2025 CVEs (page 278)
Page 278 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-32876 | Medium | 6.8 | 2025-06-20 | An issue was discovered on COROS PACE 3 devices through 3.0808.0. The BLE implementation of the COROS smartwatch does not support LE Secure Connections and ins… |
CVE-2025-32875 | Medium | 5.7 | 2025-06-20 | An issue was discovered in the COROS application through 3.8.12 for Android. Bluetooth pairing and bonding is neither initiated nor enforced by the application… |
CVE-2025-32753 | Medium | 5.3 | 2025-06-20 | Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains an improper neutralization of special elements used in an SQL command ('SQL injection') vuln… |
CVE-2025-6341 | Medium | 4.3 | 2025-06-20 | A vulnerability classified as problematic was found in code-projects School Fees Payment System 1.0. This vulnerability affects unknown code. The manipulation… |
CVE-2025-6340 | Low | 3.5 | 2025-06-20 | A vulnerability classified as problematic has been found in code-projects School Fees Payment System 1.0. This affects an unknown part of the file /branch.php… |
CVE-2025-6339 | High | 7.3 | 2025-06-20 | A vulnerability was found in ponaravindb Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-6337 | High | 8.8 | 2025-06-20 | A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404. It has been declared as critical. Affected by this vulnerab… |
CVE-2025-6336 | High | 8.8 | 2025-06-20 | A vulnerability was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. It has been classified as critical. Affected is an unknown function of the file /boafrm/f… |
CVE-2025-4102 | High | 7.2 | 2025-06-20 | The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_enabl… |
CVE-2025-38083 | High | 7.8 | 2025-06-20 | In the Linux kernel, the following vulnerability has been resolved: net_sched: prio: fix a race in prio_tune() Gerrard Tai reported a race condition in PRIO… |
CVE-2025-6335 | Medium | 4.7 | 2025-06-20 | A vulnerability was found in DedeCMS up to 5.7.2 and classified as critical. This issue affects some unknown processing of the file /include/dedetag.class.php… |
CVE-2025-6334 | High | 8.8 | 2025-06-20 | A vulnerability has been found in D-Link DIR-867 1.0 and classified as critical. This vulnerability affects the function strncpy of the component Query String… |
CVE-2025-6333 | Medium | 6.3 | 2025-06-20 | A vulnerability, which was classified as critical, was found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/adm… |
CVE-2025-6332 | Medium | 6.3 | 2025-06-20 | A vulnerability, which was classified as critical, has been found in PHPGurukul Directory Management System 2.0. Affected by this issue is some unknown functio… |
CVE-2025-4981 | Critical | 9.9 | 2025-06-20 | Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to sanitize filenames in the archive extract… |
CVE-2025-6331 | Medium | 6.3 | 2025-06-20 | A vulnerability classified as critical was found in PHPGurukul Directory Management System 1.0. Affected by this vulnerability is an unknown functionality of t… |
CVE-2025-6330 | High | 7.3 | 2025-06-20 | A vulnerability classified as critical has been found in PHPGurukul Directory Management System 1.0. Affected is an unknown function of the file /searchdata.ph… |
CVE-2025-6329 | Medium | 5.4 | 2025-06-20 | A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2025-6328 | High | 8.8 | 2025-06-20 | A vulnerability was found in D-Link DIR-815 1.01. It has been declared as critical. This vulnerability affects the function sub_403794 of the file hedwig.cgi… |
CVE-2025-5963 | | 2025-06-20 | The Postbox's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-environment-variables" and "com.apple.securi… | |
CVE-2025-5255 | | 2025-06-20 | The Phoenix Code's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-environment-variables" and "com.apple.s… | |
CVE-2025-6323 | High | 7.3 | 2025-06-20 | A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been classified as critical. This affects an unknown part of the file /enrollm… |
CVE-2025-6322 | High | 7.3 | 2025-06-20 | A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of th… |
CVE-2025-6321 | Medium | 6.3 | 2025-06-20 | A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown function… |
CVE-2025-6320 | Medium | 6.3 | 2025-06-20 | A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System 1.0. Affected is an unknown function of the file /admin… |
CVE-2025-6257 | Medium | 6.4 | 2025-06-20 | The Euro FxRef Currency Converter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's currency shortcode in all versions up to… |
CVE-2025-6319 | Medium | 6.3 | 2025-06-20 | A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0. This issue affects some unknown processing of… |
CVE-2025-6318 | High | 7.3 | 2025-06-20 | A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. This vulnerability affects unknown code of the file /admin/che… |
CVE-2025-6317 | High | 7.3 | 2025-06-20 | A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/confirm.php. The… |
CVE-2025-6316 | High | 7.3 | 2025-06-20 | A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the fi… |
CVE-2025-6315 | High | 7.3 | 2025-06-20 | A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-6314 | High | 7.3 | 2025-06-20 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/c… |
CVE-2025-6313 | High | 7.3 | 2025-06-20 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages… |
CVE-2025-50054 | Medium | 5.5 | 2025-06-20 | Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message… |
CVE-2025-6312 | High | 7.3 | 2025-06-20 | A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pag… |
CVE-2025-6311 | High | 7.3 | 2025-06-20 | A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/accou… |
CVE-2025-5125 | Medium | 4.8 | 2025-06-20 | The Custom Post Carousels with Owl WordPress plugin before 1.4.12 uses the featherlight library and makes use of the data-featherlight attribute without saniti… |
CVE-2025-6310 | High | 7.3 | 2025-06-20 | A vulnerability, which was classified as critical, has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this issue is some unknown f… |
CVE-2025-6309 | Medium | 6.3 | 2025-06-20 | A vulnerability classified as critical was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this vulnerability is an unknown functionalit… |
CVE-2025-6308 | Medium | 6.3 | 2025-06-20 | A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/b… |
CVE-2025-6307 | High | 7.3 | 2025-06-20 | A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /functi… |
CVE-2025-6306 | High | 7.3 | 2025-06-20 | A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/… |
CVE-2025-6305 | High | 7.3 | 2025-06-20 | A vulnerability was found in code-projects Online Shoe Store 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin_fea… |
CVE-2025-6304 | High | 7.3 | 2025-06-20 | A vulnerability was found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /… |
CVE-2025-6303 | High | 7.3 | 2025-06-20 | A vulnerability has been found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-6302 | High | 8.8 | 2025-06-20 | A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is the function setStaticDhcpConfig of the fi… |
CVE-2025-6301 | Low | 2.4 | 2025-06-20 | A vulnerability, which was classified as problematic, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the f… |
CVE-2025-6300 | High | 7.3 | 2025-06-20 | A vulnerability classified as critical was found in PHPGurukul Employee Record Management System 1.3. This vulnerability affects unknown code of the file /admi… |
CVE-2025-6299 | Medium | 4.7 | 2025-06-20 | A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boa/formWSC. The manipulati… |
CVE-2025-6264 | Medium | 5.5 | 2025-06-20 | Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do anything and usually run with elevated… |
CVE-2025-6296 | High | 7.3 | 2025-06-20 | A vulnerability was found in code-projects Hostel Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-6295 | High | 7.3 | 2025-06-20 | A vulnerability was found in code-projects Hostel Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functio… |
CVE-2025-6294 | High | 7.3 | 2025-06-20 | A vulnerability was found in code-projects Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /conta… |
CVE-2025-6293 | High | 7.3 | 2025-06-20 | A vulnerability was found in code-projects Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /con… |
CVE-2025-6292 | High | 8.8 | 2025-06-20 | A vulnerability has been found in D-Link DIR-825 2.03 and classified as critical. This vulnerability affects the function sub_4091AC of the component HTTP POST… |
CVE-2025-6291 | High | 8.8 | 2025-06-20 | A vulnerability, which was classified as critical, was found in D-Link DIR-825 2.03. This affects the function do_file of the component HTTP POST Request Handl… |
CVE-2025-6288 | Low | 2.4 | 2025-06-20 | A vulnerability, which was classified as problematic, has been found in PHPGurukul Bus Pass Management System 1.0. Affected by this issue is some unknown funct… |
CVE-2025-49715 | High | 7.5 | 2025-06-20 | Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose i… |
CVE-2025-48058 | | 2025-06-20 | PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to version 6.7.2, there is a potential polynomial Regular Expressio… | |
CVE-2025-6287 | Low | 3.5 | 2025-06-20 | A vulnerability classified as problematic was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functiona… |
CVE-2025-47771 | | 2025-06-20 | PowSyBl (Power System Blocks) is a framework to build power system oriented software. In versions 6.3.0 to 6.7.1, there is a deserialization issue in the read… | |
CVE-2025-6286 | Low | 3.5 | 2025-06-19 | A vulnerability classified as problematic has been found in PHPGurukul COVID19 Testing Management System 2021. Affected is an unknown function of the file /sea… |
CVE-2025-6285 | Medium | 4.3 | 2025-06-19 | A vulnerability was found in PHPGurukul COVID19 Testing Management System 2021. It has been rated as problematic. This issue affects some unknown processing of… |
CVE-2025-6284 | Medium | 4.3 | 2025-06-19 | A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation l… |
CVE-2025-6283 | Low | 3.5 | 2025-06-19 | A vulnerability was found in xataio Xata Agent up to 0.3.0. It has been classified as problematic. This affects the function GET of the file apps/dbagent/src/a… |
CVE-2025-6282 | Medium | 5.5 | 2025-06-19 | A vulnerability was found in xlang-ai OpenAgents up to ff2e46440699af1324eb25655b622c4a131265bb and classified as critical. Affected by this issue is the funct… |
CVE-2025-6281 | Medium | 5.5 | 2025-06-19 | A vulnerability has been found in OpenBMB XAgent up to 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2025-6280 | Medium | 5.5 | 2025-06-19 | A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function download_attachment of the f… |
CVE-2025-47293 | | 2025-06-19 | PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to version 6.7.2, in certain places, powsybl-core XML parsing is vu… | |
CVE-2025-6384 | Critical | 9.1 | 2025-06-19 | Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via… |
CVE-2025-6279 | Medium | 5.5 | 2025-06-19 | A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6. This issue affects the function cloudpickle.loads of the file /tools… |
CVE-2025-6278 | Medium | 5.5 | 2025-06-19 | A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py… |
CVE-2025-6277 | Medium | 6.3 | 2025-06-19 | A vulnerability classified as critical has been found in Brilliance Golden Link Secondary System up to 20250609. This affects an unknown part of the file /stor… |
CVE-2025-6276 | Medium | 6.3 | 2025-06-19 | A vulnerability was found in Brilliance Golden Link Secondary System up to 20250609. It has been rated as critical. Affected by this issue is some unknown func… |
CVE-2025-6275 | Low | 3.3 | 2025-06-19 | A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been declared as problematic. Affected by this vulnerability is the function GetFuncOffset o… |
CVE-2025-6274 | Low | 3.3 | 2025-06-19 | A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/… |
CVE-2025-6273 | Low | 3.3 | 2025-06-19 | A vulnerability was found in WebAssembly wabt up to 1.0.37 and classified as problematic. This issue affects the function LogOpcode of the file src/binary-read… |
CVE-2025-6272 | Low | 3.3 | 2025-06-19 | A vulnerability has been found in wasm3 0.5.0 and classified as problematic. This vulnerability affects the function MarkSlotAllocated of the file source/m3_co… |
CVE-2025-6271 | Low | 3.3 | 2025-06-19 | A vulnerability, which was classified as problematic, was found in swftools up to 0.9.2. This affects the function wav_convert2mono in the library lib/wav.c of… |
CVE-2025-36050 | Medium | 6.2 | 2025-06-19 | IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user. |
CVE-2025-33121 | High | 7.1 | 2025-06-19 | IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker… |
CVE-2025-33117 | Critical | 9.1 | 2025-06-19 | IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious aut… |
CVE-2025-6270 | Medium | 5.3 | 2025-06-19 | A vulnerability, which was classified as critical, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5FS__sect_find_node of the file… |
CVE-2025-50200 | Medium | 5.5 | 2025-06-19 | RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When quer… |
CVE-2025-6269 | Medium | 5.3 | 2025-06-19 | A vulnerability classified as critical was found in HDF5 up to 1.14.6. Affected by this vulnerability is the function H5C__reconstruct_cache_entry of the file… |
CVE-2025-52464 | High | 8.3 | 2025-06-19 | Meshtastic is an open source mesh networking solution. In versions from 2.5.0 to before 2.6.11, the flashing procedure of several hardware vendors was resultin… |
CVE-2025-6268 | Medium | 4.3 | 2025-06-19 | A vulnerability classified as problematic has been found in Luna Imaging up to 7.5.5.6. Affected is an unknown function of the file /luna/servlet/view/search… |
CVE-2025-49014 | | 2025-06-19 | jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function f_strflocaltime of /src/builtin.c. This is… | |
CVE-2025-48886 | Medium | 4.8 | 2025-06-19 | Hydra is a layer-two scalability solution for Cardano. Prior to version 0.22.0, the process assumes L1 event finality and does not consider failed transactions… |
CVE-2025-6267 | Medium | 6.3 | 2025-06-19 | A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. It has been rated as critical. This issue affects some unk… |
CVE-2025-4738 | Critical | 9.8 | 2025-06-19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yirmibes Software MY ERP allows SQL Injection. This issu… |
CVE-2025-6266 | Medium | 6.3 | 2025-06-19 | A vulnerability was detected in Teledyne FLIR AX8 up to 1.46. Affected by this vulnerability is an unknown functionality of the file /upload.php. Performing ma… |
CVE-2025-6019 | High | 7.0 | 2025-06-19 | A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to… |
CVE-2025-32896 | Medium | 6.5 | 2025-06-19 | # Summary Unauthorized users can perform Arbitrary File Read and Deserialization attack by submit job using restful api-v1. # Details Unauthorized users can… |
CVE-2025-5234 | Medium | 6.4 | 2025-06-19 | The Gutenverse News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementId’ parameter in all versions up to, and including, 1.0.4… |
CVE-2025-5071 | High | 8.8 | 2025-06-19 | The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'Meow_MWAI_Labs… |
CVE-2025-49763 | High | 7.5 | 2025-06-19 | ESI plugin does not have the limit for maximum inclusion depth, and that allows excessive memory consumption if malicious instructions are inserted. Users can… |
CVE-2025-31698 | High | 7.5 | 2025-06-19 | ACL configured in ip_allow.config or remap.config does not use IP addresses that are provided by PROXY protocol. Users can use a new setting (proxy.config.acl… |
CVE-2025-4965 | Medium | 6.4 | 2025-06-19 | The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid Builder feature in all versions… |
CVE-2025-4571 | Medium | 5.4 | 2025-06-19 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due to an insufficient c… |