2025 CVEs (page 40)
Page 40 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-13844 | Medium | 5.3 | 2026-01-15 | CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the a… |
CVE-2025-9014 | High | 7.5 | 2026-01-15 | A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation. A… |
CVE-2025-70307 | High | 7.5 | 2026-01-15 | A stack overflow in the dump_ttxt_sample function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet. |
CVE-2025-70299 | Medium | 6.5 | 2026-01-15 | A heap overflow in the avi_parse_input_file() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted AVI file. |
CVE-2025-36911 | High | 7.1 | 2026-01-15 | In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information disclosure of user's c… |
CVE-2025-70656 | High | 7.5 | 2026-01-15 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function. This vulnerability allows attackers to cause… |
CVE-2025-70310 | Medium | 5.5 | 2026-01-15 | A heap overflow in the vorbis_to_intern() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .ogg file. |
CVE-2025-70309 | Medium | 5.5 | 2026-01-15 | A stack overflow in the pcmreframe_flush_packet function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted WAV file. |
CVE-2025-70308 | High | 7.5 | 2026-01-15 | An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .gsf file. |
CVE-2025-70305 | Medium | 5.5 | 2026-01-15 | A stack overflow in the dmx_saf function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .saf file. |
CVE-2025-70304 | High | 7.5 | 2026-01-15 | A buffer overflow in the vobsub_get_subpic_duration() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet. |
CVE-2025-70298 | High | 8.2 | 2026-01-15 | GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmx_parse_tags function. |
CVE-2025-66417 | High | 7.5 | 2026-01-15 | GLPI is a free asset and IT management software package. From 11.0.0, < 11.0.3, an unauthenticated user can perform a SQL injection through the inventory endpo… |
CVE-2025-66292 | High | 8.1 | 2026-01-15 | DPanel is an open source server management panel written in Go. Prior to 1.9.2, DPanel has an arbitrary file deletion vulnerability in the /api/common/attach/d… |
CVE-2025-62193 | Critical | 9.8 | 2026-01-15 | Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By l… |
CVE-2025-67246 | High | 7.3 | 2026-01-15 | A local information disclosure vulnerability exists in the Ludashi driver before 5.1025 due to a lack of access control in the IOCTL handler. This driver expos… |
CVE-2025-67079 | Critical | 9.8 | 2026-01-15 | File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick library via crafted… |
CVE-2025-67078 | Medium | 6.1 | 2026-01-15 | Cross site scripting (XSS) vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute arbitrary code via the notify parameter of the f… |
CVE-2025-67077 | High | 8.8 | 2026-01-15 | File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile a… |
CVE-2025-67076 | High | 7.5 | 2026-01-15 | Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controlle… |
CVE-2025-64516 | High | 7.5 | 2026-01-15 | GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item (tick… |
CVE-2025-61973 | High | 8.8 | 2026-01-15 | A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL f… |
CVE-2025-71019 | High | 7.5 | 2026-01-15 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function. This vulnerability allows attackers to c… |
CVE-2025-70744 | High | 7.5 | 2026-01-15 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function. This vulnerability allows attackers to… |
CVE-2025-67084 | Critical | 9.9 | 2026-01-15 | File upload vulnerability in InvoicePlane through 1.6.3 allows authenticated attackers to upload arbitrary PHP files into attachments, which can later be execu… |
CVE-2025-67083 | Medium | 5.3 | 2026-01-15 | Directory traversal vulnerability in InvoicePlane through 1.6.3 allows unauthenticated attackers to read files from the server. The ability to read files and t… |
CVE-2025-67082 | Medium | 6.5 | 2026-01-15 | An SQL injection vulnerability in InvoicePlane through 1.6.3 has been identified in "maxQuantity" and "minQuantity" parameters when generating a report. An aut… |
CVE-2025-67081 | Medium | 4.9 | 2026-01-15 | An SQL injection vulnerability in Itflow through 25.06 has been identified in the "role_id" parameter when editing a profile. An attacker with admin account ca… |
CVE-2025-13859 | Medium | 6.4 | 2026-01-15 | The AffiliateX – Amazon Affiliate Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_… |
CVE-2025-13062 | High | 8.8 | 2026-01-15 | The Supreme Modules Lite plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 2.5.62. This is due to insufficient… |
CVE-2025-12895 | Medium | 5.3 | 2026-01-15 | The Kalium 3 | Creative WordPress & WooCommerce Theme theme for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the… |
CVE-2025-14457 | Low | 3.7 | 2026-01-15 | The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ownership ch… |
CVE-2025-14448 | Medium | 5.4 | 2026-01-15 | The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Multiple Checkbox and Multiple Select user profile f… |
CVE-2025-14058 | Low | 3.2 | 2026-01-14 | A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Contr… |
CVE-2025-13455 | High | 7.8 | 2026-01-14 | A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enro… |
CVE-2025-13454 | Medium | 5.5 | 2026-01-14 | A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to gain access to sensitive device infor… |
CVE-2025-13453 | Medium | 4.6 | 2026-01-14 | A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read data stored on the drive. |
CVE-2025-13154 | Medium | 5.5 | 2026-01-14 | An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow an authenticated local user to perform a… |
CVE-2025-12166 | High | 7.5 | 2026-01-14 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to blind SQL Injection via the `order` and `a… |
CVE-2025-71166 | Medium | 5.4 | 2026-01-14 | Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface within the Tools S… |
CVE-2025-71165 | Medium | 5.4 | 2026-01-14 | Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface within the Tools S… |
CVE-2025-71164 | Medium | 5.4 | 2026-01-14 | Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the Editing component. The images parameter (su… |
CVE-2025-33206 | High | 7.8 | 2026-01-14 | NVIDIA NSIGHT Graphics for Linux contains a vulnerability where an attacker could cause command injection. A successful exploit of this vulnerability might lea… |
CVE-2025-14557 | Medium | 4.8 | 2026-01-14 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Facebook Pixel facebook_pixel allows Stored… |
CVE-2025-14556 | Medium | 5.4 | 2026-01-14 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Flag allows Cross-Site Scripting (XSS).This… |
CVE-2025-11224 | High | 7.7 | 2026-01-14 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allo… |
CVE-2025-71021 | High | 7.5 | 2026-01-14 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows attackers to… |
CVE-2025-70747 | High | 7.5 | 2026-01-14 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function. This vulnerability allows attackers t… |
CVE-2025-65397 | Medium | 6.8 | 2026-01-14 | An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with phy… |
CVE-2025-63644 | Medium | 5.4 | 2026-01-14 | A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field. |
CVE-2025-70968 | Critical | 9.8 | 2026-01-14 | FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE(). |
CVE-2025-67835 | Medium | 6.5 | 2026-01-14 | Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notification Contacts functionality. |
CVE-2025-67834 | Medium | 5.4 | 2026-01-14 | Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter. |
CVE-2025-67833 | Medium | 6.1 | 2026-01-14 | Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter. |
CVE-2025-65396 | Medium | 6.1 | 2026-01-14 | A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mecha… |
CVE-2025-37185 | Medium | 5.5 | 2026-01-14 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross… |
CVE-2025-37184 | Critical | 9.8 | 2026-01-14 | A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication requirements. Succe… |
CVE-2025-37183 | High | 7.2 | 2026-01-14 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection… |
CVE-2025-37182 | High | 7.2 | 2026-01-14 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection… |
CVE-2025-37181 | High | 7.2 | 2026-01-14 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection… |
CVE-2025-67399 | Medium | 4.6 | 2026-01-14 | An issue in AIRTH SMART HOME AQI MONITOR Bootloader v.1.005 allows a physically proximate attacker to obtain sensitive information via the UART port of the BK7… |
CVE-2025-14242 | Medium | 6.5 | 2026-01-14 | A flaw was found in vsftpd. This vulnerability allows a denial of service (DoS) via an integer overflow in the ls command parameter parsing, triggered by a rem… |
CVE-2025-9142 | High | 7.5 | 2026-01-14 | A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory. |
CVE-2025-71144 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure context reset on disconnect() After the blamed commit below, if the MPC sub… |
CVE-2025-71143 | High | 7.8 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8d67 ("clk… |
CVE-2025-71142 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition A warning was triggered as follows: … |
CVE-2025-71141 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed probe The drm_kms_helper_poll_fini() an… |
CVE-2025-71140 | | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Use spinlock for context list protection lock Previously a mutex… | |
CVE-2025-71139 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: kernel/kexec: fix IMA when allocation happens in CMA area *** Bug description *** When I… |
CVE-2025-71138 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL pointer check for pingpong interface It is checked almost a… |
CVE-2025-71137 | High | 7.8 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" This patch ensures that the RX ring… |
CVE-2025-71136 | High | 7.1 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() It… |
CVE-2025-71135 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() The va… |
CVE-2025-71134 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: change all pageblocks migrate type on coalescing When a page is freed it c… |
CVE-2025-71133 | High | 7.1 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: avoid invalid read in irdma_net_event irdma_net_event() should not dereferenc… |
CVE-2025-71132 | High | 7.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: smc91x: fix broken irq-context in PREEMPT_RT When smc91x.c is built with PREEMPT_RT, the… |
CVE-2025-71131 | High | 7.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt As soon as crypto_aead_encry… |
CVE-2025-71130 | High | 7.8 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer Initialize the e… |
CVE-2025-71129 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments The kfunc calls are native calls so they… |
CVE-2025-71128 | High | 7.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: erspan: Initialize options_len before referencing options. The struct ip_tunnel_info has… |
CVE-2025-71127 | High | 7.1 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Discard Beacon frames to non-broadcast address Beacon frames are required… |
CVE-2025-71126 | High | 7.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid deadlock on fallback while reinjecting Jakub reported an MPTCP deadlock at f… |
CVE-2025-71125 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: tracing: Do not register unsupported perf events Synthetic events currently do not have a… |
CVE-2025-71124 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: move preempt_prepare_postamble after error check Move the call to preempt_p… |
CVE-2025-71123 | High | 7.8 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix string copying in parse_apply_sb_mount_options() strscpy_pad() can't be used to… |
CVE-2025-71122 | High | 7.8 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED syzkaller found it cou… |
CVE-2025-71121 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: parisc: Do not reprogram affinitiy on ASP chip The ASP chip is a very old variant of the… |
CVE-2025-71120 | High | 7.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf A z… |
CVE-2025-71119 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec: Enable SMT before waking offline CPUs If SMT is disabled or a partial SMT… |
CVE-2025-71118 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid walking the Namespace if start_node is NULL Although commit 0c9992315e73 ("… |
CVE-2025-71117 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: block: Remove queue freezing from several sysfs store callbacks Freezing the request queu… |
CVE-2025-71116 | Critical | 9.1 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: libceph: make decode_pool() more resilient against corrupted osdmaps If the osdmap is (ma… |
CVE-2025-71115 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: um: init cpu_tasks[] earlier This is currently done in uml_finishsetup(), but e.g. with K… |
CVE-2025-71114 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: via_wdt: fix critical boot hang due to unnamed resource allocation The VIA watchdog drive… |
CVE-2025-71113 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated via sock_kmalloc Several crypto user AP… |
CVE-2025-71112 | High | 8.8 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: add VLAN id validation before using Currently, the VLAN id may be used without… |
CVE-2025-71111 | Medium | 4.7 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83791d) Convert macros to functions to avoid TOCTOU The macro FAN_FROM_REG evalu… |
CVE-2025-71110 | High | 7.8 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: mm/slub: reset KASAN tag in defer_free() before accessing freed memory When CONFIG_SLUB_T… |
CVE-2025-71109 | High | 7.1 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits Since commit e4… |
CVE-2025-71108 | Medium | 5.5 | 2026-01-14 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect num_connectors capability The UCSI spec states that th… |