2025 CVEs (page 238)
Page 238 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-8266 | Medium | 6.3 | 2025-07-28 | A vulnerability has been found in yanyutao0402 ChanCMS up to 3.1.2 and classified as critical. Affected by this vulnerability is the function getArticle of the… |
CVE-2025-8265 | Medium | 4.7 | 2025-07-28 | A vulnerability classified as critical has been found in 299Ko CMS 2.0.0. This affects an unknown part of the file /admin/filemanager/view of the component Fil… |
CVE-2025-27802 | Medium | 4.8 | 2025-07-28 | The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authent… |
CVE-2025-27801 | Medium | 4.8 | 2025-07-28 | The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authent… |
CVE-2025-27800 | Medium | 4.8 | 2025-07-28 | The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities. This allowed an authent… |
CVE-2025-8262 | Medium | 4.3 | 2025-07-28 | A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file s… |
CVE-2025-8261 | High | 7.3 | 2025-07-28 | A weakness has been identified in Vaelsys VaelsysV4 4.1.0. This vulnerability affects unknown code of the file /grid/vgrid_server.php of the component User Cre… |
CVE-2025-8260 | Low | 3.1 | 2025-07-28 | A security flaw has been discovered in Vaelsys VaelsysV4 up to 5.1.0/5.4.0. This affects an unknown part of the file /grid/vgrid_server.php of the component We… |
CVE-2025-8259 | High | 7.3 | 2025-07-28 | A vulnerability was identified in Vaelsys VaelsysV4 up to 5.1.0/5.4.0. Affected by this issue is the function execute_DataObjectProc of the file /grid/vgrid_se… |
CVE-2025-8267 | High | 8.2 | 2025-07-28 | Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery (SSRF) due to an incomplete denylist of IP address ranges. Specifi… |
CVE-2025-8258 | Medium | 5.3 | 2025-07-28 | A vulnerability, which was classified as problematic, has been found in Cool Mo Maigcal Number App up to 1.0.3 on Android. Affected by this issue is some unkno… |
CVE-2025-8257 | Medium | 5.3 | 2025-07-28 | A vulnerability classified as problematic was found in Lobby Universe Lobby App up to 2.8.0 on Android. Affected by this vulnerability is an unknown functional… |
CVE-2025-8256 | Medium | 6.3 | 2025-07-28 | A vulnerability classified as critical has been found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/product.p… |
CVE-2025-8255 | High | 7.3 | 2025-07-28 | A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /reg… |
CVE-2025-8254 | Medium | 6.3 | 2025-07-28 | A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /vi… |
CVE-2025-8253 | High | 7.3 | 2025-07-28 | A vulnerability was found in code-projects Exam Form Submission 1.0. It has been classified as critical. This affects an unknown part of the file /admin/delete… |
CVE-2025-8252 | High | 7.3 | 2025-07-28 | A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2025-8251 | High | 7.3 | 2025-07-28 | A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-8250 | High | 7.3 | 2025-07-28 | A vulnerability, which was classified as critical, was found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/upda… |
CVE-2025-8249 | High | 7.3 | 2025-07-28 | A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the… |
CVE-2025-8248 | High | 7.3 | 2025-07-28 | A vulnerability classified as critical was found in code-projects Online Ordering System 1.0. This vulnerability affects unknown code of the file /signup.php… |
CVE-2025-8247 | Medium | 6.3 | 2025-07-28 | A vulnerability classified as critical has been found in Projectworlds Online Admission System 1.0. This affects an unknown part of the file /admin.php. The ma… |
CVE-2025-8246 | High | 8.8 | 2025-07-27 | A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2025-8245 | High | 8.8 | 2025-07-27 | A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-8244 | High | 8.8 | 2025-07-27 | A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formMap… |
CVE-2025-8243 | High | 8.8 | 2025-07-27 | A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formM… |
CVE-2025-8242 | High | 8.8 | 2025-07-27 | A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/for… |
CVE-2025-8241 | High | 7.3 | 2025-07-27 | A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. This affects an unknown part of the file /repo… |
CVE-2025-8240 | High | 7.3 | 2025-07-27 | A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some unknown functionali… |
CVE-2025-8239 | High | 7.3 | 2025-07-27 | A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2025-8238 | High | 7.3 | 2025-07-27 | A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/update_s2.p… |
CVE-2025-8237 | High | 7.3 | 2025-07-27 | A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adm… |
CVE-2025-8236 | High | 7.3 | 2025-07-27 | A vulnerability was found in code-projects Online Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /a… |
CVE-2025-8235 | High | 7.3 | 2025-07-27 | A vulnerability was found in code-projects Online Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/prod… |
CVE-2025-8234 | High | 7.3 | 2025-07-27 | A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2025-8233 | High | 7.3 | 2025-07-27 | A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2025-8232 | High | 7.3 | 2025-07-27 | A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/de… |
CVE-2025-8231 | Medium | 6.8 | 2025-07-27 | A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin… |
CVE-2025-8230 | Medium | 6.3 | 2025-07-27 | A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /manage_user.p… |
CVE-2025-8229 | Medium | 6.3 | 2025-07-27 | A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /parcel_list.php. Th… |
CVE-2025-8228 | Medium | 6.3 | 2025-07-27 | A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been rated as critical. Affected by this issue is the function getPages of the file /cms/… |
CVE-2025-8227 | Medium | 6.3 | 2025-07-27 | A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-8226 | Medium | 4.3 | 2025-07-27 | A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been classified as problematic. Affected is an unknown function of the file /sysApp/find… |
CVE-2025-8225 | Low | 3.3 | 2025-07-27 | A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function process_debug_info of the file binutils/dwarf.c o… |
CVE-2025-5120 | Critical | 10.0 | 2025-07-27 | A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and a… |
CVE-2025-8224 | Low | 3.3 | 2025-07-27 | A vulnerability has been found in GNU Binutils 2.44 and classified as problematic. This vulnerability affects the function bfd_elf_get_str_section of the file… |
CVE-2025-8223 | Medium | 4.3 | 2025-07-27 | A vulnerability, which was classified as problematic, was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999. This aff… |
CVE-2025-8222 | Low | 3.5 | 2025-07-27 | A vulnerability, which was classified as problematic, has been found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999. Aff… |
CVE-2025-8221 | Medium | 4.3 | 2025-07-27 | A vulnerability classified as problematic was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999. Affected by this vul… |
CVE-2025-8104 | Medium | 4.3 | 2025-07-27 | The Memory Usage plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.98. This is due to missing nonce vali… |
CVE-2025-8220 | High | 7.3 | 2025-07-27 | A vulnerability has been found in Engeman Web up to 12.0.0.2. The affected element is an unknown function of the file /Login/RecoveryPass of the component Pass… |
CVE-2025-8219 | Medium | 6.3 | 2025-07-27 | A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. It has been rated as critical. This issue affects some unknow… |
CVE-2025-54597 | High | 7.2 | 2025-07-27 | LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter. |
CVE-2025-6241 | Medium | 4.4 | 2025-07-27 | LsiAgent.exe, a component of SysTrack from Lakeside Software, attempts to load several DLL files which are not present in the default installation. If a user-w… |
CVE-2025-8211 | Low | 3.5 | 2025-07-26 | A vulnerability was found in Roothub up to 2.6. It has been declared as problematic. Affected by this vulnerability is the function Edit of the file src/main/j… |
CVE-2025-8210 | Medium | 5.3 | 2025-07-26 | A vulnerability was found in Yeelink Yeelight App up to 3.5.4 on Android. It has been classified as problematic. Affected is an unknown function of the file An… |
CVE-2025-8207 | Medium | 5.3 | 2025-07-26 | A vulnerability was found in Canara ai1 Mobile Banking App 3.6.23 on Android and classified as problematic. This issue affects some unknown processing of the f… |
CVE-2025-8206 | Low | 3.1 | 2025-07-26 | A vulnerability, which was classified as problematic, was found in Comodo Dragon up to 134.0.6998.179. This affects an unknown part of the component IP DNS Lea… |
CVE-2025-8205 | Low | 3.7 | 2025-07-26 | A vulnerability, which was classified as problematic, has been found in Comodo Dragon up to 134.0.6998.179. Affected by this issue is some unknown functionalit… |
CVE-2025-8204 | Low | 3.1 | 2025-07-26 | A vulnerability classified as problematic was found in Comodo Dragon up to 134.0.6998.179. Affected by this vulnerability is an unknown functionality of the co… |
CVE-2025-8203 | Medium | 6.3 | 2025-07-26 | A vulnerability classified as critical has been found in Jingmen Zeyou Large File Upload Control up to 6.3. Affected is an unknown function of the file /index… |
CVE-2025-8191 | Low | 3.5 | 2025-07-26 | A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3. Affected is an unknown function of the file /swagger-ui/index.h… |
CVE-2025-8190 | Medium | 6.3 | 2025-07-26 | A vulnerability, which was classified as critical, has been found in Campcodes Courier Management System 1.0. This issue affects some unknown processing of the… |
CVE-2025-8189 | Medium | 6.3 | 2025-07-26 | A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /edit_user.php… |
CVE-2025-8188 | Medium | 6.3 | 2025-07-26 | A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /edit_staff.php. The… |
CVE-2025-8187 | Medium | 6.3 | 2025-07-26 | A vulnerability was found in Campcodes Courier Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of th… |
CVE-2025-8186 | Medium | 6.3 | 2025-07-26 | A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-8185 | High | 7.3 | 2025-07-26 | A vulnerability was found in 1000 Projects ABC Courier Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /… |
CVE-2025-8184 | High | 8.8 | 2025-07-26 | A vulnerability was found in D-Link DIR-513 up to 1.10 and classified as critical. This issue affects the function formSetWanL2TPcallback of the file /goform/f… |
CVE-2025-8182 | Medium | 5.6 | 2025-07-26 | A vulnerability has been found in Tenda AC18 15.03.05.19 and classified as problematic. This vulnerability affects unknown code of the file /etc_ro/smb.conf of… |
CVE-2025-6991 | High | 7.5 | 2025-07-26 | The kallyas theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.21.0 via the 'TH_LatestPosts4` widget. This makes… |
CVE-2025-6989 | High | 8.1 | 2025-07-26 | The Kallyas theme for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the delete_font() function in all versio… |
CVE-2025-5529 | Medium | 6.4 | 2025-07-26 | The Educenter theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Circle Counter Block in all versions up to, and including, 1.6.2 due to… |
CVE-2025-8181 | High | 7.2 | 2025-07-26 | A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1. This affects an unknown part of the file vsftpd.conf of the… |
CVE-2025-8180 | High | 8.8 | 2025-07-26 | A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formdeleteUserName of the file… |
CVE-2025-8097 | Medium | 5.3 | 2025-07-26 | The WoodMart theme for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 8.2.6. This is due to insufficient validation… |
CVE-2025-7501 | Medium | 6.4 | 2025-07-26 | The Wonder Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image title and description DOM in all versions up to, and includi… |
CVE-2025-6987 | Medium | 6.4 | 2025-07-26 | The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advanced_iframe' shortcode in all versions up to, and i… |
CVE-2025-8198 | High | 7.5 | 2025-07-26 | The MinimogWP – The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.9… |
CVE-2025-8179 | High | 7.3 | 2025-07-26 | A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown… |
CVE-2025-8178 | High | 8.8 | 2025-07-26 | A vulnerability classified as critical has been found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /goform/RequestsProcessLaid. The m… |
CVE-2025-6895 | Critical | 9.8 | 2025-07-26 | The Melapress Login Security plugin for WordPress is vulnerable to Authentication Bypass due to missing authorization within the get_valid_user_based_on_token(… |
CVE-2025-8177 | Medium | 5.3 | 2025-07-26 | A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The mani… |
CVE-2025-8176 | Medium | 5.3 | 2025-07-26 | A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tif… |
CVE-2025-8103 | Medium | 4.3 | 2025-07-26 | The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.7. This is due to mis… |
CVE-2025-54416 | Critical | 9.1 | 2025-07-26 | tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 a… |
CVE-2025-54415 | | 2025-07-26 | dag-factory is a library for Apache Airflow® to construct DAGs declaratively via configuration files. In versions 0.23.0a8 and below, a high-severity vulnerabi… | |
CVE-2025-54414 | | 2025-07-26 | Anubis is a Web AI Firewall Utility that weighs the soul of users' connections using one or more challenges in order to protect upstream resources from scraper… | |
CVE-2025-54413 | | 2025-07-26 | skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain an inconsistency in MethodNode, w… | |
CVE-2025-54412 | | 2025-07-26 | skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain a inconsistency in the OperatorFu… | |
CVE-2025-54385 | Critical | 9.8 | 2025-07-26 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions between 17.0.0-rc1 to 17.2.2 and versions… |
CVE-2025-54380 | Medium | 6.5 | 2025-07-26 | Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to version 17.6, Opencast would incorrectly se… |
CVE-2025-54378 | High | 8.3 | 2025-07-26 | HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends. In versions 11.0.13 and below of haxcms-nodejs and versions 11.0.8 and below… |
CVE-2025-54366 | High | 8.8 | 2025-07-26 | FreeScout is a lightweight free open source help desk and shared inbox built with PHP (Laravel framework). In versions 1.8.185 and below, there is a critical d… |
CVE-2025-50185 | | 2025-07-26 | DbGate is cross-platform database manager. In versions 6.6.0 and below, DbGate allows unauthorized file access due to insufficient validation of file paths and… | |
CVE-2025-50184 | | 2025-07-26 | DbGate is cross-platform database manager. In versions 6.4.3-premium-beta.5 and below, DbGate is vulnerable to a directory traversal flaw. The file parameter i… | |
CVE-2025-8175 | Medium | 6.5 | 2025-07-26 | A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usb_paswd.asp of the co… |
CVE-2025-8174 | Medium | 6.3 | 2025-07-26 | A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admi… |
CVE-2025-8173 | High | 7.3 | 2025-07-25 | A vulnerability has been found in 1000 Projects ABC Courier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown func… |
CVE-2025-8172 | Medium | 6.3 | 2025-07-25 | A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System 1.0. Affected is an unknown function of the file /admin… |