2025 CVEs (page 226)
Page 226 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-25212 | Low | 3.3 | 2025-08-11 | in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input. |
CVE-2025-24925 | Low | 3.3 | 2025-08-11 | in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory. |
CVE-2025-24844 | Low | 3.3 | 2025-08-11 | in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory. |
CVE-2025-24298 | High | 8.4 | 2025-08-11 | in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free. |
CVE-2025-8826 | High | 8.8 | 2025-08-11 | A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This vulnerability affects the function um_rp_autoc… |
CVE-2025-8825 | Medium | 6.3 | 2025-08-11 | A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This affects the function RP_setBasicAuto of the fi… |
CVE-2025-8824 | High | 8.8 | 2025-08-11 | A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this issue is the function setRIP of th… |
CVE-2025-8823 | Medium | 6.3 | 2025-08-11 | A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function setDevice… |
CVE-2025-8822 | High | 8.8 | 2025-08-11 | A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected is the function algDisable of the file /go… |
CVE-2025-8821 | Medium | 6.3 | 2025-08-11 | A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This issue affects the function RP_setBasic of the… |
CVE-2025-8820 | High | 8.8 | 2025-08-11 | A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This vulnerability affects the function wirelessBas… |
CVE-2025-8819 | High | 8.8 | 2025-08-10 | A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This affects the function setWan of the file /goform/set… |
CVE-2025-8818 | Medium | 6.3 | 2025-08-10 | A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this issue is the function setDFSSettin… |
CVE-2025-8817 | High | 8.8 | 2025-08-10 | A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function setL… |
CVE-2025-8816 | High | 8.8 | 2025-08-10 | A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected is the function setOpMode of the file /gof… |
CVE-2025-8815 | High | 7.3 | 2025-08-10 | A vulnerability was found in 猫宁i Morning up to bc782730c74ff080494f145cc363a0b4f43f7d3e. It has been classified as critical. Affected is an unknown function of… |
CVE-2025-8814 | Medium | 4.3 | 2025-08-10 | A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function setCookie of the file src/main/java/co/yiiu… |
CVE-2025-8813 | Low | 3.5 | 2025-08-10 | A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as problematic. This vulnerability affects the function changeLanguage of the file src… |
CVE-2025-8812 | Low | 2.4 | 2025-08-10 | A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects an unknown part of the file /api/settings of the compo… |
CVE-2025-8811 | High | 7.3 | 2025-08-10 | A vulnerability, which was classified as critical, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality… |
CVE-2025-8810 | High | 8.8 | 2025-08-10 | A vulnerability classified as critical was found in Tenda AC20 16.03.08.05. Affected by this vulnerability is the function strcpy of the file /goform/SetFirewa… |
CVE-2025-8809 | High | 7.3 | 2025-08-10 | A vulnerability classified as critical has been found in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /addelidetails.ph… |
CVE-2025-8808 | Medium | 4.3 | 2025-08-10 | A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been rated as problematic. This issue affects the function exportOrder of the file /tianti-modu… |
CVE-2025-8807 | Medium | 6.3 | 2025-08-10 | A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been declared as critical. This vulnerability affects unknown code of the file /tianti-module-a… |
CVE-2025-8806 | Medium | 6.3 | 2025-08-10 | A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. It has been classified as critical. This affects an unknow… |
CVE-2025-8805 | Medium | 5.3 | 2025-08-10 | A vulnerability was determined in Open5GS up to 2.7.5. Affected by this issue is the function smf_gsm_state_wait_pfcp_deletion of the file src/smf/gsm-sm.c of… |
CVE-2025-8804 | Medium | 5.3 | 2025-08-10 | A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ngap_build_downlink_nas_transport of the component AMF. The ma… |
CVE-2025-8803 | Medium | 5.3 | 2025-08-10 | A vulnerability has been found in Open5GS up to 2.7.5. Affected is the function gmm_state_de_registered/gmm_state_exception of the file src/amf/gmm-sm.c of the… |
CVE-2025-8802 | Medium | 5.3 | 2025-08-10 | A vulnerability was determined in Open5GS up to 2.7.5. This vulnerability affects the function smf_state_operational of the file src/smf/smf-sm.c of the compon… |
CVE-2025-8801 | Medium | 5.3 | 2025-08-10 | A vulnerability was found in Open5GS up to 2.7.5. This affects the function gmm_state_exception of the file src/amf/gmm-sm.c of the component AMF. The manipula… |
CVE-2025-8800 | Medium | 5.3 | 2025-08-10 | A vulnerability has been found in Open5GS up to 2.7.5. Affected by this issue is the function esm_handle_pdn_connectivity_request of the file src/mme/esm-handl… |
CVE-2025-8799 | Medium | 5.3 | 2025-08-10 | A vulnerability was identified in Open5GS up to 2.7.5. Affected by this vulnerability is the function amf_npcf_am_policy_control_build_create/amf_nsmf_pdusessi… |
CVE-2025-8798 | High | 7.3 | 2025-08-10 | A vulnerability was found in oitcode samarium up to 0.9.6. It has been classified as critical. Affected is an unknown function of the file /dashboard/product o… |
CVE-2025-8797 | Medium | 6.3 | 2025-08-10 | A vulnerability was found in LitmusChaos Litmus up to 3.19.0 and classified as critical. This issue affects some unknown processing of the component LocalStora… |
CVE-2025-8796 | Medium | 5.4 | 2025-08-10 | A vulnerability has been found in LitmusChaos Litmus up to 3.19.0 and classified as problematic. This vulnerability affects unknown code of the file /auth/dele… |
CVE-2025-8795 | Medium | 6.3 | 2025-08-10 | A vulnerability, which was classified as critical, was found in LitmusChaos Litmus up to 3.19.0. This affects an unknown part of the file /auth/login. The mani… |
CVE-2025-8794 | Medium | 5.3 | 2025-08-10 | A vulnerability, which was classified as problematic, has been found in LitmusChaos Litmus up to 3.19.0. Affected by this issue is some unknown functionality o… |
CVE-2025-8793 | Medium | 4.3 | 2025-08-10 | A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected by this vulnerability is an unknown functionality. The manipul… |
CVE-2025-8792 | Medium | 4.3 | 2025-08-10 | A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3.19.0. Affected is an unknown function. The manipulation leads to client-… |
CVE-2025-8791 | Medium | 6.3 | 2025-08-10 | A vulnerability was found in LitmusChaos Litmus up to 3.19.0. It has been rated as critical. This issue affects some unknown processing of the file /auth/list_… |
CVE-2025-52136 | Low | 3.0 | 2025-08-10 | In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web interface. NOTE: the Supplier's position is that this is the int… |
CVE-2025-8790 | Medium | 4.3 | 2025-08-10 | A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been declared as critical. This vulnerability affects unknown code of the file /module/Api… |
CVE-2025-8789 | Medium | 4.3 | 2025-08-10 | A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been classified as problematic. This affects an unknown part of the file /module/Api/Diari… |
CVE-2025-8788 | Low | 3.5 | 2025-08-10 | A vulnerability was found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /p… |
CVE-2025-8787 | Low | 3.5 | 2025-08-10 | A vulnerability has been found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-8786 | Low | 3.5 | 2025-08-10 | A vulnerability, which was classified as problematic, was found in Portabilis i-Diario up to 1.5.0. Affected is an unknown function of the file /registros-de-c… |
CVE-2025-8785 | Low | 3.5 | 2025-08-10 | A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9. This issue affects some unknown processing of the file /… |
CVE-2025-8784 | Low | 3.5 | 2025-08-09 | A vulnerability classified as problematic was found in Portabilis i-Educar up to 2.9. This vulnerability affects unknown code of the file /intranet/funcionario… |
CVE-2025-8775 | Medium | 6.3 | 2025-08-09 | A vulnerability was found in Qiyuesuo Eelectronic Signature Platform up to 4.34 and classified as critical. Affected by this issue is the function execute of t… |
CVE-2025-8774 | Low | 2.5 | 2025-08-09 | A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-8773 | High | 7.3 | 2025-08-09 | A vulnerability, which was classified as critical, was found in Dinstar Monitoring Platform 甘肃省危险品库监控平台 1.0. Affected is an unknown function of the file /itc/$… |
CVE-2025-8772 | Medium | 4.3 | 2025-08-09 | A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06. This issue affects some unknown processing of the file /… |
CVE-2025-8765 | Low | 3.5 | 2025-08-09 | A vulnerability classified as problematic was found in Datacom DM955 5GT 1200 825.8010.00. Affected by this vulnerability is an unknown functionality of the co… |
CVE-2025-8764 | Medium | 6.3 | 2025-08-09 | A vulnerability classified as critical has been found in linlinjava litemall up to 1.8.0. Affected is the function Upload of the file /wx/storage/upload. The m… |
CVE-2025-8763 | Low | 3.7 | 2025-08-09 | A vulnerability was found in Ruijie EG306MG 3.0(1)B11P309. It has been rated as problematic. This issue affects some unknown processing of the file /etc/strong… |
CVE-2025-8759 | Low | 3.7 | 2025-08-09 | A vulnerability was found in TRENDnet TN-200 1.02b02. It has been declared as problematic. This vulnerability affects unknown code of the component Lighttpd. T… |
CVE-2025-8758 | High | 7.0 | 2025-08-09 | A vulnerability was found in TRENDnet TEW-822DRE FW103B02. It has been classified as problematic. This affects an unknown part of the component vsftpd. The man… |
CVE-2025-8757 | High | 7.0 | 2025-08-09 | A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /server/… |
CVE-2025-8756 | Medium | 6.3 | 2025-08-09 | A vulnerability has been found in TDuckCloud tduck-platform up to 5.1 and classified as critical. Affected by this vulnerability is the function preHandle of t… |
CVE-2025-8755 | Medium | 5.3 | 2025-08-09 | A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic. This issue affects the function detail of the file UmsMemberController… |
CVE-2025-8753 | Medium | 5.4 | 2025-08-09 | A vulnerability, which was classified as critical, has been found in linlinjava litemall up to 1.8.0. Affected by this issue is the function delete of the file… |
CVE-2025-7726 | Medium | 6.4 | 2025-08-09 | The The7 theme for WordPress is vulnerable to Stored Cross-Site Scripting via its lightbox rendering code in all versions up to, and including, 12.6.0 due to i… |
CVE-2025-7020 | | 2025-08-09 | An incorrect encryption implementation vulnerability exists in the system log dump feature of BYD's DiLink 3.0 OS (e.g. in the model ATTO3). An attacker with p… | |
CVE-2025-8752 | High | 7.3 | 2025-08-09 | A vulnerability was found in wangzhixuan spring-shiro-training up to 94812c1fd8f7fe796c931f4984ff1aa0671ab562. It has been declared as critical. This vulnerabi… |
CVE-2025-8751 | Low | 3.1 | 2025-08-09 | A vulnerability was found in Protected Total WebShield Extension up to 3.2.0 on Chrome. It has been classified as problematic. This affects an unknown part of… |
CVE-2025-8750 | Low | 2.4 | 2025-08-09 | A vulnerability has been found in macrozheng mall up to 1.0.3 and classified as problematic. Affected by this vulnerability is the function Upload of the file… |
CVE-2025-8746 | Low | 3.3 | 2025-08-09 | A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function __strstr_sse2. The manipulation leads to me… |
CVE-2025-8745 | Medium | 5.3 | 2025-08-09 | A vulnerability, which was classified as problematic, has been found in Weee RICEPO App 6.17.77 on Android. This issue affects some unknown processing of the f… |
CVE-2025-4655 | Medium | 5.0 | 2025-08-09 | SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7… |
CVE-2025-4581 | High | 8.6 | 2025-08-09 | Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 throu… |
CVE-2025-55149 | | 2025-08-09 | Tiny-Scientist is a lightweight framework for automating the entire lifecycle of scientific research—from ideation to implementation, writing, and review. In v… | |
CVE-2025-55013 | Medium | 4.2 | 2025-08-09 | The Assemblyline 4 Service Client interfaces with the API to fetch tasks and publish the result for a service in Assemblyline 4. In versions below 4.6.1.dev138… |
CVE-2025-55009 | High | 7.1 | 2025-08-09 | The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and b… |
CVE-2025-55008 | High | 7.1 | 2025-08-09 | The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1… |
CVE-2025-55006 | Medium | 4.3 | 2025-08-09 | Frappe Learning is a learning system that helps users structure their content. In versions 2.33.0 and below, the image upload functionality did not adequately… |
CVE-2025-55003 | Medium | 5.7 | 2025-08-09 | OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and… |
CVE-2025-55001 | Medium | 6.5 | 2025-08-09 | OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and… |
CVE-2025-55000 | Medium | 6.5 | 2025-08-09 | OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 thro… |
CVE-2025-54999 | Low | 3.7 | 2025-08-09 | OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 thro… |
CVE-2025-54998 | Medium | 5.3 | 2025-08-09 | OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 thro… |
CVE-2025-54997 | Critical | 9.1 | 2025-08-09 | OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and… |
CVE-2025-55152 | Medium | 5.3 | 2025-08-09 | oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. In versions 17.1.5 and below, it'… |
CVE-2025-54996 | High | 7.2 | 2025-08-09 | OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and… |
CVE-2025-54888 | | 2025-08-09 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. In versions below 1.3.20, 1.4.0-dev.585 through 1.4.12, 1.5.0-dev.636… | |
CVE-2025-54417 | High | 8.8 | 2025-08-09 | Craft is a platform for creating digital experiences. Versions 4.13.8 through 4.16.2 and 5.5.8 through 5.8.3 contain a vulnerability that can bypass CVE-2025-2… |
CVE-2025-8744 | High | 7.3 | 2025-08-09 | A vulnerability classified as critical was found in CesiumLab Web up to 4.0. This vulnerability affects unknown code of the file /lodmodels/. The manipulation… |
CVE-2025-6573 | Critical | 9.8 | 2025-08-09 | Kernel software installed and running inside an untrusted/rich execution environment (REE) could leak information from the trusted execution environment (TEE). |
CVE-2025-46709 | High | 7.5 | 2025-08-09 | Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception. |
CVE-2025-8743 | Low | 3.5 | 2025-08-08 | A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. This affects an unknown part of the file /data_source_edit.shtm of the com… |
CVE-2025-8742 | Low | 3.7 | 2025-08-08 | A vulnerability was found in macrozheng mall 1.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Adm… |
CVE-2025-8741 | Low | 3.7 | 2025-08-08 | A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of th… |
CVE-2025-8740 | Low | 2.4 | 2025-08-08 | A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categori… |
CVE-2025-8739 | Medium | 4.3 | 2025-08-08 | A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /admin/tags/s… |
CVE-2025-55188 | Low | 3.6 | 2025-08-08 | 7-Zip before 25.01 does not always properly handle symbolic links during extraction. |
CVE-2025-8738 | Medium | 5.3 | 2025-08-08 | A vulnerability has been found in zlt2000 microservices-platform up to 6.0.0 and classified as problematic. This vulnerability affects unknown code of the file… |
CVE-2025-8737 | Low | 3.5 | 2025-08-08 | A vulnerability, which was classified as problematic, was found in zlt2000 microservices-platform up to 6.0.0. This affects the function onLogoutSuccess of the… |
CVE-2025-8736 | Medium | 5.3 | 2025-08-08 | A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the c… |
CVE-2025-8735 | Low | 3.3 | 2025-08-08 | A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the compone… |
CVE-2025-4796 | High | 8.8 | 2025-08-08 | The Eventin plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.34. This is due to the pl… |
CVE-2025-5095 | Critical | 9.8 | 2025-08-08 | Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. … |