2025 CVEs (page 253)
Page 253 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-52964 | Medium | 6.5 | 2025-07-11 | A Reachable Assertion vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-b… |
CVE-2025-52963 | Medium | 5.5 | 2025-07-11 | An Improper Access Control vulnerability in the User Interface (UI) of Juniper Networks Junos OS allows a local, low-privileged attacker to bring down an inter… |
CVE-2025-52958 | Medium | 5.3 | 2025-07-11 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated … |
CVE-2025-52955 | Medium | 6.5 | 2025-07-11 | An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent… |
CVE-2025-52954 | High | 7.8 | 2025-07-11 | A Missing Authorization vulnerability in the internal virtual routing and forwarding (VRF) of Juniper Networks Junos OS Evolved allows a local, low-privileged… |
CVE-2025-52953 | Medium | 6.5 | 2025-07-11 | An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated a… |
CVE-2025-52952 | Medium | 6.5 | 2025-07-11 | An Out-of-bounds Write vulnerability in the connectivity fault management (CFM) daemon of Juniper Networks Junos OS on MX Series with MPC-BUILTIN, MPC1 through… |
CVE-2025-52951 | Medium | 5.8 | 2025-07-11 | A Protection Mechanism Failure vulnerability in kernel filter processing of Juniper Networks Junos OS allows an attacker sending IPv6 traffic destined to the d… |
CVE-2025-52950 | Critical | 9.6 | 2025-07-11 | A Missing Authorization vulnerability in Juniper Networks Security Director allows an unauthenticated network-based attacker to read or tamper with multiple se… |
CVE-2025-52949 | Medium | 6.5 | 2025-07-11 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved all… |
CVE-2025-52948 | Medium | 5.9 | 2025-07-11 | An Improper Handling of Exceptional Conditions vulnerability in Berkeley Packet Filter (BPF) processing of Juniper Networks Junos OS allows an attacker, in rar… |
CVE-2025-52947 | Medium | 6.5 | 2025-07-11 | An Improper Handling of Exceptional Conditions vulnerability in route processing of Juniper Networks Junos OS on specific end-of-life (EOL) ACX Series platform… |
CVE-2025-52946 | High | 7.5 | 2025-07-11 | A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sendi… |
CVE-2025-52089 | High | 8.8 | 2025-07-11 | A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenticated attacker to execute arbitrary OS… |
CVE-2025-48924 | Medium | 5.3 | 2025-07-11 | Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and… |
CVE-2025-30661 | High | 7.3 | 2025-07-11 | An Incorrect Permission Assignment for Critical Resource vulnerability in line card script processing of Juniper Networks Junos OS allows a local, low-privileg… |
CVE-2025-51591 | Low | 3.7 | 2025-07-11 | A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted if… |
CVE-2025-53862 | Low | 3.5 | 2025-07-11 | A flaw was found in Ansible. Three API endpoints are accessible and return verbose, unauthenticated responses. This flaw allows a malicious user to access data… |
CVE-2025-53861 | Low | 3.1 | 2025-07-11 | A flaw was found in Ansible. Sensitive cookies without security flags over non-encrypted channels can lead to Man-in-the-Middle (MitM) and Cross-site scripting… |
CVE-2025-6788 | | 2025-07-11 | A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong control sphere, providing other authentic… | |
CVE-2025-50125 | | 2025-07-11 | A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code execution when the server is accessed via th… | |
CVE-2025-50124 | | 2025-07-11 | A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is accessed by a privileged account vi… | |
CVE-2025-50123 | | 2025-07-11 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command execution by a privileged account whe… | |
CVE-2025-50122 | | 2025-07-11 | A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reverse engineered with… | |
CVE-2025-50121 | | 2025-07-11 | A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause unauthenticated remo… | |
CVE-2025-3933 | Medium | 5.3 | 2025-07-11 | A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor cl… |
CVE-2025-6851 | High | 7.2 | 2025-07-11 | The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajax_blinks() fu… |
CVE-2025-6838 | Medium | 4.1 | 2025-07-11 | The Broken Link Notifier plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.3.0 via broken links that are later export… |
CVE-2025-6438 | | 2025-07-11 | A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause manipulation of SOAP API calls and XML external e… | |
CVE-2025-7442 | High | 7.5 | 2025-07-11 | The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to SQL Injection via several parameters in the MJ_gmgt_delete_class_limit_for_me… |
CVE-2025-6745 | Medium | 5.3 | 2025-07-11 | The WoodMart plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.2.5 via the woodmart_get_posts_by_query() funct… |
CVE-2025-6068 | Medium | 6.4 | 2025-07-11 | The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th… |
CVE-2025-5530 | Medium | 6.4 | 2025-07-11 | The WPC Smart Compare for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shortcode_btn' shortcode in all versi… |
CVE-2025-4593 | Medium | 6.5 | 2025-07-11 | The WP Register Profile With Shortcode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the… |
CVE-2025-6716 | Medium | 6.4 | 2025-07-11 | The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI plugi… |
CVE-2025-5992 | | 2025-07-11 | When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial of service, for example, this can happen when passing… | |
CVE-2025-5392 | Critical | 9.8 | 2025-07-11 | The GB Forms DB plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.2 via the gbfdb_talk_to_front() function… |
CVE-2025-5028 | | 2025-07-11 | Installation file of ESET security products on Windows allow an attacker to misuse to delete an arbitrary file without having the permissions to do so. | |
CVE-2025-6200 | Medium | 5.9 | 2025-07-11 | The GeoDirectory WordPress plugin before 2.8.120 does not validate and escape some of its shortcode attributes before outputting them back in a page/post wher… |
CVE-2025-30026 | Critical | 9.8 | 2025-07-11 | The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required. |
CVE-2025-30025 | High | 7.8 | 2025-07-11 | The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation. |
CVE-2025-30024 | Medium | 6.8 | 2025-07-11 | The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack. |
CVE-2025-30023 | Critical | 9.0 | 2025-07-11 | The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack. |
CVE-2025-2942 | Medium | 4.3 | 2025-07-11 | The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action… |
CVE-2025-7401 | Critical | 9.8 | 2025-07-11 | The Premium Age Verification / Restriction for WordPress plugin for WordPress is vulnerable to arbitrary file read and write due to the existence of an insuffi… |
CVE-2025-7436 | High | 7.3 | 2025-07-11 | A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2025-7435 | Low | 3.5 | 2025-07-11 | A vulnerability was found in LiveHelperChat lhc-php-resque Extension up to ee1270b35625f552425e32a6a3061cd54b5085c4. It has been classified as problematic. Thi… |
CVE-2025-53864 | Medium | 5.8 | 2025-07-11 | Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON objec… |
CVE-2025-7434 | High | 8.8 | 2025-07-11 | A vulnerability was found in Tenda FH451 up to 1.0.0.9 and classified as critical. Affected by this issue is the function fromAddressNat of the file /goform/ad… |
CVE-2025-7423 | High | 8.8 | 2025-07-11 | A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). Affected by this vulnerability is the function formWifiMacFilterSet of the file… |
CVE-2025-7422 | High | 8.8 | 2025-07-11 | A vulnerability classified as critical has been found in Tenda O3V2 1.0.0.12(3880). Affected is the function setAutoReboot of the file /goform/setNetworkServic… |
CVE-2025-7421 | High | 8.8 | 2025-07-11 | A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been rated as critical. This issue affects the function fromMacFilterModify of the file /goform/… |
CVE-2025-5241 | Medium | 5.3 | 2025-07-11 | Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series allows a remote unauthenticated attacker to lo… |
CVE-2025-7420 | High | 8.8 | 2025-07-11 | A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been declared as critical. This vulnerability affects the function formWifiBasicSet of the file… |
CVE-2025-53519 | Medium | 5.4 | 2025-07-11 | A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulati… |
CVE-2025-53515 | High | 8.8 | 2025-07-11 | A vulnerability exists in Advantech iView that allows for SQL injection and remote code execution through NetworkServlet.archiveTrap(). This issue requires a… |
CVE-2025-53509 | Medium | 6.5 | 2025-07-11 | A vulnerability exists in Advantech iView that allows for argument injection in the NetworkServlet.restoreDatabase(). This issue requires an authenticated at… |
CVE-2025-53475 | High | 8.8 | 2025-07-11 | A vulnerability exists in Advantech iView that could allow for SQL injection and remote code execution through NetworkServlet.getNextTrapPage(). This issue r… |
CVE-2025-53471 | Medium | 5.1 | 2025-07-11 | Emerson ValveLink products receive input or data, but does not validate or incorrectly validates that the input has the properties that are required to proce… |
CVE-2025-53397 | Medium | 5.4 | 2025-07-11 | A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By exploiting… |
CVE-2025-52579 | Critical | 9.4 | 2025-07-11 | Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain… |
CVE-2025-52577 | High | 8.8 | 2025-07-11 | A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServlet.archiveTrapRange(). This issue requ… |
CVE-2025-52459 | Medium | 6.5 | 2025-07-11 | A vulnerability exists in Advantech iView that allows for argument injection in NetworkServlet.backupDatabase(). This issue requires an authenticated attacke… |
CVE-2025-50109 | High | 7.7 | 2025-07-11 | Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere. |
CVE-2025-48891 | High | 7.6 | 2025-07-11 | A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() function. This vulnerability can be explo… |
CVE-2025-48496 | Medium | 5.1 | 2025-07-11 | Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of uninte… |
CVE-2025-46704 | Medium | 4.3 | 2025-07-11 | A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue requires an… |
CVE-2025-46358 | High | 7.7 | 2025-07-11 | Emerson ValveLink products do not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the produc… |
CVE-2025-41442 | Medium | 5.4 | 2025-07-11 | A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulati… |
CVE-2025-7419 | High | 8.8 | 2025-07-10 | A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been classified as critical. This affects the function fromSpeedTestSet of the file /goform/setR… |
CVE-2025-7418 | High | 8.8 | 2025-07-10 | A vulnerability was found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this issue is the function fromPingResultGet of the file /goform… |
CVE-2025-31267 | Medium | 4.6 | 2025-07-10 | An authentication issue was addressed with improved state management. This issue is fixed in App Store Connect 3.0. An attacker with physical access to an unlo… |
CVE-2025-1727 | High | 8.1 | 2025-07-10 | The protocol used for remote linking over RF for End-of-Train and Head-of-Train (also known as a FRED) relies on a BCH checksum for packet creation. It is po… |
CVE-2025-7417 | High | 8.8 | 2025-07-10 | A vulnerability has been found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this vulnerability is the function fromNetToolGet of the fi… |
CVE-2025-7416 | High | 8.8 | 2025-07-10 | A vulnerability, which was classified as critical, was found in Tenda O3V2 1.0.0.12(3880). Affected is the function fromSysToolTime of the file /goform/setSysT… |
CVE-2025-6392 | Medium | 4.4 | 2025-07-10 | Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec com… |
CVE-2025-53637 | Medium | 4.1 | 2025-07-10 | Meshtastic is an open source mesh networking solution. The main_matrix.yml GitHub Action is triggered by the pull_request_target event, which has extensive per… |
CVE-2025-24798 | Medium | 4.3 | 2025-07-10 | Meshtastic is an open source mesh networking solution. From 1.2.1 until 2.6.2, a packet sent to the routing module that contains want_response==true causes a c… |
CVE-2025-7415 | Medium | 6.3 | 2025-07-10 | A vulnerability, which was classified as critical, has been found in Tenda O3V2 1.0.0.12(3880). This issue affects the function fromTraceroutGet of the file /g… |
CVE-2025-7414 | Medium | 6.3 | 2025-07-10 | A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). This vulnerability affects the function fromNetToolGet of the file /goform/setPi… |
CVE-2025-6390 | Medium | 4.4 | 2025-07-10 | Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditions. These… |
CVE-2025-4662 | Medium | 4.4 | 2025-07-10 | Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase… |
CVE-2025-3947 | High | 8.2 | 2025-07-10 | The Honeywell Experion PKS contains an Integer Underflow vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit th… |
CVE-2025-3946 | High | 8.2 | 2025-07-10 | The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the component Control Data Access (CDA). An att… |
CVE-2025-2523 | Critical | 9.4 | 2025-07-10 | The Honeywell Experion PKS and OneWireless WDM contains an Integer Underflow vulnerability in the component Control Data Access (CDA). An attacker cou… |
CVE-2025-2522 | Medium | 6.5 | 2025-07-10 | The Honeywell Experion PKS and OneWireless WDM contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA). An attac… |
CVE-2025-2521 | High | 8.6 | 2025-07-10 | The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Access (CDA). An attacker could potentially… |
CVE-2025-7413 | Medium | 6.3 | 2025-07-10 | A vulnerability classified as critical has been found in code-projects Library System 1.0. This affects an unknown part of the file /user/teacher/profile.php… |
CVE-2025-7412 | Medium | 6.3 | 2025-07-10 | A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2025-7021 | Medium | 6.5 | 2025-07-10 | Fullscreen API Spoofing and UI Redressing in the handling of Fullscreen API and UI rendering in OpenAI Operator SaaS on Web allows a remote attacker to capture… |
CVE-2025-53634 | High | 7.5 | 2025-07-10 | Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. The HTTP Gateway processes headers, but with no timeout set. With a… |
CVE-2025-53633 | Critical | 9.8 | 2025-07-10 | Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario (i.e. a zip archive), the size of the deco… |
CVE-2025-53632 | Critical | 9.1 | 2025-07-10 | Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario (i.e. a zip archive), the path of the file… |
CVE-2025-53630 | | 2025-07-10 | llama.cpp is an inference of several LLM models in C/C++. Integer Overflow in the gguf_init_from_file_impl function in ggml/src/gguf.cpp can lead to Heap Out-o… | |
CVE-2025-53629 | High | 7.5 | 2025-07-10 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests using Transfer-Encoding: chunked in the he… |
CVE-2025-53628 | High | 8.8 | 2025-07-10 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.20.1, cpp-httplib does not have a limit for a unique line, permitt… |
CVE-2025-53506 | High | 7.5 | 2025-07-10 | Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum pe… |
CVE-2025-45662 | Medium | 6.1 | 2025-07-10 | A cross-site scripting (XSS) vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in… |
CVE-2025-34102 | | 2025-07-10 | A remote code execution vulnerability exists in CryptoLog (PHP version, discontinued since 2009) due to a chained exploitation of SQL injection and command inj… | |
CVE-2025-34101 | | 2025-07-10 | An unauthenticated command injection vulnerability exists in Serviio Media Server versions 1.4 through 1.8 on Windows, in the /rest/action API endpoint exposed… |