2025 CVEs (page 346)
Page 346 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-0758 | Medium | 6.1 | 2025-04-16 | Overview The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors… |
CVE-2025-0757 | Medium | 4.4 | 2025-04-16 | Overview The software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page th… |
CVE-2025-0756 | Critical | 9.1 | 2025-04-16 | Overview The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an id… |
CVE-2025-43703 | Medium | 6.1 | 2025-04-16 | An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API (even though the at… |
CVE-2025-32791 | Medium | 4.3 | 2025-04-16 | The Backstage Scaffolder plugin houses types and utilities for building scaffolder-related modules. A vulnerability in the Backstage permission plugin backend… |
CVE-2025-32789 | Low | 3.1 | 2025-04-16 | EspoCRM is an Open Source Customer Relationship Management software. Prior to version 9.0.7, users can be sorted by their password hash. This flaw allows an at… |
CVE-2025-32787 | Low | 3.1 | 2025-04-16 | SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. Versions 5.02.5184 to 5.02.5187 are vulnerable to NULL dereference in `DeleteIPv6De… |
CVE-2025-32783 | Medium | 4.7 | 2025-04-16 | XWiki Platform is a generic wiki platform. A vulnerability in versions from 5.0 to 16.7.1 affects users with Message Stream enabled and a wiki configured as cl… |
CVE-2025-32433 | Critical | 10.0 | 2025-04-16 | Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an… |
CVE-2025-31478 | High | 8.2 | 2025-04-16 | Zulip is an open-source team collaboration tool. Zulip supports a configuration where account creation is limited solely by being able to authenticate with a s… |
CVE-2025-25230 | High | 7.8 | 2025-04-16 | Omnissa Horizon Client for Windows contains an LPE Vulnerability. A malicious actor with local access where Horizon Client for Windows is installed may be able… |
CVE-2025-3730 | Low | 3.3 | 2025-04-16 | A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Affected is the function torch.nn.functional.ctc_loss of the file aten/src/AT… |
CVE-2025-3729 | High | 7.3 | 2025-04-16 | A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some u… |
CVE-2025-3728 | Medium | 5.3 | 2025-04-16 | A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipula… |
CVE-2025-3727 | High | 7.3 | 2025-04-16 | A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component STATUS Command Handler. The mani… |
CVE-2025-3620 | High | 8.8 | 2025-04-16 | Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2025-3619 | High | 8.8 | 2025-04-16 | Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
CVE-2025-29710 | Medium | 6.1 | 2025-04-16 | SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting (XSS) via /dashboard/Services. |
CVE-2025-29709 | Critical | 9.8 | 2025-04-16 | SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio. |
CVE-2025-29708 | Critical | 9.8 | 2025-04-16 | SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services. |
CVE-2025-28072 | High | 7.5 | 2025-04-16 | PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php. |
CVE-2025-26153 | Medium | 5.4 | 2025-04-16 | A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute wh… |
CVE-2025-3726 | High | 7.3 | 2025-04-16 | A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component CD Co… |
CVE-2025-3725 | High | 7.3 | 2025-04-16 | A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the compon… |
CVE-2025-3724 | High | 7.3 | 2025-04-16 | A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function of the component DIR Command Handler… |
CVE-2025-3723 | High | 7.3 | 2025-04-16 | A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. This issue affects some unknown processing of the component MDTM Command Handle… |
CVE-2025-32817 | Medium | 6.1 | 2025-04-16 | A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite… |
CVE-2025-31201 | Critical | 9.8 | 2025-04-16 | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4… |
CVE-2025-31200 | Critical | 9.8 | 2025-04-16 | A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1… |
CVE-2025-39472 | Medium | 4.3 | 2025-04-16 | Cross-Site Request Forgery (CSRF) vulnerability in wpweb WooCommerce Social Login woo-social-login allows Cross Site Request Forgery.This issue affects WooComm… |
CVE-2025-32872 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32871 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32870 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32869 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32868 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32867 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32866 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32865 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32864 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32863 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32862 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32861 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32860 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32859 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32858 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32857 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32856 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32855 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32854 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32853 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32852 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32851 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32850 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32849 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32848 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32847 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32846 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32845 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32844 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32843 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32842 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32841 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32840 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32839 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32838 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32837 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32836 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32835 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32834 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32833 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32832 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32831 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32830 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32829 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32828 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32827 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32826 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32825 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32824 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32823 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32822 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-32475 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-31353 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-31352 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-31351 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-31350 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-31349 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-31343 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-30032 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-30031 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-30030 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-30003 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-30002 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-2291 | High | 8.1 | 2025-04-16 | Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with… |
CVE-2025-29905 | High | 8.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-27540 | Critical | 9.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-27539 | Critical | 9.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-27495 | Critical | 9.8 | 2025-04-16 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the… |
CVE-2025-22872 | Medium | 6.5 | 2025-04-16 | The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer… |
CVE-2025-3739 | Medium | 5.9 | 2025-04-16 | Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page: *.*. |