2025 CVEs (page 334)
Page 334 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-4038 | Medium | 5.3 | 2025-04-28 | A vulnerability was found in code-projects Train Ticket Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is the functio… |
CVE-2025-4037 | Medium | 4.4 | 2025-04-28 | A vulnerability was found in code-projects ATM Banking 1.0. It has been classified as critical. Affected is the function moneyDeposit/moneyWithdraw. The manipu… |
CVE-2025-0049 | Low | 3.5 | 2025-04-28 | When a Web User without Create permission on subfolders attempts to upload a file to a non-existent directory, the error message includes the absolute server p… |
CVE-2025-4036 | Medium | 6.3 | 2025-04-28 | A vulnerability was found in 201206030 Novel 3.5.0 and classified as critical. This issue affects the function updateBookChapter of the file src/main/java/io/g… |
CVE-2025-4034 | High | 7.3 | 2025-04-28 | A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-45953 | Critical | 9.1 | 2025-04-28 | A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Imp… |
CVE-2025-45949 | Critical | 9.8 | 2025-04-28 | A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the… |
CVE-2025-45947 | Critical | 9.8 | 2025-04-28 | An issue in phpgurukul Online Banquet Booking System V1.2 allows an attacker to execute arbitrary code via the /obbs/change-password.php file of the My Account… |
CVE-2025-3224 | High | 7.8 | 2025-04-28 | A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privilege… |
CVE-2025-34491 | High | 8.8 | 2025-04-28 | GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote and authenticated attacker can execute arbitrary code by sendi… |
CVE-2025-31651 | Critical | 9.8 | 2025-04-28 | Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, it was poss… |
CVE-2025-31650 | High | 7.5 | 2025-04-28 | Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of th… |
CVE-2025-4033 | High | 7.3 | 2025-04-28 | A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. Affected is an unknown function of the file /pat… |
CVE-2025-4032 | Medium | 5.0 | 2025-04-28 | A vulnerability was found in inclusionAI AWorld up to 8c257626e648d98d793dd9a1a950c2af4dd84c4e. It has been rated as critical. This issue affects the function… |
CVE-2025-34490 | Medium | 6.5 | 2025-04-28 | GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue. An authenticated and remote attacker can send crafted HTTP reques… |
CVE-2025-34489 | High | 7.8 | 2025-04-28 | GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue. A local attacker can escalate to NT Authority/SYSTEM by sending a… |
CVE-2025-4031 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2025-4030 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. This affects an unknown part of the file /se… |
CVE-2025-4029 | Medium | 5.3 | 2025-04-28 | A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Affected by this issue is the function addrecord of… |
CVE-2025-4028 | High | 7.3 | 2025-04-28 | A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown fun… |
CVE-2025-4027 | High | 7.3 | 2025-04-28 | A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /adm… |
CVE-2025-4026 | High | 7.3 | 2025-04-28 | A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown proc… |
CVE-2025-46614 | Low | 3.3 | 2025-04-28 | In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, aka Insertion of Sensitive Information i… |
CVE-2025-43857 | Medium | 6.5 | 2025-04-28 | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.5.7, 0.4.20, 0.3.9, and 0.2.5, there is a possib… |
CVE-2025-43854 | Medium | 6.1 | 2025-04-28 | DIFY is an open-source LLM app development platform. Prior to version 1.3.0, a clickjacking vulnerability was found in the default setup of the DIFY applicatio… |
CVE-2025-4025 | High | 7.3 | 2025-04-28 | A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-4024 | High | 7.3 | 2025-04-28 | A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /add_drive.p… |
CVE-2025-25776 | Medium | 5.0 | 2025-04-28 | Cross-Site Scripting (XSS) vulnerability exists in the User Registration and User Profile features of Codeastro Bus Ticket Booking System v1.0 allows an attack… |
CVE-2025-23377 | Medium | 4.2 | 2025-04-28 | Dell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding or Escaping of Output vulnerability. A high privileged attack… |
CVE-2025-23376 | Low | 2.3 | 2025-04-28 | Dell PowerProtect Data Manager Reporting, version(s) 19.16, 19.17, 19.18, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine v… |
CVE-2025-23375 | High | 7.8 | 2025-04-28 | Dell PowerProtect Data Manager Reporting, version(s) 19.17, contain(s) an Incorrect Use of Privileged APIs vulnerability. A low privileged attacker with local… |
CVE-2025-4023 | High | 7.3 | 2025-04-28 | A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the fil… |
CVE-2025-4022 | Medium | 6.3 | 2025-04-28 | A vulnerability was found in web-arena-x webarena up to 0.2.0. It has been declared as critical. This vulnerability affects the function HTMLContentEvaluator o… |
CVE-2025-4021 | Medium | 6.3 | 2025-04-28 | A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /… |
CVE-2025-4020 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-46661 | Critical | 10.0 | 2025-04-28 | IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions… |
CVE-2025-32472 | Medium | 5.3 | 2025-04-28 | The multiScan and picoScan are vulnerable to a denial-of-service (DoS) attack. A remote attacker can exploit this vulnerability by conducting a Slowloris-type… |
CVE-2025-4019 | High | 7.3 | 2025-04-28 | A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Affected is the function ge… |
CVE-2025-4018 | Medium | 5.3 | 2025-04-28 | A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This issue affects the… |
CVE-2025-4017 | Medium | 4.3 | 2025-04-28 | A vulnerability classified as problematic was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This vulnerability affects the funct… |
CVE-2025-4016 | Medium | 5.4 | 2025-04-28 | A vulnerability classified as critical has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This affects the function deleteIn… |
CVE-2025-4015 | Medium | 5.3 | 2025-04-28 | A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issue is the f… |
CVE-2025-4014 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown funct… |
CVE-2025-3200 | Critical | 9.1 | 2025-04-28 | An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between… |
CVE-2025-4013 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /adm… |
CVE-2025-4012 | Low | 2.7 | 2025-04-28 | A vulnerability was found in playeduxyz PlayEdu 开源培训系统 up to 1.8 and classified as problematic. This issue affects some unknown processing of the file /api/bac… |
CVE-2025-4011 | Low | 3.5 | 2025-04-28 | A vulnerability has been found in Redmine 6.0.0/6.0.1/6.0.2/6.0.3 and classified as problematic. This vulnerability affects unknown code of the component Custo… |
CVE-2025-42598 | High | 7.8 | 2025-04-28 | Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than… |
CVE-2025-39367 | Medium | 5.3 | 2025-04-28 | Missing Authorization vulnerability in SeventhQueen Kleo kleo.This issue affects Kleo: from n/a through < 5.4.4. |
CVE-2025-32471 | Low | 3.7 | 2025-04-28 | The device’s passwords have not been adequately salted, making them vulnerable to password extraction attacks. |
CVE-2025-32470 | High | 7.5 | 2025-04-28 | A remote unauthenticated attacker may be able to change the IP adress of the device, and therefore affecting the availability of the device. |
CVE-2025-4007 | High | 8.8 | 2025-04-28 | A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). Affected by this vulnerability is the function cgidhcpsCfgSe… |
CVE-2025-22235 | High | 7.3 | 2025-04-28 | EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed. Your… |
CVE-2025-4006 | Medium | 4.7 | 2025-04-28 | A vulnerability classified as critical has been found in youyiio BeyongCms 1.6.0. Affected is an unknown function of the file /admin/theme/Upload.html of the c… |
CVE-2025-4005 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2025-4004 | High | 7.3 | 2025-04-28 | A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the… |
CVE-2025-4003 | Medium | 5.5 | 2025-04-28 | A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB. It has been classified as problematic. This affects the function InternalApfsTranslateBlock o… |
CVE-2025-0627 | Low | 3.5 | 2025-04-28 | The WordPress Tag, Category, and Taxonomy Manager WordPress plugin before 3.30.0 does not sanitise and escape some of its Widgets settings, which could allow… |
CVE-2025-4002 | Medium | 5.5 | 2025-04-28 | A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB and classified as problematic. Affected by this issue is the function GetDebugLogFile of the f… |
CVE-2025-4001 | Low | 3.3 | 2025-04-28 | A vulnerability has been found in scipopt scip up to 9.2.1 and classified as problematic. Affected by this vulnerability is the function main of the file examp… |
CVE-2025-4000 | Low | 3.5 | 2025-04-28 | A vulnerability, which was classified as problematic, was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. Affected is an unknown function of the fil… |
CVE-2025-3999 | Low | 3.5 | 2025-04-28 | A vulnerability, which was classified as problematic, has been found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. This issue affects some unknown proce… |
CVE-2025-3998 | High | 7.3 | 2025-04-28 | A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affects unknown code of the file renew.php?i… |
CVE-2025-3997 | Medium | 4.3 | 2025-04-28 | A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the file /index.php?my-profile-ajax-1 of the… |
CVE-2025-3996 | Low | 2.4 | 2025-04-28 | A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as problematic. Affected by this issue is some unknown functionality of the fil… |
CVE-2025-3706 | Medium | 6.1 | 2025-04-28 | The eHRMS from 104 Corporation has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript co… |
CVE-2025-3995 | Low | 2.4 | 2025-04-28 | A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been declared as problematic. Affected by this vulnerability is an unknown functionality o… |
CVE-2025-3994 | Low | 2.4 | 2025-04-28 | A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been classified as problematic. Affected is an unknown function of the file /home.htm of t… |
CVE-2025-3993 | High | 8.8 | 2025-04-28 | A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWsc… |
CVE-2025-3992 | High | 8.8 | 2025-04-28 | A vulnerability has been found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formW… |
CVE-2025-3991 | High | 8.8 | 2025-04-28 | A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boafrm/formWdsEncryp… |
CVE-2025-31144 | Medium | 5.8 | 2025-04-28 | Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. If exploited, a remote unauthentic… |
CVE-2025-27937 | Medium | 6.5 | 2025-04-28 | Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If exploited, an arbitr… |
CVE-2025-26692 | High | 8.1 | 2025-04-28 | Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If exploited, arbitrary… |
CVE-2025-3990 | High | 8.8 | 2025-04-27 | A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown functionality of t… |
CVE-2025-3989 | High | 8.8 | 2025-04-27 | A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this vulnerability is an unknown functionality of the file /bo… |
CVE-2025-46690 | Medium | 5.0 | 2025-04-27 | Ververica Platform 2.14.0 allows low-privileged users to access SQL connectors via a direct namespaces/default/formats request. |
CVE-2025-46689 | Medium | 5.4 | 2025-04-27 | Ververica Platform 2.14.0 contain an Reflected XSS vulnerability via a namespaces/default/formats URI. |
CVE-2025-3988 | High | 8.8 | 2025-04-27 | A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown function of the file /boafrm/formPortFw. The m… |
CVE-2025-3987 | Medium | 6.3 | 2025-04-27 | A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/for… |
CVE-2025-3986 | Medium | 4.3 | 2025-04-27 | A vulnerability was found in Apereo CAS 5.2.6. It has been declared as problematic. This vulnerability affects unknown code of the file cas-5.2.6\core\cas-serv… |
CVE-2025-3985 | Low | 2.7 | 2025-04-27 | A vulnerability was found in Apereo CAS 5.2.6. It has been classified as problematic. This affects the function ResponseEntity of the file cas-5.2.6\webapp-mgm… |
CVE-2025-46688 | Medium | 5.6 | 2025-04-27 | quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is… |
CVE-2025-46687 | Medium | 5.6 | 2025-04-27 | quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also a… |
CVE-2025-3984 | Medium | 5.0 | 2025-04-27 | A vulnerability was found in Apereo CAS 5.2.6 and classified as critical. Affected by this issue is the function saveService of the file cas-5.2.6\webapp-mgmt\… |
CVE-2025-3983 | Medium | 4.7 | 2025-04-27 | A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functional… |
CVE-2025-3982 | Medium | 4.3 | 2025-04-27 | A vulnerability, which was classified as problematic, was found in nortikin Sverchok 1.3.0. Affected is the function SvSetPropNodeMK2 of the file sverchok/node… |
CVE-2025-3981 | Medium | 4.3 | 2025-04-27 | A vulnerability, which was classified as problematic, has been found in wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System 1.0. This issue affects some u… |
CVE-2025-2866 | Medium | 5.5 | 2025-04-27 | Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected version… |
CVE-2025-3980 | Medium | 4.3 | 2025-04-27 | A vulnerability classified as problematic was found in wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System 1.0. This vulnerability affects unknown code of… |
CVE-2025-3979 | Medium | 4.3 | 2025-04-27 | A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the file /index.php?my-password-ajax-1 of the… |
CVE-2025-3978 | Medium | 4.3 | 2025-04-27 | A vulnerability was found in dazhouda lecms 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/vie… |
CVE-2025-3977 | Medium | 4.3 | 2025-04-27 | A vulnerability was found in iteachyou Dreamer CMS up to 4.1.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality… |
CVE-2025-46657 | High | 7.2 | 2025-04-27 | Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI. |
CVE-2025-3976 | High | 7.3 | 2025-04-27 | A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file… |
CVE-2025-3975 | Medium | 5.3 | 2025-04-27 | A vulnerability was found in ScriptAndTools eCommerce-website-in-PHP 3.0 and classified as problematic. This issue affects some unknown processing of the file… |
CVE-2025-3974 | High | 7.3 | 2025-04-27 | A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the f… |
CVE-2025-3973 | High | 7.3 | 2025-04-27 | A vulnerability, which was classified as critical, was found in PHPGurukul COVID19 Testing Management System 1.0. This affects an unknown part of the file /che… |
CVE-2025-3972 | High | 7.3 | 2025-04-27 | A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown f… |
CVE-2025-3971 | High | 7.3 | 2025-04-27 | A vulnerability classified as critical was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionalit… |