2025 CVEs (page 305)
Page 305 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-5216 | High | 7.3 | 2025-05-27 | A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20. This vulnerability affects unknown code of the file /login.php. The… |
CVE-2025-5215 | High | 8.8 | 2025-05-27 | A vulnerability classified as critical has been found in D-Link DCS-5020L 1.01_B2. This affects the function websReadEvent of the file /rame/ptdc.cgi. The mani… |
CVE-2025-5214 | High | 7.3 | 2025-05-27 | A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0. It has been rated as critical. Affected by this issue is some unknown functional… |
CVE-2025-5213 | High | 7.3 | 2025-05-27 | A vulnerability was found in projectworlds Responsive E-Learning System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2025-4783 | Medium | 6.4 | 2025-05-27 | The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML attributes of the Countdown Timer Widget in a… |
CVE-2025-5212 | High | 7.3 | 2025-05-26 | A vulnerability was found in PHPGurukul Employee Record Management System 1.3. It has been classified as critical. Affected is an unknown function of the file… |
CVE-2025-5211 | High | 7.3 | 2025-05-26 | A vulnerability was found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This issue affects some unknown processing of the fil… |
CVE-2025-5210 | High | 7.3 | 2025-05-26 | A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vulnerability affects unknown code of the f… |
CVE-2025-5208 | High | 7.3 | 2025-05-26 | A vulnerability, which was classified as critical, was found in SourceCodester Online Hospital Management System 1.0. This affects an unknown part of the file… |
CVE-2025-5207 | Medium | 4.7 | 2025-05-26 | A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unkno… |
CVE-2025-5206 | Medium | 4.7 | 2025-05-26 | A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functionality of the file /install/index.php o… |
CVE-2025-5205 | High | 7.3 | 2025-05-26 | A vulnerability classified as critical has been found in 1000 Projects Daily College Class Work Report Book 1.0. Affected is an unknown function of the file /d… |
CVE-2025-5204 | Low | 3.3 | 2025-05-26 | A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::ParseSkinLump_3DGS_M… |
CVE-2025-5203 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function SkipSpaces in the… |
CVE-2025-5202 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function HL1MDL… |
CVE-2025-5201 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function LWOImporter::CountVertsAnd… |
CVE-2025-5200 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDLImporter::InternReadFile_… |
CVE-2025-46802 | Medium | 6.0 | 2025-05-26 | For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session. |
CVE-2025-23395 | High | 7.8 | 2025-05-26 | Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path. This allows unprivileged users to creat… |
CVE-2025-23394 | Critical | 9.8 | 2025-05-26 | A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumb… |
CVE-2025-23392 | Medium | 5.2 | 2025-05-26 | A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in spacewalk-java allows execution of arbitrary Javascript code o… |
CVE-2025-46803 | Medium | 5.0 | 2025-05-26 | The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the syste… |
CVE-2025-37992 | Medium | 5.5 | 2025-05-26 | In the Linux kernel, the following vulnerability has been resolved: net_sched: Flush gso_skb list too during ->change() Previously, when reducing a qdisc's l… |
CVE-2025-5196 | Medium | 6.6 | 2025-05-26 | A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the com… |
CVE-2025-46805 | Medium | 5.5 | 2025-05-26 | Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setui… |
CVE-2025-46804 | Low | 3.3 | 2025-05-26 | A minor information leak when running Screen with setuid-root privileges allows unprivileged users to deduce information about a path that would otherwise not… |
CVE-2025-39498 | Medium | 5.3 | 2025-05-26 | Insertion of Sensitive Information Into Sent Data vulnerability in Spotlight Spotlight - Social Media Feeds (Premium) allows Retrieve Embedded Sensitive Data.T… |
CVE-2025-5186 | Medium | 6.3 | 2025-05-26 | A vulnerability was found in thinkgem JeeSite up to 5.11.1. It has been rated as critical. Affected by this issue is the function ResourceLoader.getResource of… |
CVE-2025-5185 | Medium | 4.3 | 2025-05-26 | A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been declared as problematic. Affected by this vulnerab… |
CVE-2025-40667 | Medium | 6.5 | 2025-05-26 | Missing authorization vulnerability in TCMAN's GIM v11. This allows an authenticated attacker to access any functionality of the application even when they are… |
CVE-2025-40666 | Critical | 9.8 | 2025-05-26 | Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID par… |
CVE-2025-40665 | Critical | 9.8 | 2025-05-26 | Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID par… |
CVE-2025-40664 | Critical | 9.1 | 2025-05-26 | Missing authentication vulnerability in TCMAN GIM v11. This allows an unauthenticated attacker to access the resources /frmGestionUser.aspx/GetData, /frmGestio… |
CVE-2025-40663 | | 2025-05-26 | Stored Cross-Site Scripting (XSS) vulnerability in i2A-Cronos version 23.02.01.17, from i2A. It allows an authenticated attacker to upload a malicious SVG imag… | |
CVE-2025-40653 | | 2025-05-26 | User enumeration vulnerability in M3M Printer Server Web. This issue occurs during user authentication, where a difference in error messages could allow an att… | |
CVE-2025-40652 | | 2025-05-26 | Stored Cross-Site Scripting (XSS) vulnerability in the CoverManager booking software. This allows an attacker to inject malicious scripts into the application… | |
CVE-2025-40650 | | 2025-05-26 | Insecure Direct Object Reference (IDOR) vulnerability in Clickedu. This vulnerability could allow an attacker to retrieve information about student report card… | |
CVE-2025-5184 | Medium | 4.3 | 2025-05-26 | A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been classified as problematic. Affected is an unknown… |
CVE-2025-5183 | Low | 3.5 | 2025-05-26 | A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as problematic. This issue affects some unknown… |
CVE-2025-5182 | Medium | 4.3 | 2025-05-26 | A vulnerability has been found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as critical. This vulnerability affects unk… |
CVE-2025-5181 | Low | 3.5 | 2025-05-26 | A vulnerability, which was classified as problematic, was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. This affects an unknown… |
CVE-2025-5180 | High | 7.0 | 2025-05-26 | A vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16. Affected by this issue is some unknown functionality in the l… |
CVE-2025-5179 | Low | 2.4 | 2025-05-26 | A vulnerability classified as problematic was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected by this vulnerability is an unknown functi… |
CVE-2025-5178 | Medium | 6.3 | 2025-05-26 | A vulnerability classified as critical has been found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected is an unknown function of the file /adm/… |
CVE-2025-5177 | Medium | 4.3 | 2025-05-26 | A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been rated as problematic. This issue affects some unknown processing… |
CVE-2025-4057 | Medium | 5.5 | 2025-05-26 | A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies. |
CVE-2025-4053 | | 2025-05-26 | The data stored in Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a mast… | |
CVE-2025-40672 | | 2025-05-26 | A Privilege Escalation vulnerability has been found in Panloader component v3.24.0.0 by Espiral MS Group. This vulnerability allows any user to override the fi… | |
CVE-2025-40671 | | 2025-05-26 | SQL injection vulnerability in AES Multimedia's Gestnet v1.07. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘… | |
CVE-2025-35003 | Critical | 9.8 | 2025-05-26 | Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities were discovered in Apache NuttX RTOS Bl… |
CVE-2025-41655 | High | 7.5 | 2025-05-26 | An unauthenticated remote attacker can access a URL which causes the device to reboot. |
CVE-2025-41654 | High | 8.2 | 2025-05-26 | An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by th… |
CVE-2025-1985 | Medium | 6.1 | 2025-05-26 | Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject HTML code into the Web-UI in the affecte… |
CVE-2025-5176 | High | 7.3 | 2025-05-26 | A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2025-5175 | Medium | 5.3 | 2025-05-26 | A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py… |
CVE-2025-5174 | Medium | 5.3 | 2025-05-26 | A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of the file pypickle/pypi… |
CVE-2025-5173 | Medium | 5.3 | 2025-05-26 | A vulnerability has been found in HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf and classified as problematic. Affected by… |
CVE-2025-41441 | Medium | 5.3 | 2025-05-26 | Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon c… |
CVE-2025-5172 | High | 7.3 | 2025-05-26 | A vulnerability, which was classified as critical, was found in Econtrata up to 20250516. Affected is an unknown function of the file /valida. The manipulation… |
CVE-2025-5171 | Medium | 6.3 | 2025-05-26 | A vulnerability, which was classified as critical, has been found in llisoft MTA Maita Training System 4.5. This issue affects the function this.fileService.do… |
CVE-2025-5170 | Medium | 6.3 | 2025-05-26 | A vulnerability classified as critical was found in llisoft MTA Maita Training System 4.5. This vulnerability affects the function AdminShitiListRequestVo of t… |
CVE-2025-5169 | Low | 3.3 | 2025-05-26 | A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::InternReadFile_3DGS_… |
CVE-2025-5168 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function MDLImporter::Impo… |
CVE-2025-5167 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function LWOImp… |
CVE-2025-5166 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFil… |
CVE-2025-5165 | Low | 3.3 | 2025-05-26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDCImporter::ValidateSurface… |
CVE-2025-5164 | Low | 3.7 | 2025-05-26 | A vulnerability has been found in PerfreeBlog 4.0.11 and classified as problematic. This vulnerability affects the function JwtUtil of the component JWT Handle… |
CVE-2025-5163 | Medium | 5.3 | 2025-05-26 | A vulnerability, which was classified as problematic, was found in yangshare 技术杨工 warehouseManager 仓库管理系统 1.0. This affects an unknown part. The manipulation l… |
CVE-2025-5162 | Medium | 6.3 | 2025-05-26 | A vulnerability, which was classified as critical, has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected by this issue is some unknown function… |
CVE-2025-5161 | Medium | 4.3 | 2025-05-26 | A vulnerability classified as problematic was found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected by this vulnerability is the function operationDaily… |
CVE-2025-5160 | Medium | 4.3 | 2025-05-26 | A vulnerability classified as problematic has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected is the function Download of the file /packetCap… |
CVE-2025-5159 | Medium | 4.3 | 2025-05-26 | A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been rated as problematic. This issue affects the function Download of the file… |
CVE-2025-2146 | Critical | 9.8 | 2025-05-26 | Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network… |
CVE-2025-5158 | Medium | 4.3 | 2025-05-25 | A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been declared as problematic. This vulnerability affects the function downloadSo… |
CVE-2025-5157 | Medium | 4.3 | 2025-05-25 | A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been classified as critical. This affects the function fileContent of the file /… |
CVE-2025-5156 | High | 8.8 | 2025-05-25 | A vulnerability was found in H3C GR-5400AX up to 100R008 and classified as critical. Affected by this issue is the function EditWlanMacList of the file /routin… |
CVE-2025-5155 | Medium | 6.3 | 2025-05-25 | A vulnerability has been found in qianfox FoxCMS 1.2.5 and classified as critical. Affected by this vulnerability is the function batchCope of the file app/adm… |
CVE-2025-5154 | Low | 2.3 | 2025-05-25 | A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unknown function of the file /data/data/co… |
CVE-2025-5153 | Low | 3.5 | 2025-05-25 | A vulnerability, which was classified as problematic, has been found in CMS Made Simple 2.2.21. This issue affects some unknown processing of the component Des… |
CVE-2025-5152 | Medium | 6.3 | 2025-05-25 | A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code of the file /activity/newActivityedit.p… |
CVE-2025-5151 | Medium | 5.3 | 2025-05-25 | A vulnerability classified as critical has been found in defog-ai introspect up to 0.1.4. This affects the function execute_analysis_code_safely of the file in… |
CVE-2025-5150 | Medium | 6.3 | 2025-05-25 | A vulnerability was found in docarray up to 0.40.1. It has been rated as critical. Affected by this issue is the function __getitem__ of the file /docarray/dat… |
CVE-2025-5149 | Medium | 5.6 | 2025-05-25 | A vulnerability was found in WCMS up to 8.3.11. It has been declared as critical. Affected by this vulnerability is the function getMemberByUid of the file /in… |
CVE-2025-5148 | Medium | 5.3 | 2025-05-25 | A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classified as critical. Affected is the funct… |
CVE-2025-5147 | Medium | 6.3 | 2025-05-25 | A vulnerability was found in Netcore NBR1005GPEV2, NBR200V2 and B6V2 up to 20250508 and classified as critical. This issue affects the function tools_ping of t… |
CVE-2025-5146 | Medium | 6.3 | 2025-05-25 | A vulnerability has been found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and NBR200V2 up to 20250508 and classified as critical. This vul… |
CVE-2025-5145 | Medium | 6.3 | 2025-05-25 | A vulnerability, which was classified as critical, was found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2, NBR200V2 and POWER13 up to 202505… |
CVE-2025-5140 | Medium | 6.3 | 2025-05-25 | A vulnerability classified as critical has been found in Seeyon Zhiyuan OA Web Application System up to 8.1 SP2. This affects the function this.oursNetService… |
CVE-2025-5139 | Medium | 5.6 | 2025-05-25 | A vulnerability was found in Qualitor 8.20/8.24. It has been rated as critical. Affected by this issue is some unknown functionality of the file /html/ad/adcon… |
CVE-2025-5138 | Low | 3.5 | 2025-05-25 | A vulnerability was found in Bitwarden up to 2.25.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the com… |
CVE-2025-5137 | Medium | 4.7 | 2025-05-25 | A vulnerability was found in DedeCMS 5.7.117. It has been classified as critical. Affected is an unknown function of the file dede/sys_verifies.php?action=getf… |
CVE-2025-5136 | Low | 3.7 | 2025-05-25 | A vulnerability, which was classified as problematic, was found in Tmall Demo up to 20250505. This affects an unknown part of the file /tmall/order/pay/ of the… |
CVE-2025-5135 | Low | 2.4 | 2025-05-24 | A vulnerability, which was classified as problematic, has been found in Tmall Demo up to 20250505. Affected by this issue is some unknown functionality of the… |
CVE-2025-5134 | Low | 3.5 | 2025-05-24 | A vulnerability classified as problematic was found in Tmall Demo up to 20250505. Affected by this vulnerability is an unknown functionality of the component B… |
CVE-2025-5133 | Medium | 4.3 | 2025-05-24 | A vulnerability classified as problematic has been found in Tmall Demo up to 20250505. Affected is an unknown function of the component Search Box. The manipul… |
CVE-2025-5132 | Medium | 4.3 | 2025-05-24 | A vulnerability was found in Tmall Demo up to 20250505. It has been rated as problematic. This issue affects some unknown processing of the file tmall/admin/ac… |
CVE-2025-5131 | Medium | 4.7 | 2025-05-24 | A vulnerability was found in Tmall Demo up to 20250505. It has been declared as critical. This vulnerability affects the function uploadCategoryImage of the fi… |
CVE-2025-5130 | Medium | 4.7 | 2025-05-24 | A vulnerability was found in Tmall Demo up to 20250505. It has been classified as critical. This affects the function uploadProductImage of the file tmall/admi… |
CVE-2025-5129 | High | 7.0 | 2025-05-24 | A vulnerability has been found in Sangfor 零信任访问控制系统 aTrust 2.3.10.60 and classified as critical. Affected by this vulnerability is an unknown functionality in… |
CVE-2025-5128 | High | 7.3 | 2025-05-24 | A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /adm… |