2025 CVEs (page 325)
Page 325 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-41450 | High | 8.2 | 2025-05-08 | Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2 |
CVE-2025-3759 | | 2025-05-08 | Endpoint /cgi-bin-igd/netcore_set.cgi which is used for changing device configuration is accessible without authentication. This poses a significant security t… | |
CVE-2025-3758 | | 2025-05-08 | WF2220 exposes endpoint /cgi-bin-igd/netcore_get.cgi that returns configuration of the device to unauthorized users. Returned configuration includes cleartext… | |
CVE-2025-40846 | | 2025-05-08 | Improper Input Validation, the returnUrl parameter in Account Security Settings lacks proper input validation, allowing attackers to redirect users to maliciou… | |
CVE-2025-1254 | High | 7.4 | 2025-05-08 | Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers. This issue aff… |
CVE-2025-1253 | High | 7.8 | 2025-05-08 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries)… |
CVE-2025-1252 | High | 7.1 | 2025-05-08 | Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Profession… |
CVE-2025-4127 | Medium | 6.4 | 2025-05-08 | The WP SEO Structured Data Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Price Range’ parameter in all versions up to, and… |
CVE-2025-37834 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: don't try to reclaim hwpoison folio Syzkaller reports a bug as follows: Injec… |
CVE-2025-37833 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads Fix niu_try_msix()… |
CVE-2025-37831 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() cpufreq_cpu_get_ra… |
CVE-2025-37830 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() cpufreq_cpu_get_raw() can re… |
CVE-2025-37829 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() cpufreq_cpu_get_raw() can re… |
CVE-2025-37828 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort() A race can occur between the MCQ com… |
CVE-2025-37827 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: return EIO on RAID1 block group write pointer mismatch There was a bug repo… |
CVE-2025-37826 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer() Add a NULL check f… |
CVE-2025-37825 | High | 7.1 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix out-of-bounds access in nvmet_enable_port When trying to enable a port that ha… |
CVE-2025-37824 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() syzbot reported: tipc: Node… |
CVE-2025-37823 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patc… |
CVE-2025-37822 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: riscv: uprobes: Add missing fence.i after building the XOL buffer The XOL (execute out-of… |
CVE-2025-37821 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash There is a code path… |
CVE-2025-37820 | High | 7.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() The function xdp_conver… |
CVE-2025-37819 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACPI in place, gicv2m… |
CVE-2025-37818 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Return NULL from huge_pte_offset() for invalid PMD LoongArch's huge_pte_offset… |
CVE-2025-37817 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parse_gdd(), if mcb_devi… |
CVE-2025-37816 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: mei: vsc: Fix fortify-panic caused by invalid counted_by() use gcc 15 honors the __counte… |
CVE-2025-37815 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration Resolve kerne… |
CVE-2025-37814 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT This requirement was ov… |
CVE-2025-37813 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix invalid pointer dereference in Etron workaround This check is performed be… |
CVE-2025-37812 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix deadlock when using NCM gadget The cdns3 driver has the same NCM deadlock… |
CVE-2025-37811 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: ci_hdrc_imx: fix usbmisc handling usbmisc is an optional device property s… |
CVE-2025-37810 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event c… |
CVE-2025-37809 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Fix NULL pointer access Concurrent calls to typec_partner_unlink_devic… |
CVE-2025-37808 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: crypto: null - Use spin lock instead of mutex As the null algorithm may be freed in softi… |
CVE-2025-37807 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix kmemleak warning for percpu hashmap Vlad Poenaru reported the following kmemleak… |
CVE-2025-37806 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Keep write operations atomic syzbot reported a NULL pointer dereference in __ge… |
CVE-2025-37805 | Medium | 5.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: sound/virtio: Fix cancel_sync warnings on uninitialized work_structs Betty reported hitti… |
CVE-2025-37803 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting size_limit_mb t… |
CVE-2025-37802 | High | 7.5 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" wait_event_timeout() wil… |
CVE-2025-37801 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-imx: Add check for spi_imx_setupxfer() Add check for the return value of spi_imx… |
CVE-2025-37800 | High | 7.1 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in dev_uevent() If userspace reads "u… |
CVE-2025-3419 | High | 7.5 | 2025-05-08 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and inclu… |
CVE-2025-32873 | Medium | 5.3 | 2025-05-08 | An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.strip_tags() function is vulnerable to a pot… |
CVE-2025-46727 | High | 7.5 | 2025-05-07 | Rack is a modular Ruby web server interface. Prior to versions 2.2.14, 3.0.16, and 3.1.14, `Rack::QueryParser` parses query strings and `application/x-www-form… |
CVE-2025-35939 | Medium | 5.3 | 2025-05-07 | Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independe… |
CVE-2025-32441 | Medium | 4.2 | 2025-05-07 | Rack is a modular Ruby web server interface. Prior to version 2.2.14, when using the `Rack::Session::Pool` middleware, simultaneous rack requests can restore a… |
CVE-2025-0936 | Medium | 6.5 | 2025-05-07 | On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cau… |
CVE-2025-46826 | | 2025-05-07 | insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's secondary authentication bridge, potent… | |
CVE-2025-46821 | Medium | 5.3 | 2025-05-07 | Envoy is a cloud-native edge/middle/service proxy. Prior to versions 1.34.1, 1.33.3, 1.32.6, and 1.31.8, Envoy's URI template matcher incorrectly excludes the… |
CVE-2025-46265 | High | 8.8 | 2025-05-07 | On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS… |
CVE-2025-43878 | Medium | 6.0 | 2025-05-07 | When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restri… |
CVE-2025-41433 | High | 7.5 | 2025-05-07 | When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual ser… |
CVE-2025-41431 | High | 7.5 | 2025-05-07 | When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standb… |
CVE-2025-41414 | High | 7.5 | 2025-05-07 | When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which h… |
CVE-2025-41399 | High | 7.5 | 2025-05-07 | When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource uti… |
CVE-2025-36557 | High | 7.5 | 2025-05-07 | When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkerne… |
CVE-2025-36546 | High | 8.1 | 2025-05-07 | On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; acce… |
CVE-2025-36525 | High | 7.5 | 2025-05-07 | When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate. Note: Software versions which h… |
CVE-2025-36504 | High | 7.5 | 2025-05-07 | When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization. Note: S… |
CVE-2025-35995 | High | 7.5 | 2025-05-07 | When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual ser… |
CVE-2025-31644 | High | 8.7 | 2025-05-07 | When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow a… |
CVE-2025-4043 | Medium | 6.8 | 2025-05-07 | An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot. |
CVE-2025-3925 | High | 7.8 | 2025-05-07 | BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerabi… |
CVE-2025-31177 | Medium | 5.5 | 2025-05-07 | gnuplot is affected by a heap buffer overflow at function utf8_copy_one. |
CVE-2025-45514 | Medium | 6.5 | 2025-05-07 | Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm. |
CVE-2025-45388 | Medium | 6.1 | 2025-05-07 | Wagtail CMS 6.4.1 is vulnerable to a Stored Cross-Site Scripting (XSS) in the document upload functionality. Attackers can inject malicious code inside a PDF f… |
CVE-2025-3476 | | 2025-05-07 | Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This i… | |
CVE-2025-3272 | | 2025-05-07 | Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allow authenticated users to change their password with… | |
CVE-2025-30147 | | 2025-05-07 | Besu Native contains scripts and tooling that is used to build and package the native libraries used by the Ethereum client Hyperledger Besu. Besu 24.7.1 throu… | |
CVE-2025-29746 | Medium | 6.1 | 2025-05-07 | Cross Site Scripting vulnerability in Koillection v.1.6.10 allows a remote attacker to escalate privileges via the collection, Wishlist and album components |
CVE-2025-26169 | High | 8.1 | 2025-05-07 | IXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there is code execution from a configuration file that can be contr… |
CVE-2025-26168 | High | 8.1 | 2025-05-07 | IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configuration file that can be… |
CVE-2025-47423 | Medium | 5.8 | 2025-05-07 | Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to… |
CVE-2025-47203 | Medium | 4.5 | 2025-05-07 | dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used. |
CVE-2025-46828 | Critical | 9.8 | 2025-05-07 | WeGIA is a web manager for charitable institutions. An unauthenticated SQL Injection vulnerability was identified in versions up to and including 3.3.0 in the… |
CVE-2025-46824 | Low | 3.1 | 2025-05-07 | The Discourse Code Review Plugin allows users to review GitHub commits on Discourse. Prior to commit eed3a80, an attacker can execute arbitrary JavaScript on u… |
CVE-2025-32821 | High | 7.2 | 2025-05-07 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to u… |
CVE-2025-32820 | High | 8.8 | 2025-05-07 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the… |
CVE-2025-32819 | High | 8.8 | 2025-05-07 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file p… |
CVE-2025-20223 | Medium | 4.7 | 2025-05-07 | A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to read and modify data in a repository that… |
CVE-2025-20221 | Medium | 5.3 | 2025-05-07 | A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4… |
CVE-2025-20216 | Medium | 4.7 | 2025-05-07 | A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject… |
CVE-2025-20214 | Medium | 4.3 | 2025-05-07 | A vulnerability in the Network Configuration Access Control Module (NACM) of Cisco IOS XE Software could allow an authenticated, remote attacker to obtain unau… |
CVE-2025-20213 | Medium | 5.5 | 2025-05-07 | A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary… |
CVE-2025-20210 | High | 7.3 | 2025-05-07 | A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify t… |
CVE-2025-20202 | High | 7.4 | 2025-05-07 | A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on… |
CVE-2025-20201 | Medium | 6.7 | 2025-05-07 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the u… |
CVE-2025-20200 | Medium | 6.7 | 2025-05-07 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the u… |
CVE-2025-20199 | Medium | 4.6 | 2025-05-07 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the u… |
CVE-2025-20198 | Medium | 4.6 | 2025-05-07 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the u… |
CVE-2025-20197 | Medium | 6.7 | 2025-05-07 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the u… |
CVE-2025-20196 | Medium | 5.3 | 2025-05-07 | A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacke… |
CVE-2025-20195 | Medium | 4.3 | 2025-05-07 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and exe… |
CVE-2025-20194 | Medium | 5.4 | 2025-05-07 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an inje… |
CVE-2025-20193 | Medium | 6.5 | 2025-05-07 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an inje… |
CVE-2025-20192 | High | 7.7 | 2025-05-07 | A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a… |
CVE-2025-20191 | High | 7.4 | 2025-05-07 | A vulnerability in the Switch Integrated Security Features (SISF) of Cisco IOS Software, Cisco IOS XE Software, Cisco NX-OS Software, and Cisco Wireless LAN Co… |
CVE-2025-20190 | Medium | 6.5 | 2025-05-07 | A vulnerability in the lobby ambassador web interface of Cisco IOS XE Wireless Controller Software could allow an authenticated, remote attacker to remove arbi… |
CVE-2025-20189 | High | 7.4 | 2025-05-07 | A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Process… |
CVE-2025-20188 | Critical | 10.0 | 2025-05-07 | A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE So… |