2025 CVEs (page 192)
Page 192 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-58806 | High | 7.1 | 2025-09-05 | Cross-Site Request Forgery (CSRF) vulnerability in Tom Longridge WordPress Error Monitoring by Bugsnag bugsnag allows Stored XSS.This issue affects WordPress E… |
CVE-2025-58805 | Medium | 5.9 | 2025-09-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light all… |
CVE-2025-58804 | Medium | 4.3 | 2025-09-05 | Cross-Site Request Forgery (CSRF) vulnerability in brijrajs WooCommerce Single Page Checkout woo-single-page-checkout allows Cross Site Request Forgery.This is… |
CVE-2025-58802 | Medium | 4.3 | 2025-09-05 | Cross-Site Request Forgery (CSRF) vulnerability in michalzagdan TrustMate.io – WooCommerce integration trustmate-io-integration-for-woocommerce allows Cross Si… |
CVE-2025-58801 | Medium | 5.4 | 2025-09-05 | Cross-Site Request Forgery (CSRF) vulnerability in KCS Responder responder allows Cross Site Request Forgery.This issue affects Responder: from n/a through <=… |
CVE-2025-58800 | Medium | 4.3 | 2025-09-05 | Cross-Site Request Forgery (CSRF) vulnerability in Steve Truman WP Email Template wp-email-template allows Cross Site Request Forgery.This issue affects WP Ema… |
CVE-2025-58799 | Medium | 4.3 | 2025-09-05 | Cross-Site Request Forgery (CSRF) vulnerability in themelocation Custom WooCommerce Checkout Fields Editor add-fields-to-checkout-page-woocommerce allows Cross… |
CVE-2025-58798 | Medium | 4.3 | 2025-09-05 | Cross-Site Request Forgery (CSRF) vulnerability in Bjorn Manintveld BCM Duplicate Menu bcm-duplicate-menu allows Cross Site Request Forgery.This issue affects… |
CVE-2025-58797 | Medium | 5.3 | 2025-09-05 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Mahmudul Hasan Arif Ninja Charts ninja-charts allows Retrieve Embed… |
CVE-2025-58796 | Medium | 6.5 | 2025-09-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dudaster Elementor Element Condition ele-conditions allow… |
CVE-2025-58795 | Medium | 4.3 | 2025-09-05 | Missing Authorization vulnerability in Payoneer Checkout Payoneer Checkout payoneer-checkout allows Content Spoofing.This issue affects Payoneer Checkout: from… |
CVE-2025-58794 | Medium | 4.3 | 2025-09-05 | Cross-Site Request Forgery (CSRF) vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Cross Site Request Forgery.This issue… |
CVE-2025-58793 | Medium | 6.5 | 2025-09-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBean WPB Elementor Addons wpb-elementor-addons allows S… |
CVE-2025-58792 | Medium | 4.3 | 2025-09-05 | Cross-Site Request Forgery (CSRF) vulnerability in WPKube Authors List authors-list allows Cross Site Request Forgery.This issue affects Authors List: from n/a… |
CVE-2025-58791 | Medium | 5.9 | 2025-09-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arjan Olsder SEO Auto Linker wpa-seo-auto-linker allows S… |
CVE-2025-58790 | Medium | 6.5 | 2025-09-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKube Kiwi kiwi-social-share allows Stored XSS.This issu… |
CVE-2025-58789 | High | 7.6 | 2025-09-05 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle WP Full Stripe Free wp-full-stripe-free allows… |
CVE-2025-58788 | High | 7.6 | 2025-09-05 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal License Manager for WooCommerce license-manage… |
CVE-2025-58787 | Medium | 6.5 | 2025-09-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Popup themify-popup allows Stored XSS.T… |
CVE-2025-58786 | Medium | 6.5 | 2025-09-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VW THEMES Ibtana – Ecommerce Product Addons ibtana-ecomme… |
CVE-2025-58785 | Medium | 5.4 | 2025-09-05 | Missing Authorization vulnerability in Jiro Sasamoto Ray Enterprise Translation lingotek-translation allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2025-58784 | Medium | 6.5 | 2025-09-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arisoft ARI Fancy Lightbox ari-fancy-lightbox allows Stor… |
CVE-2025-58783 | Medium | 4.3 | 2025-09-05 | Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gu… |
CVE-2025-10011 | Medium | 6.3 | 2025-09-05 | A weakness has been identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /module/TabelaArredondamento/edit. Th… |
CVE-2025-58313 | Medium | 5.1 | 2025-09-05 | Race condition vulnerability in the device standby module. Impact: Successful exploitation of this vulnerability may cause feature exceptions of the device sta… |
CVE-2025-58296 | High | 7.5 | 2025-09-05 | Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-58281 | High | 8.4 | 2025-09-05 | Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58280 | High | 8.4 | 2025-09-05 | Vulnerability of exposing object heap addresses in the Ark eTS module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58276 | Medium | 6.8 | 2025-09-05 | Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48395 | Medium | 4.7 | 2025-09-05 | An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI… |
CVE-2025-8944 | Medium | 4.3 | 2025-09-05 | The OceanWP WordPress theme before 4.1.2 is vulnerable to an option update due to a missing capability check on one of its AJAX request handler, allowing any a… |
CVE-2025-58400 | Medium | 6.7 | 2025-09-05 | RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. registers a Windows service with an unquoted file path. A user with the write permiss… |
CVE-2025-55671 | High | 7.8 | 2025-09-05 | Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with t… |
CVE-2025-55037 | Critical | 9.8 | 2025-09-05 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnera… |
CVE-2025-41408 | Medium | 4.3 | 2025-09-05 | Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14.15.0 allows a remote unauthenticated at… |
CVE-2025-58401 | Medium | 6.8 | 2025-09-05 | Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations o… |
CVE-2025-8684 | Medium | 6.4 | 2025-09-05 | The Flatsome Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's shortcodes in all versions up to, and including, 3.20.0 due to in… |
CVE-2025-9990 | High | 8.1 | 2025-09-05 | The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.8.10 via the portal_type… |
CVE-2025-7445 | Medium | 6.5 | 2025-09-05 | Kubernetes secrets-store-sync-controller in versions before 0.0.2 discloses service account tokens in logs. |
CVE-2025-58362 | High | 7.5 | 2025-09-05 | Hono is a Web application framework that provides support for any JavaScript runtime. Versions 4.8.0 through 4.9.5 contain a flaw in the getPath utility functi… |
CVE-2025-58359 | | 2025-09-05 | ZF FROST is a Rust implementation of FROST (Flexible Round-Optimised Schnorr Threshold signatures). In versions 2.0.0 through 2.1.0, refresh shares with smalle… | |
CVE-2025-58352 | Medium | 6.5 | 2025-09-05 | Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session expiry during the second factor verifica… |
CVE-2025-58179 | High | 7.2 | 2025-09-05 | Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configu… |
CVE-2025-55739 | | 2025-09-05 | api is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© (PBX). In versions lower than 15.0.13, 16.0.2 through 16.0.14, 17… | |
CVE-2025-55305 | Medium | 6.1 | 2025-09-04 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions below 35.7.5, 36.0.0-alpha.1 through 36.8.0… |
CVE-2025-55244 | Critical | 9.0 | 2025-09-04 | Azure Bot Service Elevation of Privilege Vulnerability |
CVE-2025-55242 | Medium | 6.5 | 2025-09-04 | Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network. |
CVE-2025-55241 | Critical | 10.0 | 2025-09-04 | Azure Entra ID Elevation of Privilege Vulnerability |
CVE-2025-55238 | High | 7.5 | 2025-09-04 | Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability |
CVE-2025-55209 | | 2025-09-04 | contactmanager is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© (PBX). In versions 15.0.14 and below, 16.0.0 through 1… | |
CVE-2025-55190 | Critical | 9.9 | 2025-09-04 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3… |
CVE-2025-54914 | Critical | 10.0 | 2025-09-04 | Azure Networking Elevation of Privilege Vulnerability |
CVE-2025-58361 | Critical | 9.3 | 2025-09-04 | Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions contain an non-exhaustive URL scheme… |
CVE-2025-58353 | High | 8.2 | 2025-09-04 | Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions of Promptcraft Forge Studio sanitize… |
CVE-2025-32322 | High | 7.8 | 2025-09-04 | In onCreate of MediaProjectionPermissionActivity.java , there is a possible way to grant a malicious app a token enabling unauthorized screen recording capabil… |
CVE-2025-26439 | High | 7.8 | 2025-09-04 | In getComponentName of AccessibilitySettingsUtils.java, there is a possible way to for a malicious Talkback service to be enabled instead of the system compone… |
CVE-2025-26431 | High | 7.8 | 2025-09-04 | In setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an enabled accessibility service due to a logic error in the code… |
CVE-2025-26419 | Low | 3.3 | 2025-09-04 | In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of priv… |
CVE-2025-22415 | Medium | 4.0 | 2025-09-04 | In android_app of Android.bp, there is a possible way to launch any activity as a system user. This could lead to local escalation of privilege with no additio… |
CVE-2025-22414 | High | 7.8 | 2025-09-04 | In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local esc… |
CVE-2025-48581 | High | 8.4 | 2025-09-04 | In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalat… |
CVE-2025-48563 | High | 7.8 | 2025-09-04 | In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local escalatio… |
CVE-2025-48562 | Medium | 5.0 | 2025-09-04 | In writeContent of RemotePrintDocument.java, there is a possible information disclosure due to a logic error. This could lead to local information disclosure w… |
CVE-2025-48561 | Medium | 5.5 | 2025-09-04 | In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure. This could lead to local info… |
CVE-2025-48560 | Medium | 5.5 | 2025-09-04 | In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure w… |
CVE-2025-48559 | Medium | 5.5 | 2025-09-04 | In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to local denia… |
CVE-2025-48558 | High | 7.8 | 2025-09-04 | In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This… |
CVE-2025-48556 | High | 7.3 | 2025-09-04 | In multiple methods of NotificationChannel.java, there is a possible desynchronization from persistence due to improper input validation. This could lead to lo… |
CVE-2025-48554 | Medium | 6.1 | 2025-09-04 | In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a logic error in the code. This could lead… |
CVE-2025-48553 | High | 7.8 | 2025-09-04 | In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic error in the code. This could lead to loc… |
CVE-2025-48552 | High | 7.8 | 2025-09-04 | In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a logic error in the code. This could le… |
CVE-2025-48551 | Medium | 5.0 | 2025-09-04 | In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused deputy. This could lead to local infor… |
CVE-2025-48550 | Medium | 5.5 | 2025-09-04 | In testGrantSlicePermission of SliceManagerTest.java, there is a possible permanent denial of service due to a path traversal error. This could lead to local d… |
CVE-2025-48549 | High | 7.8 | 2025-09-04 | In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of p… |
CVE-2025-48548 | High | 7.3 | 2025-09-04 | In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the privacy indicator due to a race condition. T… |
CVE-2025-48547 | High | 7.3 | 2025-09-04 | In multiple locations, there is a possible one-time permission bypass due to a logic error in the code. This could lead to local escalation of privilege with n… |
CVE-2025-48546 | High | 7.8 | 2025-09-04 | In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code. This could lead to local esca… |
CVE-2025-48545 | High | 7.1 | 2025-09-04 | In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local p… |
CVE-2025-48544 | High | 7.8 | 2025-09-04 | In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege wit… |
CVE-2025-48543 | High | 8.8 | 2025-09-04 | In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escal… |
CVE-2025-48542 | Medium | 5.5 | 2025-09-04 | In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denia… |
CVE-2025-48541 | High | 7.8 | 2025-09-04 | In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation. This could lead to… |
CVE-2025-48540 | High | 7.8 | 2025-09-04 | In processTransactInternal of RpcState.cpp, there is a possible local out of memory write due to a logic error in the code. This could lead to local escalation… |
CVE-2025-48539 | High | 8.0 | 2025-09-04 | In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free. This could lead to remote (proximal/adjacent) code execu… |
CVE-2025-48538 | Medium | 5.5 | 2025-09-04 | In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input validation… |
CVE-2025-48537 | High | 7.1 | 2025-09-04 | In multiple locations, there is a possible way to persistently DoS the device due to improper input validation. This could lead to local information disclosure… |
CVE-2025-48535 | High | 7.8 | 2025-09-04 | In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulner… |
CVE-2025-48534 | High | 8.8 | 2025-09-04 | In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to loca… |
CVE-2025-48533 | High | 7.0 | 2025-09-04 | In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to local esc… |
CVE-2025-48532 | High | 7.3 | 2025-09-04 | In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a confused deputy. This could lead… |
CVE-2025-48531 | High | 7.8 | 2025-09-04 | In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of p… |
CVE-2025-48530 | High | 8.1 | 2025-09-04 | In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. This could lead to remote code execution in… |
CVE-2025-48529 | Medium | 5.5 | 2025-09-04 | In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused deputy. This could lead to local infor… |
CVE-2025-48528 | Medium | 4.0 | 2025-09-04 | In multiple locations, there is a possible way to overlay biometrics due to a tapjacking/overlay attack. This could lead to local escalation of privilege with… |
CVE-2025-48527 | Medium | 6.2 | 2025-09-04 | In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the code. This could lead to local information… |
CVE-2025-48526 | Medium | 4.0 | 2025-09-04 | In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profile due to improper… |
CVE-2025-48524 | Medium | 5.5 | 2025-09-04 | In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check. This could lead to local denial of service wi… |
CVE-2025-48523 | High | 7.8 | 2025-09-04 | In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic error in the code. This could lead to loca… |
CVE-2025-48522 | High | 7.8 | 2025-09-04 | In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code. This could lead to… |
CVE-2025-32350 | High | 7.8 | 2025-09-04 | In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the ControlsSettingsDialog due to a tapjacking/overlay attack. This coul… |