2025 CVEs (page 200)
Page 200 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-9757 | High | 7.3 | 2025-09-01 | A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.php. This manipulati… |
CVE-2025-9569 | Medium | 6.1 | 2025-09-01 | The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript code… |
CVE-2025-9568 | Medium | 6.1 | 2025-09-01 | The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript code… |
CVE-2025-9567 | Medium | 6.1 | 2025-09-01 | The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript code… |
CVE-2025-9756 | Medium | 6.3 | 2025-09-01 | A vulnerability was found in PHPGurukul User Management System 1.0. This impacts an unknown function of the file /admin/change-emailid.php. The manipulation of… |
CVE-2025-9755 | Medium | 4.3 | 2025-09-01 | A vulnerability has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24. This affects an unknown function of the… |
CVE-2025-9754 | Low | 3.5 | 2025-09-01 | A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the comp… |
CVE-2025-9753 | Low | 2.4 | 2025-09-01 | A vulnerability was detected in Campcodes Online Hospital Management System 1.0. The affected element is an unknown function of the file /admin/patient-search… |
CVE-2025-9752 | High | 7.3 | 2025-09-01 | A security vulnerability has been detected in D-Link DIR-852 1.00CN B09. Impacted is the function soapcgi_main of the file soap.cgi of the component SOAP Servi… |
CVE-2025-9751 | High | 7.3 | 2025-09-01 | A weakness has been identified in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /login.php. This mani… |
CVE-2025-9750 | High | 7.3 | 2025-08-31 | A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php. T… |
CVE-2025-9749 | High | 7.3 | 2025-08-31 | A vulnerability was identified in HKritesh009 Grocery List Management Web App up to f491b681eb70d465f445c9a721415c965190f83b. This affects an unknown part of t… |
CVE-2025-9748 | High | 8.8 | 2025-08-31 | A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd… |
CVE-2025-9747 | Medium | 4.3 | 2025-08-31 | A vulnerability has been found in Koillection up to 1.6.18. Affected is an unknown function of the file assets/controllers/csrf_protection_controller.js. Such… |
CVE-2025-9746 | Low | 2.4 | 2025-08-31 | A vulnerability was detected in Campcodes Hospital Management System 1.0. This affects an unknown function of the file /admin/edit-doctor-specialization.php of… |
CVE-2025-9745 | Medium | 4.7 | 2025-08-31 | A security vulnerability has been detected in D-Link DI-500WF 14.04.10A1T. The impacted element is an unknown function of the file /version_upgrade.asp of the… |
CVE-2025-9744 | High | 7.3 | 2025-08-31 | A weakness has been identified in Campcodes Online Loan Management System 1.0. The affected element is an unknown function of the file /ajax.php?action=login… |
CVE-2025-9743 | High | 7.3 | 2025-08-31 | A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. Impacted is an unknown function of the file login_attendance2.php. P… |
CVE-2025-9742 | High | 7.3 | 2025-08-31 | A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown processing of the file /login.php. Such m… |
CVE-2025-9741 | High | 7.3 | 2025-08-31 | A vulnerability was determined in code-projects Human Resource Integrated System 1.0. This vulnerability affects unknown code of the file /login_query12.php. T… |
CVE-2025-9740 | High | 7.3 | 2025-08-31 | A vulnerability was found in code-projects Human Resource Integrated System 1.0. This affects an unknown part of the file /log_query.php. The manipulation of t… |
CVE-2025-9739 | High | 7.3 | 2025-08-31 | A vulnerability has been found in Campcodes Online Water Billing System 1.0. Affected by this issue is some unknown functionality of the file /process.php. The… |
CVE-2025-9738 | Low | 3.5 | 2025-08-31 | A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educar_tipo_ensino_ca… |
CVE-2025-9737 | Low | 3.5 | 2025-08-31 | A vulnerability was detected in O2OA up to 10.0-410. Affected is an unknown function of the file /x_query_assemble_designer/jaxrs/importmodel of the component… |
CVE-2025-9736 | Low | 3.5 | 2025-08-31 | A security vulnerability has been detected in O2OA up to 10.0-410. This impacts an unknown function of the file /x_query_assemble_designer/jaxrs/statement of t… |
CVE-2025-9735 | Low | 3.5 | 2025-08-31 | A weakness has been identified in O2OA up to 10.0-410. This affects an unknown function of the file /x_query_assemble_designer/jaxrs/table of the component Per… |
CVE-2025-9734 | Low | 3.5 | 2025-08-31 | A security flaw has been discovered in O2OA up to 10.0-410. The impacted element is an unknown function of the file /x_query_assemble_designer/jaxrs/stat of th… |
CVE-2025-9733 | High | 7.3 | 2025-08-31 | A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. This impacts an unknown function of the file /login_timeee.php. Perf… |
CVE-2025-9732 | Medium | 5.3 | 2025-08-31 | A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the componen… |
CVE-2025-9731 | Low | 2.5 | 2025-08-31 | A vulnerability was determined in Tenda AC9 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/shadow of the component Administrative… |
CVE-2025-9730 | High | 7.3 | 2025-08-31 | A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The… |
CVE-2025-9729 | High | 7.3 | 2025-08-31 | A vulnerability was detected in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /admin/student-registration.php… |
CVE-2025-9728 | Medium | 4.3 | 2025-08-31 | A security vulnerability has been detected in givanz Vvveb 1.0.7.2. This affects an unknown part of the file app/template/user/login.tpl. Such manipulation of… |
CVE-2025-9727 | Medium | 6.3 | 2025-08-31 | A weakness has been identified in D-Link DIR-816L 206b01. Affected by this issue is the function soapcgi_main of the file /soap.cgi. This manipulation of the a… |
CVE-2025-9726 | High | 7.3 | 2025-08-31 | A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /review.php… |
CVE-2025-9725 | Low | 2.5 | 2025-08-31 | A vulnerability was identified in Cudy LT500E up to 2.3.12. Affected is an unknown function of the file /squashfs-root/etc/shadow of the component Web Interfac… |
CVE-2025-9724 | Low | 3.5 | 2025-08-31 | A vulnerability was determined in Portabilis i-Educar up to 2.10. This impacts an unknown function of the file /intranet/educar_nivel_ensino_cad.php. Executing… |
CVE-2025-9723 | Low | 3.5 | 2025-08-31 | A vulnerability was found in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/educar_tipo_regime_cad.php. Performing mani… |
CVE-2025-9722 | Low | 3.5 | 2025-08-31 | A vulnerability has been found in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file /intranet/educar_tipo_ocorrencia_disc… |
CVE-2025-9721 | Low | 3.5 | 2025-08-31 | A flaw has been found in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /module/FormulaMedia/edit. This manipulation o… |
CVE-2025-9720 | Low | 3.5 | 2025-08-31 | A vulnerability was detected in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /module/TabelaArredondamento/edit of the component… |
CVE-2025-9719 | Low | 3.5 | 2025-08-31 | A weakness has been identified in O2OA up to 10.0-410. This vulnerability affects unknown code of the file /x_processplatform_assemble_designer/jaxrs/script of… |
CVE-2025-9718 | Low | 3.5 | 2025-08-31 | A security flaw has been discovered in O2OA up to 10.0-410. This affects an unknown part of the file /x_processplatform_assemble_designer/jaxrs/process of the… |
CVE-2025-9717 | Low | 3.5 | 2025-08-31 | A vulnerability was identified in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /x_organization_assemble_control/jaxrs/… |
CVE-2025-9716 | Low | 3.5 | 2025-08-31 | A vulnerability was determined in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /x_processplatform_assemble_desig… |
CVE-2025-5083 | Medium | 5.5 | 2025-08-31 | The Amministrazione Trasparente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.0… |
CVE-2025-47696 | High | 8.1 | 2025-08-31 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in solwin Blog Designer PRO blog-designer… |
CVE-2025-31100 | Critical | 9.9 | 2025-08-31 | Unrestricted Upload of File with Dangerous Type vulnerability in Mojoomla School Management allows Upload a Web Shell to a Web Server.This issue affects School… |
CVE-2025-9715 | Low | 3.5 | 2025-08-31 | A vulnerability was found in O2OA up to 10.0-410. Affected is an unknown function of the file /x_cms_assemble_control/jaxrs/script of the component Personal Pr… |
CVE-2025-9706 | High | 7.3 | 2025-08-30 | A security vulnerability has been detected in SourceCodester Water Billing System 1.0. Affected by this vulnerability is an unknown functionality of the file /… |
CVE-2025-9705 | High | 7.3 | 2025-08-30 | A weakness has been identified in SourceCodester Water Billing System 1.0. Affected is an unknown function of the file /paybill.php. This manipulation of the a… |
CVE-2025-9704 | High | 7.3 | 2025-08-30 | A security flaw has been discovered in SourceCodester Water Billing System 1.0. This impacts an unknown function of the file /viewbill.php. The manipulation of… |
CVE-2025-9702 | High | 7.3 | 2025-08-30 | A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. This affects an unknown function of the file /sales_report.php. The manipulati… |
CVE-2025-9701 | High | 7.3 | 2025-08-30 | A vulnerability was determined in SourceCodester Simple Cafe Billing System 1.0. The impacted element is an unknown function of the file /receipt.php. Executin… |
CVE-2025-9700 | High | 7.3 | 2025-08-30 | A flaw has been found in SourceCodester Online Book Store 1.0. This issue affects some unknown processing of the file /publisher_list.php. This manipulation of… |
CVE-2025-9699 | High | 7.3 | 2025-08-30 | A vulnerability was detected in SourceCodester Online Polling System Code 1.0. This vulnerability affects unknown code of the file /admin/checklogin.php. The m… |
CVE-2025-9695 | Medium | 5.3 | 2025-08-30 | A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file Andro… |
CVE-2025-9694 | High | 7.3 | 2025-08-30 | A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/lo… |
CVE-2025-9692 | High | 7.3 | 2025-08-30 | A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the arg… |
CVE-2025-9691 | High | 7.3 | 2025-08-30 | A vulnerability has been found in Campcodes Online Shopping System 1.0. This impacts an unknown function of the file /login.php. Such manipulation of the argum… |
CVE-2025-9690 | Medium | 6.3 | 2025-08-30 | A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. Thi… |
CVE-2025-9689 | Medium | 6.3 | 2025-08-30 | A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/… |
CVE-2025-9688 | Medium | 5.0 | 2025-08-30 | A security vulnerability has been detected in Mupen64Plus up to 2.6.0. The affected element is the function write_is_viewer of the file src/device/cart/is_view… |
CVE-2025-0165 | High | 7.6 | 2025-08-30 | IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send… |
CVE-2025-9687 | Medium | 6.3 | 2025-08-30 | A weakness has been identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /module/HistoricoEscolar/processamentoApi. Execut… |
CVE-2025-9686 | Medium | 6.3 | 2025-08-30 | A security flaw has been discovered in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/AreaConhecimento/edit of… |
CVE-2025-9685 | Medium | 6.3 | 2025-08-30 | A vulnerability was identified in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/AreaConhecimento/view of the comp… |
CVE-2025-9684 | Medium | 6.3 | 2025-08-30 | A vulnerability was determined in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/FormulaMedia/edit of the component Formula d… |
CVE-2025-9683 | Low | 3.5 | 2025-08-30 | A vulnerability was found in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /x_cms_assemble_control/jaxrs/form of the co… |
CVE-2025-9682 | Low | 3.5 | 2025-08-30 | A vulnerability has been found in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /x_cms_assemble_control/jaxrs/des… |
CVE-2025-38677 | High | 7.8 | 2025-08-30 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in dnode page As Jiaming Zhang reported: <TAS… |
CVE-2025-9681 | Low | 3.5 | 2025-08-30 | A flaw has been found in O2OA up to 10.0-410. Affected is an unknown function of the file /x_program_center/jaxrs/agent of the component Personal Profile Page… |
CVE-2025-9680 | Low | 3.5 | 2025-08-30 | A vulnerability was detected in O2OA up to 10.0-410. This impacts an unknown function of the file /x_portal_assemble_designer/jaxrs/page of the component Perso… |
CVE-2025-9679 | High | 7.3 | 2025-08-30 | A security vulnerability has been detected in itsourcecode Student Information System 1.0. This affects an unknown function of the file /course_edit1.php. Such… |
CVE-2025-9500 | Medium | 6.4 | 2025-08-30 | The TablePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘shortcode_debug’ parameter in all versions up to, and including, 3.2… |
CVE-2025-9499 | Medium | 6.4 | 2025-08-30 | The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's oceanwp_library shortcode in all versions up to, and includi… |
CVE-2025-54946 | Critical | 9.8 | 2025-08-30 | A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands. |
CVE-2025-54945 | Critical | 9.8 | 2025-08-30 | An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary… |
CVE-2025-54944 | Critical | 9.8 | 2025-08-30 | An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to write m… |
CVE-2025-54943 | Critical | 9.8 | 2025-08-30 | A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application d… |
CVE-2025-54942 | Critical | 9.8 | 2025-08-30 | A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access depl… |
CVE-2025-9618 | Medium | 4.3 | 2025-08-30 | The Related Posts Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12. This is due to missing or i… |
CVE-2025-4956 | Medium | 4.3 | 2025-08-30 | Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress allows Path Traversal.This issue affects Pro Bulk Watermark Plugin… |
CVE-2025-34165 | | 2025-08-30 | A stack-based buffer overflow vulnerability in NetSupport Manager 14.x versions prior to 14.12.0000 allows a remote, unauthenticated attacker to cause a denial… | |
CVE-2025-34164 | | 2025-08-30 | A heap-based buffer overflow vulnerability in NetSupport Manager 14.x versions prior to 14.12.0000 allows a remote, unauthenticated attacker to cause a denial… | |
CVE-2025-58159 | Critical | 9.9 | 2025-08-29 | WeGIA is a Web manager for charitable institutions. Prior to version 3.4.11, a remote code execution vulnerability was identified, caused by improper validatio… |
CVE-2025-9678 | High | 7.3 | 2025-08-29 | A weakness has been identified in Campcodes Online Loan Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=delete_… |
CVE-2025-58160 | | 2025-08-29 | tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber w… | |
CVE-2025-58157 | High | 7.5 | 2025-08-29 | gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication… |
CVE-2025-58156 | Low | 1.9 | 2025-08-29 | Centurion ERP is an ERP with a focus on ITSM and automation. In versions starting from 1.12.0 to before 1.21.0, an authenticated user can view all authenticati… |
CVE-2025-58068 | Critical | 9.1 | 2025-08-29 | Eventlet is a concurrent networking library for Python. Prior to version 0.40.3, the Eventlet WSGI parser is vulnerable to HTTP Request Smuggling due to improp… |
CVE-2025-57822 | Medium | 6.5 | 2025-08-29 | Next.js is a React framework for building full-stack web applications. Prior to versions 14.2.32 and 15.4.7, when next() was used without explicitly passing th… |
CVE-2025-57752 | Medium | 6.2 | 2025-08-29 | Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization… |
CVE-2025-55173 | Medium | 4.3 | 2025-08-29 | Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization… |
CVE-2025-9677 | Medium | 5.3 | 2025-08-29 | A security flaw has been discovered in Modo Legend of the Phoenix up to 1.0.5. The affected element is an unknown function of the file AndroidManifest.xml of t… |
CVE-2025-9676 | Medium | 5.3 | 2025-08-29 | A vulnerability was identified in NCSOFT Universe App up to 1.3.0. Impacted is an unknown function of the file AndroidManifest.xml of the component com.ncsoft… |
CVE-2025-9675 | Medium | 5.3 | 2025-08-29 | A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file AndroidManifest.xml of the component co… |
CVE-2025-9674 | Medium | 5.3 | 2025-08-29 | A flaw has been found in Transbyte Scooper News App up to 1.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml… |
CVE-2025-58067 | Medium | 4.2 | 2025-08-29 | Basecamp's Google Sign-In adds Google sign-in to Rails applications. Prior to version 1.3.1, it is possible to redirect a user to another origin if the "procee… |
CVE-2025-58066 | Medium | 5.3 | 2025-08-29 | nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which… |