2025 CVEs (page 268)
Page 268 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-49493 | Medium | 5.8 | 2025-06-30 | Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection. |
CVE-2025-36593 | High | 8.8 | 2025-06-30 | Dell OpenManage Network Integration, versions prior to 3.8, contains an Authentication Bypass by Capture-replay vulnerability in the RADIUS protocol. An attac… |
CVE-2025-6925 | Medium | 5.3 | 2025-06-30 | A vulnerability has been found in Dromara RuoYi-Vue-Plus 5.4.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the fi… |
CVE-2025-6917 | High | 7.3 | 2025-06-30 | A vulnerability has been found in code-projects Online Hotel Booking 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin… |
CVE-2025-52898 | High | 8.8 | 2025-06-30 | Frappe is a full-stack web application framework. Prior to versions 14.94.3 and 15.58.0, a carefully crafted request could lead to a malicious actor getting ac… |
CVE-2025-6916 | High | 8.8 | 2025-06-30 | A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. This affects the function Form_Login of the file /formLoginA… |
CVE-2025-6915 | Medium | 6.3 | 2025-06-30 | A vulnerability, which was classified as critical, has been found in PHPGurukul Student Record System 3.2. Affected by this issue is some unknown functionality… |
CVE-2025-52896 | Medium | 5.4 | 2025-06-30 | Frappe is a full-stack web application framework. Prior to versions 14.94.2 and 15.57.0, authenticated users could upload carefully crafted malicious files via… |
CVE-2025-52895 | High | 7.5 | 2025-06-30 | Frappe is a full-stack web application framework. Prior to versions 14.94.3 and 15.58.0, SQL injection could be achieved via a specially crafted request, which… |
CVE-2025-47871 | Medium | 4.3 | 2025-06-30 | Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly validate channel membership when… |
CVE-2025-46702 | Medium | 5.4 | 2025-06-30 | Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly enforce channel member managemen… |
CVE-2025-45931 | Critical | 9.8 | 2025-06-30 | An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker to execute arbitrary code via system() function in the bin/goahead file |
CVE-2025-45143 | High | 7.0 | 2025-06-30 | string-math v1.2.2 was discovered to contain a Regex Denial of Service (ReDoS) which is exploited via a crafted input. |
CVE-2025-26074 | Critical | 9.8 | 2025-06-30 | Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary OS commands through unrestricted access to Java classes. |
CVE-2025-6914 | Medium | 6.3 | 2025-06-30 | A vulnerability classified as critical was found in PHPGurukul Student Record System 3.2. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2025-6913 | Medium | 6.3 | 2025-06-30 | A vulnerability classified as critical has been found in PHPGurukul Student Record System 3.2. Affected is an unknown function of the file /admin-profile.php… |
CVE-2025-6912 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in PHPGurukul Student Record System 3.2. It has been rated as critical. This issue affects some unknown processing of the file /manag… |
CVE-2025-6911 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability affects unknown code of the file /manag… |
CVE-2025-2895 | Medium | 5.4 | 2025-06-30 | IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, 2.3.4.1, and 2.3.4.1 iFix1 is vulnerable to HTML injection. A remote attacker coul… |
CVE-2025-6910 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in PHPGurukul Student Record System 3.2. It has been classified as critical. This affects an unknown part of the file /session.php. T… |
CVE-2025-6909 | Medium | 6.3 | 2025-06-30 | A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functi… |
CVE-2025-6908 | Medium | 6.3 | 2025-06-30 | A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /adm… |
CVE-2025-6907 | High | 7.3 | 2025-06-30 | A vulnerability classified as critical was found in code-projects Car Rental System 1.0. This vulnerability affects unknown code of the file /book_car.php. The… |
CVE-2025-6906 | High | 7.3 | 2025-06-30 | A vulnerability classified as critical has been found in code-projects Car Rental System 1.0. This affects an unknown part of the file /login.php. The manipula… |
CVE-2025-6905 | High | 7.3 | 2025-06-30 | A vulnerability, which was classified as critical, has been found in code-projects Car Rental System 1.0. This issue affects some unknown processing of the fil… |
CVE-2025-4407 | Medium | 6.7 | 2025-06-30 | Insufficient Session Expiration vulnerability in ABB Lite Panel Pro.This issue affects Lite Panel Pro: through 1.0.1. |
CVE-2025-6904 | High | 7.3 | 2025-06-30 | A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the fi… |
CVE-2025-6903 | High | 7.3 | 2025-06-30 | A vulnerability was found in code-projects Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-40710 | | 2025-06-30 | Host Header Injection (HHI) vulnerability in the Hotspot Shield VPN client, which can induce unexpected behaviour when accessing third-party web applications t… | |
CVE-2025-6902 | High | 7.3 | 2025-06-30 | A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ph… |
CVE-2025-6901 | High | 7.3 | 2025-06-30 | A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /… |
CVE-2025-53416 | High | 7.8 | 2025-06-30 | Delta Electronics DTN Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution |
CVE-2025-41439 | Medium | 6.1 | 2025-06-30 | A reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help Documentation of RICOH Streamline NX. If this vulnerability is expl… |
CVE-2025-6900 | Medium | 6.3 | 2025-06-30 | A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.ph… |
CVE-2025-6899 | Medium | 6.3 | 2025-06-30 | A vulnerability, which was classified as critical, was found in D-Link DI-7300G+ and DI-8200G 17.12.20A1/19.12.25A1. This affects an unknown part of the file m… |
CVE-2025-53415 | High | 7.8 | 2025-06-30 | Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution |
CVE-2025-40734 | Medium | 6.1 | 2025-06-30 | Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a… |
CVE-2025-40733 | Medium | 6.1 | 2025-06-30 | Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a… |
CVE-2025-40732 | High | 7.5 | 2025-06-30 | user enumeration vulnerability in Daily Expense Manager v1.0. To exploit this vulnerability a POST request must be sent using the name parameter in /check.php |
CVE-2025-40731 | Critical | 9.8 | 2025-06-30 | SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the p… |
CVE-2025-6898 | Medium | 6.3 | 2025-06-30 | A vulnerability, which was classified as critical, has been found in D-Link DI-7300G+ 19.12.25A1. Affected by this issue is some unknown functionality of the f… |
CVE-2025-6897 | Medium | 5.5 | 2025-06-30 | A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpd_d… |
CVE-2025-38090 | High | 7.8 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/rio_cm.c: prevent possible heap overwrite In riocm_cdev_ioctl(RIO_CM_CHA… |
CVE-2025-38089 | Critical | 9.8 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tianshuo han reported… |
CVE-2025-38088 | High | 7.1 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue ha… |
CVE-2025-38087 | High | 7.8 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in taprio_dev_notifier Since taprio’s taprio_dev_notifier()… |
CVE-2025-6896 | Medium | 6.3 | 2025-06-30 | A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of the file wget_test.asp. The manipulati… |
CVE-2025-6891 | High | 7.3 | 2025-06-30 | A vulnerability classified as critical has been found in code-projects Inventory Management System 1.0. Affected is an unknown function of the file /php_action… |
CVE-2025-6890 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /t… |
CVE-2025-6889 | High | 7.3 | 2025-06-30 | A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /l… |
CVE-2025-5730 | Medium | 4.3 | 2025-06-30 | The Contact Form Plugin WordPress plugin before 1.1.29 does not sanitise and escape some of its settings, which could allow high privilege users such as contri… |
CVE-2025-3745 | Medium | 6.3 | 2025-06-30 | The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow mali… |
CVE-2025-6888 | High | 7.3 | 2025-06-30 | A vulnerability was found in PHPGurukul Teachers Record Management System 2.1. It has been classified as critical. This affects an unknown part of the file /ad… |
CVE-2025-6887 | High | 8.8 | 2025-06-30 | A vulnerability was found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/SetSysT… |
CVE-2025-6886 | High | 8.8 | 2025-06-30 | A vulnerability has been found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /gof… |
CVE-2025-6885 | High | 7.3 | 2025-06-30 | A vulnerability, which was classified as critical, was found in PHPGurukul Teachers Record Management System 2.1. Affected is an unknown function of the file /… |
CVE-2025-6884 | Medium | 6.3 | 2025-06-30 | A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the fi… |
CVE-2025-6883 | Medium | 6.3 | 2025-06-30 | A vulnerability classified as critical was found in code-projects Staff Audit System 1.0. This vulnerability affects unknown code of the file /update_index.php… |
CVE-2025-6882 | High | 8.8 | 2025-06-30 | A vulnerability classified as critical has been found in D-Link DIR-513 1.0. This affects an unknown part of the file /goform/formSetWanPPTP. The manipulation… |
CVE-2025-53076 | Critical | 9.8 | 2025-06-30 | Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2. |
CVE-2025-53074 | Critical | 9.1 | 2025-06-30 | Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2. |
CVE-2025-6881 | High | 8.8 | 2025-06-30 | A vulnerability was found in D-Link DI-8100 16.07.21. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pppoe_ba… |
CVE-2025-53075 | Critical | 9.8 | 2025-06-30 | Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2. |
CVE-2025-46014 | High | 8.8 | 2025-06-30 | Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or… |
CVE-2025-0634 | Critical | 9.8 | 2025-06-30 | Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2. |
CVE-2025-6880 | Medium | 6.3 | 2025-06-30 | A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/ed… |
CVE-2025-6879 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2025-6878 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-6877 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pan… |
CVE-2025-6876 | Medium | 6.3 | 2025-06-29 | A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality o… |
CVE-2025-6875 | Medium | 6.3 | 2025-06-29 | A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown func… |
CVE-2025-6874 | Medium | 6.3 | 2025-06-29 | A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /p… |
CVE-2025-6873 | Medium | 4.7 | 2025-06-29 | A vulnerability, which was classified as critical, has been found in SourceCodester Simple Company Website 1.0. This issue affects some unknown processing of t… |
CVE-2025-6872 | Medium | 4.7 | 2025-06-29 | A vulnerability classified as critical was found in SourceCodester Simple Company Website 1.0. This vulnerability affects unknown code of the file /classes/Sys… |
CVE-2025-6871 | High | 7.3 | 2025-06-29 | A vulnerability classified as critical has been found in SourceCodester Simple Company Website 1.0. This affects an unknown part of the file /classes/Login.php… |
CVE-2025-6870 | Medium | 4.7 | 2025-06-29 | A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-6869 | Medium | 4.7 | 2025-06-29 | A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown function… |
CVE-2025-24292 | Medium | 6.8 | 2025-06-29 | A misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate to Enterprise WiFi or VPN Server (l2tp and OpenVPN) using a dev… |
CVE-2025-24290 | Critical | 9.9 | 2025-06-29 | Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious actor with low privileges… |
CVE-2025-24289 | High | 7.5 | 2025-06-29 | A Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in the UCRM Client Signup Plugin (v1.3.4 and earlier) could allow privi… |
CVE-2025-6868 | Medium | 4.7 | 2025-06-29 | A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/… |
CVE-2025-6867 | Medium | 4.7 | 2025-06-29 | A vulnerability was found in SourceCodester Simple Company Website 1.0 and classified as critical. This issue affects some unknown processing of the file /admi… |
CVE-2025-6866 | Medium | 4.3 | 2025-06-29 | A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forum_downloa… |
CVE-2025-6865 | Medium | 4.3 | 2025-06-29 | A vulnerability, which was classified as problematic, was found in DaiCuo up to 1.3.13. This affects an unknown part of the file /admin.php/addon/index. The ma… |
CVE-2025-6864 | Medium | 4.3 | 2025-06-29 | A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2. Affected by this issue is some unknown functionality of the file /ad… |
CVE-2025-6863 | High | 7.3 | 2025-06-29 | A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown… |
CVE-2025-6862 | Medium | 6.3 | 2025-06-29 | A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/ed… |
CVE-2025-6861 | Medium | 6.3 | 2025-06-29 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2025-6860 | Medium | 6.3 | 2025-06-29 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-6859 | Medium | 6.3 | 2025-06-29 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pan… |
CVE-2025-5878 | High | 7.3 | 2025-06-29 | A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection… |
CVE-2025-6858 | Low | 3.3 | 2025-06-29 | A vulnerability was found in HDF5 1.14.6 and classified as problematic. Affected by this issue is the function H5C__flush_single_entry of the file src/H5Centry… |
CVE-2025-6857 | Low | 3.3 | 2025-06-29 | A vulnerability has been found in HDF5 1.14.6 and classified as problematic. Affected by this vulnerability is the function H5G__node_cmp3 of the file src/H5Gn… |
CVE-2025-6856 | Low | 3.3 | 2025-06-29 | A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipula… |
CVE-2025-6855 | Medium | 5.5 | 2025-06-29 | A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing… |
CVE-2025-6854 | Medium | 4.3 | 2025-06-29 | A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This vulnerability affects unknown code of the file /v1/f… |
CVE-2025-6853 | Medium | 6.3 | 2025-06-29 | A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file… |
CVE-2025-6850 | Medium | 6.3 | 2025-06-29 | A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-6849 | Low | 3.5 | 2025-06-29 | A vulnerability, which was classified as problematic, was found in code-projects Simple Forum 1.0. Affected is an unknown function of the file /forum_edit1.php… |
CVE-2025-6848 | Medium | 6.3 | 2025-06-29 | A vulnerability, which was classified as critical, has been found in code-projects Simple Forum 1.0. This issue affects some unknown processing of the file /fo… |