2025 CVEs (page 35)
Page 35 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-57785 | Medium | 6.5 | 2026-01-26 | A Double Free in XSLT `show_index` has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to corrupt data which may le… |
CVE-2025-57784 | Low | 3.3 | 2026-01-26 | Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows a local attacker to access the managem… |
CVE-2025-57783 | Medium | 5.3 | 2026-01-26 | Improper header parsing may lead to request smuggling has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to access… |
CVE-2025-70982 | Critical | 9.9 | 2026-01-26 | Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import sensitive user data. |
CVE-2025-67274 | High | 7.5 | 2026-01-26 | An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-integration-service template download m… |
CVE-2025-50537 | Medium | 5.5 | 2026-01-26 | Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is tr… |
CVE-2025-59109 | | 2026-01-26 | The dormakaba registration units 9002 (PIN Pad Units) have an exposed UART header on the backside. The PIN pad is sending every button press to the UART interf… | |
CVE-2025-59108 | | 2026-01-26 | By default, the password for the Access Manager's web interface, is set to 'admin'. In the tested version changing the password was not enforced. | |
CVE-2025-59107 | | 2026-01-26 | Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The firmware in some instances is provided… | |
CVE-2025-59106 | High | 8.8 | 2026-01-26 | The binary serving the web server and executing basically all actions launched from the Web UI is running with root privileges. This is against the least privi… |
CVE-2025-59105 | | 2026-01-26 | With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Th… | |
CVE-2025-59104 | | 2026-01-26 | With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or use the 6-Pin tag-connect cable). Thus… | |
CVE-2025-59103 | | 2026-01-26 | The Access Manager 92xx in hardware revision K7 is based on Linux instead of Windows CE embedded in older hardware revisions. In this new hardware revision it… | |
CVE-2025-59102 | | 2026-01-26 | The web server of the Access Manager offers a functionality to download a backup of the local database stored on the device. This database contains the whole c… | |
CVE-2025-59101 | | 2026-01-26 | Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as a… | |
CVE-2025-59100 | | 2026-01-26 | The web interface offers a functionality to export the internal SQLite database. After executing the database export, an automatic download is started and the… | |
CVE-2025-59099 | | 2026-01-26 | The Access Manager is using the open source web server CompactWebServer written in C#. This web server is affected by a path traversal vulnerability, which all… | |
CVE-2025-59098 | | 2026-01-26 | The Access Manager is offering a trace functionality to debug errors and issues with the device. The trace functionality is implemented as a simple TCP socket… | |
CVE-2025-59097 | | 2026-01-26 | The exos 9300 application can be used to configure Access Managers (e.g. 92xx, 9230 and 9290). The configuration is done in a graphical user interface on the d… | |
CVE-2025-59096 | | 2026-01-26 | The default password for the extended admin user mode in the application U9ExosAdmin.exe ("Kaba 9300 Administration") is hard-coded in multiple locations as we… | |
CVE-2025-59095 | | 2026-01-26 | The program libraries (DLL) and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the… | |
CVE-2025-59094 | | 2026-01-26 | A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management application (d9sysdef.exe). Within this application it i… | |
CVE-2025-59093 | | 2026-01-26 | Exos 9300 instances are using a randomly generated database password to connect to the configured MSSQL server. The password is derived from static random valu… | |
CVE-2025-59092 | | 2026-01-26 | An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterface.exe. This service is used for interprocess com… | |
CVE-2025-59091 | | 2026-01-26 | Multiple hardcoded credentials have been identified, which are allowed to sign-in to the exos 9300 datapoint server running on port 1004 and 1005. This server… | |
CVE-2025-59090 | | 2026-01-26 | On the exos 9300 server, a SOAP API is reachable on port 8002. This API does not require any authentication prior to sending requests. Therefore, network acces… | |
CVE-2025-41083 | | 2026-01-26 | Vulnerability in Altitude Authentication Service and Altitude Communication Server v8.5.3290.0 by Altitude, where manipulation of Host header in HTTP requests… | |
CVE-2025-41082 | | 2026-01-26 | Illegal HTTP request traffic vulnerability (CL.0) in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Kee… | |
CVE-2025-27821 | High | 7.3 | 2026-01-26 | Out-of-bounds Write vulnerability in Apache Hadoop HDFS native client. This issue affects Apache Hadoop: from 3.2.0 before 3.4.2. Users are recommended to up… |
CVE-2025-14973 | Medium | 6.8 | 2026-01-26 | The Recipe Card Blocks Lite WordPress plugin before 3.4.13 does not sanitize and escape a parameter before using it in a SQL statement, allowing contributors a… |
CVE-2025-14316 | High | 7.1 | 2026-01-26 | The AhaChat Messenger Marketing WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Refle… |
CVE-2025-71163 | Medium | 5.5 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix device leaks on compat bind and unbind Make sure to drop the referen… |
CVE-2025-71162 | High | 7.8 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra-adma: Fix use-after-free A use-after-free bug exists in the Tegra ADMA d… |
CVE-2025-6461 | Medium | 4.3 | 2026-01-25 | The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.27 via t… |
CVE-2025-13920 | Medium | 5.3 | 2026-01-24 | The WP Directory Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.9 via the wdk_public_action… |
CVE-2025-15516 | Medium | 4.3 | 2026-01-24 | The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_callback_sto… |
CVE-2025-14907 | Medium | 4.3 | 2026-01-24 | The Moderate Selected Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing… |
CVE-2025-14630 | Medium | 4.3 | 2026-01-24 | The AdminQuickbar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.3. This is due to missing or incor… |
CVE-2025-13205 | Medium | 4.3 | 2026-01-24 | The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to Cross-Site R… |
CVE-2025-13194 | Medium | 4.3 | 2026-01-24 | The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to Cross-Site R… |
CVE-2025-13139 | Medium | 4.3 | 2026-01-24 | The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2… |
CVE-2025-14985 | Medium | 6.4 | 2026-01-24 | The Alpha Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘alpha_block_css’ parameter in all versions up to, and including, 1… |
CVE-2025-14941 | Medium | 6.4 | 2026-01-24 | The GZSEO plugin for WordPress is vulnerable to authorization bypass leading to Stored Cross-Site Scripting in all versions up to, and including, 2.0.11. This… |
CVE-2025-14906 | Medium | 4.3 | 2026-01-24 | The WP Youtube Video Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing… |
CVE-2025-14903 | Medium | 4.3 | 2026-01-24 | The Simple Crypto Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2. This is due to missing n… |
CVE-2025-14843 | Medium | 5.3 | 2026-01-24 | The Wizit Gateway for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Order Cancellation in all versions up to, and including, 1.3… |
CVE-2025-14797 | Medium | 5.4 | 2026-01-24 | The Same Category Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget title placeholder functionality in all versions up to… |
CVE-2025-14629 | Medium | 5.3 | 2026-01-24 | The Alchemist Ajax Upload plugin for WordPress is vulnerable to unauthorized media file deletion due to a missing capability check on the 'delete_file' functio… |
CVE-2025-14609 | Medium | 5.3 | 2026-01-24 | The Wise Analytics plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.1.9. This is due to missing capability c… |
CVE-2025-13676 | Medium | 6.1 | 2026-01-24 | The JustClick registration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 0.1. This is due to insuf… |
CVE-2025-13374 | Critical | 9.8 | 2026-01-24 | The Kalrav AI Agent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the kalrav_upload_file AJAX action in a… |
CVE-2025-12836 | Medium | 6.4 | 2026-01-24 | The VK Google Job Posting Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Job Description field in versions up to, and includ… |
CVE-2025-13952 | Critical | 9.8 | 2026-01-24 | A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU sha… |
CVE-2025-70458 | Medium | 5.4 | 2026-01-23 | A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker… |
CVE-2025-70457 | Critical | 9.8 | 2026-01-23 | A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fai… |
CVE-2025-52026 | High | 7.5 | 2026-01-23 | An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28. This unauthe… |
CVE-2025-52025 | Critical | 9.4 | 2026-01-23 | An SQL Injection vulnerability exists in the GetServiceByRestaurantID endpoint of the Aptsys gemscms POS Platform backend thru 2025-05-28. The vulnerability ar… |
CVE-2025-52024 | Critical | 9.4 | 2026-01-23 | A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauthenticated users. By ac… |
CVE-2025-52023 | Medium | 5.3 | 2026-01-23 | A vulnerability in the PHP backend of gemscms.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that dis… |
CVE-2025-52022 | Medium | 5.3 | 2026-01-23 | A vulnerability in the PHP backend of gemsloyalty.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that… |
CVE-2025-67264 | High | 7.8 | 2026-01-23 | An OS command injection vulnerability in the com.sprd.engineermode component in Doogee Note59, Note59 Pro, and Note59 Pro+ allows a local attacker to execute a… |
CVE-2025-70986 | High | 7.5 | 2026-01-23 | Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily access sensitive department data. |
CVE-2025-70985 | Critical | 9.1 | 2026-01-23 | Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their scope. |
CVE-2025-70983 | Critical | 9.9 | 2026-01-23 | Incorrect access control in the authRoutes function of SpringBlade v4.5.0 allows attackers with low-level privileges to escalate privileges. |
CVE-2025-14947 | Medium | 6.5 | 2026-01-23 | The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `ajax_callback_cr… |
CVE-2025-71177 | Medium | 5.4 | 2026-01-23 | LavaLite CMS versions up to and including 10.1.0 contain a stored cross-site scripting vulnerability in the package creation and search functionality. Authenti… |
CVE-2025-67231 | Medium | 5.9 | 2026-01-23 | A reflected cross-site scripting (XSS) vulnerability in ToDesktop Builder v0.33.1 allows attackers to execute arbitrary code in the context of a user's browser… |
CVE-2025-67230 | High | 7.1 | 2026-01-23 | Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external pro… |
CVE-2025-67229 | Critical | 9.8 | 2026-01-23 | An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof ba… |
CVE-2025-71161 | High | 7.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the rec… |
CVE-2025-71160 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: avoid chain re-validation if possible Hamza Mahfooz reports cpu sof… |
CVE-2025-71159 | Critical | 9.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node() Previously, btrfs… |
CVE-2025-71158 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: ensure worker is torn down When an IRQ worker is running, unplugging the dev… |
CVE-2025-69908 | High | 7.5 | 2026-01-23 | An unauthenticated information disclosure vulnerability in Newgen OmniApp allows attackers to enumerate valid privileged usernames via a publicly accessible cl… |
CVE-2025-67125 | Medium | 4.4 | 2026-01-23 | A signed integer overflow in docopt.cpp v0.6.2 (LeafPattern::match in docopt_private.h) when merging occurrence counters (e.g., default LONG_MAX + first user "… |
CVE-2025-67124 | Medium | 6.8 | 2026-01-23 | A TOCTOU and symlink race in svenstaro/miniserve 0.32.0 upload finalization (when uploads are enabled) can allow an attacker to overwrite arbitrary files outsi… |
CVE-2025-66720 | High | 7.5 | 2026-01-23 | Null pointer dereference in free5gc pcf 1.4.0 in file internal/sbi/processor/ampolicy.go in function HandleDeletePoliciesPolAssoId. |
CVE-2025-66719 | Critical | 9.1 | 2026-01-23 | An issue was discovered in Free5gc NRF 1.4.0. In the access-token generation logic of free5GC, the AccessTokenScopeCheck() function in file internal/sbi/proces… |
CVE-2025-71157 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() Since nldev_deldev(… |
CVE-2025-71156 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: gve: defer interrupt enabling until NAPI registration Currently, interrupts are automatic… |
CVE-2025-71155 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix gmap_helper_zap_one_page() again A few checks were missing in gmap_helper_… |
CVE-2025-71154 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usb_submit_urb() failure In async_set_registers()… |
CVE-2025-71153 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in get_file_all_info() In get_file_all_info(), if vfs_getattr() fa… |
CVE-2025-71152 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: properly keep track of conduit reference Problem description ------------------… |
CVE-2025-71151 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory and information leak in smb3_reconfigure() In smb3_reconfigure(), if smb… |
CVE-2025-71150 | High | 7.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix refcount leak when invalid session is found on session lookup When a session i… |
CVE-2025-71148 | Low | 3.3 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->s… |
CVE-2025-71147 | Medium | 5.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd 'tpm2_load_cmd' allocates a tempoary bl… |
CVE-2025-71146 | High | 7.5 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix leaked ct in error paths There are some situations where ct… |
CVE-2025-69907 | High | 7.5 | 2026-01-23 | An unauthenticated information disclosure vulnerability exists in Newgen OmniDocs due to missing authentication and access control on the /omnidocs/GetListofCa… |
CVE-2025-71145 | High | 7.8 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: usb: phy: isp1301: fix non-OF device reference imbalance A recent change fixing a device… |
CVE-2025-13921 | Medium | 4.3 | 2026-01-23 | The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to unauthorized modification or loss of data d… |
CVE-2025-4320 | Critical | 10.0 | 2026-01-23 | Authentication Bypass by Primary Weakness, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutio… |
CVE-2025-4319 | Critical | 9.4 | 2026-01-23 | Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Te… |
CVE-2025-14866 | High | 8.8 | 2026-01-23 | The Melapress Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.1. This is due to a misconfigure… |
CVE-2025-2204 | Medium | 4.7 | 2026-01-23 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tapandsign Technologies Software Inc. Tap&Sign all… |
CVE-2025-46699 | Medium | 4.3 | 2026-01-23 | Dell Data Protection Advisor, versions prior to 19.12, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability in the S… |
CVE-2025-14745 | Medium | 6.4 | 2026-01-23 | The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… |
CVE-2025-14069 | Medium | 6.4 | 2026-01-23 | The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_custom_schema_field' profile field i… |
CVE-2025-67847 | High | 8.8 | 2026-01-23 | A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient… |