2025 CVEs (page 264)
Page 264 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-53174 | Medium | 4.0 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53173 | Medium | 5.3 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53172 | Medium | 4.0 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53171 | Medium | 4.0 | 2025-07-07 | Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview functio… |
CVE-2025-53170 | Medium | 4.0 | 2025-07-07 | Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53169 | High | 7.6 | 2025-07-07 | Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may a… |
CVE-2025-53168 | Medium | 5.7 | 2025-07-07 | Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may a… |
CVE-2025-53167 | Medium | 6.9 | 2025-07-07 | Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confide… |
CVE-2025-7103 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in BoyunCMS up to 1.4.20. It has been rated as critical. This issue affects some unknown processing of the file /application/pay/cont… |
CVE-2025-7102 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in BoyunCMS up to 1.4.20. It has been declared as critical. This vulnerability affects unknown code of the file application/update/co… |
CVE-2025-7101 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in BoyunCMS up to 1.4.20. It has been classified as critical. This affects an unknown part of the file /install/install_ok.php of the… |
CVE-2025-7100 | Medium | 6.3 | 2025-07-07 | A vulnerability was found in BoyunCMS up to 1.4.20 and classified as critical. Affected by this issue is some unknown functionality of the file /application/us… |
CVE-2025-7099 | Medium | 5.6 | 2025-07-07 | A vulnerability has been found in BoyunCMS up to 1.21 on PHP7 and classified as critical. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2025-7098 | Medium | 5.6 | 2025-07-06 | A vulnerability, which was classified as critical, was found in Comodo Internet Security Premium 12.3.4.8162. Affected is an unknown function of the component… |
CVE-2025-7097 | High | 8.1 | 2025-07-06 | A vulnerability, which was classified as critical, has been found in Comodo Internet Security Premium 12.3.4.8162. This issue affects some unknown processing o… |
CVE-2025-3108 | High | 7.5 | 2025-07-06 | A critical deserialization vulnerability exists in the run-llama/llama_index library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.1… |
CVE-2025-7096 | High | 8.1 | 2025-07-06 | A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162. This vulnerability affects unknown code of the file cis_updat… |
CVE-2025-7095 | Low | 3.7 | 2025-07-06 | A vulnerability classified as critical has been found in Comodo Internet Security Premium 12.3.4.8162. This affects an unknown part of the component Update Han… |
CVE-2025-7094 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been rated as critical. Affected by this issue is the function formBSSetSitesurvey of the file /gof… |
CVE-2025-7093 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been declared as critical. Affected by this vulnerability is the function formSetLanguage of the fi… |
CVE-2025-7092 | High | 8.8 | 2025-07-06 | A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. This vulnerability affects the function formWlanSetupWPS of the file /gofo… |
CVE-2025-7091 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. Affected is the function formWlanMP of the file /goform/formWlanMP of… |
CVE-2025-7090 | High | 8.8 | 2025-07-06 | A vulnerability, which was classified as critical, has been found in Belkin F9K1122 1.00.33. Affected by this issue is the function formConnectionSetting of th… |
CVE-2025-7089 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. This issue affects the function formWanTcpipSetup of the file /goform/formWanTc… |
CVE-2025-7088 | High | 8.8 | 2025-07-06 | A vulnerability, which was classified as critical, was found in Belkin F9K1122 1.00.33. This affects the function formPPPoESetup of the file /goform/formPPPoES… |
CVE-2025-7087 | High | 8.8 | 2025-07-06 | A vulnerability classified as critical was found in Belkin F9K1122 1.00.33. Affected by this vulnerability is the function formL2TPSetup of the file /goform/fo… |
CVE-2025-7086 | High | 8.8 | 2025-07-06 | A vulnerability classified as critical has been found in Belkin F9K1122 1.00.33. Affected is the function formPPTPSetup of the file /goform/formPPTPSetup of th… |
CVE-2025-7085 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been rated as critical. This issue affects the function formiNICWpsStart of the file /goform/formiN… |
CVE-2025-7084 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been declared as critical. This vulnerability affects the function formWpsStart of the file /goform… |
CVE-2025-7083 | Medium | 6.3 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. This affects the function mp of the file /goform/mp of the component w… |
CVE-2025-7082 | Medium | 6.3 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this issue is the function formBSSetSitesurvey of the file /goform/… |
CVE-2025-7081 | Medium | 6.3 | 2025-07-06 | A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this vulnerability is the function formSetWanStatic of the fil… |
CVE-2025-7080 | Low | 3.7 | 2025-07-06 | A vulnerability, which was classified as problematic, was found in Done-0 Jank up to 322caebbad10568460364b9667aa62c3080bfc17. Affected is an unknown function… |
CVE-2025-5333 | | 2025-07-06 | Remote attackers can execute arbitrary code in the context of the vulnerable service process. | |
CVE-2025-7079 | Low | 3.7 | 2025-07-06 | A vulnerability, which was classified as problematic, has been found in mao888 bluebell-plus up to 2.3.0. This issue affects some unknown processing of the fil… |
CVE-2025-38235 | Medium | 5.5 | 2025-07-06 | In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix "appletb_backlight" backlight device reference counting During appl… |
CVE-2025-7078 | Medium | 4.3 | 2025-07-06 | A vulnerability classified as problematic was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.3.9. This vulnerability affects unknown code. The manipulation… |
CVE-2025-7077 | High | 8.8 | 2025-07-06 | A vulnerability classified as critical has been found in Shenzhen Libituo Technology LBT-T300-T310 up to 2.2.3.6. This affects the function config_3g_para of t… |
CVE-2025-27446 | High | 7.8 | 2025-07-06 | Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner). Local listening file permissions in APISIX plugin ru… |
CVE-2025-7076 | Medium | 5.4 | 2025-07-06 | A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2025-7075 | Medium | 6.3 | 2025-07-06 | A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-7074 | Medium | 4.3 | 2025-07-05 | A vulnerability classified as problematic has been found in vercel hyper up to 3.4.1. This affects the function expand/braceExpand/ignoreMap of the file hyper/… |
CVE-2025-47228 | Medium | 6.7 | 2025-07-05 | In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attack… |
CVE-2025-47227 | High | 7.5 | 2025-07-05 | In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled. Making both a GE… |
CVE-2025-53605 | Medium | 5.9 | 2025-07-05 | The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fie… |
CVE-2025-53604 | Medium | 4.0 | 2025-07-05 | The web-push crate before 0.10.3 for Rust allows a denial of service (memory consumption) in the built-in clients via a large integer in a Content-Length heade… |
CVE-2025-53603 | High | 7.5 | 2025-07-05 | In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request in which a paramete… |
CVE-2025-43711 | High | 8.1 | 2025-07-05 | Tunnelblick 3.5beta06 before 7.0, when incompletely uninstalled, allows attackers to execute arbitrary code as root (upon the next boot) by dragging a crafted… |
CVE-2025-26850 | Critical | 9.3 | 2025-07-05 | The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems. |
CVE-2025-48952 | Critical | 9.4 | 2025-07-04 | NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentication logic allows users to bypass pass… |
CVE-2025-7070 | Medium | 4.3 | 2025-07-04 | A vulnerability has been found in IROAD Dashcam Q9 up to 20250624 and classified as problematic. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-53366 | | 2025-07-04 | The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.9.4, a validation error in the MCP… | |
CVE-2025-53365 | | 2025-07-04 | The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.10.0, if a client deliberately tri… | |
CVE-2025-7069 | Low | 3.3 | 2025-07-04 | A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FS__sect_link_size of the file src/H5FSsection.c. Th… |
CVE-2025-7068 | Low | 3.3 | 2025-07-04 | A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FL__malloc of the file src/H5FL.c. The m… |
CVE-2025-53602 | Medium | 5.3 | 2025-07-04 | Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to CVE-2025-48927. |
CVE-2025-7067 | Low | 3.3 | 2025-07-04 | A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5FS__sinfo_serialize_node_cb of the file src/H5FSc… |
CVE-2025-53485 | High | 7.5 | 2025-07-04 | SetTranslationHandler.php does not validate that the user is an election admin, allowing any (even unauthenticated) user to change election-related translation… |
CVE-2025-53484 | Critical | 9.8 | 2025-07-04 | User-controlled inputs are improperly escaped in: * VotePage.php (poll option input) * ResultPage::getPagesTab() and getErrorsTab() (user-contro… |
CVE-2025-53483 | High | 8.8 | 2025-07-04 | ArchivePage.php, UnarchivePage.php, and VoterEligibilityPage#executeClear() do not validate request methods or CSRF tokens, allowing attackers to trigger sensi… |
CVE-2025-53482 | Medium | 6.1 | 2025-07-04 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension… |
CVE-2025-53481 | High | 7.5 | 2025-07-04 | Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Excessive Allocation.This issue affects Mediawiki -… |
CVE-2025-52497 | Medium | 4.8 | 2025-07-04 | Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_buffer and two mbedtls_pk_parse functions, via untrusted PEM… |
CVE-2025-52496 | High | 7.8 | 2025-07-04 | Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a mul… |
CVE-2025-49601 | Medium | 4.8 | 2025-07-04 | In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4 bytes before reading a 32-bit field, allowing a… |
CVE-2025-49600 | Medium | 4.9 | 2025-07-04 | In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation fails and internal errors go unchecked, enabling LMS (Leigh… |
CVE-2025-46733 | High | 7.9 | 2025-07-04 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog… |
CVE-2025-38234 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: sched/rt: Fix race in push_rt_task Overview ======== When a CPU chooses to call push_rt_t… |
CVE-2025-38233 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix clobbered r15 during livepatching While r15 is clobbered always wit… |
CVE-2025-38232 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: NFSD: fix race between nfsd registration and exports_proc As of now nfsd calls create_pro… |
CVE-2025-38231 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Initialize ssc before laundromat_work to prevent NULL dereference In nfs4_state_sta… |
CVE-2025-38230 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount() to prevent crashes Validate db_agheight, db_agwi… |
CVE-2025-38229 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: media: cxusb: no longer judge rbuf when the write fails syzbot reported a uninit-value in… |
CVE-2025-38228 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: media: imagination: fix a potential memory leak in e5010_probe() Add video_device_release… |
CVE-2025-38227 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Terminating the subsequent process of initialization failure syzbot reporte… |
CVE-2025-38226 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmall… |
CVE-2025-38225 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Cleanup after an allocation error When allocation failures are not clean… |
CVE-2025-38224 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: can: kvaser_pciefd: refine error prone echo_skb_max handling logic echo_skb_max should de… |
CVE-2025-38223 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ceph: avoid kernel BUG for encrypted inode with unaligned file size The generic/397 test… |
CVE-2025-38222 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ext4: inline: fix len overflow in ext4_prepare_inline_data When running the following cod… |
CVE-2025-38221 | High | 7.1 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix out of bounds punch offset Punching a hole with a start offset that exceeds max… |
CVE-2025-38220 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ext4: only dirty folios when data journaling regular files fstest generic/388 occasionall… |
CVE-2025-38219 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: f2fs: prevent kernel warning due to negative i_nlink from corrupted image WARNING: CPU: 1… |
CVE-2025-38218 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sit_bitmap_size w/ below testcase, resize will generate a… |
CVE-2025-38217 | Medium | 4.7 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (ftsteutates) Fix TOCTOU race in fts_read() In the fts_read() function, when handl… |
CVE-2025-38216 | High | 8.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816 ("i… |
CVE-2025-38215 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var If fb… |
CVE-2025-38214 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var If fb_add_videomod… |
CVE-2025-38212 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after… |
CVE-2025-38211 | Critical | 9.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction The commit 59c68ac3… |
CVE-2025-38210 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: configfs-tsm-report: Fix NULL dereference of tsm_ops Unlike sysfs, the lifetime of config… |
CVE-2025-38209 | Critical | 9.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: remove tag set when second admin queue config fails Commit 104d0e2f6222 ("nvme-… |
CVE-2025-38208 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: smb: client: add NULL check in automount_fullpath page is checked for null in __build_pat… |
CVE-2025-38207 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: mm: fix uprobe pte be overwritten when expanding vma Patch series "Fix uprobe pte be over… |
CVE-2025-38206 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path… |
CVE-2025-38205 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 [Why] If the dummy… |
CVE-2025-38204 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds read in add_missing_indices stbl is s8 but it must con… |
CVE-2025-38203 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: jfs: Fix null-ptr-deref in jfs_ioc_trim [ Syzkaller Report ] Oops: general protection fa… |
CVE-2025-38202 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() bpf_map_lookup_perc… |
CVE-2025-38201 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX Otherwise, it is poss… |