2025 CVEs (page 213)
Page 213 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-38564 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Handle buffer mapping fail correctly in perf_mmap() After successful allocatio… |
CVE-2025-38563 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Prevent VMA split of buffer mappings The perf mmap code is careful about mmap(… |
CVE-2025-38562 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference error in generate_encryptionkey If client send two se… |
CVE-2025-38561 | Critical | 9.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests… |
CVE-2025-38560 | Critical | 9.3 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: x86/sev: Evict cache lines during SNP memory validation An SNP cache coherency vulnerabil… |
CVE-2025-38559 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL pointer access Usage of the intel_pmt_read()… |
CVE-2025-38558 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Initialize frame-based format color matching descriptor Fix NULL pointe… |
CVE-2025-38557 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count to prevent NULL pointer dereference A mal… |
CVE-2025-38556 | High | 7.1 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0 bits Testing by the syzbot fuzzer show… |
CVE-2025-38555 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget : fix use-after-free in composite_dev_cleanup() 1. In func configfs_composite… |
CVE-2025-38554 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped By inducing delays i… |
CVE-2025-9146 | Medium | 6.6 | 2025-08-19 | A flaw has been found in Linksys E5600 1.1.0.26. The affected element is the function verify_gemtek_header of the file checkFw.sh of the component Firmware Han… |
CVE-2025-9145 | Low | 3.5 | 2025-08-19 | A security vulnerability has been detected in Scada-LTS 2.7.8.1. This issue affects some unknown processing of the file view_edit.shtm of the component SVG Fil… |
CVE-2025-51540 | Medium | 5.3 | 2025-08-19 | EzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)). This hashing method is cryptographically weak and allows attackers to… |
CVE-2025-51539 | Medium | 5.3 | 2025-08-19 | EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficient input validation in a script exposed… |
CVE-2025-50938 | Medium | 6.1 | 2025-08-19 | Cross site scripting (XSS) vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php. |
CVE-2025-50434 | Medium | 5.3 | 2025-08-19 | A security issue has been identified in Appian Enterprise Business Process Management version 25.3. The vulnerability is related to incorrect access control, w… |
CVE-2025-43738 | Medium | 5.4 | 2025-08-19 | A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 thro… |
CVE-2025-9144 | Low | 3.5 | 2025-08-19 | A weakness has been identified in Scada-LTS 2.7.8.1. This vulnerability affects unknown code of the file publisher_edit.shtm. This manipulation of the argument… |
CVE-2025-9143 | Low | 3.5 | 2025-08-19 | A security flaw has been discovered in Scada-LTS 2.7.8.1. This affects an unknown part of the file mailing_lists.shtm. The manipulation of the argument name/us… |
CVE-2025-51529 | Medium | 5.3 | 2025-08-19 | Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attack… |
CVE-2025-51510 | Medium | 4.9 | 2025-08-19 | MoonShine was discovered to contain a SQL injection vulnerability under the Blog -> Categories page when using the moonshine-tree-resource (version < 2.0.2) co… |
CVE-2025-51489 | Medium | 5.4 | 2025-08-19 | A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing remote attackers to upload a malicious SVG file when creating/… |
CVE-2025-51488 | Medium | 4.9 | 2025-08-19 | A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4, allowing remote attackers to store and execute arbitrary JavaScript by… |
CVE-2025-51487 | Medium | 4.5 | 2025-08-19 | A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload… |
CVE-2025-50897 | Medium | 4.3 | 2025-08-19 | A vulnerability exists in riscv-boom SonicBOOM 1.2 (BOOMv1.2) processor implementation, where valid virtual-to-physical address translations configured with wr… |
CVE-2025-50579 | Medium | 5.3 | 2025-08-19 | A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particularly JWT tokens, due to improper validatio… |
CVE-2025-9140 | Medium | 6.3 | 2025-08-19 | A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this issue is some unknown functionality of… |
CVE-2025-54336 | Critical | 9.8 | 2025-08-19 | In Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison. Thus, if the correct password is "0e" followed by any digit string, then an attacker ca… |
CVE-2025-50567 | Critical | 10.0 | 2025-08-19 | Saurus CMS Community Edition 4.7.1 contains a vulnerability in the custom DB::prepare() function, which uses preg_replace() with the deprecated /e (eval) modif… |
CVE-2025-50461 | Medium | 6.5 | 2025-08-19 | A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/model_merger.py script when using the "fsdp" backend. The script… |
CVE-2025-4690 | Medium | 4.3 | 2025-08-19 | A regular expression used by AngularJS' linky https://docs.angularjs.org/api/ngSanitize/filter/linky filter to detect URLs in input text is vulnerable to sup… |
CVE-2025-4046 | High | 8.5 | 2025-08-19 | A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization |
CVE-2025-4044 | High | 8.2 | 2025-08-19 | Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an ar… |
CVE-2025-43739 | Medium | 4.3 | 2025-08-19 | Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 throu… |
CVE-2025-9139 | Medium | 4.3 | 2025-08-19 | A vulnerability was determined in Scada-LTS 2.7.8.1. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/dwr/call/plaincall/Watch… |
CVE-2025-9138 | Low | 3.5 | 2025-08-19 | A vulnerability was found in Scada-LTS 2.7.8.1. Affected is an unknown function of the file pointHierarchy/new/. Performing manipulation of the argument Title… |
CVE-2025-9137 | Low | 3.5 | 2025-08-19 | A vulnerability has been found in Scada-LTS 2.7.8.1. This impacts an unknown function of the file scheduled_events.shtm. Such manipulation of the argument alia… |
CVE-2025-43740 | Medium | 5.4 | 2025-08-19 | A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.3.120 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 through 2… |
CVE-2025-9136 | Medium | 5.3 | 2025-08-19 | A flaw has been found in libretro RetroArch 1.18.0/1.19.0/1.20.0. This affects the function filestream_vscanf of the file libretro-common/streams/file_stream.c… |
CVE-2025-9135 | Medium | 5.3 | 2025-08-19 | A vulnerability was detected in Verkehrsauskunft Österreich SmartRide, cleVVVer, BusBahnBim and Salzburg Verkehr up to 12.1.1(258) on Android. The impacted ele… |
CVE-2025-9134 | Medium | 5.3 | 2025-08-19 | A security vulnerability has been detected in AfterShip Package Tracker App up to 5.24.1 on Android. The affected element is an unknown function of the file An… |
CVE-2025-8783 | Medium | 4.4 | 2025-08-19 | The Contact Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title’ parameter in all versions up to, and including, 8.6.5 due… |
CVE-2025-8567 | Medium | 6.4 | 2025-08-19 | The Nexter Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 4.5.4 due to ins… |
CVE-2025-41689 | High | 7.5 | 2025-08-19 | An unauthenticated remote attacker can get access without password protection to the affected device. This enables the unprotected read-only access to the stor… |
CVE-2025-41685 | Medium | 6.5 | 2025-08-19 | A low-privileged remote attacker can obtain the username of another registered Sunny Portal user by entering that user's email address. |
CVE-2025-8723 | Critical | 9.8 | 2025-08-19 | The Cloudflare Image Resizing plugin for WordPress is vulnerable to Remote Code Execution due to missing authentication and insufficient sanitization within it… |
CVE-2025-8622 | Medium | 6.4 | 2025-08-19 | The Flexible Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Flexible Maps shortcode in all versions up to, and includin… |
CVE-2025-7670 | High | 7.5 | 2025-08-19 | The JS Archive List plugin for WordPress is vulnerable to time-based SQL Injection via the build_sql_where() function in all versions up to, and including, 6.1… |
CVE-2025-7654 | High | 8.8 | 2025-08-19 | Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wf_get_cookie shortcode. This makes it possible for authenticated attackers… |
CVE-2025-8218 | High | 8.8 | 2025-08-19 | The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the 'change_role_member' parameter in all… |
CVE-2025-6758 | Critical | 9.8 | 2025-08-19 | The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the 'imic_agent_register' function in all… |
CVE-2025-8357 | Medium | 4.3 | 2025-08-19 | The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file deletion in the /wp-content/uploads directory due to insufficient file path va… |
CVE-2025-5417 | Medium | 6.1 | 2025-08-19 | An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admi… |
CVE-2025-7496 | Medium | 6.4 | 2025-08-19 | The WPC Smart Compare for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via DOM elements in all versions up to, and including… |
CVE-2025-54862 | Medium | 5.4 | 2025-08-18 | Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webp… |
CVE-2025-54759 | Medium | 6.1 | 2025-08-18 | Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and ste… |
CVE-2025-54156 | High | 7.4 | 2025-08-18 | The Sante PACS Server Web Portal sends credential information without encryption. |
CVE-2025-53948 | High | 7.5 | 2025-08-18 | The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition. The applicatio… |
CVE-2025-52584 | High | 7.8 | 2025-08-18 | In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supp… |
CVE-2025-46269 | High | 7.8 | 2025-08-18 | In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supp… |
CVE-2025-9119 | Low | 2.4 | 2025-08-18 | A vulnerability was determined in Netis WF2419 1.2.29433. This vulnerability affects unknown code of the file /index.htm of the component Wireless Settings Pag… |
CVE-2025-53705 | High | 7.8 | 2025-08-18 | In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supp… |
CVE-2025-41392 | High | 7.8 | 2025-08-18 | In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supp… |
CVE-2025-8098 | High | 7.8 | 2025-08-18 | An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges. |
CVE-2025-55591 | Critical | 9.8 | 2025-08-18 | TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint. |
CVE-2025-55590 | Medium | 6.5 | 2025-08-18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection vulnerability via the component bupload.html. |
CVE-2025-55589 | Medium | 6.5 | 2025-08-18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters… |
CVE-2025-55588 | High | 7.5 | 2025-08-18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the fw_ip parameter at /boafrm/formPortFw. This vulnerability allows attac… |
CVE-2025-55587 | High | 7.5 | 2025-08-18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the hostname parameter at /boafrm/formMapDelDevice. This vulnerability all… |
CVE-2025-55586 | High | 7.5 | 2025-08-18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the url parameter at /boafrm/formFilter. This vulnerability allows attacke… |
CVE-2025-55585 | Medium | 6.5 | 2025-08-18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability via the eval() function. |
CVE-2025-55584 | Medium | 5.3 | 2025-08-18 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain insecure credentials for the telnet service and root account. |
CVE-2025-55213 | Critical | 9.8 | 2025-08-18 | OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.9.3 to v1.9.4 ( ope… |
CVE-2025-53192 | High | 8.8 | 2025-08-18 | ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commo… |
CVE-2025-4371 | Medium | 6.8 | 2025-08-18 | A potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that could allow an attacker with physical access to write arbitra… |
CVE-2025-32992 | High | 8.5 | 2025-08-18 | Thermo Fisher Scientific ePort through 3.0.0 has Incorrect Access Control. |
CVE-2025-43731 | Medium | 5.4 | 2025-08-18 | A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.8, 2024.Q4.0 thro… |
CVE-2025-7693 | | 2025-08-18 | A security issue exists due to improper handling of malformed CIP Forward Close packets during fuzzing. The controller enters a solid red Fault LED state and b… | |
CVE-2025-55300 | | 2025-08-18 | Komari is a lightweight, self-hosted server monitoring tool designed to provide a simple and efficient solution for monitoring server performance. Prior to 1.0… | |
CVE-2025-55299 | Critical | 9.4 | 2025-08-18 | VaulTLS is a modern solution for managing mTLS (mutual TLS) certificates. Prior to 0.9.1, user accounts created through the User web UI have an empty but not N… |
CVE-2025-55296 | Medium | 5.5 | 2025-08-18 | librenms is a community-based GPL-licensed network monitoring system. A stored Cross-Site Scripting (XSS) vulnerability exists in LibreNMS (<= 25.6.0) in the A… |
CVE-2025-55293 | Critical | 9.4 | 2025-08-18 | Meshtastic is an open source mesh networking solution. Prior to v2.6.3, an attacker can send NodeInfo with a empty publicKey first, then overwrite it with a ne… |
CVE-2025-55291 | High | 7.1 | 2025-08-18 | Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag page is not properly sanitized. This allo… |
CVE-2025-55288 | Medium | 5.5 | 2025-08-18 | Genealogy is a family tree PHP application. Prior to 4.4.0, Authenticated Reflected Cross-Site Scripting (XSS) vulnerability was identified in the Genealogy ap… |
CVE-2025-55287 | Medium | 5.4 | 2025-08-18 | Genealogy is a family tree PHP application. Prior to 4.4.0, Authenticated Stored Cross-Site Scripting (XSS) vulnerability was identified in the Genealogy appli… |
CVE-2025-55283 | Critical | 9.1 | 2025-08-18 | aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows elevation to superuser inside P… |
CVE-2025-55282 | Critical | 9.1 | 2025-08-18 | aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows a user to elevate to superuser… |
CVE-2025-55214 | | 2025-08-18 | Copier library and CLI app for rendering project templates. From 7.1.0 to before 9.9.1, Copier suggests that it's safe to generate a project from a safe templa… | |
CVE-2025-55205 | Critical | 9.0 | 2025-08-18 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. A namespace label injection vulnerability in Capsule v0.10.3 and earlier allows authentic… |
CVE-2025-55201 | | 2025-08-18 | Copier library and CLI app for rendering project templates. Prior to 9.9.1, a safe template can currently read and write arbitrary files because Copier exposes… | |
CVE-2025-54234 | Low | 2.7 | 2025-08-18 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to limited file sys… |
CVE-2025-3639 | | 2025-08-18 | Liferay Portal 7.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through… | |
CVE-2025-54421 | High | 7.2 | 2025-08-18 | NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS) vulnerability in NamelessMC before 2.2.4 allows… |
CVE-2025-54118 | Medium | 5.3 | 2025-08-18 | NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Sensitive information disclosure in NamelessMC before 2.2.4 allows unauthe… |
CVE-2025-54117 | Critical | 9.0 | 2025-08-18 | NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS) vulnerability in NamelessMC before 2.2.3 allows… |
CVE-2025-4962 | High | 7.7 | 2025-08-18 | An Insecure Direct Object Reference (IDOR) vulnerability was identified in the `POST /v1/templates` endpoint of the Lunary API, affecting versions up to 0.8.8… |
CVE-2025-43732 | Low | 2.7 | 2025-08-18 | Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 thro… |
CVE-2025-36120 | High | 8.8 | 2025-08-18 | IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH session due to incorrect authorization c… |
CVE-2025-33100 | Medium | 6.2 | 2025-08-18 | IBM Concert Software 1.0.0 through 1.1.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authenti… |