2025 CVEs (page 332)
Page 332 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-46629 | Medium | 6.5 | 2025-05-01 | Lack of access controls in the 'ate' management binary of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to perform unauthorized confi… |
CVE-2025-46628 | High | 7.3 | 2025-05-01 | Lack of input validation/sanitization in the 'ate' management service in the Tenda RX2 Pro 16.03.30.14 allows an unauthorized remote attacker to gain root shel… |
CVE-2025-46627 | High | 8.2 | 2025-05-01 | Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to authenticate to the telnet service by calculating the root passw… |
CVE-2025-46626 | High | 7.3 | 2025-05-01 | Reuse of a static AES key and initialization vector for encrypted traffic to the 'ate' management service of the Tenda RX2 Pro 16.03.30.14 allows an attacker t… |
CVE-2025-46625 | High | 8.8 | 2025-05-01 | Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2 Pro 16.03.30.14 allows a remote attacker that is authorized to… |
CVE-2025-46569 | | 2025-05-01 | Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP Data API for readin… | |
CVE-2025-4174 | High | 7.3 | 2025-05-01 | A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown f… |
CVE-2025-3517 | Medium | 6.3 | 2025-05-01 | Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM user to elevate a previously configured u… |
CVE-2025-36558 | Medium | 6.1 | 2025-05-01 | KUNBUS PiCtory version 2.11.1 and earlier are vulnerable to a cross-site-scripting attack via the sso_token used for authentication. If an attacker provides th… |
CVE-2025-36521 | High | 8.8 | 2025-05-01 | MicroDicom DICOM Viewer is vulnerable to an out-of-bounds read which may allow an attacker to cause memory corruption within the application. The user must ope… |
CVE-2025-35996 | Critical | 9.0 | 2025-05-01 | KUNBUS PiCtory version 2.11.1 and earlier are vulnerable when an authenticated remote attacker crafts a special filename that can be stored by API endpoints. T… |
CVE-2025-35975 | High | 8.8 | 2025-05-01 | MicroDicom DICOM Viewer is vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code. The user must open a malicious DCM file… |
CVE-2025-32011 | Critical | 9.8 | 2025-05-01 | KUNBUS PiCtory versions 2.5.0 through 2.11.1 have an authentication bypass vulnerability where a remote attacker can bypass authentication to get access due to… |
CVE-2025-24522 | Critical | 10.0 | 2025-05-01 | KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an unauthenti… |
CVE-2025-46568 | High | 7.5 | 2025-05-01 | Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. Prior to version 0.45.0, Stirling-PDF is vulnerabl… |
CVE-2025-46567 | Medium | 6.1 | 2025-05-01 | LLama Factory enables fine-tuning of large language models. Prior to version 1.0.0, a critical vulnerability exists in the `llamafy_baichuan2.py` script of the… |
CVE-2025-46566 | Critical | 9.8 | 2025-05-01 | DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete RCE through the backend JDBC link. This is… |
CVE-2025-46565 | Medium | 5.3 | 2025-05-01 | Vite is a frontend tooling framework for javascript. Prior to versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that… |
CVE-2025-46345 | | 2025-05-01 | Auth0 Account Link Extension is an extension aimed to help link accounts easily. Versions 2.3.4 to 2.6.6 do not verify the signature of the provided JWT. This… | |
CVE-2025-46337 | Critical | 10.0 | 2025-05-01 | ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a… |
CVE-2025-44867 | Medium | 6.3 | 2025-05-01 | Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter. This vulnerabilit… |
CVE-2025-44866 | Medium | 6.3 | 2025-05-01 | Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the level parameter. This vulnerability allows… |
CVE-2025-44865 | Medium | 6.3 | 2025-05-01 | Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter. This vulnerability allow… |
CVE-2025-44864 | Medium | 6.3 | 2025-05-01 | Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the module parameter. This vulnerability allow… |
CVE-2025-44863 | Medium | 6.5 | 2025-05-01 | TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Url parameter. This vulnerabi… |
CVE-2025-44862 | Medium | 6.3 | 2025-05-01 | TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This vu… |
CVE-2025-44861 | Medium | 6.3 | 2025-05-01 | TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url paramete… |
CVE-2025-44860 | Medium | 6.5 | 2025-05-01 | TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Port parameter. This vulnerab… |
CVE-2025-32890 | Medium | 5.3 | 2025-05-01 | An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a custom implementation of encryption without any additional integr… |
CVE-2025-32889 | High | 7.3 | 2025-05-01 | An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The verification token used for sending SMS through a goTenna server is hardc… |
CVE-2025-32888 | High | 7.3 | 2025-05-01 | An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The verification token used for sending SMS through a goTenna server is har… |
CVE-2025-32887 | High | 7.1 | 2025-05-01 | An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. A command channel includes the next hop. which can be intercepted and used to… |
CVE-2025-32886 | Medium | 4.0 | 2025-05-01 | An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are also sent over UART with USB Shell, allowing som… |
CVE-2025-32885 | Medium | 6.5 | 2025-05-01 | An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app there makes it possible to inject any custom message (into existing v… |
CVE-2025-32884 | Medium | 4.3 | 2025-05-01 | An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a GID is the user's phone number unless they specifically opt o… |
CVE-2025-32882 | Medium | 5.3 | 2025-05-01 | An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app uses a custom implementation of encryption without any additional int… |
CVE-2025-32881 | Medium | 4.3 | 2025-05-01 | An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the GID is the user's phone number unless they specifically opt o… |
CVE-2025-4173 | Medium | 6.3 | 2025-05-01 | A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is the function delete_cart of the f… |
CVE-2025-44848 | Medium | 6.5 | 2025-05-01 | TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Url parameter. This vulnerab… |
CVE-2025-44847 | Medium | 6.3 | 2025-05-01 | TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This… |
CVE-2025-44846 | Medium | 6.3 | 2025-05-01 | TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This v… |
CVE-2025-44845 | Medium | 6.5 | 2025-05-01 | TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This… |
CVE-2025-44844 | Medium | 6.5 | 2025-05-01 | TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter. This vu… |
CVE-2025-44843 | Medium | 6.5 | 2025-05-01 | TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url paramet… |
CVE-2025-44842 | Medium | 6.5 | 2025-05-01 | TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Port parameter. This vulnera… |
CVE-2025-44841 | Medium | 6.5 | 2025-05-01 | TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version par… |
CVE-2025-44840 | Medium | 6.5 | 2025-05-01 | TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the svn paramet… |
CVE-2025-44839 | Medium | 6.5 | 2025-05-01 | TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the magicid par… |
CVE-2025-44838 | Medium | 6.3 | 2025-05-01 | TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileName paramete… |
CVE-2025-44837 | Medium | 6.3 | 2025-05-01 | TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url or… |
CVE-2025-44836 | Medium | 6.3 | 2025-05-01 | TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setApRebootScheCfg function via the hour or minute p… |
CVE-2025-23246 | Medium | 5.5 | 2025-05-01 | NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to consume uncontrolled r… |
CVE-2025-44854 | Medium | 6.3 | 2025-05-01 | TOTOLINK CP900 V6.3c.1144_B20190715 was found to contain a command injection vulnerability in the setUpgradeUboot function via the FileName parameter. This vul… |
CVE-2025-44835 | Medium | 6.3 | 2025-05-01 | D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute arbitrary commands via s… |
CVE-2025-37796 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x: fix use after free access in at76_disconnect The memory pointed to by pri… |
CVE-2025-37794 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Purge vif txq in ieee80211_do_stop() After ieee80211_do_stop() SKB from v… |
CVE-2025-37793 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() devm_kasprintf() returns NU… |
CVE-2025-37792 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Prevent potential NULL dereference The btrtl_initialize() function chec… |
CVE-2025-37791 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll() rpl is passed as a… |
CVE-2025-37790 | High | 8.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: mctp: Set SOCK_RCU_FREE Bind lookup runs under RCU, so ensure that a socket doesn't… |
CVE-2025-37789 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set() action It's not safe to a… |
CVE-2025-37788 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path In the for loop used to… |
CVE-2025-37787 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russ… |
CVE-2025-37786 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsa_tree_setup(), it… |
CVE-2025-37784 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icss-iep: Fix possible NULL pointer dereference for perout request The ICSS IEP… |
CVE-2025-37783 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check The function dpu_plane_… |
CVE-2025-37781 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: i2c: cros-ec-tunnel: defer probe if parent EC is not present When i2c-cros-ec-tunnel and… |
CVE-2025-37780 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: isofs: Prevent the use of too small fid syzbot reported a slab-out-of-bounds Read in isof… |
CVE-2025-37779 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: lib/iov_iter: fix to increase non slab folio refcount When testing EROFS file-backed moun… |
CVE-2025-37778 | Critical | 9.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees sess->user and doe… |
CVE-2025-37777 | High | 8.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __smb2_lease_break_noti() Move tcp_transport free to ksmbd_c… |
CVE-2025-37776 | High | 8.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_break_all_levII_oplock() There is a room in smb_break_al… |
CVE-2025-37775 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix the warning from __kernel_write_iter [ 2110.972290] ------------[ cut here ]--… |
CVE-2025-37774 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: slab: ensure slab->obj_exts is clear in a newly allocated slab page ktest recently report… |
CVE-2025-37773 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: virtiofs: add filesystem context source name check In certain scenarios, for example, dur… |
CVE-2025-37772 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix workqueue crash in cma_netevent_work_handler struct rdma_cm_id has member "… |
CVE-2025-37771 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. If speed is greate… |
CVE-2025-37770 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. If speed is greate… |
CVE-2025-37769 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm/smu11: Prevent division by zero The user can set any speed value. If speed is… |
CVE-2025-37768 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. If speed is greate… |
CVE-2025-37767 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. If speed is greate… |
CVE-2025-37766 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. If speed is greate… |
CVE-2025-37765 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix ttm_bo_delayed_delete oops Fix an oops in ttm_bo_delayed_delete w… |
CVE-2025-37764 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix firmware memory leaks Free the memory used to hold the results of fi… |
CVE-2025-37763 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: take paired job reference For paired jobs, have the fragment job take a… |
CVE-2025-37762 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix missed dmabuf unpinning in error path of prepare_fb() Correct error handl… |
CVE-2025-37761 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix an out-of-bounds shift when invalidating TLB When the size of the range inval… |
CVE-2025-37760 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: mm/vma: add give_up_on_oom option on modify/merge, use in uffd release Currently, if a VM… |
CVE-2025-25016 | Medium | 4.3 | 2025-05-01 | Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient… |
CVE-2025-23254 | High | 8.8 | 2025-05-01 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by local access to the TRT… |
CVE-2025-23245 | Medium | 5.5 | 2025-05-01 | NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to access global resource… |
CVE-2025-23244 | High | 7.8 | 2025-05-01 | NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this v… |
CVE-2025-37759 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ublk: fix handling recovery & reissue in ublk_abort_queue() Commit 8284066946e6 ("ublk: g… |
CVE-2025-37758 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() devm_ioremap() r… |
CVE-2025-37757 | High | 7.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix memory leak in tipc_link_xmit In case the backlog transmit queue for system-imp… |
CVE-2025-37756 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: tls: explicitly disallow disconnect syzbot discovered that it can disconnect a TLS s… |
CVE-2025-37755 | High | 7.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: libwx: handle page_pool_dev_alloc_pages error page_pool_dev_alloc_pages could return… |
CVE-2025-37754 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/huc: Fix fence not released on early probe errors HuC delayed loading fence, int… |
CVE-2025-37752 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly validate t… |
CVE-2025-37751 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Avoid running off the end of an AMD erratum table The NULL array terminator at t… |