2025 CVEs (page 270)
Page 270 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-38089 | Critical | 9.8 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tianshuo han reported… |
CVE-2025-38088 | High | 7.1 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue ha… |
CVE-2025-38087 | High | 7.8 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in taprio_dev_notifier Since taprio’s taprio_dev_notifier()… |
CVE-2025-6896 | Medium | 6.3 | 2025-06-30 | A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of the file wget_test.asp. The manipulati… |
CVE-2025-6891 | High | 7.3 | 2025-06-30 | A vulnerability classified as critical has been found in code-projects Inventory Management System 1.0. Affected is an unknown function of the file /php_action… |
CVE-2025-6890 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /t… |
CVE-2025-6889 | High | 7.3 | 2025-06-30 | A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /l… |
CVE-2025-5730 | Medium | 4.3 | 2025-06-30 | The Contact Form Plugin WordPress plugin before 1.1.29 does not sanitise and escape some of its settings, which could allow high privilege users such as contri… |
CVE-2025-3745 | Medium | 6.3 | 2025-06-30 | The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow mali… |
CVE-2025-6888 | High | 7.3 | 2025-06-30 | A vulnerability was found in PHPGurukul Teachers Record Management System 2.1. It has been classified as critical. This affects an unknown part of the file /ad… |
CVE-2025-6887 | High | 8.8 | 2025-06-30 | A vulnerability was found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/SetSysT… |
CVE-2025-6886 | High | 8.8 | 2025-06-30 | A vulnerability has been found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /gof… |
CVE-2025-6885 | High | 7.3 | 2025-06-30 | A vulnerability, which was classified as critical, was found in PHPGurukul Teachers Record Management System 2.1. Affected is an unknown function of the file /… |
CVE-2025-6884 | Medium | 6.3 | 2025-06-30 | A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the fi… |
CVE-2025-6883 | Medium | 6.3 | 2025-06-30 | A vulnerability classified as critical was found in code-projects Staff Audit System 1.0. This vulnerability affects unknown code of the file /update_index.php… |
CVE-2025-6882 | High | 8.8 | 2025-06-30 | A vulnerability classified as critical has been found in D-Link DIR-513 1.0. This affects an unknown part of the file /goform/formSetWanPPTP. The manipulation… |
CVE-2025-53076 | Critical | 9.8 | 2025-06-30 | Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2. |
CVE-2025-53074 | Critical | 9.1 | 2025-06-30 | Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2. |
CVE-2025-6881 | High | 8.8 | 2025-06-30 | A vulnerability was found in D-Link DI-8100 16.07.21. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pppoe_ba… |
CVE-2025-53075 | Critical | 9.8 | 2025-06-30 | Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2. |
CVE-2025-46014 | High | 8.8 | 2025-06-30 | Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or… |
CVE-2025-0634 | Critical | 9.8 | 2025-06-30 | Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2. |
CVE-2025-6880 | Medium | 6.3 | 2025-06-30 | A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/ed… |
CVE-2025-6879 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2025-6878 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-6877 | Medium | 6.3 | 2025-06-30 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pan… |
CVE-2025-6876 | Medium | 6.3 | 2025-06-29 | A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality o… |
CVE-2025-6875 | Medium | 6.3 | 2025-06-29 | A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown func… |
CVE-2025-6874 | Medium | 6.3 | 2025-06-29 | A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /p… |
CVE-2025-6873 | Medium | 4.7 | 2025-06-29 | A vulnerability, which was classified as critical, has been found in SourceCodester Simple Company Website 1.0. This issue affects some unknown processing of t… |
CVE-2025-6872 | Medium | 4.7 | 2025-06-29 | A vulnerability classified as critical was found in SourceCodester Simple Company Website 1.0. This vulnerability affects unknown code of the file /classes/Sys… |
CVE-2025-6871 | High | 7.3 | 2025-06-29 | A vulnerability classified as critical has been found in SourceCodester Simple Company Website 1.0. This affects an unknown part of the file /classes/Login.php… |
CVE-2025-6870 | Medium | 4.7 | 2025-06-29 | A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-6869 | Medium | 4.7 | 2025-06-29 | A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown function… |
CVE-2025-24292 | Medium | 6.8 | 2025-06-29 | A misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate to Enterprise WiFi or VPN Server (l2tp and OpenVPN) using a dev… |
CVE-2025-24290 | Critical | 9.9 | 2025-06-29 | Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious actor with low privileges… |
CVE-2025-24289 | High | 7.5 | 2025-06-29 | A Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in the UCRM Client Signup Plugin (v1.3.4 and earlier) could allow privi… |
CVE-2025-6868 | Medium | 4.7 | 2025-06-29 | A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/… |
CVE-2025-6867 | Medium | 4.7 | 2025-06-29 | A vulnerability was found in SourceCodester Simple Company Website 1.0 and classified as critical. This issue affects some unknown processing of the file /admi… |
CVE-2025-6866 | Medium | 4.3 | 2025-06-29 | A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forum_downloa… |
CVE-2025-6865 | Medium | 4.3 | 2025-06-29 | A vulnerability, which was classified as problematic, was found in DaiCuo up to 1.3.13. This affects an unknown part of the file /admin.php/addon/index. The ma… |
CVE-2025-6864 | Medium | 4.3 | 2025-06-29 | A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2. Affected by this issue is some unknown functionality of the file /ad… |
CVE-2025-6863 | High | 7.3 | 2025-06-29 | A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown… |
CVE-2025-6862 | Medium | 6.3 | 2025-06-29 | A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/ed… |
CVE-2025-6861 | Medium | 6.3 | 2025-06-29 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2025-6860 | Medium | 6.3 | 2025-06-29 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-6859 | Medium | 6.3 | 2025-06-29 | A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pan… |
CVE-2025-5878 | High | 7.3 | 2025-06-29 | A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection… |
CVE-2025-6858 | Low | 3.3 | 2025-06-29 | A vulnerability was found in HDF5 1.14.6 and classified as problematic. Affected by this issue is the function H5C__flush_single_entry of the file src/H5Centry… |
CVE-2025-6857 | Low | 3.3 | 2025-06-29 | A vulnerability has been found in HDF5 1.14.6 and classified as problematic. Affected by this vulnerability is the function H5G__node_cmp3 of the file src/H5Gn… |
CVE-2025-6856 | Low | 3.3 | 2025-06-29 | A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipula… |
CVE-2025-6855 | Medium | 5.5 | 2025-06-29 | A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing… |
CVE-2025-6854 | Medium | 4.3 | 2025-06-29 | A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This vulnerability affects unknown code of the file /v1/f… |
CVE-2025-6853 | Medium | 6.3 | 2025-06-29 | A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file… |
CVE-2025-6850 | Medium | 6.3 | 2025-06-29 | A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-6849 | Low | 3.5 | 2025-06-29 | A vulnerability, which was classified as problematic, was found in code-projects Simple Forum 1.0. Affected is an unknown function of the file /forum_edit1.php… |
CVE-2025-6848 | Medium | 6.3 | 2025-06-29 | A vulnerability, which was classified as critical, has been found in code-projects Simple Forum 1.0. This issue affects some unknown processing of the file /fo… |
CVE-2025-6847 | Medium | 6.3 | 2025-06-29 | A vulnerability classified as critical was found in code-projects Simple Forum 1.0. This vulnerability affects unknown code of the file /forum_edit.php. The ma… |
CVE-2025-6846 | High | 7.3 | 2025-06-29 | A vulnerability classified as critical has been found in code-projects Simple Forum 1.0. This affects an unknown part of the file /forum_viewfile.php. The mani… |
CVE-2025-6845 | High | 7.3 | 2025-06-29 | A vulnerability was found in code-projects Simple Forum 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /r… |
CVE-2025-6462 | Medium | 6.4 | 2025-06-29 | The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's SQLREPORT shortcode in all… |
CVE-2025-6844 | High | 7.3 | 2025-06-29 | A vulnerability was found in code-projects Simple Forum 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of th… |
CVE-2025-6843 | High | 7.3 | 2025-06-29 | A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been classified as critical. Affected is an unknown function of the file /upload-ph… |
CVE-2025-6842 | Medium | 4.7 | 2025-06-29 | A vulnerability was found in code-projects Product Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /adm… |
CVE-2025-6841 | Medium | 4.7 | 2025-06-29 | A vulnerability has been found in code-projects Product Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /a… |
CVE-2025-6840 | High | 7.3 | 2025-06-29 | A vulnerability, which was classified as critical, was found in code-projects Product Inventory System 1.0. This affects an unknown part of the file /index.php… |
CVE-2025-6839 | Medium | 6.3 | 2025-06-29 | A vulnerability, which was classified as critical, has been found in Conjure Position Department Service Quality Evaluation System up to 1.0.11. Affected by th… |
CVE-2025-6837 | Medium | 6.3 | 2025-06-29 | A vulnerability classified as critical was found in code-projects Library System 1.0. Affected by this vulnerability is an unknown functionality of the file /p… |
CVE-2025-6836 | High | 7.3 | 2025-06-29 | A vulnerability classified as critical has been found in code-projects Library System 1.0. Affected is an unknown function of the file /profile.php. The manipu… |
CVE-2025-6835 | High | 7.3 | 2025-06-29 | A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student-i… |
CVE-2025-6834 | High | 7.3 | 2025-06-29 | A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the fi… |
CVE-2025-6829 | Medium | 6.3 | 2025-06-28 | A vulnerability was found in aaluoxiang oa_system up to c3a08168c144f27256a90838492c713f55f1b207 and classified as critical. This issue affects the function ou… |
CVE-2025-6828 | High | 7.3 | 2025-06-28 | A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2025-53393 | Medium | 6.0 | 2025-06-28 | In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics. |
CVE-2025-53392 | Medium | 5.0 | 2025-06-28 | In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal. NOTE… |
CVE-2025-6827 | High | 7.3 | 2025-06-28 | A vulnerability, which was classified as critical, was found in code-projects Inventory Management System 1.0. This affects an unknown part of the file /php_ac… |
CVE-2025-53391 | Critical | 9.3 | 2025-06-28 | The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has insecure PolicyKit allow_any/allow_inactive/allow_active sett… |
CVE-2025-6826 | High | 7.3 | 2025-06-28 | A vulnerability, which was classified as critical, has been found in code-projects Payroll Management System 1.0. Affected by this issue is some unknown functi… |
CVE-2025-6825 | High | 8.8 | 2025-06-28 | A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of th… |
CVE-2025-6824 | High | 8.8 | 2025-06-28 | A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParen… |
CVE-2025-6823 | High | 7.3 | 2025-06-28 | A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the fi… |
CVE-2025-6822 | High | 7.3 | 2025-06-28 | A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the fi… |
CVE-2025-32897 | Critical | 9.8 | 2025-06-28 | Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This security vulnerability is the same as CVE-2024-47552, but the version range… |
CVE-2025-6821 | High | 7.3 | 2025-06-28 | A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /php_a… |
CVE-2025-6820 | High | 7.3 | 2025-06-28 | A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-6819 | High | 7.3 | 2025-06-28 | A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functi… |
CVE-2025-6818 | Low | 3.3 | 2025-06-28 | A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5O__chunk_protect of the file /src/H5Ochunk.c. The ma… |
CVE-2025-1991 | High | 7.5 | 2025-06-28 | IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets. |
CVE-2025-6817 | Low | 3.3 | 2025-06-28 | A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5C__load_entry of the file /src/H5Centry… |
CVE-2025-6816 | Low | 3.3 | 2025-06-28 | A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5O__fsinfo_encode of the file /src/H5Ofsinfo.c. Th… |
CVE-2025-5937 | Medium | 4.3 | 2025-06-28 | The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ve… |
CVE-2025-38086 | Medium | 5.5 | 2025-06-28 | In the Linux kernel, the following vulnerability has been resolved: net: ch9200: fix uninitialised access during mii_nway_restart In mii_nway_restart() the c… |
CVE-2025-38085 | High | 7.8 | 2025-06-28 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference… |
CVE-2025-38084 | High | 7.8 | 2025-06-28 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: unshare page tables during VMA split, not before Currently, __split_vma() tri… |
CVE-2025-6755 | High | 8.8 | 2025-06-28 | The Game Users Share Buttons plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajaxDeleteTheme() fu… |
CVE-2025-5304 | Critical | 9.8 | 2025-06-28 | The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the wpnb_pto_new_users_add() function in ve… |
CVE-2025-6252 | Medium | 6.4 | 2025-06-28 | The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 1.9… |
CVE-2025-6381 | High | 8.8 | 2025-06-28 | The BeeTeam368 Extensions plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_remove_temp_file… |
CVE-2025-6379 | High | 8.8 | 2025-06-28 | The BeeTeam368 Extensions Pro plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_live_fn() fu… |
CVE-2025-6350 | Medium | 6.4 | 2025-06-28 | The WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hotspot-hover’… |