2025 CVEs (page 205)
Page 205 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-43728 | Critical | 9.6 | 2025-08-27 | Dell ThinOS 10, versions prior to 2508_10.0127, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could pote… |
CVE-2025-9526 | High | 8.8 | 2025-08-27 | A vulnerability has been found in Linksys E1700 1.0.0.4.003. Affected by this issue is the function setSysAdm of the file /goform/setSysAdm. Such manipulation… |
CVE-2025-9525 | High | 8.8 | 2025-08-27 | A flaw has been found in Linksys E1700 1.0.0.4.003. Affected by this vulnerability is the function setWan of the file /goform/setWan. This manipulation of the… |
CVE-2025-9523 | Critical | 9.8 | 2025-08-27 | A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulat… |
CVE-2025-30064 | | 2025-08-27 | An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which si… | |
CVE-2025-30063 | | 2025-08-27 | The configuration file containing database logins and passwords is readable by any local user. | |
CVE-2025-30061 | | 2025-08-27 | In the "utils/Reporter/OpenReportWindow.pl" service, there is an SQL injection vulnerability through the "UserID" parameter. | |
CVE-2025-30060 | | 2025-08-27 | In the ReturnUserUnitsXML.pl service, the "getUserInfo" function is vulnerable to SQL injection through the "UserID" parameter. | |
CVE-2025-30059 | | 2025-08-27 | In the PrepareCDExportJSON.pl service, the "getPerfServiceIds" function is vulnerable to SQL injection. | |
CVE-2025-30058 | | 2025-08-27 | In the PatientService.pl service, the "getPatientIdentifier" function is vulnerable to SQL injection through the "pesel" parameter. | |
CVE-2025-30057 | | 2025-08-27 | In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system() call in the ConvertToPDF function. | |
CVE-2025-30056 | | 2025-08-27 | The RunCommand function accepts any parameter, which is then passed for execution in the shell. This allows an attacker to execute arbitrary code on the system. | |
CVE-2025-30055 | | 2025-08-27 | The "system" function receives untrusted input from the user. If the "EnableJSCaching" option is enabled, it is possible to execute arbitrary code provided as… | |
CVE-2025-30048 | | 2025-08-27 | The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication. | |
CVE-2025-30041 | | 2025-08-27 | The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data… | |
CVE-2025-30040 | | 2025-08-27 | The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls… | |
CVE-2025-30039 | | 2025-08-27 | Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActiveSessions.pl" endpoint allows takeover of any user session logged into the system, including users… | |
CVE-2025-30038 | | 2025-08-27 | The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is exposed through a built-in Windows security… | |
CVE-2025-30037 | | 2025-08-27 | The system exposes several endpoints, typically including "/int/" in their path, that should be restricted to internal services, but are instead publicly acces… | |
CVE-2025-30036 | | 2025-08-27 | Stored XSS vulnerability exists in the "Oddział" (Ward) module, in the death diagnosis description field, and allows the execution of arbitrary JavaScript code… | |
CVE-2025-2313 | | 2025-08-27 | In the Print.pl service, the "uhcPrintServerPrint" function allows execution of arbitrary code via the "CopyCounter" parameter. | |
CVE-2025-9514 | Low | 3.7 | 2025-08-27 | A vulnerability has been found in macrozheng mall up to 1.0.3. This impacts an unknown function of the component Registration. Such manipulation leads to weak… |
CVE-2025-9513 | Low | 3.7 | 2025-08-27 | A flaw has been found in editso fuso up to 1.0.4-beta.7. This affects the function PenetrateRsaAndAesHandshake of the file src/net/penetrate/handshake/mod.rs… |
CVE-2025-9511 | High | 7.3 | 2025-08-27 | A vulnerability was identified in itsourcecode Apartment Management System 1.0. This vulnerability affects unknown code of the file /visitor/addvisitor.php. Su… |
CVE-2025-57846 | High | 7.8 | 2025-08-27 | Multiple i-フィルター products contain an issue with incorrect default permissions. If this vulnerability is exploited, a local authenticated attacker may replace a… |
CVE-2025-57797 | High | 7.8 | 2025-08-27 | Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authentica… |
CVE-2025-9510 | High | 7.3 | 2025-08-27 | A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /branch/add… |
CVE-2025-9509 | High | 7.3 | 2025-08-27 | A security flaw has been discovered in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/fair_info_a… |
CVE-2025-9508 | High | 7.3 | 2025-08-27 | A vulnerability was detected in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /report/rented_info.php… |
CVE-2025-48081 | Medium | 5.3 | 2025-08-27 | Path Traversal: '.../...//' vulnerability in Printeers Printeers Print & Ship allows Path Traversal.This issue affects Printeers Print & Ship: from n/a through… |
CVE-2025-9507 | High | 7.3 | 2025-08-27 | A weakness has been identified in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/visitor_info.php. Executing… |
CVE-2025-9506 | High | 7.3 | 2025-08-27 | A vulnerability has been found in Campcodes Online Loan Management System 1.0. This affects an unknown part of the file /ajax.php?action=delete_plan. Such mani… |
CVE-2025-9505 | High | 7.3 | 2025-08-27 | A flaw has been found in Campcodes Online Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_lo… |
CVE-2025-9504 | High | 7.3 | 2025-08-27 | A vulnerability was detected in Campcodes Online Loan Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?a… |
CVE-2025-49040 | Medium | 4.3 | 2025-08-27 | Cross-Site Request Forgery (CSRF) vulnerability in Backup Bolt Backup Bolt backup-bolt allows Cross Site Request Forgery.This issue affects Backup Bolt: from n… |
CVE-2025-49039 | Medium | 5.9 | 2025-08-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mibuthu Link View link-view allows Stored XSS.This issue… |
CVE-2025-49035 | Medium | 5.9 | 2025-08-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in chaimchaikin Admin Menu Groups admin-menu-groups allows S… |
CVE-2025-9503 | High | 7.3 | 2025-08-27 | A security vulnerability has been detected in Campcodes Online Loan Management System 1.0. Affected is an unknown function of the file /ajax.php?action=save_bo… |
CVE-2025-9502 | High | 7.3 | 2025-08-27 | A weakness has been identified in Campcodes Online Loan Management System 1.0. This impacts an unknown function of the file /ajax.php?action=save_payment. Exec… |
CVE-2025-7732 | Medium | 6.4 | 2025-08-27 | The Lazy Load for Videos plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lazy‑loading handlers in all versions up to, and including… |
CVE-2025-8490 | Medium | 4.4 | 2025-08-27 | The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Import in all versions up to, and including, 7… |
CVE-2025-9277 | Medium | 6.4 | 2025-08-26 | The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the broken preg_replace expression in all versions up to, an… |
CVE-2025-57820 | | 2025-08-26 | Svelte devalue is a utility library. Prior to version 5.3.2, a string passed to devalue.parse could represent an object with a __proto__ property and devalue.p… | |
CVE-2025-35115 | High | 8.1 | 2025-08-26 | Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the… |
CVE-2025-35114 | High | 7.5 | 2025-08-26 | Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one… |
CVE-2025-35113 | Medium | 5.9 | 2025-08-26 | Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code exec… |
CVE-2025-35112 | Medium | 4.1 | 2025-08-26 | Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the t… |
CVE-2025-26417 | Medium | 4.0 | 2025-08-26 | In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused… |
CVE-2025-22413 | Medium | 4.0 | 2025-08-26 | In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local information disclosure… |
CVE-2025-22412 | High | 8.8 | 2025-08-26 | In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjacent) code… |
CVE-2025-22411 | High | 8.8 | 2025-08-26 | In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjac… |
CVE-2025-22410 | High | 8.4 | 2025-08-26 | In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no addi… |
CVE-2025-22409 | High | 8.4 | 2025-08-26 | In rfc_send_buf_uih of rfc_ts_frames.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of priv… |
CVE-2025-22408 | Critical | 9.8 | 2025-08-26 | In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with… |
CVE-2025-22407 | Medium | 5.5 | 2025-08-26 | In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local information disc… |
CVE-2025-22406 | High | 8.4 | 2025-08-26 | In bnepu_check_send_packet of bnep_utils.cc, there is a possible way to achieve code execution due to a use after free. This could lead to local escalation of… |
CVE-2025-22405 | High | 8.4 | 2025-08-26 | In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no addi… |
CVE-2025-22404 | High | 8.4 | 2025-08-26 | In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privi… |
CVE-2025-22403 | Critical | 9.8 | 2025-08-26 | In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code ex… |
CVE-2025-0093 | High | 7.5 | 2025-08-26 | In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote infor… |
CVE-2025-0092 | Medium | 6.5 | 2025-08-26 | In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote (proxim… |
CVE-2025-0086 | Medium | 6.2 | 2025-08-26 | In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission check. This could lead to local informat… |
CVE-2025-0084 | High | 8.8 | 2025-08-26 | In multiple locations, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support… |
CVE-2025-0083 | Medium | 4.0 | 2025-08-26 | In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosu… |
CVE-2025-0082 | Medium | 5.5 | 2025-08-26 | In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy. This coul… |
CVE-2025-0081 | High | 7.5 | 2025-08-26 | In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to uninitialized data. This could lead to remote den… |
CVE-2025-0080 | High | 7.8 | 2025-08-26 | In multiple locations, there is a possible way to overlay the installation confirmation dialog due to a tapjacking/overlay attack. This could lead to local esc… |
CVE-2025-0079 | High | 7.8 | 2025-08-26 | In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code. This could lead to local es… |
CVE-2025-0078 | High | 8.8 | 2025-08-26 | In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. This could lead to local escalation of privilege with no addit… |
CVE-2025-0075 | Critical | 9.8 | 2025-08-26 | In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code… |
CVE-2025-0074 | Critical | 9.8 | 2025-08-26 | In process_service_attr_rsp of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code exec… |
CVE-2025-9492 | High | 7.3 | 2025-08-26 | A vulnerability was determined in Campcodes Online Water Billing System 1.0. This affects an unknown function of the file /addclient1.php. Executing manipulati… |
CVE-2025-55443 | Critical | 9.1 | 2025-08-26 | Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details (IP/port) that are stored in plaintext w… |
CVE-2025-52353 | Critical | 9.8 | 2025-08-26 | An arbitrary code execution vulnerability in Badaso CMS 2.9.11. The Media Manager allows authenticated users to upload files containing embedded PHP code via t… |
CVE-2025-50971 | High | 7.5 | 2025-08-26 | Directory traversal vulnerability in AbanteCart version 1.4.2 allows unauthenticated attackers to gain access to sensitive system files via the template parame… |
CVE-2025-9478 | High | 8.8 | 2025-08-26 | Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2025-50975 | Medium | 5.4 | 2025-08-26 | IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters such as PROT, SRC_PORT, TGT_PORT, dnatport, key, ruleremark… |
CVE-2025-23315 | High | 7.8 | 2025-08-26 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a… |
CVE-2025-23314 | High | 7.8 | 2025-08-26 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection… |
CVE-2025-23313 | High | 7.8 | 2025-08-26 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection… |
CVE-2025-23312 | High | 7.8 | 2025-08-26 | NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a… |
CVE-2025-23307 | High | 7.8 | 2025-08-26 | NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit o… |
CVE-2025-57818 | Medium | 6.3 | 2025-08-26 | Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to version 2.0.1, a server-side request forgery (SSRF) vulnerability was disc… |
CVE-2025-57803 | High | 7.5 | 2025-08-26 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2 for ImageMagick's 32-bit… |
CVE-2025-55298 | High | 7.5 | 2025-08-26 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format st… |
CVE-2025-50976 | Medium | 6.1 | 2025-08-26 | IPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS_HOSTNAME query parameters, res… |
CVE-2025-9491 | High | 7.8 | 2025-08-26 | Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af… |
CVE-2025-57425 | Medium | 6.1 | 2025-08-26 | A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript i… |
CVE-2025-55212 | Low | 3.7 | 2025-08-26 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry stri… |
CVE-2025-52184 | Medium | 6.1 | 2025-08-26 | Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion. |
CVE-2025-50974 | Medium | 6.5 | 2025-08-26 | The Calamaris log exporter CGI (/cgi-bin/logs.cgi/calamaris.dat) in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter v… |
CVE-2025-36729 | High | 7.2 | 2025-08-26 | A non-primary administrator user with admin rights to the web interface but without shell access permissions can display configuration of the device including… |
CVE-2025-2697 | High | 7.4 | 2025-08-26 | IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victi… |
CVE-2025-1994 | High | 7.8 | 2025-08-26 | IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFo… |
CVE-2025-1494 | Medium | 6.1 | 2025-08-26 | IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a mali… |
CVE-2025-57813 | Medium | 5.9 | 2025-08-26 | traQ is a messenger application built for Digital Creators Club traP. Prior to version 3.25.0, a vulnerability exists where sensitive information, such as OAut… |
CVE-2025-57810 | High | 7.5 | 2025-08-26 | jsPDF is a library to generate PDFs in JavaScript. Prior to 3.0.2, user control of the first argument of the addImage method results in CPU utilization and den… |
CVE-2025-56432 | Medium | 6.1 | 2025-08-26 | A cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context… |
CVE-2025-6366 | High | 8.8 | 2025-08-26 | The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. This is due to the plugin not properly v… |
CVE-2025-52219 | Medium | 6.5 | 2025-08-26 | SelectZero SelectZero Data Observability Platform before 2025.5.2 contains an Open Redirect vulnerability. Legacy UI fields can be used to create arbitrary ext… |