVE-2025-59776 | Medium | 4.0 | 2025-10-23 | A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote atta… |
CVE-2025-58429 | High | 7.5 | 2025-10-23 | A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote atta… |
CVE-2025-62688 | High | 7.1 | 2025-10-23 | An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allo… |
CVE-2025-62498 | High | 8.8 | 2025-10-23 | A relative path traversal (ZipSlip) vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker who ca… |
CVE-2025-61977 | High | 7.0 | 2025-10-23 | A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allo… |
CVE-2025-61934 | Critical | 10.0 | 2025-10-23 | A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthentica… |
CVE-2025-59503 | Critical | 10.0 | 2025-10-23 | Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network. |
CVE-2025-59500 | High | 7.7 | 2025-10-23 | Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network. |
CVE-2025-59273 | High | 7.3 | 2025-10-23 | Improper access control in Azure Event Grid allows an unauthorized attacker to elevate privileges over a network. |
CVE-2025-58456 | Medium | 6.8 | 2025-10-23 | A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote… |
CVE-2025-58078 | High | 7.5 | 2025-10-23 | A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote… |
CVE-2025-12100 | High | 7.8 | 2025-10-23 | Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1… |
CVE-2025-62517 | Medium | 5.9 | 2025-10-23 | Rollbar.js offers error tracking and logging from Javascript to Rollbar. In versions before 2.26.5 and from 3.0.0-alpha1 to before 3.0.0-beta5, there is a prot… |
CVE-2025-62236 | Medium | 5.3 | 2025-10-23 | The Frontier Airlines website has a publicly available endpoint that validates if an email addresses is associated with an account. An unauthenticated, remote… |
CVE-2025-58428 | Critical | 9.9 | 2025-10-23 | The TLS4B ATG system's SOAP-based interface is vulnerable due to its accessibility through the web services handler. This vulnerability enables remote attacker… |
CVE-2025-57848 | Medium | 6.4 | 2025-10-23 | A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from the /etc/passwd file being created wit… |
CVE-2025-55067 | High | 7.1 | 2025-10-23 | The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038… |
CVE-2025-54966 | Medium | 4.3 | 2025-10-23 | An issue was discovered in BAE SOCET GXP before 4.6.0.2. Some endpoints on the SOCET GXP Job Status Service may return sensitive information in certain situati… |
CVE-2025-54964 | High | 8.4 | 2025-10-23 | An issue was discovered in BAE SOCET GXP before 4.6.0.2. An attacker with the ability to interact with the GXP Job Service may inject arbitrary executables. If… |
CVE-2025-54963 | Medium | 6.5 | 2025-10-23 | An issue was discovered in BAE SOCET GXP before 4.6.0.2. An attacker with the ability to interact with the GXP Job Service may submit a crafted job request tha… |
CVE-2025-12044 | High | 7.5 | 2025-10-23 | Vault and Vault Enterprise (“Vault”) are vulnerable to an unauthenticated denial of service when processing JSON payloads. This occurs due to a regression from… |
CVE-2025-6980 | High | 7.5 | 2025-10-23 | Captive Portal can expose sensitive information |
CVE-2025-6979 | High | 8.8 | 2025-10-23 | Captive Portal can allow authentication bypass |
CVE-2025-6978 | High | 7.2 | 2025-10-23 | Diagnostics command injection vulnerability |
CVE-2025-62255 | Medium | 6.1 | 2025-10-23 | Self Cross-site scripting (XSS) vulnerability on the edit Knowledge Base article page in Liferay Portal 7.4.0 through 7.4.3.101, and older unsupported versions… |
CVE-2025-60859 | Medium | 6.1 | 2025-10-23 | Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted c_id parameter in bbs/view_com… |
CVE-2025-60837 | Medium | 6.1 | 2025-10-23 | A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's browser via a c… |
CVE-2025-54808 | High | 7.8 | 2025-10-23 | Oxford Nanopore Technologies' MinKNOW software at or prior to version 24.11 stores authentication tokens in a file located in the system's temporary directory… |
CVE-2025-23352 | High | 7.8 | 2025-10-23 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploi… |
CVE-2025-23347 | High | 7.8 | 2025-10-23 | NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead… |
CVE-2025-23345 | Medium | 4.4 | 2025-10-23 | NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful expl… |
CVE-2025-23332 | Medium | 5.0 | 2025-10-23 | NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deference. A successful… |
CVE-2025-23330 | Medium | 5.5 | 2025-10-23 | NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this vu… |
CVE-2025-23300 | Medium | 5.5 | 2025-10-23 | NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific mem… |
CVE-2025-11621 | High | 8.1 | 2025-10-23 | Vault and Vault Enterprise’s (“Vault”) AWS Auth method may be susceptible to authentication bypass if the role of the configured bound_principal_iam is the sam… |
CVE-2025-10937 | Medium | 5.5 | 2025-10-23 | Oxford Nanopore Technologies' MinKNOW software at or prior to version 24.11 creates a temporary file to store the local authentication token during startup, be… |
CVE-2025-61464 | Medium | 6.5 | 2025-10-23 | gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the search_table in bbs/search.php. |
CVE-2025-61413 | Medium | 6.1 | 2025-10-23 | A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTM… |
CVE-2025-57240 | Medium | 6.1 | 2025-10-23 | Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step. |
CVE-2025-62713 | | 2025-10-23 | Kottster is a self hosted Node.js admin panel. From versions 3.2.0 to before 3.3.2, Kottster contains a pre-authentication remote code execution (RCE) vulnerab… | |
CVE-2025-34156 | | 2025-10-23 | Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses J… | |
CVE-2025-34155 | | 2025-10-23 | Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based… | |
CVE-2025-62169 | High | 8.1 | 2025-10-23 | OctoPrint-SpoolManager is a plugin for managing spools and all their usage metadata. In versions 1.8.0a2 and older of the testing branch and versions 1.7.7 and… |
CVE-2025-59048 | High | 8.1 | 2025-10-23 | OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IAM role Imp… |
CVE-2025-50951 | Medium | 6.5 | 2025-10-23 | FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c. |
CVE-2025-50950 | High | 7.5 | 2025-10-23 | Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function. |
CVE-2025-50949 | Medium | 6.5 | 2025-10-23 | FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8. |
CVE-2025-12114 | Medium | 5.5 | 2025-10-23 | Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4… |
CVE-2025-61136 | High | 7.1 | 2025-10-23 | A Host Header Injection vulnerability in the password reset component in axewater sharewarez v2.4.3 allows remote attackers to conduct password reset poisoning… |
CVE-2025-61132 | High | 7.1 | 2025-10-23 | A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct password reset poisoning a… |
CVE-2025-56009 | Medium | 5.3 | 2025-10-23 | Cross site request forgery (CSRF) vulnerability in KeeneticOS before 4.3 at "/rci" API endpoint allows attackers to take over the device via adding additional… |
CVE-2025-56008 | Medium | 6.1 | 2025-10-23 | Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via… |
CVE-2025-56007 | Medium | 6.5 | 2025-10-23 | CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by m… |
CVE-2025-12110 | Medium | 5.4 | 2025-10-23 | A flaw was found in Keycloak. An offline session continues to be valid when the offline_access scope is removed from the client. The refresh token is accepted… |
CVE-2025-62256 | Medium | 5.3 | 2025-10-23 | Liferay Portal 7.4.0 through 7.4.3.109, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 GA through update 92, 7.3 GA through upda… |
CVE-2025-60852 | Medium | 6.5 | 2025-10-23 | A CSV Injection vulnerability existed in Instant Developer Foundation versions prior to 25.0.9600. Applications built with affected versions of the framework d… |
CVE-2025-53702 | Medium | 6.5 | 2025-10-23 | Vilar VS-IPC1002 IP cameras are vulnerable to DoS (Denial-of-Service) attacks. An unauthenticated attacker on the same local network might send a crafted reque… |
CVE-2025-53701 | Medium | 6.1 | 2025-10-23 | Vilar VS-IPC1002 IP cameras are vulnerable to Reflected XSS (Cross-site Scripting) attacks, because parameters in GET requests sent to /cgi-bin/action endpoint… |
CVE-2025-1680 | | 2025-10-23 | An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with adminis… | |
CVE-2025-1679 | | 2025-10-23 | Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malicious scripts to an a… | |
CVE-2025-11429 | Medium | 5.4 | 2025-10-23 | A flaw was found in Keycloak. Keycloak does not immediately enforce the disabling of the "Remember Me" realm setting on existing user sessions. Sessions create… |
CVE-2025-8427 | Medium | 6.4 | 2025-10-23 | The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play’ parameter in all versions up… |
CVE-2025-11128 | Medium | 5.0 | 2025-10-23 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Server-Side Request Forg… |
CVE-2025-11023 | Critical | 9.8 | 2025-10-23 | Inclusion of Functionality from Untrusted Control Sphere, Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion… |
CVE-2025-10705 | Medium | 5.3 | 2025-10-23 | The MxChat – AI Chatbot for WordPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.4.6. This… |
CVE-2025-62401 | Medium | 5.4 | 2025-10-23 | An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an as… |
CVE-2025-62400 | Medium | 4.3 | 2025-10-23 | Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or res… |
CVE-2025-62399 | High | 7.5 | 2025-10-23 | Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attac… |
CVE-2025-62398 | Medium | 5.4 | 2025-10-23 | A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising… |
CVE-2025-62397 | Medium | 5.3 | 2025-10-23 | The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance. |
CVE-2025-62396 | Medium | 5.3 | 2025-10-23 | An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not pro… |
CVE-2025-62395 | Medium | 4.3 | 2025-10-23 | A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restri… |
CVE-2025-62394 | Medium | 4.3 | 2025-10-23 | Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related message… |
CVE-2025-62393 | Medium | 4.3 | 2025-10-23 | A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view info… |
CVE-2025-10355 | | 2025-10-23 | Open redirection vulnerability in MOLGENIS EMX2 v11.14.0. This vulnerability allows an attacker to create a malicious URL using a manipulated redirection param… | |
CVE-2025-41073 | Medium | 6.5 | 2025-10-23 | Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total. This issue allows an authenticated attacker to download a ZIP file containing… |
CVE-2025-40643 | Medium | 5.4 | 2025-10-23 | Stored Cross-Site Scripting (XSS) vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user… |
CVE-2025-9981 | Medium | 4.8 | 2025-10-23 | QuickCMS is vulnerable to multiple Stored XSS in slider editor functionality (sliders-form). Malicious attacker with admin privileges can inject arbitrary HTML… |
CVE-2025-9980 | Medium | 4.8 | 2025-10-23 | QuickCMS is vulnerable to multiple Stored XSS in page editor functionality (pages-form). Malicious attacker with admin privileges can inject arbitrary HTML and… |
CVE-2025-12105 | High | 7.5 | 2025-10-23 | A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communi… |
CVE-2025-10914 | High | 7.6 | 2025-10-23 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. Co. OBS (Student Affairs Info… |
CVE-2025-10727 | Medium | 5.4 | 2025-10-23 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ArkSigner Software and Hardware Inc. AcBakImzala a… |
CVE-2025-62499 | Medium | 4.8 | 2025-10-23 | Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted input is stored by an attacker with "Cont… |
CVE-2025-61865 | Medium | 6.7 | 2025-10-23 | Multiple NAS management applications provided by I-O DATA DEVICE, INC. register Windows services with unquoted file paths. A user with the write permission on… |
CVE-2025-54856 | Medium | 4.8 | 2025-10-23 | Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored by an attacker with "ContentType Managem… |
CVE-2025-54806 | Medium | 6.1 | 2025-10-23 | GROWI v4.2.7 and earlier contains a cross-site scripting vulnerability in the page alert function. If a user accesses a crafted URL while logged in to the aff… |
CVE-2025-62820 | Medium | 4.9 | 2025-10-23 | Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network. |
CVE-2025-48430 | Medium | 5.5 | 2025-10-23 | Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged Operator to crash the Command Centre Server at will. This issue… |
CVE-2025-48428 | Medium | 6.7 | 2025-10-23 | Cleartext Storage of Sensitive Information (CWE-312) in the Gallagher Morpho integration could allow an authenticated user with access to the Command Centre Se… |
CVE-2025-47699 | Critical | 9.9 | 2025-10-23 | Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration could allow an authenticated operator… |
CVE-2025-41402 | Medium | 5.5 | 2025-10-23 | Client-Side Enforcement of Server-Side Security (CWE-602) in the Command Centre Server allows a privileged operator to enter invalid competency data, bypassing… |