2025 CVEs (page 359)
Page 359 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3348 | Medium | 6.3 | 2025-04-07 | A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. This vulnerability affects unknown code of the file /ed… |
CVE-2025-21448 | High | 7.5 | 2025-04-07 | Transient DOS may occur while parsing SSID in action frames. |
CVE-2025-21447 | High | 7.8 | 2025-04-07 | Memory corruption may occur while processing device IO control call for session control. |
CVE-2025-21443 | High | 7.8 | 2025-04-07 | Memory corruption while processing message content in eAVB. |
CVE-2025-21442 | High | 7.8 | 2025-04-07 | Memory corruption while transmitting packet mapping information with invalid header payload size. |
CVE-2025-21441 | High | 7.8 | 2025-04-07 | Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. |
CVE-2025-21440 | High | 7.8 | 2025-04-07 | Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. |
CVE-2025-21439 | High | 7.8 | 2025-04-07 | Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer. |
CVE-2025-21438 | High | 7.8 | 2025-04-07 | Memory corruption while IOCTL call is invoked from user-space to read board data. |
CVE-2025-21437 | High | 7.8 | 2025-04-07 | Memory corruption while processing memory map or unmap IOCTL operations simultaneously. |
CVE-2025-21436 | High | 7.8 | 2025-04-07 | Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads. |
CVE-2025-21435 | High | 7.5 | 2025-04-07 | Transient DOS may occur while parsing extended IE in beacon. |
CVE-2025-21434 | High | 7.5 | 2025-04-07 | Transient DOS may occur while parsing EHT operation IE or EHT capability IE. |
CVE-2025-21431 | Medium | 5.5 | 2025-04-07 | Information disclosure may be there when a guest VM is connected. |
CVE-2025-21430 | High | 7.5 | 2025-04-07 | Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session. |
CVE-2025-21429 | High | 7.5 | 2025-04-07 | Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request. |
CVE-2025-21428 | High | 7.5 | 2025-04-07 | Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session. |
CVE-2025-21425 | High | 7.3 | 2025-04-07 | Memory corruption may occur due top improper access control in HAB process. |
CVE-2025-21423 | High | 7.8 | 2025-04-07 | Memory corruption occurs when handling client calls to EnableTestMode through an Escape call. |
CVE-2025-21421 | High | 7.8 | 2025-04-07 | Memory corruption while processing escape code in API. |
CVE-2025-3347 | Medium | 6.3 | 2025-04-07 | A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /dental_p… |
CVE-2025-3346 | High | 8.8 | 2025-04-07 | A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file /goform… |
CVE-2025-3345 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unkno… |
CVE-2025-3344 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. Affected is an unknown function of the f… |
CVE-2025-30473 | High | 8.8 | 2025-04-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow Common SQL Provider. When using the parti… |
CVE-2025-3343 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the… |
CVE-2025-3342 | High | 7.3 | 2025-04-07 | A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of t… |
CVE-2025-3341 | High | 7.3 | 2025-04-07 | A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. This affects an unknown part of the file… |
CVE-2025-3340 | High | 7.3 | 2025-04-07 | A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. Affected by this issue is some unkno… |
CVE-2025-3339 | High | 7.3 | 2025-04-07 | A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. Affected by this vulnerability is an unknown function… |
CVE-2025-3338 | High | 7.3 | 2025-04-07 | A vulnerability classified as critical has been found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /adm… |
CVE-2025-3337 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of… |
CVE-2025-3336 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2025-3335 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file… |
CVE-2025-3334 | High | 7.3 | 2025-04-07 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functional… |
CVE-2025-31175 | High | 8.4 | 2025-04-07 | Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity. |
CVE-2025-31174 | Medium | 6.8 | 2025-04-07 | Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-31173 | High | 8.8 | 2025-04-07 | Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentialit… |
CVE-2025-31172 | High | 7.8 | 2025-04-07 | Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentialit… |
CVE-2025-31171 | Medium | 6.8 | 2025-04-07 | File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentia… |
CVE-2025-31170 | High | 8.4 | 2025-04-07 | Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentialit… |
CVE-2025-20664 | High | 7.5 | 2025-04-07 | In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosur… |
CVE-2025-20663 | High | 7.5 | 2025-04-07 | In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosur… |
CVE-2025-20662 | Medium | 6.7 | 2025-04-07 | In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor ha… |
CVE-2025-20661 | Medium | 6.7 | 2025-04-07 | In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor ha… |
CVE-2025-20660 | Medium | 6.7 | 2025-04-07 | In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor ha… |
CVE-2025-20659 | Medium | 6.5 | 2025-04-07 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2025-20658 | Medium | 6.0 | 2025-04-07 | In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the… |
CVE-2025-20657 | Medium | 6.7 | 2025-04-07 | In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2025-20656 | Medium | 6.8 | 2025-04-07 | In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical acc… |
CVE-2025-20655 | Medium | 5.3 | 2025-04-07 | In keymaster, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has al… |
CVE-2025-20654 | Critical | 9.8 | 2025-04-07 | In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional executio… |
CVE-2025-3333 | High | 7.3 | 2025-04-07 | A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2025-3332 | High | 7.3 | 2025-04-07 | A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the fi… |
CVE-2025-3331 | High | 7.3 | 2025-04-07 | A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. This issue affects some unknown proc… |
CVE-2025-27534 | Low | 3.3 | 2025-04-07 | in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory. |
CVE-2025-25057 | Low | 3.3 | 2025-04-07 | in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory. |
CVE-2025-24304 | Low | 3.3 | 2025-04-07 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds write. |
CVE-2025-22851 | Medium | 6.5 | 2025-04-07 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. |
CVE-2025-22842 | Low | 3.3 | 2025-04-07 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2025-22452 | Low | 3.3 | 2025-04-07 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2025-20102 | Low | 3.3 | 2025-04-07 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2025-3330 | High | 7.3 | 2025-04-07 | A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. This vulnerability affects unknown code of the file /… |
CVE-2025-3329 | Low | 3.1 | 2025-04-07 | A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3.2/15.0.0.8. This affects an unknown part of the component Rest… |
CVE-2025-3328 | High | 8.8 | 2025-04-07 | A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function form_fast_setting_wifi_set of the file /gof… |
CVE-2025-3327 | Low | 3.5 | 2025-04-07 | A vulnerability was found in iteaj iboot 物联网网关 1.1.3 and classified as problematic. This issue affects some unknown processing of the file /common/upload/batch… |
CVE-2025-3326 | Low | 3.5 | 2025-04-07 | A vulnerability has been found in iteaj iboot 物联网网关 1.1.3 and classified as problematic. This vulnerability affects unknown code of the file /common/upload of… |
CVE-2025-3325 | Medium | 4.3 | 2025-04-06 | A vulnerability, which was classified as problematic, was found in iteaj iboot 物联网网关 1.1.3. This affects an unknown part of the file /core/admin/pwd of the com… |
CVE-2025-3324 | Medium | 6.3 | 2025-04-06 | A vulnerability, which was classified as critical, has been found in godcheese/code-projects Nimrod 0.8. Affected by this issue is some unknown functionality o… |
CVE-2025-3323 | Medium | 6.3 | 2025-04-06 | A vulnerability classified as critical was found in godcheese/code-projects Nimrod 0.8. Affected by this vulnerability is the function searchAllByName of the f… |
CVE-2025-32013 | High | 7.5 | 2025-04-06 | LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits' LNURL authentication handli… |
CVE-2025-31492 | | 2025-04-06 | mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party… | |
CVE-2025-31488 | | 2025-04-06 | Plain Craft Launcher (PCL) is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are used in… | |
CVE-2025-2260 | High | 7.5 | 2025-04-06 | In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause a denial of service by specially crafted packets. T… |
CVE-2025-2259 | High | 7.5 | 2025-04-06 | In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of ser… |
CVE-2025-2258 | High | 7.5 | 2025-04-06 | In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent… |
CVE-2025-3318 | Medium | 6.3 | 2025-04-06 | A vulnerability classified as critical was found in Kenj_Frog 肯尼基蛙 company-financial-management 公司财务管理系统 1.0. Affected by this vulnerability is the function pa… |
CVE-2025-3317 | Medium | 4.3 | 2025-04-06 | A vulnerability classified as problematic has been found in fumiao opencms up to a0fafa5cff58719e9b27c2a2eec204cc165ce14f. Affected is an unknown function of t… |
CVE-2025-3316 | High | 7.3 | 2025-04-06 | A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2025-3315 | High | 7.3 | 2025-04-06 | A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this issue is some unknown function… |
CVE-2025-3314 | High | 7.3 | 2025-04-06 | A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this vulnerability is an unkno… |
CVE-2025-3313 | High | 7.3 | 2025-04-06 | A vulnerability, which was classified as critical, was found in PHPGurukul Men Salon Management System 1.0. Affected is an unknown function of the file /admin/… |
CVE-2025-3312 | High | 7.3 | 2025-04-06 | A vulnerability, which was classified as critical, has been found in PHPGurukul Men Salon Management System 1.0. This issue affects some unknown processing of… |
CVE-2025-3311 | High | 7.3 | 2025-04-06 | A vulnerability classified as critical was found in PHPGurukul Men Salon Management System 1.0. This vulnerability affects unknown code of the file /admin/abou… |
CVE-2025-32370 | High | 7.2 | 2025-04-06 | Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uploads; however, because .zip is processed… |
CVE-2025-3310 | High | 7.3 | 2025-04-06 | A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the file /admin/delete… |
CVE-2025-3309 | High | 7.3 | 2025-04-06 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionalit… |
CVE-2025-32369 | Medium | 6.4 | 2025-04-06 | Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certain interactions with the media library f… |
CVE-2025-1264 | Medium | 6.5 | 2025-04-06 | The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to SQL Injection via the 'orderBy' parame… |
CVE-2025-3308 | High | 7.3 | 2025-04-06 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown fun… |
CVE-2025-3307 | High | 7.3 | 2025-04-06 | A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /r… |
CVE-2025-3306 | High | 7.3 | 2025-04-06 | A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file… |
CVE-2025-3305 | Medium | 4.3 | 2025-04-05 | A vulnerability has been found in 1902756969/code-projects IKUN_Library 1.0 and classified as problematic. This vulnerability affects the function addIntercept… |
CVE-2025-32366 | Medium | 4.8 | 2025-04-05 | In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., *rdlen=ntohs(rr->rdlen) and memcpy(response+off… |
CVE-2025-3304 | Medium | 6.3 | 2025-04-05 | A vulnerability, which was classified as critical, was found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /d… |
CVE-2025-32365 | Medium | 4.0 | 2025-04-05 | Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced… |
CVE-2025-32364 | Medium | 4.0 | 2025-04-05 | A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated… |
CVE-2025-3303 | Medium | 6.3 | 2025-04-05 | A vulnerability, which was classified as critical, has been found in code-projects Patient Record Management System 1.0. Affected by this issue is some unknown… |
CVE-2025-32360 | Medium | 4.2 | 2025-04-05 | In Zammad 6.4.x before 6.4.2, there is information exposure. Only agents should be able to see and work on shared article drafts. However, a logged in customer… |
CVE-2025-32359 | Medium | 4.8 | 2025-04-05 | In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security. When changing their two factor authentication configuration, users need… |