2025 CVEs (page 297)
Page 297 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-5707 | High | 7.3 | 2025-06-06 | A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unkn… |
CVE-2025-5706 | High | 7.3 | 2025-06-06 | A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability i… |
CVE-2025-5705 | High | 7.3 | 2025-06-06 | A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. Affected is an unknown function of t… |
CVE-2025-5704 | High | 7.3 | 2025-06-05 | A vulnerability was found in code-projects Real Estate Property Management System 1.0 and classified as critical. This issue affects some unknown processing of… |
CVE-2025-49012 | Medium | 5.4 | 2025-06-05 | Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Himmelblau versions 0.9.0 through 0.9.14 and 1.00-alpha are vulnerable to a pr… |
CVE-2025-5698 | Medium | 6.3 | 2025-06-05 | A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the… |
CVE-2025-5697 | Medium | 6.3 | 2025-06-05 | A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown pr… |
CVE-2025-5696 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical was found in Brilliance Golden Link Secondary System up to 20250424. This vulnerability affects unknown code of the file… |
CVE-2025-5695 | Medium | 4.7 | 2025-06-05 | A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. This impacts the function subscribe_to_spot/subscribe_to_delta/subscribe_to_alarm of the fil… |
CVE-2025-5694 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unkn… |
CVE-2025-48133 | Medium | 6.5 | 2025-06-05 | Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-47966 | Critical | 9.8 | 2025-06-05 | Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network. |
CVE-2025-5745 | Medium | 5.6 | 2025-06-05 | The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving… |
CVE-2025-5693 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability i… |
CVE-2025-5685 | High | 8.8 | 2025-06-05 | A vulnerability, which was classified as critical, was found in Tenda CH22 1.0.0.1. This affects the function formNatlimit of the file /goform/Natlimit. The ma… |
CVE-2025-5680 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical was found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 2.5.0. Affected by this vulnerability is the… |
CVE-2025-43026 | High | 7.8 | 2025-06-05 | A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a… |
CVE-2025-5702 | Medium | 5.6 | 2025-06-05 | The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving… |
CVE-2025-5679 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical has been found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 2.5.0. Affected is the function parseStr… |
CVE-2025-5677 | High | 7.3 | 2025-06-05 | A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. This issue affects some unknown processing of t… |
CVE-2025-5676 | High | 7.3 | 2025-06-05 | A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2025-5675 | High | 7.3 | 2025-06-05 | A vulnerability was found in Campcodes Online Teacher Record Management System 1.0. It has been classified as critical. This affects an unknown part of the fil… |
CVE-2025-5674 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionalit… |
CVE-2025-5672 | High | 8.8 | 2025-06-05 | A vulnerability has been found in TOTOLINK N302R Plus up to 3.4.0-B20201028 and classified as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-5671 | High | 8.8 | 2025-06-05 | A vulnerability, which was classified as critical, was found in TOTOLINK N302R Plus up to 3.4.0-B20201028. Affected is an unknown function of the file /boafrm/… |
CVE-2025-46258 | Medium | 5.4 | 2025-06-05 | Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ele… |
CVE-2025-46257 | Medium | 4.3 | 2025-06-05 | Cross-Site Request Forgery (CSRF) vulnerability in BdThemes Element Pack Pro allows Cross Site Request Forgery.This issue affects Element Pack Pro: from n/a be… |
CVE-2025-5670 | Medium | 6.3 | 2025-06-05 | A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing… |
CVE-2025-5669 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability affects unknown code of the file /admin/u… |
CVE-2025-5668 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/readenq… |
CVE-2025-49009 | Medium | 6.2 | 2025-06-05 | Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 in `FacebookAuthFi… |
CVE-2025-48493 | Medium | 6.5 | 2025-06-05 | The Yii 2 Redis extension provides the redis key-value store support for the Yii framework 2.0. On failing connection, the extension writes commands sequence t… |
CVE-2025-5667 | High | 7.3 | 2025-06-05 | A vulnerability was found in FreeFloat FTP Server 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component REI… |
CVE-2025-5666 | High | 7.3 | 2025-06-05 | A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the comp… |
CVE-2025-5665 | High | 7.3 | 2025-06-05 | A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. Affected is an unknown function of the component XCWD Command Handle… |
CVE-2025-5664 | High | 7.3 | 2025-06-05 | A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown processing of the component RESTART Command H… |
CVE-2025-5663 | High | 7.3 | 2025-06-05 | A vulnerability has been found in PHPGurukul Auto Taxi Stand Management System 1.0 and classified as critical. This vulnerability affects unknown code of the f… |
CVE-2025-5661 | Low | 2.4 | 2025-06-05 | A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part of the file… |
CVE-2025-5382 | Medium | 6.8 | 2025-06-05 | Improper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows a user with user management permission to remove or change adm… |
CVE-2025-47827 | Medium | 4.6 | 2025-06-05 | In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted roo… |
CVE-2025-3768 | Medium | 5.0 | 2025-06-05 | Improper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the tor blocking f… |
CVE-2025-30084 | Medium | 6.1 | 2025-06-05 | A stored XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 for Joomla was discovered. The issue occurs within the dashboard component, where user-suppl… |
CVE-2025-27754 | Medium | 6.5 | 2025-06-05 | A stored XSS vulnerability in RSBlog! component 1.11.6 - 1.14.4 for Joomla was discovered. The vulnerability allows authenticated users to inject malicious Jav… |
CVE-2025-27753 | Medium | 6.5 | 2025-06-05 | A SQLi vulnerability in RSMediaGallery component 1.7.4 - 2.1.6 for Joomla was discovered. The vulnerability is due to the use of unescaped user-supplied parame… |
CVE-2025-27445 | Medium | 5.4 | 2025-06-05 | A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered. This vulnerability allows authenticated users to read arbitrary… |
CVE-2025-0691 | Medium | 5.0 | 2025-06-05 | Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the "Edit permission" per… |
CVE-2025-5660 | Medium | 6.3 | 2025-06-05 | A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 2.0. Affected by this issue is some unknown functio… |
CVE-2025-5659 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical was found in PHPGurukul Complaint Management System 2.0. Affected by this vulnerability is an unknown functionality of t… |
CVE-2025-5658 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/updatec… |
CVE-2025-5701 | High | 8.8 | 2025-06-05 | The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability che… |
CVE-2025-5657 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2025-5656 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2025-5341 | Medium | 6.4 | 2025-06-05 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id' and 'dat… |
CVE-2025-5655 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been classified as critical. This affects an unknown part of the file /admin/ed… |
CVE-2025-5654 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2025-5653 | Medium | 6.3 | 2025-06-05 | A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2025-5652 | Medium | 6.3 | 2025-06-05 | A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/… |
CVE-2025-5651 | Low | 3.5 | 2025-06-05 | A vulnerability, which was classified as problematic, has been found in code-projects Traffic Offense Reporting System 1.0. This issue affects some unknown pro… |
CVE-2025-5650 | High | 7.3 | 2025-06-05 | A vulnerability classified as critical was found in 1000projects Online Notice Board 1.0. This vulnerability affects unknown code of the file /register.php. Th… |
CVE-2025-4568 | | 2025-06-05 | Improper neutralization of input provided by an unauthorized user into changes__reference_id parameter in URL allows for boolean-based Blind SQL Injection atta… | |
CVE-2025-5649 | Medium | 5.3 | 2025-06-05 | A vulnerability classified as critical has been found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /admin/c… |
CVE-2025-5648 | Low | 2.5 | 2025-06-05 | A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of… |
CVE-2025-5647 | Low | 2.5 | 2025-06-05 | A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the function r_cons_context_break_pop in the library /libr/cons/co… |
CVE-2025-5646 | Low | 2.5 | 2025-06-05 | A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability affects the function r_cons_rainbow_free in the library /libr… |
CVE-2025-5645 | Low | 2.5 | 2025-06-05 | A vulnerability, which was classified as problematic, was found in Radare2 5.9.9. This affects the function r_cons_pal_init in the library /libr/cons/pal.c of… |
CVE-2025-5644 | Low | 2.5 | 2025-06-05 | A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function r_cons_flush in the library /libr… |
CVE-2025-5643 | Low | 2.5 | 2025-06-05 | A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability is the function cons_stack_load in the library /libr/cons/… |
CVE-2025-5642 | Low | 2.5 | 2025-06-05 | A vulnerability classified as problematic has been found in Radare2 5.9.9. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the comp… |
CVE-2025-5641 | Low | 2.5 | 2025-06-05 | A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function r_cons_is_breaked in the library /libr/cons/cons… |
CVE-2025-5683 | Medium | 5.5 | 2025-06-05 | When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, f… |
CVE-2025-5640 | Low | 3.3 | 2025-06-05 | A vulnerability was found in PX4-Autopilot 1.12.3. It has been classified as problematic. This affects the function MavlinkReceiver::handle_message_trajectory_… |
CVE-2025-5639 | High | 7.3 | 2025-06-05 | A vulnerability was found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /f… |
CVE-2025-3055 | High | 8.1 | 2025-06-05 | The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_avatar_ajax() fun… |
CVE-2025-3054 | High | 8.8 | 2025-06-05 | The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload_files() function in all… |
CVE-2025-5638 | Medium | 6.3 | 2025-06-05 | A vulnerability has been found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-5637 | High | 7.3 | 2025-06-05 | A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component SYSTEM Command Handler… |
CVE-2025-5636 | High | 7.3 | 2025-06-05 | A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component SET Co… |
CVE-2025-1793 | Critical | 9.8 | 2025-06-05 | Multiple vector store integrations in run-llama/llama_index version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to rea… |
CVE-2025-5635 | High | 7.3 | 2025-06-05 | A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component PLS Command Handler. The m… |
CVE-2025-5634 | High | 7.3 | 2025-06-05 | A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component NOOP Command Handler. The manipu… |
CVE-2025-5633 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated as critical. Affected by this issue is… |
CVE-2025-5632 | Medium | 6.3 | 2025-06-05 | A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been declared as critical. Affected by this vulner… |
CVE-2025-5631 | High | 7.3 | 2025-06-05 | A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been classified as critical. Affected is an unknow… |
CVE-2025-5630 | Critical | 9.8 | 2025-06-05 | A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. This vulnerability affects unknown code of the file /goform/form2lansetu… |
CVE-2025-5629 | High | 8.8 | 2025-06-05 | A vulnerability, which was classified as critical, was found in Tenda AC10 up to 15.03.06.47. This affects the function formSetPPTPServer of the file /goform/S… |
CVE-2025-49466 | Medium | 5.8 | 2025-06-05 | aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the name of an attachment part, |
CVE-2025-48432 | Medium | 4.0 | 2025-06-05 | An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, whic… |
CVE-2025-5628 | Low | 3.5 | 2025-06-05 | A vulnerability, which was classified as problematic, has been found in SourceCodester Food Menu Manager 1.0. Affected by this issue is some unknown functional… |
CVE-2025-5627 | Medium | 6.3 | 2025-06-05 | A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. Affected by this vulnerability is an unknown functional… |
CVE-2025-5626 | High | 7.3 | 2025-06-05 | A vulnerability classified as critical has been found in Campcodes Online Teacher Record Management System 1.0. Affected is an unknown function of the file /ad… |
CVE-2025-5625 | High | 7.3 | 2025-06-05 | A vulnerability was found in Campcodes Online Teacher Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing o… |
CVE-2025-5624 | Critical | 9.8 | 2025-06-05 | A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been declared as critical. This vulnerability affects the function QoSPortSetup of the file /gofo… |
CVE-2025-49008 | | 2025-06-05 | Atheos is a self-hosted browser-based cloud integrated development environment. Prior to version 6.0.4, improper use of `escapeshellcmd()` in `/components/code… | |
CVE-2025-5623 | Critical | 9.8 | 2025-06-05 | A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been classified as critical. This affects the function qosClassifier of the file /goform/qosClass… |
CVE-2025-5622 | Critical | 9.8 | 2025-06-05 | A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this issue is the function wirelessApcli_5g of the file /goform/w… |
CVE-2025-5621 | High | 7.3 | 2025-06-05 | A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this vulnerability is the function qosClassifier of the file… |
CVE-2025-5620 | High | 7.3 | 2025-06-05 | A vulnerability, which was classified as critical, was found in D-Link DIR-816 1.10CNB05. Affected is the function setipsec_config of the file /goform/setipsec… |
CVE-2025-5619 | High | 8.8 | 2025-06-04 | A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. This issue affects the function formaddUserName of the file /goform/ad… |
CVE-2025-5618 | Medium | 6.3 | 2025-06-04 | A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. This vulnerability affects unknown code of the file /admin/edi… |
CVE-2025-5617 | Medium | 6.3 | 2025-06-04 | A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. This affects an unknown part of the file /admin/manage-te… |