2025 CVEs (page 276)
Page 276 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3091 | High | 7.5 | 2025-06-24 | An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password. |
CVE-2025-5258 | Medium | 6.4 | 2025-06-24 | The Conference Scheduler plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including… |
CVE-2025-50213 | Critical | 9.8 | 2025-06-24 | Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake. This issue affect… |
CVE-2025-3090 | High | 8.2 | 2025-06-24 | An unauthenticated remote attacker can obtain limited sensitive information and/or DoS the device due to missing authentication for critical function. |
CVE-2025-2962 | High | 7.5 | 2025-06-24 | A denial-of-service issue in the dns implemenation could cause an infinite loop. |
CVE-2025-48890 | Critical | 9.8 | 2025-06-24 | WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in miniigd SOAP s… |
CVE-2025-43879 | Critical | 9.8 | 2025-06-24 | WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in the telnet fun… |
CVE-2025-43877 | Medium | 5.4 | 2025-06-24 | WRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI. If exploited, an arbitrary script may be executed on the web browser of the use… |
CVE-2025-41427 | High | 8.8 | 2025-06-24 | WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability… |
CVE-2025-36519 | Medium | 4.3 | 2025-06-24 | Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B,WRC-2533GS2-B v1.69 and earlier, WRC-2… |
CVE-2025-52570 | | 2025-06-24 | Letmein is an authenticating port knocker. Prior to version 10.2.1, The connection limiter is implemented incorrectly. It allows an arbitrary amount of simulta… | |
CVE-2025-52568 | | 2025-06-24 | NeKernal is a free and open-source operating system stack. Prior to version 0.0.3, there are several memory safety issues that can lead to memory corruption, d… | |
CVE-2025-52566 | High | 8.6 | 2025-06-24 | llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer overflow in llama.cpp's tokenizer impl… |
CVE-2025-47943 | Medium | 6.3 | 2025-06-24 | Gogs is an open source self-hosted Git service. In application version 0.14.0+dev and prior, there is a stored cross-site scripting (XSS) vulnerability present… |
CVE-2025-6560 | Critical | 9.8 | 2025-06-24 | Multiple wireless router models from Sapido have an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to directly acce… |
CVE-2025-6559 | Critical | 9.8 | 2025-06-24 | Multiple wireless router models from Sapido have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS comman… |
CVE-2025-6552 | Medium | 4.3 | 2025-06-24 | A vulnerability was found in java-aodeng Hope-Boot 1.0.0. It has been classified as problematic. Affected is the function doLogin of the file /src/main/java/co… |
CVE-2025-52574 | High | 7.5 | 2025-06-24 | SysmonElixir is a system monitor HTTP service in Elixir. Prior to version 1.0.1, the /read endpoint reads any file from the server's /etc/passwd by default. In… |
CVE-2025-52560 | High | 8.1 | 2025-06-24 | Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard allows password reset emails to be sent with… |
CVE-2025-48470 | Medium | 4.1 | 2025-06-24 | Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scripts into device fields and executed in… |
CVE-2025-48469 | Critical | 9.6 | 2025-06-24 | Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware through a public update page, potentially leading to ba… |
CVE-2025-48468 | Medium | 6.4 | 2025-06-24 | Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to inject or modify firmware. |
CVE-2025-48467 | Medium | 6.5 | 2025-06-24 | Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to remote denial-of-service and system unav… |
CVE-2025-48466 | High | 8.1 | 2025-06-24 | Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentia… |
CVE-2025-48463 | Low | 3.1 | 2025-06-24 | Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable prod… |
CVE-2025-48462 | Medium | 4.2 | 2025-06-24 | Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby prev… |
CVE-2025-48461 | Medium | 5.0 | 2025-06-24 | Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookie… |
CVE-2025-6551 | Low | 3.5 | 2025-06-24 | A vulnerability was found in java-aodeng Hope-Boot 1.0.0 and classified as problematic. This issue affects the function Login of the file /src/main/java/com/ho… |
CVE-2025-6536 | Low | 3.3 | 2025-06-24 | A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tm_to_datetime in the lib… |
CVE-2025-34041 | | 2025-06-24 | An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2… | |
CVE-2025-34040 | | 2025-06-24 | An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssistServlet interface. The realFileType and fileId parameters are imprope… | |
CVE-2025-34039 | | 2025-06-24 | A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing servlet (bsh.servlet.BshServlet) without p… | |
CVE-2025-34038 | High | 7.5 | 2025-06-24 | A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql p… |
CVE-2025-6535 | Medium | 6.3 | 2025-06-24 | A vulnerability has been found in xxyopen/201206030 novel-plus up to 5.1.3 and classified as critical. This vulnerability affects the function list of the file… |
CVE-2025-6534 | Medium | 4.2 | 2025-06-24 | A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the file novel… |
CVE-2025-34037 | | 2025-06-24 | An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on po… | |
CVE-2025-34036 | Critical | 9.8 | 2025-06-24 | An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens… |
CVE-2025-34035 | Critical | 9.8 | 2025-06-24 | An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails to properly sanitiz… |
CVE-2025-34034 | High | 8.8 | 2025-06-24 | A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known defaul… |
CVE-2025-34033 | High | 8.8 | 2025-06-24 | An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the ping_addr parameter in the webctrl.cgi… |
CVE-2025-34032 | Medium | 6.1 | 2025-06-24 | A reflected cross-site scripting (XSS) vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the data parameter in jsmol.php. The applic… |
CVE-2025-34031 | High | 7.5 | 2025-06-24 | A path traversal vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the query parameter in jsmol.php. The script directly passes user… |
CVE-2025-6533 | Medium | 5.6 | 2025-06-24 | A vulnerability, which was classified as critical, has been found in xxyopen/201206030 novel-plus up to 5.1.3. Affected by this issue is the function ajaxLogin… |
CVE-2025-6532 | Medium | 4.3 | 2025-06-24 | A vulnerability classified as problematic was found in NOYAFA/Xiami LF9 Pro up to 20250611. Affected by this vulnerability is an unknown functionality of the c… |
CVE-2025-6531 | Medium | 4.3 | 2025-06-24 | A vulnerability was found in SIFUSM/MZZYG BD S1 up to 20250611. It has been declared as problematic. This vulnerability affects unknown code of the component R… |
CVE-2025-6530 | Medium | 4.8 | 2025-06-23 | A vulnerability was found in 70mai M300 up to 20250611. It has been classified as problematic. This affects an unknown part of the file demo.sh of the componen… |
CVE-2025-6529 | High | 8.8 | 2025-06-23 | A vulnerability was found in 70mai M300 up to 20250611 and classified as critical. Affected by this issue is some unknown functionality of the component Telnet… |
CVE-2025-6528 | Medium | 4.3 | 2025-06-23 | A vulnerability has been found in 70mai M300 up to 20250611 and classified as problematic. Affected by this vulnerability is an unknown functionality of the fi… |
CVE-2025-6527 | Low | 3.1 | 2025-06-23 | A vulnerability, which was classified as problematic, was found in 70mai M300 up to 20250611. Affected is an unknown function of the component Web Server. The… |
CVE-2025-6526 | Low | 3.1 | 2025-06-23 | A vulnerability, which was classified as problematic, has been found in 70mai M300 up to 20250611. This issue affects some unknown processing of the component… |
CVE-2025-6525 | Medium | 4.3 | 2025-06-23 | A vulnerability classified as problematic was found in 70mai 1S up to 20250611. This vulnerability affects unknown code of the file /cgi-bin/Config.cgi?action=… |
CVE-2025-6524 | Low | 3.1 | 2025-06-23 | A vulnerability classified as problematic has been found in 70mai 1S up to 20250611. This affects an unknown part of the component Video Services. The manipula… |
CVE-2025-52562 | Critical | 10.0 | 2025-06-23 | Convoy is a KVM server management panel for hosting businesses. In versions 3.9.0-rc3 to before 4.4.1, there is a directory traversal vulnerability in the Loca… |
CVE-2025-52561 | | 2025-06-23 | HTMLSanitizer.jl is a Whitelist-based HTML sanitizer. Prior to version 0.2.1, when adding the style tag to the whitelist, content inside the tag is incorrectly… | |
CVE-2025-52558 | | 2025-06-23 | changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors… | |
CVE-2025-2828 | Critical | 10.0 | 2025-06-23 | A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_communit… |
CVE-2025-23092 | High | 7.2 | 2025-06-23 | Mitel OpenScape Accounting Management through V5 R1.1.0 could allow an authenticated attacker with administrative privileges to conduct a path traversal attack… |
CVE-2025-49574 | Medium | 6.4 | 2025-06-23 | Quarkus is a Cloud Native, (Linux) Container First framework for writing Java applications. In versions prior to 3.24.1, 3.20.2, and 3.15.6, there is a potenti… |
CVE-2025-48026 | High | 7.5 | 2025-06-23 | A vulnerability in the WebApl component of Mitel OpenScape Xpressions through V7R1 FR5 HF43 P913 could allow an unauthenticated attacker to conduct a path trav… |
CVE-2025-44528 | High | 7.5 | 2025-06-23 | An issue in Texas Instruments LP-CC2652RB SimpleLink CC13XX CC26XX SDK 7.41.00.17 allows attackers to cause a Denial of Service (DoS) via sending a crafted LL_… |
CVE-2025-6547 | | 2025-06-23 | Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.This issue affects pbkdf2: <=3.1.2. | |
CVE-2025-6545 | | 2025-06-23 | Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/to-… | |
CVE-2025-6518 | Medium | 6.3 | 2025-06-23 | A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected is the function SingleLLMCallNode of the file backend… |
CVE-2025-50349 | High | 7.5 | 2025-06-23 | PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-teacher-pic.php. |
CVE-2025-50348 | High | 7.5 | 2025-06-23 | PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-class-pic.php. |
CVE-2025-49144 | High | 7.3 | 2025-06-23 | Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.8.1 instal… |
CVE-2025-6517 | Medium | 6.3 | 2025-06-23 | A vulnerability was found in Dromara MaxKey up to 4.1.7 and classified as critical. This issue affects the function Add of the file maxkey-webs\maxkey-web-mgt\… |
CVE-2025-49126 | High | 8.8 | 2025-06-23 | Visionatrix is an AI Media processing tool using ComfyUI. In versions 1.5.0 to before 2.5.1, the /docs/flows endpoint is vulnerable to a Reflected XSS (Cross-S… |
CVE-2025-6516 | Medium | 5.3 | 2025-06-23 | A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function H5F_addr_decode_len of the file /hdf5/s… |
CVE-2025-6511 | High | 8.8 | 2025-06-23 | A vulnerability classified as critical has been found in Netgear EX6150 1.0.0.46_1.0.76. This affects the function sub_410090. The manipulation leads to stack-… |
CVE-2025-6510 | High | 8.8 | 2025-06-23 | A vulnerability was found in Netgear EX6100 1.0.2.28_1.1.138. It has been rated as critical. Affected by this issue is the function sub_415EF8. The manipulatio… |
CVE-2025-6509 | Low | 3.5 | 2025-06-23 | A vulnerability was found in seaswalker spring-analysis up to 4379cce848af96997a9d7ef91d594aa129be8d71. It has been declared as problematic. Affected by this v… |
CVE-2025-4563 | Low | 2.7 | 2025-06-23 | A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks. When the DynamicRes… |
CVE-2025-52968 | Low | 2.7 | 2025-06-23 | xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. (For example, xdg-open could be modified t… |
CVE-2025-52967 | Medium | 5.8 | 2025-06-23 | gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation. |
CVE-2025-52879 | Medium | 4.8 | 2025-06-23 | In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible |
CVE-2025-52878 | Medium | 4.3 | 2025-06-23 | In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissions |
CVE-2025-52877 | Medium | 4.8 | 2025-06-23 | In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible |
CVE-2025-52876 | Medium | 5.4 | 2025-06-23 | In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible |
CVE-2025-52875 | Medium | 5.4 | 2025-06-23 | In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possible |
CVE-2025-48700 | Medium | 6.1 | 2025-06-23 | An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI all… |
CVE-2025-46101 | Critical | 9.8 | 2025-06-23 | SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version before 5.4.3 allows a… |
CVE-2025-2172 | | 2025-06-23 | Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing… | |
CVE-2025-2171 | | 2025-06-23 | Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 do not enforce rate limiting on password reset attempts, allowing adversaries to brute forc… | |
CVE-2025-6513 | Critical | 9.3 | 2025-06-23 | Standard Windows users can access the configuration file for database access of the BRAIN2 application and decrypt it. |
CVE-2025-6512 | Critical | 10.0 | 2025-06-23 | On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights. |
CVE-2025-52922 | High | 7.4 | 2025-06-23 | Innoshop through 0.4.1 allows directory traversal via FileManager API endpoints. An authenticated attacker with access to the admin panel could abuse this to… |
CVE-2025-52921 | Critical | 9.9 | 2025-06-23 | In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution on the server, by up… |
CVE-2025-52920 | Medium | 6.4 | 2025-06-23 | Innoshop through 0.4.1 allows Insecure Direct Object Reference (IDOR) at multiple places within the frontend shop. Anyone can create a customer account and eas… |
CVE-2025-23049 | | 2025-06-23 | Meridian Technique Materialise OrthoView through 7.5.1 allows OS Command Injection when servlet sharing is enabled. | |
CVE-2025-52939 | | 2025-06-23 | Out-of-bounds Write vulnerability in dail8859 NotepadNext (src/lua/src modules). This vulnerability is associated with program files ldebug.C, lvm.C. This iss… | |
CVE-2025-52938 | | 2025-06-23 | Out-of-bounds Read vulnerability in dail8859 NotepadNext (src/lua/src modules). This vulnerability is associated with program files lparser.C. This issue aff… | |
CVE-2025-52937 | | 2025-06-23 | Vulnerability in PointCloudLibrary PCL (surface/src/3rdparty/opennurbs modules). This vulnerability is associated with program files crc32.C. This vulnerabili… | |
CVE-2025-52936 | | 2025-06-23 | Improper Link Resolution Before File Access ('Link Following') vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2. | |
CVE-2025-52935 | | 2025-06-23 | Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly (src/redis/lua/struct modules). This vulnerability is associated with program files lua_s… | |
CVE-2025-27387 | High | 7.4 | 2025-06-23 | OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure. |
CVE-2025-6503 | High | 7.3 | 2025-06-23 | A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /… |
CVE-2025-6502 | High | 7.3 | 2025-06-23 | A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2025-6501 | High | 7.3 | 2025-06-23 | A vulnerability, which was classified as critical, was found in code-projects Inventory Management System 1.0. This affects an unknown part of the file /php_ac… |
CVE-2025-6500 | High | 7.3 | 2025-06-23 | A vulnerability, which was classified as critical, has been found in code-projects Inventory Management System 1.0. Affected by this issue is some unknown func… |