2025 CVEs (page 312)
Page 312 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-46801 | Critical | 9.8 | 2025-05-19 | Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, a… |
CVE-2025-37891 | High | 7.8 | 2025-05-19 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conversion function fr… |
CVE-2025-4916 | High | 7.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2025-4915 | High | 7.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-4914 | High | 7.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ad… |
CVE-2025-4913 | High | 7.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2025-4477 | High | 7.2 | 2025-05-19 | The ThreatSonar Anti-Ransomware from TeamT5 has a Privilege Escalation vulnerability, allowing remote attackers with intermediate privileges to escalate their… |
CVE-2025-2561 | Medium | 4.8 | 2025-05-19 | The Ninja Forms WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perf… |
CVE-2025-2560 | Medium | 4.8 | 2025-05-19 | The Ninja Forms WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perf… |
CVE-2025-2524 | Medium | 4.8 | 2025-05-19 | The Ninja Forms WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perf… |
CVE-2025-1627 | Medium | 5.4 | 2025-05-19 | The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is… |
CVE-2025-1626 | Medium | 5.4 | 2025-05-19 | The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Countdown block options before outputting them back in a page/post where the… |
CVE-2025-1625 | Medium | 5.4 | 2025-05-19 | The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Counter block options before outputting them back in a page/post where the b… |
CVE-2025-4912 | Medium | 5.4 | 2025-05-19 | A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2025-4911 | High | 7.3 | 2025-05-19 | A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/view-f… |
CVE-2025-2892 | Medium | 6.4 | 2025-05-19 | The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pos… |
CVE-2025-4910 | High | 7.3 | 2025-05-19 | A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the fi… |
CVE-2025-4909 | High | 7.3 | 2025-05-19 | A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipula… |
CVE-2025-4908 | High | 7.3 | 2025-05-19 | A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1. This affects an unknown part of the file /expense-datewis… |
CVE-2025-4907 | High | 7.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality o… |
CVE-2025-4906 | High | 7.3 | 2025-05-19 | A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. Th… |
CVE-2025-4905 | Medium | 5.3 | 2025-05-19 | A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function load_qc_pickl of the file bases… |
CVE-2025-23167 | Medium | 6.5 | 2025-05-19 | A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables… |
CVE-2025-23166 | High | 7.5 | 2025-05-19 | The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the… |
CVE-2025-23165 | Low | 3.7 | 2025-05-19 | In Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in `uv_fs_s.file`: a UTF-16 path buffer is allocated but subsequently o… |
CVE-2025-23164 | Medium | 4.4 | 2025-05-19 | A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to… |
CVE-2025-23123 | Critical | 10.0 | 2025-05-19 | A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the U… |
CVE-2025-4904 | Medium | 5.3 | 2025-05-19 | A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. This vulnerability affects the function sub_41F0FC of th… |
CVE-2025-4903 | Medium | 5.3 | 2025-05-19 | A vulnerability, which was classified as critical, was found in D-Link DI-7003GV2 24.04.18D1 R(68125). This affects the function sub_41F4F0 of the file /H5/web… |
CVE-2025-4902 | Medium | 5.3 | 2025-05-19 | A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this issue is the function sub_48F4F… |
CVE-2025-4901 | Medium | 4.3 | 2025-05-19 | A vulnerability classified as problematic was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this vulnerability is the function sub_41E304 of the… |
CVE-2025-4900 | High | 7.3 | 2025-05-18 | A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/payment.p… |
CVE-2025-4899 | High | 7.3 | 2025-05-18 | A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /p… |
CVE-2025-4898 | Medium | 5.4 | 2025-05-18 | A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects the function unl… |
CVE-2025-4897 | High | 8.8 | 2025-05-18 | A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodal… |
CVE-2025-4896 | High | 8.8 | 2025-05-18 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/UserCo… |
CVE-2025-4895 | High | 7.3 | 2025-05-18 | A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing… |
CVE-2025-4894 | Low | 3.7 | 2025-05-18 | A vulnerability classified as problematic was found in calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15. This vulnerability affects th… |
CVE-2025-4893 | Medium | 6.3 | 2025-05-18 | A vulnerability classified as critical has been found in jammy928 CoinExchange_CryptoExchange_Java up to 8adf508b996020d3efbeeb2473d7235bd01436fa. This affects… |
CVE-2025-4892 | Medium | 5.3 | 2025-05-18 | A vulnerability was found in code-projects Police Station Management System 1.0. It has been declared as critical. Affected by this vulnerability is the functi… |
CVE-2025-4891 | Medium | 5.3 | 2025-05-18 | A vulnerability was found in code-projects Police Station Management System 1.0. It has been classified as critical. Affected is the function criminal::display… |
CVE-2025-4890 | Medium | 5.3 | 2025-05-18 | A vulnerability was found in code-projects Tourism Management System 1.0 and classified as critical. This issue affects the function LoginUser of the component… |
CVE-2025-4889 | Medium | 5.3 | 2025-05-18 | A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of th… |
CVE-2025-4888 | Medium | 5.3 | 2025-05-18 | A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. This affects the function medicineType::take_orde… |
CVE-2025-4887 | Medium | 4.3 | 2025-05-18 | A vulnerability, which was classified as problematic, has been found in SourceCodester Online Student Clearance System 1.0. Affected by this issue is some unkn… |
CVE-2025-4886 | High | 7.3 | 2025-05-18 | A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-4885 | High | 7.3 | 2025-05-18 | A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/produc… |
CVE-2025-4884 | High | 7.3 | 2025-05-18 | A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the fi… |
CVE-2025-4883 | High | 7.2 | 2025-05-18 | A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been declared as critical. This vulnerability affects the function ctxz_asp of the file /ctxz.as… |
CVE-2025-48219 | Low | 3.5 | 2025-05-18 | O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS (IP Multimedia Subsystem) call and then reading t… |
CVE-2025-4882 | High | 7.3 | 2025-05-18 | A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin… |
CVE-2025-4881 | High | 7.3 | 2025-05-18 | A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-4880 | High | 7.3 | 2025-05-18 | A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2025-4875 | High | 7.3 | 2025-05-18 | A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgo… |
CVE-2025-4874 | High | 7.3 | 2025-05-18 | A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /a… |
CVE-2025-4873 | High | 7.3 | 2025-05-18 | A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2025-4872 | High | 7.3 | 2025-05-18 | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component CCC Command Handler… |
CVE-2025-4871 | High | 7.3 | 2025-05-18 | A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST C… |
CVE-2025-4870 | High | 7.3 | 2025-05-18 | A vulnerability classified as critical was found in itsourcecode Restaurant Management System 1.0. This vulnerability affects unknown code of the file /admin/m… |
CVE-2025-4869 | High | 7.3 | 2025-05-18 | A vulnerability classified as critical has been found in itsourcecode Restaurant Management System 1.0. This affects an unknown part of the file /admin/member_… |
CVE-2025-4868 | Medium | 6.3 | 2025-05-18 | A vulnerability was found in merikbest ecommerce-spring-reactjs up to 464e610bb11cc2619cf6ce8212ccc2d1fd4277fd. It has been rated as critical. Affected by this… |
CVE-2025-4867 | Medium | 6.5 | 2025-05-18 | A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of th… |
CVE-2025-4866 | Medium | 6.3 | 2025-05-18 | A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component Management Console… |
CVE-2025-4865 | High | 7.3 | 2025-05-18 | A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /… |
CVE-2025-4864 | High | 7.3 | 2025-05-18 | A vulnerability has been found in itsourcecode Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2025-4863 | Medium | 6.3 | 2025-05-18 | A vulnerability, which was classified as critical, was found in Advaya Softech GEMS ERP Portal 2.1. This affects an unknown part of the file /studentLogin/stud… |
CVE-2025-4862 | Medium | 4.3 | 2025-05-18 | A vulnerability, which was classified as problematic, has been found in PHPGurukul Directory Management System 2.0. Affected by this issue is some unknown func… |
CVE-2025-4861 | High | 7.3 | 2025-05-18 | A vulnerability classified as critical was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality… |
CVE-2025-3715 | Medium | 6.4 | 2025-05-18 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-text parameter in all versions up to, and including, 5.3.5… |
CVE-2025-4860 | Low | 2.4 | 2025-05-18 | A vulnerability classified as problematic has been found in D-Link DAP-2695 120b36r137_ALL_en_20210528. Affected is an unknown function of the file /adv_dhcps… |
CVE-2025-4859 | Low | 2.4 | 2025-05-18 | A vulnerability was found in D-Link DAP-2695 120b36r137_ALL_en_20210528. It has been rated as problematic. This issue affects some unknown processing of the fi… |
CVE-2025-4858 | Low | 2.4 | 2025-05-18 | A vulnerability was found in D-Link DAP-2695 120b36r137_ALL_en_20210528. It has been declared as problematic. This vulnerability affects unknown code of the fi… |
CVE-2025-4852 | Low | 2.4 | 2025-05-18 | A vulnerability, which was classified as problematic, has been found in TOTOLINK A3002R 2.1.1-B20230720.1011. This issue affects some unknown processing of the… |
CVE-2025-4851 | Medium | 6.3 | 2025-05-18 | A vulnerability classified as critical was found in TOTOLINK N300RH 6.1c.1390_B20191101. This vulnerability affects the function setUploadUserData of the file… |
CVE-2025-4850 | Medium | 6.3 | 2025-05-18 | A vulnerability classified as critical has been found in TOTOLINK N300RH 6.1c.1390_B20191101. This affects the function setUnloadUserData of the file /cgi-bin/… |
CVE-2025-4849 | Medium | 6.3 | 2025-05-18 | A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been rated as critical. Affected by this issue is the function CloudACMunualUpdateUser… |
CVE-2025-4848 | High | 7.3 | 2025-05-18 | A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown processing of the component RECV Command Hand… |
CVE-2025-4847 | High | 7.3 | 2025-05-18 | A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. This vulnerability affects unknown code of the component MLS Command Han… |
CVE-2025-4846 | High | 7.3 | 2025-05-18 | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component MPUT Command Handler. T… |
CVE-2025-4845 | High | 7.3 | 2025-05-18 | A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the comp… |
CVE-2025-4844 | High | 7.3 | 2025-05-18 | A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unknown functionality of the component CD Co… |
CVE-2025-4843 | High | 8.8 | 2025-05-18 | A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. This affects the function SubUPnPCSInit of the file /sbin/udev. The m… |
CVE-2025-4842 | High | 8.8 | 2025-05-17 | A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. This vulnerability affects the function isUCPCameraNameChanged of the f… |
CVE-2025-4841 | High | 8.8 | 2025-05-17 | A vulnerability was found in D-Link DCS-932L 2.18.01 and classified as critical. Affected by this issue is the function sub_404780 of the file /bin/gpio. The m… |
CVE-2025-4919 | High | 8.8 | 2025-05-17 | An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in Firefox 1… |
CVE-2025-4918 | Critical | 9.8 | 2025-05-17 | An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 1… |
CVE-2025-4839 | Low | 3.1 | 2025-05-17 | A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functi… |
CVE-2025-4838 | Medium | 4.3 | 2025-05-17 | A vulnerability, which was classified as problematic, was found in kanwangzjm Funiture up to 71ca0fb0658b3d839d9e049ac36429207f05329b. Affected is the function… |
CVE-2025-4837 | High | 7.3 | 2025-05-17 | A vulnerability classified as critical has been found in projectworlds Student Project Allocation System 1.0. This affects an unknown part of the file /make_gr… |
CVE-2025-4836 | High | 7.3 | 2025-05-17 | A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. Affected by this issue is some unknown function… |
CVE-2025-4835 | High | 8.8 | 2025-05-17 | A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an un… |
CVE-2025-4834 | High | 8.8 | 2025-05-17 | A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been classified as critical. Affected is an unknown function of th… |
CVE-2025-47948 | High | 7.2 | 2025-05-17 | Cocotais Bot is a QQ official robot framework based on qq-bot-sdk. Starting in version 1.5.0-test2-hotfix and prior to version 1.6.2, command echoing feature i… |
CVE-2025-47945 | Critical | 9.1 | 2025-05-17 | Donetick an open-source app for managing tasks and chores. Prior to version 0.1.44, the application uses JSON Web Tokens (JWT) for authentication, but the sign… |
CVE-2025-4833 | High | 8.8 | 2025-05-17 | A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This issue affects some unknown processing of… |
CVE-2025-4832 | High | 8.8 | 2025-05-17 | A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This vulnerability affects unknown code o… |
CVE-2025-4831 | High | 8.8 | 2025-05-17 | A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the fi… |
CVE-2025-4830 | High | 8.8 | 2025-05-17 | A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected by this issue is some un… |
CVE-2025-47931 | Medium | 6.1 | 2025-05-17 | LibreNMS is PHP/MySQL/SNMP based network monitoring software. LibreNMS v25.4.0 and prior suffers from a Stored Cross-Site Scripting (XSS) Vulnerability in the… |
CVE-2025-47273 | High | 8.8 | 2025-05-17 | setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex`… |