2025 CVEs (page 136)
Page 136 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-23300 | Medium | 5.5 | 2025-10-23 | NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific mem… |
CVE-2025-11621 | High | 8.1 | 2025-10-23 | Vault and Vault Enterprise’s (“Vault”) AWS Auth method may be susceptible to authentication bypass if the role of the configured bound_principal_iam is the sam… |
CVE-2025-10937 | Medium | 5.5 | 2025-10-23 | Oxford Nanopore Technologies' MinKNOW software at or prior to version 24.11 creates a temporary file to store the local authentication token during startup, be… |
CVE-2025-61464 | Medium | 6.5 | 2025-10-23 | gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the search_table in bbs/search.php. |
CVE-2025-61413 | Medium | 6.1 | 2025-10-23 | A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTM… |
CVE-2025-57240 | Medium | 6.1 | 2025-10-23 | Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step. |
CVE-2025-62713 | | 2025-10-23 | Kottster is a self hosted Node.js admin panel. From versions 3.2.0 to before 3.3.2, Kottster contains a pre-authentication remote code execution (RCE) vulnerab… | |
CVE-2025-34156 | | 2025-10-23 | Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses J… | |
CVE-2025-34155 | | 2025-10-23 | Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based… | |
CVE-2025-62169 | High | 8.1 | 2025-10-23 | OctoPrint-SpoolManager is a plugin for managing spools and all their usage metadata. In versions 1.8.0a2 and older of the testing branch and versions 1.7.7 and… |
CVE-2025-59048 | High | 8.1 | 2025-10-23 | OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IAM role Imp… |
CVE-2025-50951 | Medium | 6.5 | 2025-10-23 | FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c. |
CVE-2025-50950 | High | 7.5 | 2025-10-23 | Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function. |
CVE-2025-50949 | Medium | 6.5 | 2025-10-23 | FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8. |
CVE-2025-12114 | Medium | 5.5 | 2025-10-23 | Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4… |
CVE-2025-61136 | High | 7.1 | 2025-10-23 | A Host Header Injection vulnerability in the password reset component in axewater sharewarez v2.4.3 allows remote attackers to conduct password reset poisoning… |
CVE-2025-61132 | High | 7.1 | 2025-10-23 | A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct password reset poisoning a… |
CVE-2025-56009 | Medium | 5.3 | 2025-10-23 | Cross site request forgery (CSRF) vulnerability in KeeneticOS before 4.3 at "/rci" API endpoint allows attackers to take over the device via adding additional… |
CVE-2025-56008 | Medium | 6.1 | 2025-10-23 | Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via… |
CVE-2025-56007 | Medium | 6.5 | 2025-10-23 | CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by m… |
CVE-2025-12110 | Medium | 5.4 | 2025-10-23 | A flaw was found in Keycloak. An offline session continues to be valid when the offline_access scope is removed from the client. The refresh token is accepted… |
CVE-2025-62256 | Medium | 5.3 | 2025-10-23 | Liferay Portal 7.4.0 through 7.4.3.109, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 GA through update 92, 7.3 GA through upda… |
CVE-2025-60852 | Medium | 6.5 | 2025-10-23 | A CSV Injection vulnerability existed in Instant Developer Foundation versions prior to 25.0.9600. Applications built with affected versions of the framework d… |
CVE-2025-53702 | Medium | 6.5 | 2025-10-23 | Vilar VS-IPC1002 IP cameras are vulnerable to DoS (Denial-of-Service) attacks. An unauthenticated attacker on the same local network might send a crafted reque… |
CVE-2025-53701 | Medium | 6.1 | 2025-10-23 | Vilar VS-IPC1002 IP cameras are vulnerable to Reflected XSS (Cross-site Scripting) attacks, because parameters in GET requests sent to /cgi-bin/action endpoint… |
CVE-2025-1680 | | 2025-10-23 | An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with adminis… | |
CVE-2025-1679 | | 2025-10-23 | Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malicious scripts to an a… | |
CVE-2025-11429 | Medium | 5.4 | 2025-10-23 | A flaw was found in Keycloak. Keycloak does not immediately enforce the disabling of the "Remember Me" realm setting on existing user sessions. Sessions create… |
CVE-2025-8427 | Medium | 6.4 | 2025-10-23 | The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play’ parameter in all versions up… |
CVE-2025-11128 | Medium | 5.0 | 2025-10-23 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Server-Side Request Forg… |
CVE-2025-11023 | Critical | 9.8 | 2025-10-23 | Inclusion of Functionality from Untrusted Control Sphere, Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion… |
CVE-2025-10705 | Medium | 5.3 | 2025-10-23 | The MxChat – AI Chatbot for WordPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.4.6. This… |
CVE-2025-62401 | Medium | 5.4 | 2025-10-23 | An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an as… |
CVE-2025-62400 | Medium | 4.3 | 2025-10-23 | Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or res… |
CVE-2025-62399 | High | 7.5 | 2025-10-23 | Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attac… |
CVE-2025-62398 | Medium | 5.4 | 2025-10-23 | A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising… |
CVE-2025-62397 | Medium | 5.3 | 2025-10-23 | The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance. |
CVE-2025-62396 | Medium | 5.3 | 2025-10-23 | An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not pro… |
CVE-2025-62395 | Medium | 4.3 | 2025-10-23 | A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restri… |
CVE-2025-62394 | Medium | 4.3 | 2025-10-23 | Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related message… |
CVE-2025-62393 | Medium | 4.3 | 2025-10-23 | A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view info… |
CVE-2025-10355 | | 2025-10-23 | Open redirection vulnerability in MOLGENIS EMX2 v11.14.0. This vulnerability allows an attacker to create a malicious URL using a manipulated redirection param… | |
CVE-2025-41073 | Medium | 6.5 | 2025-10-23 | Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total. This issue allows an authenticated attacker to download a ZIP file containing… |
CVE-2025-40643 | Medium | 5.4 | 2025-10-23 | Stored Cross-Site Scripting (XSS) vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user… |
CVE-2025-9981 | Medium | 4.8 | 2025-10-23 | QuickCMS is vulnerable to multiple Stored XSS in slider editor functionality (sliders-form). Malicious attacker with admin privileges can inject arbitrary HTML… |
CVE-2025-9980 | Medium | 4.8 | 2025-10-23 | QuickCMS is vulnerable to multiple Stored XSS in page editor functionality (pages-form). Malicious attacker with admin privileges can inject arbitrary HTML and… |
CVE-2025-12105 | High | 7.5 | 2025-10-23 | A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communi… |
CVE-2025-10914 | High | 7.6 | 2025-10-23 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. Co. OBS (Student Affairs Info… |
CVE-2025-10727 | Medium | 5.4 | 2025-10-23 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ArkSigner Software and Hardware Inc. AcBakImzala a… |
CVE-2025-62499 | Medium | 4.8 | 2025-10-23 | Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. If crafted input is stored by an attacker with "Cont… |
CVE-2025-61865 | Medium | 6.7 | 2025-10-23 | Multiple NAS management applications provided by I-O DATA DEVICE, INC. register Windows services with unquoted file paths. A user with the write permission on… |
CVE-2025-54856 | Medium | 4.8 | 2025-10-23 | Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored by an attacker with "ContentType Managem… |
CVE-2025-54806 | Medium | 6.1 | 2025-10-23 | GROWI v4.2.7 and earlier contains a cross-site scripting vulnerability in the page alert function. If a user accesses a crafted URL while logged in to the aff… |
CVE-2025-62820 | Medium | 4.9 | 2025-10-23 | Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network. |
CVE-2025-48430 | Medium | 5.5 | 2025-10-23 | Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged Operator to crash the Command Centre Server at will. This issue… |
CVE-2025-48428 | Medium | 6.7 | 2025-10-23 | Cleartext Storage of Sensitive Information (CWE-312) in the Gallagher Morpho integration could allow an authenticated user with access to the Command Centre Se… |
CVE-2025-47699 | Critical | 9.9 | 2025-10-23 | Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration could allow an authenticated operator… |
CVE-2025-41402 | Medium | 5.5 | 2025-10-23 | Client-Side Enforcement of Server-Side Security (CWE-602) in the Command Centre Server allows a privileged operator to enter invalid competency data, bypassing… |
CVE-2025-35981 | Medium | 5.5 | 2025-10-23 | Exposure of Private Personal Information to an Unauthorized Actor (CWE-359) in the Command Centre Server allows a privileged Operator to view limited personal… |
CVE-2025-12104 | Critical | 9.8 | 2025-10-23 | Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. |
CVE-2025-11575 | High | 7.8 | 2025-10-23 | Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC d… |
CVE-2025-62710 | Medium | 5.9 | 2025-10-22 | Sakai is a Collaboration and Learning Environment. Prior to versions 23.5 and 25.0, EncryptionUtilityServiceImpl initialized an AES256TextEncryptor password (s… |
CVE-2025-62708 | High | 7.5 | 2025-10-22 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to large m… |
CVE-2025-62707 | High | 7.5 | 2025-10-22 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infi… |
CVE-2025-62706 | Medium | 6.5 | 2025-10-22 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JWE zip=DEF path performs unbounded DEFLATE decomp… |
CVE-2025-62705 | Medium | 4.9 | 2025-10-22 | OpenBao is an open source identity-based secrets management system. Prior to version 2.4.2, OpenBao's audit log did not appropriately redact fields when releva… |
CVE-2025-62617 | High | 7.2 | 2025-10-22 | Admidio is an open-source user management solution. Prior to version 4.3.17, an authenticated SQL injection vulnerability exists in the member assignment data… |
CVE-2025-62614 | | 2025-10-22 | BookLore is a self-hosted web app for organizing and managing personal book collections. In versions 1.8.1 and prior, an authentication bypass vulnerability in… | |
CVE-2025-62613 | | 2025-10-22 | VDO.Ninja is a tool that brings remote video feeds into OBS or other studio software via WebRTC. From versions 28.0 to before 28.4, a reflected Cross-Site Scri… | |
CVE-2025-62612 | Medium | 5.3 | 2025-10-22 | FastGPT is an AI Agent building platform. Prior to version 4.11.1, in the workflow file reading node, the network link is not security-verified, posing a risk… |
CVE-2025-62611 | | 2025-10-22 | aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local fi… | |
CVE-2025-62610 | High | 8.1 | 2025-10-22 | Hono is a Web application framework that provides support for any JavaScript runtime. In versions from 1.1.0 to before 4.10.2, Hono’s JWT Auth Middleware does… |
CVE-2025-62513 | High | 7.5 | 2025-10-22 | OpenBao is an open source identity-based secrets management system. In versions 2.2.0 to 2.4.1, OpenBao's audit log experienced a regression wherein raw HTTP b… |
CVE-2025-62247 | Medium | 6.5 | 2025-10-22 | Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 th… |
CVE-2025-62248 | Medium | 4.8 | 2025-10-22 | A reflected cross-site scripting (XSS) vulnerability, resulting from a regression, has been identified in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay… |
CVE-2025-58712 | Medium | 6.4 | 2025-10-22 | A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable perm… |
CVE-2025-60343 | High | 7.5 | 2025-10-22 | Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafte… |
CVE-2025-60342 | High | 7.5 | 2025-10-22 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to… |
CVE-2025-60341 | High | 7.5 | 2025-10-22 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set function. This vulnerability allows at… |
CVE-2025-60340 | High | 7.5 | 2025-10-22 | Multiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted… |
CVE-2025-60339 | High | 7.5 | 2025-10-22 | Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injec… |
CVE-2025-60337 | High | 7.5 | 2025-10-22 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a buffer overflow in the speed_dir parameter in the SetSpeedWan function. This vulnerability allows attack… |
CVE-2025-60336 | High | 7.5 | 2025-10-22 | A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a craft… |
CVE-2025-24934 | Medium | 5.4 | 2025-10-22 | Software which sets SO_REUSEPORT_LB on a socket and then connects it to a host will not directly observe any problems. However, due to its membership in a loa… |
CVE-2025-22178 | Medium | 4.3 | 2025-10-22 | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information… |
CVE-2025-22177 | Medium | 4.3 | 2025-10-22 | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information… |
CVE-2025-22176 | Medium | 4.3 | 2025-10-22 | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information… |
CVE-2025-22175 | Medium | 5.4 | 2025-10-22 | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information… |
CVE-2025-22174 | Medium | 4.3 | 2025-10-22 | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information… |
CVE-2025-22173 | Medium | 4.3 | 2025-10-22 | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information… |
CVE-2025-22172 | Medium | 4.3 | 2025-10-22 | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information… |
CVE-2025-22171 | Medium | 4.3 | 2025-10-22 | Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users. |
CVE-2025-22170 | Medium | 4.3 | 2025-10-22 | Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular… |
CVE-2025-22169 | Medium | 5.4 | 2025-10-22 | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information… |
CVE-2025-22168 | Medium | 4.3 | 2025-10-22 | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information… |
CVE-2025-11958 | Medium | 4.1 | 2025-10-22 | An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a… |
CVE-2025-11957 | High | 8.4 | 2025-10-22 | Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to self-approve or app… |
CVE-2025-8677 | High | 7.5 | 2025-10-22 | Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions… |
CVE-2025-62659 | | 2025-10-22 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki CookieConsent e… | |
CVE-2025-62607 | Medium | 5.3 | 2025-10-22 | Nautobot Single Source of Truth (SSoT) is an app for Nautobot. Prior to version 3.10.0, an unauthenticated attacker could access this page to view the Service… |