2025 CVEs (page 163)
Page 163 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-6034 | High | 7.8 | 2025-09-30 | There is a memory corruption vulnerability due to an out of bounds read in DefaultFontOptions() when using SymbolEditor in NI Circuit Design Suite. This vulne… |
CVE-2025-6033 | High | 7.8 | 2025-09-30 | There is a memory corruption vulnerability due to an out of bounds write in XML_Serialize() when using SymbolEditor in NI Circuit Design Suite. This vulnerabi… |
CVE-2025-56676 | Medium | 5.4 | 2025-09-30 | TitanSystems Zender v3.9.7 contains an account takeover vulnerability in its password reset functionality. A temporary password or reset token issued to one us… |
CVE-2025-56572 | High | 7.5 | 2025-09-30 | An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero() parameter. |
CVE-2025-56571 | High | 7.5 | 2025-09-30 | Finance.js v4.1.0 contains a Denial of Service (DoS) vulnerability via the IRR function’s depth parameter. Improper handling of the recursion/iteration limit c… |
CVE-2025-56018 | Medium | 6.1 | 2025-09-30 | SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in Category Management via the category name field. |
CVE-2025-55797 | Medium | 6.5 | 2025-09-30 | An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers to access historica… |
CVE-2025-54477 | Medium | 5.3 | 2025-09-30 | Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method. |
CVE-2025-54476 | | 2025-09-30 | Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class. | |
CVE-2025-7779 | High | 8.8 | 2025-09-30 | Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389, Acron… |
CVE-2025-7493 | Critical | 9.1 | 2025-09-30 | A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate… |
CVE-2025-57852 | Medium | 6.4 | 2025-09-30 | A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writa… |
CVE-2025-56301 | High | 7.5 | 2025-09-30 | An issue was discovered in Chipsalliance Rocket-Chip commit f517abbf41abb65cea37421d3559f9739efd00a9 (2025-01-29) allowing attackers to corrupt exception handl… |
CVE-2025-28016 | Medium | 4.8 | 2025-09-30 | A Reflected Cross-Site Scripting (XSS) vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management… |
CVE-2025-11178 | High | 7.3 | 2025-09-30 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386, Acronis Tr… |
CVE-2025-9232 | Medium | 5.9 | 2025-09-30 | Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and t… |
CVE-2025-9231 | Medium | 6.5 | 2025-09-30 | Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM… |
CVE-2025-9230 | High | 7.5 | 2025-09-30 | Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact sum… |
CVE-2025-52050 | Medium | 6.5 | 2025-09-30 | In Frappe ERPNext 15.57.5, the function get_loyalty_program_details_with_points() at erpnext/accounts/doctype/loyalty_program/loyalty_program.py is vulnerable… |
CVE-2025-52049 | Medium | 6.5 | 2025-09-30 | In Frappe ErpNext v15.57.5, the function get_timesheet_detail_rate() at erpnext/projects/doctype/timesheet/timesheet.py is vulnerable to SQL Injection, which a… |
CVE-2025-52047 | Medium | 6.5 | 2025-09-30 | In Frappe ErpNext v15.57.5, the function get_income_account() at erpnext/controllers/queries.py is vulnerable to SQL Injection, which allows an attacker to ext… |
CVE-2025-52043 | Medium | 6.5 | 2025-09-30 | In Frappe ERPNext v15.57.5, the function import_coa() at erpnext/accounts/doctype/chart_of_accounts_importer/chart_of_accounts_importer.py is vulnerable to SQL… |
CVE-2025-34217 | Critical | 9.8 | 2025-09-30 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) contain an undocumented 'printerlogic' user with a hardcoded… |
CVE-2025-11153 | High | 7.5 | 2025-09-30 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3. |
CVE-2025-11152 | High | 8.6 | 2025-09-30 | Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3. |
CVE-2025-10859 | Medium | 4.0 | 2025-09-30 | Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Inc… |
CVE-2025-10217 | | 2025-09-30 | A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log data or to inject crafted data in logfile… | |
CVE-2025-9993 | High | 8.1 | 2025-09-30 | The Bei Fen – WordPress Backup Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.2 via the 'task'. Th… |
CVE-2025-9991 | High | 8.1 | 2025-09-30 | The Tiny Bootstrap Elements Light plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.3.34 via the 'language' pa… |
CVE-2025-9948 | Medium | 4.3 | 2025-09-30 | The Chat by Chatwee plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.3. This is due to missing or inc… |
CVE-2025-9946 | Medium | 6.1 | 2025-09-30 | The LockerPress – WordPress Security Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is… |
CVE-2025-9852 | Medium | 6.4 | 2025-09-30 | The Yoga Schedule Momoyoga plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'momoyoga-schedule' shortcode in all versions up… |
CVE-2025-9762 | Critical | 9.8 | 2025-09-30 | The Post By Email plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the save_attachments function in all vers… |
CVE-2025-8877 | High | 7.5 | 2025-09-30 | The AffiliateWP plugin for WordPress is vulnerable to SQL Injection via the ajax_get_affiliate_id_from_login function in all versions up to, and including, 2.2… |
CVE-2025-8777 | Medium | 6.4 | 2025-09-30 | The planetcalc plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘language’ parameter in all versions up to, and including, 2.2 due to… |
CVE-2025-8625 | Critical | 9.8 | 2025-09-30 | The Copypress Rest API plugin for WordPress is vulnerable to Remote Code Execution via copyreap_handle_image() Function in versions 1.1 to 1.2. The plugin fall… |
CVE-2025-8624 | Medium | 6.4 | 2025-09-30 | The Nexa Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Google Maps widget in all versions up to, and including, 1.1… |
CVE-2025-8623 | Medium | 6.4 | 2025-09-30 | The WeedMaps Menu for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's weedmaps_menu shortcode in all versions up t… |
CVE-2025-8608 | Medium | 6.4 | 2025-09-30 | The Mihdan: Elementor Yandex Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's block attributes in all versions up to, an… |
CVE-2025-8566 | Medium | 6.4 | 2025-09-30 | The GutenBee – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via parameters in the CountUp and Google Maps Blocks in all v… |
CVE-2025-8560 | Medium | 6.4 | 2025-09-30 | The FancyTabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 1.1.0 due to in… |
CVE-2025-8559 | Medium | 6.5 | 2025-09-30 | The All in One Music Player plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.1 via the 'theme' parameter. This ma… |
CVE-2025-8214 | Medium | 6.4 | 2025-09-30 | The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typing Letter widget in all versions up to, and… |
CVE-2025-8122 | High | 8.8 | 2025-09-30 | Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects… |
CVE-2025-8121 | High | 8.8 | 2025-09-30 | Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects… |
CVE-2025-8120 | Critical | 9.8 | 2025-09-30 | Due to client-controlled permission check parameter, PAD CMS's upload photo functionality allows an unauthenticated remote attacker to upload files of any type… |
CVE-2025-8119 | Medium | 4.3 | 2025-09-30 | PAD CMS is vulnerable to Cross-Site Request Forgery in reset password's functionality. Malicious attacker can craft special website, which when visited by the… |
CVE-2025-8118 | Medium | 6.5 | 2025-09-30 | PAD CMS implements weak client-side brute-force protection by utilizing two cookies: login_count and login_timeout. Information about attempt count or timeout… |
CVE-2025-8117 | High | 7.5 | 2025-09-30 | PAD CMS improperly initializes parameter used for password recovery, which allows to change password for any user that did not use reset password functionality… |
CVE-2025-8116 | Medium | 6.1 | 2025-09-30 | PAD CMS is vulnerable to Reflected XSS in printing and save to PDF functionality. Malicious attacker can craft special URL, which will result in arbitrary Java… |
CVE-2025-7065 | Critical | 9.8 | 2025-09-30 | Due to client-controlled permission check parameter, PAD CMS's photo upload functionality allows an unauthenticated remote attacker to upload files of any type… |
CVE-2025-7063 | Critical | 9.8 | 2025-09-30 | Due to client-controlled permission check parameter, PAD CMS's file upload functionality allows an unauthenticated remote attacker to upload files of any type… |
CVE-2025-7052 | High | 8.8 | 2025-09-30 | The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.1.94. This is due to missing nonce valid… |
CVE-2025-7038 | High | 8.2 | 2025-09-30 | The LatePoint plugin for WordPress is vulnerable to Authentication Bypass due to insufficient identity verification within the steps__load_step route of the la… |
CVE-2025-6941 | Medium | 6.4 | 2025-09-30 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of… |
CVE-2025-6815 | Medium | 5.5 | 2025-09-30 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘service[name]’ p… |
CVE-2025-61584 | | 2025-09-30 | serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulne… | |
CVE-2025-59956 | Medium | 6.5 | 2025-09-30 | AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex. Versions 0.3.3 and below are susceptible to a client-side DNS rebinding attack w… |
CVE-2025-59954 | Critical | 9.8 | 2025-09-30 | Knowage is an open source analytics and business intelligence suite. Versions 8.1.26 and below are vulnerable to Remote Code Exection through using an unsafe o… |
CVE-2025-59668 | High | 7.5 | 2025-09-30 | Multiple versions of Central Monitor CNS-6201 contain a NULL pointer dereference vulnerability. When processing a crafted certain UDP packet, the affected devi… |
CVE-2025-41099 | Medium | 6.5 | 2025-09-30 | Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validatio… |
CVE-2025-41098 | High | 7.5 | 2025-09-30 | Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a misuse of the general enq… |
CVE-2025-41097 | Medium | 4.3 | 2025-09-30 | Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validatio… |
CVE-2025-41096 | Medium | 4.3 | 2025-09-30 | Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validatio… |
CVE-2025-41095 | Medium | 4.3 | 2025-09-30 | Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validatio… |
CVE-2025-41094 | Medium | 4.3 | 2025-09-30 | Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validatio… |
CVE-2025-41093 | Medium | 4.3 | 2025-09-30 | Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validatio… |
CVE-2025-41092 | Medium | 4.3 | 2025-09-30 | Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validatio… |
CVE-2025-41091 | Medium | 4.3 | 2025-09-30 | Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validatio… |
CVE-2025-11163 | Medium | 4.3 | 2025-09-30 | The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on t… |
CVE-2025-11149 | High | 7.5 | 2025-09-30 | This affects all versions of the package node-static; all versions of the package @nubosoftware/node-static. The package fails to catch an exception when user… |
CVE-2025-11148 | Critical | 9.8 | 2025-09-30 | All versions of the package check-branches are vulnerable to Command Injection check-branches is a command-line tool that is interacted with locally, or via CI… |
CVE-2025-10991 | | 2025-09-30 | The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device. Thi… | |
CVE-2025-10196 | Medium | 6.4 | 2025-09-30 | The Survey Anyplace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'surveyanyplace_embed' shortcode in all versions up to… |
CVE-2025-10191 | Medium | 6.4 | 2025-09-30 | The Big Post Shipping for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wooboigpost_shipping_status' shortcod… |
CVE-2025-10189 | Medium | 6.4 | 2025-09-30 | The BP Direct Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bpdm_login' shortcode in all versions up to, and includ… |
CVE-2025-10182 | Medium | 6.4 | 2025-09-30 | The dbview plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dbview' shortcode in all versions up to, and including, 0.5.5 du… |
CVE-2025-10179 | Medium | 6.4 | 2025-09-30 | The My AskAI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'myaskai' shortcode in all versions up to, and including, 1.0.0… |
CVE-2025-10168 | Medium | 6.4 | 2025-09-30 | The Any News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'any-ticker' shortcode in all versions up to, and includ… |
CVE-2025-10131 | Medium | 6.4 | 2025-09-30 | The All Social Share Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sc' shortcode in all versions up to, and inclu… |
CVE-2025-10130 | Medium | 6.4 | 2025-09-30 | The Layers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'webcam' shortcode in all versions up to, and including, 0.5 due… |
CVE-2025-10128 | Medium | 6.4 | 2025-09-30 | The Eulerpool Research Systems plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'aaq' shortcode in all versions up to, and in… |
CVE-2025-10000 | Medium | 6.4 | 2025-09-30 | The Qyrr – simply and modern QR-Code creation plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the blob_to_f… |
CVE-2025-61586 | Medium | 5.3 | 2025-09-30 | FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below are vulnerable to directory enumeration by setting path in theme field, allowing at… |
CVE-2025-59952 | | 2025-09-30 | MinIO Java SDK is a Simple Storage Service (aka S3) client to perform bucket and object operations to any Amazon S3 compatible object storage service. In minio… | |
CVE-2025-59950 | Medium | 6.7 | 2025-09-30 | FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 and below, due to a bypass of double clickjacking protection (confirmation dialog), it is… |
CVE-2025-59948 | Medium | 6.7 | 2025-09-29 | FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not sanitize certain event handler attributes in feed content, so by finding a p… |
CVE-2025-59942 | High | 7.5 | 2025-09-29 | go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). In versions 0.8.6 and below, go-f3 panics when it validates a "poison" messages causing Fi… |
CVE-2025-59941 | Medium | 5.9 | 2025-09-29 | go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). In versions 0.8.8 and below, go-f3's justification verification caching mechanism has a vu… |
CVE-2025-59940 | Medium | 6.5 | 2025-09-29 | mkdocs-include-markdown-plugin is an Mkdocs Markdown includer plugin. In versions 7.1.7 and below, there is a vulnerability where unvalidated input can collide… |
CVE-2025-59937 | Critical | 9.1 | 2025-09-29 | go-mail is a comprehensive library for sending mails with Go. In versions 0.7.0 and below, due to incorrect handling of the mail.Address values when a sender-… |
CVE-2025-43817 | Medium | 6.1 | 2025-09-29 | Multiple reflected cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.3.74 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.6, 2023.Q… |
CVE-2025-43813 | High | 8.2 | 2025-09-29 | Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and… |
CVE-2025-43812 | Medium | 5.4 | 2025-09-29 | Cross-site scripting (XSS) vulnerability in web content template in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023… |
CVE-2025-36245 | High | 8.8 | 2025-09-29 | IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the sys… |
CVE-2025-59933 | High | 7.8 | 2025-09-29 | libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input… |
CVE-2025-59163 | | 2025-09-29 | vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Orig… | |
CVE-2025-57769 | Medium | 6.1 | 2025-09-29 | FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below contain a vulnerability where a specially crafted page can trick a user into execut… |
CVE-2025-54875 | Critical | 9.8 | 2025-09-29 | FreshRSS is a free, self-hostable RSS aggregator. In versions 1.16.0 and above through 1.26.3, an unprivileged attacker can create a new admin user when regist… |
CVE-2025-54592 | Critical | 9.8 | 2025-09-29 | FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout. After a user logs out, the ses… |