2025 CVEs (page 262)
Page 262 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3705 | Medium | 6.8 | 2025-07-07 | A physical attacker with no privileges can gain full control of the affected device due to improper neutralization of special elements used in an OS Command ('… |
CVE-2025-3626 | Critical | 9.1 | 2025-07-07 | A remote attacker with administrator account can gain full control of the device due to improper neutralization of special elements used in an OS Command ('OS… |
CVE-2025-3467 | Medium | 5.4 | 2025-07-07 | An XSS vulnerability exists in langgenius/dify versions prior to 1.1.3, specifically affecting Firefox browsers. This vulnerability allows an attacker to obtai… |
CVE-2025-3466 | High | 7.2 | 2025-07-07 | langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions… |
CVE-2025-3264 | Medium | 5.3 | 2025-07-07 | A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` funct… |
CVE-2025-3263 | Medium | 5.3 | 2025-07-07 | A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_configuration_fi… |
CVE-2025-3262 | High | 7.5 | 2025-07-07 | A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vul… |
CVE-2025-3225 | High | 7.5 | 2025-07-07 | An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llama_index repository, specifica… |
CVE-2025-3046 | High | 7.5 | 2025-07-07 | A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symb… |
CVE-2025-3044 | Medium | 5.3 | 2025-07-07 | A vulnerability in the ArxivReader class of the run-llama/llama_index repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating… |
CVE-2025-7121 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects an unknown part of the file /users/com… |
CVE-2025-7120 | High | 7.3 | 2025-07-07 | A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2025-3920 | | 2025-07-07 | A vulnerability was identified in SUR-FBD CMMS where hard-coded credentials were found within a compiled DLL file. These credentials correspond to a built-in a… | |
CVE-2025-7119 | High | 7.3 | 2025-07-07 | A vulnerability has been found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-7118 | High | 8.8 | 2025-07-07 | A vulnerability, which was classified as critical, has been found in UTT HiPER 840G up to 3.1.1-190328. This issue affects some unknown processing of the file… |
CVE-2025-7117 | High | 8.8 | 2025-07-07 | A vulnerability classified as critical was found in UTT HiPER 840G up to 3.1.1-190328. This vulnerability affects unknown code of the file /goform/websWhiteLis… |
CVE-2025-7116 | High | 8.8 | 2025-07-07 | A vulnerability classified as critical has been found in UTT 进取 750W up to 3.2.2-191225. This affects an unknown part of the file /goform/Fast_wireless_conf. T… |
CVE-2025-41672 | Critical | 10.0 | 2025-07-07 | A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices. |
CVE-2025-7115 | High | 7.3 | 2025-07-07 | A vulnerability was found in rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97. It has been rated as critical. Affected by this issue is the f… |
CVE-2025-7114 | High | 7.3 | 2025-07-07 | A vulnerability was found in SimStudioAI sim up to 37786d371e17d35e0764e1b5cd519d873d90d97b. It has been declared as critical. Affected by this vulnerability i… |
CVE-2025-7113 | Low | 3.5 | 2025-07-07 | A vulnerability was found in Portabilis i-Educar 2.9.0. It has been classified as problematic. Affected is an unknown function of the file /module/ComponenteCu… |
CVE-2025-7112 | Low | 3.5 | 2025-07-07 | A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educar_f… |
CVE-2025-7111 | Low | 3.5 | 2025-07-07 | A vulnerability has been found in Portabilis i-Educar 2.9.0 and classified as problematic. This vulnerability affects unknown code of the file /intranet/educar… |
CVE-2025-53473 | High | 7.3 | 2025-07-07 | Server-side request forgery (SSRF) vulnerability exists n multiple versions of Nimesa Backup and Recovery, If this vulnerability is exploited, unintended reque… |
CVE-2025-48501 | Critical | 9.8 | 2025-07-07 | An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed… |
CVE-2025-24508 | Medium | 6.4 | 2025-07-07 | Extraction of Account Connectivity Credentials (ACCs) from the IT Management Agent secure storage |
CVE-2025-7110 | Low | 3.5 | 2025-07-07 | A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educar_escola_… |
CVE-2025-7145 | High | 7.2 | 2025-07-07 | ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privile… |
CVE-2025-7109 | Low | 3.5 | 2025-07-07 | A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the… |
CVE-2025-7108 | Medium | 5.4 | 2025-07-07 | A vulnerability classified as critical was found in risesoft-y9 Digital-Infrastructure up to 9.6.7. Affected by this vulnerability is the function deleteFile o… |
CVE-2025-7107 | Medium | 5.3 | 2025-07-07 | A vulnerability classified as critical has been found in SimStudioAI sim up to 0.1.17. Affected is the function handleLocalFile of the file apps/sim/app/api/fi… |
CVE-2025-53186 | Medium | 5.9 | 2025-07-07 | Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this v… |
CVE-2025-53185 | Medium | 6.6 | 2025-07-07 | Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploi… |
CVE-2025-53184 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53183 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53182 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53181 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53180 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53179 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53178 | Medium | 4.8 | 2025-07-07 | Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function… |
CVE-2025-53177 | Low | 3.9 | 2025-07-07 | Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function o… |
CVE-2025-53176 | Low | 3.3 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53175 | Medium | 4.0 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53174 | Medium | 4.0 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53173 | Medium | 5.3 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53172 | Medium | 4.0 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53171 | Medium | 4.0 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53170 | Medium | 4.0 | 2025-07-07 | Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53169 | High | 7.6 | 2025-07-07 | Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may a… |
CVE-2025-53168 | Medium | 5.7 | 2025-07-07 | Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may a… |
CVE-2025-53167 | Medium | 6.9 | 2025-07-07 | Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confide… |
CVE-2025-7103 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in BoyunCMS up to 1.4.20. It has been rated as critical. This issue affects some unknown processing of the file /application/pay/cont… |
CVE-2025-7102 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in BoyunCMS up to 1.4.20. It has been declared as critical. This vulnerability affects unknown code of the file application/update/co… |
CVE-2025-7101 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in BoyunCMS up to 1.4.20. It has been classified as critical. This affects an unknown part of the file /install/install_ok.php of the… |
CVE-2025-7100 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in BoyunCMS up to 1.4.20 and classified as critical. Affected by this issue is some unknown functionality of the file /application/us… |
CVE-2025-7099 | Medium | 5.6 | 2025-07-07 | A vulnerability has been found in BoyunCMS up to 1.21 on PHP7 and classified as critical. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2025-7098 | Medium | 5.6 | 2025-07-06 | A vulnerability, which was classified as critical, was found in Comodo Internet Security Premium 12.3.4.8162. Affected is an unknown function of the component… |
CVE-2025-7097 | High | 8.1 | 2025-07-06 | A vulnerability, which was classified as critical, has been found in Comodo Internet Security Premium 12.3.4.8162. This issue affects some unknown processing o… |
CVE-2025-3108 | High | 7.5 | 2025-07-06 | A critical deserialization vulnerability exists in the run-llama/llama_index library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.1… |
CVE-2025-7096 | High | 8.1 | 2025-07-06 | A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162. This vulnerability affects unknown code of the file cis_updat… |
CVE-2025-7095 | Low | 3.7 | 2025-07-06 | A vulnerability classified as critical has been found in Comodo Internet Security Premium 12.3.4.8162. This affects an unknown part of the component Update Han… |
CVE-2025-7094 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been rated as critical. Affected by this issue is the function formBSSetSitesurvey of the file /gof… |
CVE-2025-7093 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been declared as critical. Affected by this vulnerability is the function formSetLanguage of the fi… |
CVE-2025-7092 | High | 8.8 | 2025-07-06 | A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. This vulnerability affects the function formWlanSetupWPS of the file /gofo… |
CVE-2025-7091 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. Affected is the function formWlanMP of the file /goform/formWlanMP of… |
CVE-2025-7090 | High | 8.8 | 2025-07-06 | A vulnerability, which was classified as critical, has been found in Belkin F9K1122 1.00.33. Affected by this issue is the function formConnectionSetting of th… |
CVE-2025-7089 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. This issue affects the function formWanTcpipSetup of the file /goform/formWanTc… |
CVE-2025-7088 | High | 8.8 | 2025-07-06 | A vulnerability, which was classified as critical, was found in Belkin F9K1122 1.00.33. This affects the function formPPPoESetup of the file /goform/formPPPoES… |
CVE-2025-7087 | High | 8.8 | 2025-07-06 | A vulnerability classified as critical was found in Belkin F9K1122 1.00.33. Affected by this vulnerability is the function formL2TPSetup of the file /goform/fo… |
CVE-2025-7086 | High | 8.8 | 2025-07-06 | A vulnerability classified as critical has been found in Belkin F9K1122 1.00.33. Affected is the function formPPTPSetup of the file /goform/formPPTPSetup of th… |
CVE-2025-7085 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been rated as critical. This issue affects the function formiNICWpsStart of the file /goform/formiN… |
CVE-2025-7084 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been declared as critical. This vulnerability affects the function formWpsStart of the file /goform… |
CVE-2025-7083 | Medium | 6.3 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. This affects the function mp of the file /goform/mp of the component w… |
CVE-2025-7082 | Medium | 6.3 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this issue is the function formBSSetSitesurvey of the file /goform/… |
CVE-2025-7081 | Medium | 6.3 | 2025-07-06 | A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this vulnerability is the function formSetWanStatic of the fil… |
CVE-2025-7080 | Low | 3.7 | 2025-07-06 | A vulnerability, which was classified as problematic, was found in Done-0 Jank up to 322caebbad10568460364b9667aa62c3080bfc17. Affected is an unknown function… |
CVE-2025-5333 | | 2025-07-06 | Remote attackers can execute arbitrary code in the context of the vulnerable service process. | |
CVE-2025-7079 | Low | 3.7 | 2025-07-06 | A vulnerability, which was classified as problematic, has been found in mao888 bluebell-plus up to 2.3.0. This issue affects some unknown processing of the fil… |
CVE-2025-38235 | Medium | 5.5 | 2025-07-06 | In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix "appletb_backlight" backlight device reference counting During appl… |
CVE-2025-7078 | Medium | 4.3 | 2025-07-06 | A vulnerability classified as problematic was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.3.9. This vulnerability affects unknown code. The manipulation… |
CVE-2025-7077 | High | 8.8 | 2025-07-06 | A vulnerability classified as critical has been found in Shenzhen Libituo Technology LBT-T300-T310 up to 2.2.3.6. This affects the function config_3g_para of t… |
CVE-2025-27446 | High | 7.8 | 2025-07-06 | Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner). Local listening file permissions in APISIX plugin ru… |
CVE-2025-7076 | Medium | 5.4 | 2025-07-06 | A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2025-7075 | Medium | 6.3 | 2025-07-06 | A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-7074 | Medium | 4.3 | 2025-07-05 | A vulnerability classified as problematic has been found in vercel hyper up to 3.4.1. This affects the function expand/braceExpand/ignoreMap of the file hyper/… |
CVE-2025-47228 | Medium | 6.7 | 2025-07-05 | In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attack… |
CVE-2025-47227 | High | 7.5 | 2025-07-05 | In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled. Making both a GE… |
CVE-2025-53605 | Medium | 5.9 | 2025-07-05 | The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fie… |
CVE-2025-53604 | Medium | 4.0 | 2025-07-05 | The web-push crate before 0.10.3 for Rust allows a denial of service (memory consumption) in the built-in clients via a large integer in a Content-Length heade… |
CVE-2025-53603 | High | 7.5 | 2025-07-05 | In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request in which a paramete… |
CVE-2025-43711 | High | 8.1 | 2025-07-05 | Tunnelblick 3.5beta06 before 7.0, when incompletely uninstalled, allows attackers to execute arbitrary code as root (upon the next boot) by dragging a crafted… |
CVE-2025-26850 | Critical | 9.3 | 2025-07-05 | The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems. |
CVE-2025-48952 | Critical | 9.4 | 2025-07-04 | NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass pass… |
CVE-2025-7070 | Medium | 4.3 | 2025-07-04 | A vulnerability has been found in IROAD Dashcam Q9 up to 20250624 and classified as problematic. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-53366 | | 2025-07-04 | The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.9.4, a validation error in the MCP… | |
CVE-2025-53365 | | 2025-07-04 | The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.10.0, if a client deliberately tri… | |
CVE-2025-7069 | Low | 3.3 | 2025-07-04 | A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FS__sect_link_size of the file src/H5FSsection.c. Th… |
CVE-2025-7068 | Low | 3.3 | 2025-07-04 | A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FL__malloc of the file src/H5FL.c. The m… |
CVE-2025-53602 | Medium | 5.3 | 2025-07-04 | Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to CVE-2025-48927. |
CVE-2025-7067 | Low | 3.3 | 2025-07-04 | A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5FS__sinfo_serialize_node_cb of the file src/H5FSc… |