2025 CVEs (page 259)

Page 259 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.

All CVEs published in 2025 — newest first (page 259 of 434)
CVESeverityScorePublishedSummary
CVE-2025-43019High7.82025-07-08A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file…
CVE-2025-36482025-07-08A vulnerability has been identified in the Now Platform that could result in data being inferred without authorization. Under certain conditional access contro…
CVE-2025-0293Medium6.62025-07-08CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with ad…
CVE-2025-0292Medium5.52025-07-08SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights…
CVE-2025-7326High7.02025-07-08Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life (EOL) so…
CVE-2025-7183High7.32025-07-08A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the f…
CVE-2025-7182Medium4.32025-07-08A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0 and classified as problematic. Affected by this vulnerability is an unk…
CVE-2025-7037High7.22025-07-08SQL injection in Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a remote authenticated attacker with admin privileges to…
CVE-2025-6996High8.42025-07-08Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker…
CVE-2025-6995High8.42025-07-08Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker…
CVE-2025-6770High7.22025-07-08OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2 allows a remote authenticated attacker with high privileges to achieve re…
CVE-2025-5463Medium5.52025-07-08Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a l…
CVE-2025-5451Medium4.92025-07-08A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated a…
CVE-2025-5450Medium6.32025-07-08Improper access control in the certificate management component of Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1…
CVE-2025-535452025-07-08Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). Users can circumvent 2F…
CVE-2025-53480Medium5.42025-07-08The CheckUser extension’s Special:Investigate page has a vulnerability in the Account information tab, where specific internationalized messages are rendered w…
CVE-2025-53372High7.52025-07-08node-code-sandbox-mcp is a Node.js–based Model Context Protocol server that spins up disposable Docker containers to execute arbitrary JavaScript. Prior to 1.3…
CVE-2025-3630Medium6.42025-07-08IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 …
CVE-2025-36600High8.22025-07-08Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component…
CVE-2025-2827Medium4.32025-07-08IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 could disclose sensitive installation directory information to an authent…
CVE-2025-2793Medium5.42025-07-08IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 …
CVE-2025-29267Medium6.52025-07-08SQL Injection vulnerability in Abis, Inc Adjutant Core Accounting ERP build v.PreBeta250F allows a remote attacker to obtain a sensitive information via the ci…
CVE-2025-24474Low2.72025-07-08An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6.0 through 7.6.1, 7.4.0 throu…
CVE-2025-7345High7.52025-07-08A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When pro…
CVE-2025-7181Medium6.32025-07-08A vulnerability, which was classified as critical, was found in code-projects Staff Audit System 1.0. Affected is an unknown function of the file /test.php. Th…
CVE-2025-7180High7.32025-07-08A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the fi…
CVE-2025-47422High7.52025-07-08Advanced Installer before 22.6 has an uncontrolled search path element local privilege escalation vulnerability. When running as SYSTEM in certain configuratio…
CVE-2025-7179High7.32025-07-08A vulnerability classified as critical was found in code-projects Library System 1.0. This vulnerability affects unknown code of the file /add-teacher.php. The…
CVE-2025-7178High7.32025-07-08A vulnerability classified as critical has been found in code-projects Food Distributor Site 1.0. This affects an unknown part of the file /admin/login.php. Th…
CVE-2025-50130High7.82025-07-08A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. Opening V9 files or X1 files…
CVE-2025-27061High7.82025-07-08Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
CVE-2025-27058High7.82025-07-08Memory corruption while processing packet data with exceedingly large packet.
CVE-2025-27057High7.52025-07-08Transient DOS while handling beacon frames with invalid IE header length.
CVE-2025-27056High7.82025-07-08Memory corruption during sub-system restart while processing clean-up to free up resources.
CVE-2025-27055High7.82025-07-08Memory corruption during the image encoding process.
CVE-2025-27052High7.82025-07-08Memory corruption while processing data packets in diag received from Unix clients.
CVE-2025-27051High7.82025-07-08Memory corruption while processing command message in WLAN Host.
CVE-2025-27050High7.82025-07-08Memory corruption while processing event close when client process terminates abruptly.
CVE-2025-27047High7.82025-07-08Memory corruption while processing the TESTPATTERNCONFIG escape path.
CVE-2025-27046High7.82025-07-08Memory corruption while processing multiple simultaneous escape calls.
CVE-2025-27044High7.82025-07-08Memory corruption while executing timestamp video decode command with large input values.
CVE-2025-27043High7.82025-07-08Memory corruption while processing manipulated payload in video firmware.
CVE-2025-27042High7.82025-07-08Memory corruption while processing video packets received from video firmware.
CVE-2025-21466High7.82025-07-08Memory corruption while processing a private escape command in an event trigger.
CVE-2025-21454High7.52025-07-08Transient DOS while processing received beacon frame.
CVE-2025-21450Critical9.12025-07-08Cryptographic issue occurs due to use of insecure connection method while downloading.
CVE-2025-21449High7.52025-07-08Transient DOS may occur while processing malformed length field in SSID IEs.
CVE-2025-21446High7.52025-07-08Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
CVE-2025-21445High7.82025-07-08Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host.
CVE-2025-21444High7.82025-07-08Memory corruption while copying the result to the transmission queue in EMAC.
CVE-2025-21433Medium6.22025-07-08Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
CVE-2025-21432High7.82025-07-08Memory corruption while retrieving the CBOR data from TA.
CVE-2025-21427High8.22025-07-08Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
CVE-2025-21426Medium6.62025-07-08Memory corruption while processing camera TPG write request.
CVE-2025-21422High7.12025-07-08Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
CVE-2025-7177Medium4.72025-07-08A vulnerability was found in PHPGurukul Car Washing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality…
CVE-2025-7176High7.32025-07-08A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown function…
CVE-2025-40721Medium5.42025-07-08Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute Jav…
CVE-2025-40720Medium6.12025-07-08Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute Jav…
CVE-2025-40719Medium6.12025-07-08Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute Jav…
CVE-2025-40718High7.52025-07-08Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads…
CVE-2025-40717Critical9.82025-07-08SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet…
CVE-2025-40716Critical9.82025-07-08SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet…
CVE-2025-40715Critical9.82025-07-08SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet…
CVE-2025-40714Critical9.82025-07-08SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet…
CVE-2025-40713Critical9.82025-07-08SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet…
CVE-2025-40712Critical9.82025-07-08SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet…
CVE-2025-40711Critical9.82025-07-08SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet…
CVE-2025-7175Medium6.32025-07-08A vulnerability was found in code-projects E-Commerce Site 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/users_ph…
CVE-2025-7174High7.32025-07-08A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file /teacher-issue…
CVE-2025-41224High8.82025-07-08A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.10.0), RUGGEDCOM RS416NCv2…
CVE-2025-41223Medium4.82025-07-08A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All versions), RUGGEDCOM i803 (All version…
CVE-2025-41222Medium5.32025-07-08A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All versions), RUGGEDCOM i803 (All version…
CVE-2025-40742Medium5.32025-07-08A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All…
CVE-2025-40741High7.82025-07-08A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain a stack based overflow vulnerabili…
CVE-2025-40740High7.82025-07-08A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end…
CVE-2025-40739High7.82025-07-08A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end…
CVE-2025-40738High8.82025-07-08A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded…
CVE-2025-40737High8.82025-07-08A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded…
CVE-2025-40736Critical9.82025-07-08A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint that allows an unauthorized modification o…
CVE-2025-40735High8.82025-07-08A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected devices are vulnerable to SQL injection. This could allow an unauthenticat…
CVE-2025-40593Medium6.52025-07-08A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0). The affected application allows to control the device by storing arbitrary files…
CVE-2025-27127Medium4.32025-07-08A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions), Totally Integrated Automation Portal…
CVE-2025-23365High7.82025-07-08A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application allows low-privileged users to trigger installations…
CVE-2025-23364Medium6.22025-07-08A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application improperly validates code signing certificates. Thi…
CVE-2025-21009Medium5.52025-07-08Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVE-2025-21008Medium5.52025-07-08Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVE-2025-21007Medium5.52025-07-08Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVE-2025-21006High7.02025-07-08Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory.
CVE-2025-21005Medium5.52025-07-08Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information.
CVE-2025-21004Medium6.22025-07-08Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the dev…
CVE-2025-21003Medium4.02025-07-08Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information.
CVE-2025-21002Medium6.22025-07-08Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast.
CVE-2025-21001Medium6.22025-07-08Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast.
CVE-2025-21000Medium6.22025-07-08Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth.
CVE-2025-20999Medium4.12025-07-08Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi…
CVE-2025-20998Medium5.52025-07-08Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number.
CVE-2025-20997Medium6.22025-07-08Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch.
CVE-2025-20983Medium6.42025-07-08Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memo…
CVE-2025-20982Medium6.42025-07-08Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memor…