2025 CVEs (page 261)
Page 261 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-21466 | High | 7.8 | 2025-07-08 | Memory corruption while processing a private escape command in an event trigger. |
CVE-2025-21454 | High | 7.5 | 2025-07-08 | Transient DOS while processing received beacon frame. |
CVE-2025-21450 | Critical | 9.1 | 2025-07-08 | Cryptographic issue occurs due to use of insecure connection method while downloading. |
CVE-2025-21449 | High | 7.5 | 2025-07-08 | Transient DOS may occur while processing malformed length field in SSID IEs. |
CVE-2025-21446 | High | 7.5 | 2025-07-08 | Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests. |
CVE-2025-21445 | High | 7.8 | 2025-07-08 | Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host. |
CVE-2025-21444 | High | 7.8 | 2025-07-08 | Memory corruption while copying the result to the transmission queue in EMAC. |
CVE-2025-21433 | Medium | 6.2 | 2025-07-08 | Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. |
CVE-2025-21432 | High | 7.8 | 2025-07-08 | Memory corruption while retrieving the CBOR data from TA. |
CVE-2025-21427 | High | 8.2 | 2025-07-08 | Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network. |
CVE-2025-21426 | Medium | 6.6 | 2025-07-08 | Memory corruption while processing camera TPG write request. |
CVE-2025-21422 | High | 7.1 | 2025-07-08 | Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses. |
CVE-2025-7177 | Medium | 4.7 | 2025-07-08 | A vulnerability was found in PHPGurukul Car Washing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2025-7176 | High | 7.3 | 2025-07-08 | A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown function… |
CVE-2025-40721 | Medium | 5.4 | 2025-07-08 | Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute Jav… |
CVE-2025-40720 | Medium | 6.1 | 2025-07-08 | Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute Jav… |
CVE-2025-40719 | Medium | 6.1 | 2025-07-08 | Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute Jav… |
CVE-2025-40718 | High | 7.5 | 2025-07-08 | Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads… |
CVE-2025-40717 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-40716 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-40715 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-40714 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-40713 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-40712 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-40711 | Critical | 9.8 | 2025-07-08 | SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delet… |
CVE-2025-7175 | Medium | 6.3 | 2025-07-08 | A vulnerability was found in code-projects E-Commerce Site 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/users_ph… |
CVE-2025-7174 | High | 7.3 | 2025-07-08 | A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file /teacher-issue… |
CVE-2025-41224 | High | 8.8 | 2025-07-08 | A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.10.0), RUGGEDCOM RS416NCv2… |
CVE-2025-41223 | Medium | 4.8 | 2025-07-08 | A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All versions), RUGGEDCOM i803 (All version… |
CVE-2025-41222 | Medium | 5.3 | 2025-07-08 | A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All versions), RUGGEDCOM i803 (All version… |
CVE-2025-40742 | Medium | 5.3 | 2025-07-08 | A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All… |
CVE-2025-40741 | High | 7.8 | 2025-07-08 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain a stack based overflow vulnerabili… |
CVE-2025-40740 | High | 7.8 | 2025-07-08 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end… |
CVE-2025-40739 | High | 7.8 | 2025-07-08 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end… |
CVE-2025-40738 | High | 8.8 | 2025-07-08 | A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded… |
CVE-2025-40737 | High | 8.8 | 2025-07-08 | A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly validate file paths when extracting uploaded… |
CVE-2025-40736 | Critical | 9.8 | 2025-07-08 | A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint that allows an unauthorized modification o… |
CVE-2025-40735 | High | 8.8 | 2025-07-08 | A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected devices are vulnerable to SQL injection. This could allow an unauthenticat… |
CVE-2025-40593 | Medium | 6.5 | 2025-07-08 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0). The affected application allows to control the device by storing arbitrary files… |
CVE-2025-27127 | Medium | 4.3 | 2025-07-08 | A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions), Totally Integrated Automation Portal… |
CVE-2025-23365 | High | 7.8 | 2025-07-08 | A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application allows low-privileged users to trigger installations… |
CVE-2025-23364 | Medium | 6.2 | 2025-07-08 | A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application improperly validates code signing certificates. Thi… |
CVE-2025-21009 | Medium | 5.5 | 2025-07-08 | Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. |
CVE-2025-21008 | Medium | 5.5 | 2025-07-08 | Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. |
CVE-2025-21007 | Medium | 5.5 | 2025-07-08 | Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. |
CVE-2025-21006 | High | 7.0 | 2025-07-08 | Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory. |
CVE-2025-21005 | Medium | 5.5 | 2025-07-08 | Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information. |
CVE-2025-21004 | Medium | 6.2 | 2025-07-08 | Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the dev… |
CVE-2025-21003 | Medium | 4.0 | 2025-07-08 | Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information. |
CVE-2025-21002 | Medium | 6.2 | 2025-07-08 | Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast. |
CVE-2025-21001 | Medium | 6.2 | 2025-07-08 | Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast. |
CVE-2025-21000 | Medium | 6.2 | 2025-07-08 | Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth. |
CVE-2025-20999 | Medium | 4.1 | 2025-07-08 | Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi… |
CVE-2025-20998 | Medium | 5.5 | 2025-07-08 | Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number. |
CVE-2025-20997 | Medium | 6.2 | 2025-07-08 | Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch. |
CVE-2025-20983 | Medium | 6.4 | 2025-07-08 | Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memo… |
CVE-2025-20982 | Medium | 6.4 | 2025-07-08 | Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memor… |
CVE-2025-7173 | High | 7.3 | 2025-07-08 | A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-student… |
CVE-2025-7172 | High | 7.3 | 2025-07-08 | A vulnerability, which was classified as critical, was found in code-projects Crime Reporting System 1.0. This affects an unknown part of the file /headlogin.p… |
CVE-2025-6744 | High | 7.3 | 2025-07-08 | The The Woodmart theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.2.3. This is due to the software al… |
CVE-2025-7171 | High | 7.3 | 2025-07-08 | A vulnerability, which was classified as critical, has been found in code-projects Crime Reporting System 1.0. Affected by this issue is some unknown functiona… |
CVE-2025-7170 | High | 7.3 | 2025-07-08 | A vulnerability classified as critical was found in code-projects Crime Reporting System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-7169 | High | 7.3 | 2025-07-08 | A vulnerability classified as critical has been found in code-projects Crime Reporting System 1.0. Affected is an unknown function of the file /complainer_page… |
CVE-2025-7168 | High | 7.3 | 2025-07-08 | A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /u… |
CVE-2025-38237 | Medium | 5.5 | 2025-07-08 | In the Linux kernel, the following vulnerability has been resolved: media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() In fimc_i… |
CVE-2025-38236 | High | 7.8 | 2025-07-08 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free i… |
CVE-2025-7346 | | 2025-07-08 | Any unauthenticated attacker can bypass the localhost restrictions posed by the application and utilize this to create arbitrary packages | |
CVE-2025-7167 | Medium | 6.3 | 2025-07-08 | A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cat… |
CVE-2025-7166 | Medium | 6.3 | 2025-07-08 | A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been classified as critical. This affects an unknown part of the file /single.php… |
CVE-2025-6746 | High | 8.8 | 2025-07-08 | The WoodMart plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.2.3 via the 'layout' attribute. This makes it p… |
CVE-2025-6743 | Medium | 6.4 | 2025-07-08 | The Woodmart theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'multiple_markers' attribute in all versions up to, and includin… |
CVE-2025-42956 | Medium | 6.1 | 2025-07-08 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to create a malicious link which they can make publicly available. W… |
CVE-2025-41668 | High | 8.8 | 2025-07-08 | A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute acc… |
CVE-2025-41667 | High | 8.8 | 2025-07-08 | A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file… |
CVE-2025-41666 | High | 8.8 | 2025-07-08 | A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the dev… |
CVE-2025-41665 | Medium | 6.5 | 2025-07-08 | An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file. |
CVE-2025-25271 | High | 8.8 | 2025-07-08 | An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface. |
CVE-2025-25270 | Critical | 9.8 | 2025-07-08 | An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations. |
CVE-2025-25269 | High | 8.4 | 2025-07-08 | An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation. |
CVE-2025-25268 | High | 8.8 | 2025-07-08 | An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting in read and write access due to missing… |
CVE-2025-24006 | High | 7.8 | 2025-07-08 | A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root. |
CVE-2025-24005 | High | 7.8 | 2025-07-08 | A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due to improper input validation. |
CVE-2025-24004 | Medium | 5.2 | 2025-07-08 | A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss… |
CVE-2025-24003 | High | 8.2 | 2025-07-08 | An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting… |
CVE-2025-24002 | Medium | 5.3 | 2025-07-08 | An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporar… |
CVE-2025-7327 | High | 8.8 | 2025-07-08 | The Widget for Google Reviews plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.15 via the layout parameter… |
CVE-2025-7165 | High | 7.3 | 2025-07-08 | A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functiona… |
CVE-2025-7164 | High | 7.3 | 2025-07-08 | A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknow… |
CVE-2025-7163 | Medium | 6.3 | 2025-07-08 | A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/add-an… |
CVE-2025-7162 | Medium | 6.3 | 2025-07-08 | A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the fi… |
CVE-2025-5957 | Medium | 5.3 | 2025-07-08 | The Guest Support – Complete customer support ticket system for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capa… |
CVE-2025-5537 | Medium | 6.4 | 2025-07-08 | The Lightbox & Modal Popup WordPress Plugin – FooBox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alternative texts in all versi… |
CVE-2025-7161 | Medium | 6.3 | 2025-07-08 | A vulnerability classified as critical was found in PHPGurukul Zoo Management System 2.1. This vulnerability affects unknown code of the file /admin/add-normal… |
CVE-2025-7160 | High | 7.3 | 2025-07-08 | A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. This affects an unknown part of the file /admin/index.php. The m… |
CVE-2025-7159 | Medium | 6.3 | 2025-07-08 | A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2025-7158 | Medium | 6.3 | 2025-07-08 | A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-7157 | High | 7.3 | 2025-07-08 | A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php… |
CVE-2025-6244 | Medium | 6.4 | 2025-07-08 | The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the via `Cal… |
CVE-2025-5570 | Medium | 5.4 | 2025-07-08 | The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' parameter in all versions up to, and includ… |
CVE-2025-20695 | Medium | 6.5 | 2025-07-08 | In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privil… |