2025 CVEs (page 295)
Page 295 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-5563 | Medium | 6.5 | 2025-06-06 | The WP-Addpub plugin for WordPress is vulnerable to SQL Injection via the 'wp-addpub' shortcode in all versions up to, and including, 1.2.8 due to insufficient… |
CVE-2025-5541 | Medium | 6.4 | 2025-06-06 | The Runners Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'runnerslog' shortcode in all versions up to, and including… |
CVE-2025-5538 | Medium | 6.4 | 2025-06-06 | The BNS Featured Category plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bnsfc' shortcode in all versions up to, and inclu… |
CVE-2025-5536 | Medium | 6.4 | 2025-06-06 | The Freemind Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'freemind' shortcode in all versions up to, and includin… |
CVE-2025-5534 | Medium | 6.4 | 2025-06-06 | The ESV Bible Shortcode for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'esv' shortcode in all versions up to… |
CVE-2025-5533 | Medium | 6.4 | 2025-06-06 | The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'kbalert' shortcode in all versions up to, and including… |
CVE-2025-5486 | Critical | 9.8 | 2025-06-06 | The WP Email Debug plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the WPMDBUG_handle_settings() function in ve… |
CVE-2025-5019 | Medium | 5.4 | 2025-06-06 | The Hive Support | AI-Powered Help Desk, Live Chat & AI Chat Bot Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all v… |
CVE-2025-5018 | High | 7.1 | 2025-06-06 | The Hive Support plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the hs_update_ai_chat_… |
CVE-2025-4966 | Medium | 6.1 | 2025-06-06 | The WP Online Users Stats plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing… |
CVE-2025-4964 | Medium | 4.9 | 2025-06-06 | The WP Online Users Stats plugin for WordPress is vulnerable to time-based SQL Injection via the ‘table_name’ parameter in all versions up to, and including, 1… |
CVE-2025-48911 | High | 8.2 | 2025-06-06 | Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48910 | Medium | 5.5 | 2025-06-06 | Buffer overflow vulnerability in the DFile module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48909 | High | 7.1 | 2025-06-06 | Bypass vulnerability in the device management channel Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-48908 | Medium | 6.7 | 2025-06-06 | Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48907 | Medium | 6.2 | 2025-06-06 | Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48906 | High | 8.8 | 2025-06-06 | Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48905 | High | 8.1 | 2025-06-06 | Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wa… |
CVE-2025-48904 | Medium | 4.4 | 2025-06-06 | Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48903 | High | 7.8 | 2025-06-06 | Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-48902 | Medium | 6.6 | 2025-06-06 | Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-2935 | Medium | 5.4 | 2025-06-06 | The Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and… |
CVE-2025-5726 | Low | 2.4 | 2025-06-06 | A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown func… |
CVE-2025-5725 | Low | 2.4 | 2025-06-06 | A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unk… |
CVE-2025-5724 | Low | 2.4 | 2025-06-06 | A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been classified as problematic. Affected is an unknown function of the… |
CVE-2025-1778 | Medium | 4.3 | 2025-06-06 | The Art Theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'arttheme_theme_option_restore' AJAX function in all… |
CVE-2025-1777 | Medium | 6.4 | 2025-06-06 | The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the 'ux_cb_page_options_save' f… |
CVE-2025-5723 | Low | 2.4 | 2025-06-06 | A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of t… |
CVE-2025-5722 | Low | 2.4 | 2025-06-06 | A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as problematic. This vulnerability affects unknown code of… |
CVE-2025-36513 | Medium | 4.3 | 2025-06-06 | Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd.. If a user views a crafted page while logged in to the affe… |
CVE-2025-5733 | Medium | 5.3 | 2025-06-06 | The Modern Events Calendar Lite plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 7.21.9. This is due improper o… |
CVE-2025-5721 | Low | 2.4 | 2025-06-06 | A vulnerability, which was classified as problematic, was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the fil… |
CVE-2025-5719 | | 2025-06-06 | The wallet has an authentication bypass vulnerability that allows access to specific pages. | |
CVE-2025-5716 | High | 7.3 | 2025-06-06 | A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function of the file /… |
CVE-2025-5715 | Low | 3.8 | 2025-06-06 | A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of the component Biomet… |
CVE-2025-5714 | Medium | 4.3 | 2025-06-06 | A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250516. It has been classified as problematic. This affects an unknown part of the file /sys/up… |
CVE-2025-5713 | Low | 3.5 | 2025-06-06 | A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250519 and classified as problematic. Affected by this issue is some unknown functionality of th… |
CVE-2025-5712 | High | 7.3 | 2025-06-06 | A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unkn… |
CVE-2025-5711 | High | 7.3 | 2025-06-06 | A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of th… |
CVE-2025-5710 | High | 7.3 | 2025-06-06 | A vulnerability, which was classified as critical, has been found in code-projects Real Estate Property Management System 1.0. This issue affects some unknown… |
CVE-2025-5709 | High | 7.3 | 2025-06-06 | A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. This vulnerability affects unknown code of the fi… |
CVE-2025-5708 | High | 7.3 | 2025-06-06 | A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /Ad… |
CVE-2025-5707 | High | 7.3 | 2025-06-06 | A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unkn… |
CVE-2025-5706 | High | 7.3 | 2025-06-06 | A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability i… |
CVE-2025-5705 | High | 7.3 | 2025-06-06 | A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. Affected is an unknown function of t… |
CVE-2025-5704 | High | 7.3 | 2025-06-05 | A vulnerability was found in code-projects Real Estate Property Management System 1.0 and classified as critical. This issue affects some unknown processing of… |
CVE-2025-49012 | Medium | 5.4 | 2025-06-05 | Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Himmelblau versions 0.9.0 through 0.9.14 and 1.00-alpha are vulnerable to a pr… |
CVE-2025-5698 | Medium | 6.3 | 2025-06-05 | A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the… |
CVE-2025-5697 | Medium | 6.3 | 2025-06-05 | A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown pr… |
CVE-2025-5696 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical was found in Brilliance Golden Link Secondary System up to 20250424. This vulnerability affects unknown code of the file… |
CVE-2025-5695 | Medium | 4.7 | 2025-06-05 | A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. This impacts the function subscribe_to_spot/subscribe_to_delta/subscribe_to_alarm of the fil… |
CVE-2025-5694 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unkn… |
CVE-2025-48133 | Medium | 6.5 | 2025-06-05 | Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-47966 | Critical | 9.8 | 2025-06-05 | Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network. |
CVE-2025-5745 | Medium | 5.6 | 2025-06-05 | The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving… |
CVE-2025-5693 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability i… |
CVE-2025-5685 | High | 8.8 | 2025-06-05 | A vulnerability, which was classified as critical, was found in Tenda CH22 1.0.0.1. This affects the function formNatlimit of the file /goform/Natlimit. The ma… |
CVE-2025-5680 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical was found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 2.5.0. Affected by this vulnerability is the… |
CVE-2025-43026 | High | 7.8 | 2025-06-05 | A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a… |
CVE-2025-5702 | Medium | 5.6 | 2025-06-05 | The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving… |
CVE-2025-5679 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical has been found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 2.5.0. Affected is the function parseStr… |
CVE-2025-5677 | High | 7.3 | 2025-06-05 | A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. This issue affects some unknown processing of t… |
CVE-2025-5676 | High | 7.3 | 2025-06-05 | A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2025-5675 | High | 7.3 | 2025-06-05 | A vulnerability was found in Campcodes Online Teacher Record Management System 1.0. It has been classified as critical. This affects an unknown part of the fil… |
CVE-2025-5674 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionalit… |
CVE-2025-5672 | High | 8.8 | 2025-06-05 | A vulnerability has been found in TOTOLINK N302R Plus up to 3.4.0-B20201028 and classified as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-5671 | High | 8.8 | 2025-06-05 | A vulnerability, which was classified as critical, was found in TOTOLINK N302R Plus up to 3.4.0-B20201028. Affected is an unknown function of the file /boafrm/… |
CVE-2025-46258 | Medium | 5.4 | 2025-06-05 | Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ele… |
CVE-2025-46257 | Medium | 4.3 | 2025-06-05 | Cross-Site Request Forgery (CSRF) vulnerability in BdThemes Element Pack Pro allows Cross Site Request Forgery.This issue affects Element Pack Pro: from n/a be… |
CVE-2025-5670 | Medium | 6.3 | 2025-06-05 | A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing… |
CVE-2025-5669 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability affects unknown code of the file /admin/u… |
CVE-2025-5668 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/readenq… |
CVE-2025-49009 | Medium | 6.2 | 2025-06-05 | Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 in `FacebookAuthFi… |
CVE-2025-48493 | Medium | 6.5 | 2025-06-05 | The Yii 2 Redis extension provides the redis key-value store support for the Yii framework 2.0. On failing connection, the extension writes commands sequence t… |
CVE-2025-5667 | High | 7.3 | 2025-06-05 | A vulnerability was found in FreeFloat FTP Server 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component REI… |
CVE-2025-5666 | High | 7.3 | 2025-06-05 | A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the comp… |
CVE-2025-5665 | High | 7.3 | 2025-06-05 | A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. Affected is an unknown function of the component XCWD Command Handle… |
CVE-2025-5664 | High | 7.3 | 2025-06-05 | A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown processing of the component RESTART Command H… |
CVE-2025-5663 | High | 7.3 | 2025-06-05 | A vulnerability has been found in PHPGurukul Auto Taxi Stand Management System 1.0 and classified as critical. This vulnerability affects unknown code of the f… |
CVE-2025-5661 | Low | 2.4 | 2025-06-05 | A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part of the file… |
CVE-2025-5382 | Medium | 6.8 | 2025-06-05 | Improper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows a user with user management permission to remove or change adm… |
CVE-2025-47827 | Medium | 4.6 | 2025-06-05 | In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted roo… |
CVE-2025-3768 | Medium | 5.0 | 2025-06-05 | Improper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the tor blocking f… |
CVE-2025-30084 | Medium | 6.1 | 2025-06-05 | A stored XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 for Joomla was discovered. The issue occurs within the dashboard component, where user-suppl… |
CVE-2025-27754 | Medium | 6.5 | 2025-06-05 | A stored XSS vulnerability in RSBlog! component 1.11.6 - 1.14.4 for Joomla was discovered. The vulnerability allows authenticated users to inject malicious Jav… |
CVE-2025-27753 | Medium | 6.5 | 2025-06-05 | A SQLi vulnerability in RSMediaGallery component 1.7.4 - 2.1.6 for Joomla was discovered. The vulnerability is due to the use of unescaped user-supplied parame… |
CVE-2025-27445 | Medium | 5.4 | 2025-06-05 | A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered. This vulnerability allows authenticated users to read arbitrary… |
CVE-2025-0691 | Medium | 5.0 | 2025-06-05 | Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the "Edit permission" per… |
CVE-2025-5660 | Medium | 6.3 | 2025-06-05 | A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 2.0. Affected by this issue is some unknown functio… |
CVE-2025-5659 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical was found in PHPGurukul Complaint Management System 2.0. Affected by this vulnerability is an unknown functionality of t… |
CVE-2025-5658 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/updatec… |
CVE-2025-5701 | High | 8.8 | 2025-06-05 | The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability che… |
CVE-2025-5657 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2025-5656 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2025-5341 | Medium | 6.4 | 2025-06-05 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id' and 'dat… |
CVE-2025-5655 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been classified as critical. This affects an unknown part of the file /admin/ed… |
CVE-2025-5654 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2025-5653 | Medium | 6.3 | 2025-06-05 | A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2025-5652 | Medium | 6.3 | 2025-06-05 | A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/… |
CVE-2025-5651 | Low | 3.5 | 2025-06-05 | A vulnerability, which was classified as problematic, has been found in code-projects Traffic Offense Reporting System 1.0. This issue affects some unknown pro… |