2025 CVEs (page 430)
Page 430 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-21252 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21251 | High | 7.5 | 2025-01-14 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2025-21250 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21249 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21248 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21246 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21245 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21244 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21243 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21242 | Medium | 5.9 | 2025-01-14 | Windows Kerberos Information Disclosure Vulnerability |
CVE-2025-21241 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21240 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21239 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21238 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21237 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21236 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21235 | High | 7.8 | 2025-01-14 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2025-21234 | High | 7.8 | 2025-01-14 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2025-21233 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21232 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21231 | High | 7.5 | 2025-01-14 | IP Helper Denial of Service Vulnerability |
CVE-2025-21230 | High | 7.5 | 2025-01-14 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2025-21229 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21228 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21227 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21226 | Medium | 6.6 | 2025-01-14 | Windows Digital Media Elevation of Privilege Vulnerability |
CVE-2025-21225 | Medium | 5.9 | 2025-01-14 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
CVE-2025-21224 | High | 8.1 | 2025-01-14 | Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability |
CVE-2025-21223 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21220 | High | 7.5 | 2025-01-14 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2025-21219 | Medium | 4.3 | 2025-01-14 | MapUrlToZone Security Feature Bypass Vulnerability |
CVE-2025-21218 | High | 7.5 | 2025-01-14 | Windows Kerberos Denial of Service Vulnerability |
CVE-2025-21217 | Medium | 6.5 | 2025-01-14 | Windows NTLM Spoofing Vulnerability |
CVE-2025-21215 | Medium | 4.6 | 2025-01-14 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2025-21214 | Medium | 4.2 | 2025-01-14 | Windows BitLocker Information Disclosure Vulnerability |
CVE-2025-21213 | Medium | 4.6 | 2025-01-14 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2025-21211 | Medium | 6.8 | 2025-01-14 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2025-21210 | Medium | 4.2 | 2025-01-14 | Windows BitLocker Information Disclosure Vulnerability |
CVE-2025-21207 | High | 7.5 | 2025-01-14 | Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability |
CVE-2025-21202 | Medium | 6.1 | 2025-01-14 | Windows Recovery Environment Agent Elevation of Privilege Vulnerability |
CVE-2025-21193 | Medium | 6.5 | 2025-01-14 | Active Directory Federation Server Spoofing Vulnerability |
CVE-2025-21189 | Medium | 4.3 | 2025-01-14 | MapUrlToZone Security Feature Bypass Vulnerability |
CVE-2025-21187 | High | 7.8 | 2025-01-14 | Microsoft Power Automate Remote Code Execution Vulnerability |
CVE-2025-21186 | High | 7.8 | 2025-01-14 | Microsoft Access Remote Code Execution Vulnerability |
CVE-2025-21178 | High | 8.8 | 2025-01-14 | Visual Studio Remote Code Execution Vulnerability |
CVE-2025-21176 | High | 8.8 | 2025-01-14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
CVE-2025-21173 | High | 7.3 | 2025-01-14 | .NET Elevation of Privilege Vulnerability |
CVE-2025-21172 | High | 7.5 | 2025-01-14 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2025-21171 | High | 7.5 | 2025-01-14 | .NET Remote Code Execution Vulnerability |
CVE-2025-0465 | High | 7.3 | 2025-01-14 | A vulnerability was found in AquilaCMS 1.412.13. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/v2/catego… |
CVE-2025-23081 | Medium | 6.1 | 2025-01-14 | Cross-Site Request Forgery (CSRF), Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Found… |
CVE-2025-23080 | Medium | 5.3 | 2025-01-14 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - OpenBadges Extens… |
CVE-2025-0464 | Low | 2.4 | 2025-01-14 | A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functio… |
CVE-2025-0463 | Medium | 6.3 | 2025-01-14 | A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0. It has been classified as critical. Affected is an unknown fu… |
CVE-2025-0462 | Medium | 6.3 | 2025-01-14 | A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0 and classified as critical. This issue affects some unknown pr… |
CVE-2025-22984 | High | 7.5 | 2025-01-14 | An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information. |
CVE-2025-22983 | High | 7.5 | 2025-01-14 | An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information. |
CVE-2025-0461 | Medium | 4.3 | 2025-01-14 | A vulnerability has been found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0 and classified as problematic. This vulnerability affects… |
CVE-2025-0460 | High | 7.3 | 2025-01-14 | A vulnerability, which was classified as critical, was found in Blog Botz for Journal Theme 1.0 on OpenCart. This affects an unknown part of the file /index.ph… |
CVE-2025-0459 | Medium | 5.3 | 2025-01-14 | A vulnerability, which was classified as problematic, has been found in libretro RetroArch up to 1.19.1 on Windows. Affected by this issue is some unknown func… |
CVE-2025-0458 | Medium | 4.3 | 2025-01-14 | A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionalit… |
CVE-2025-20620 | High | 7.5 | 2025-01-14 | SQL Injection vulnerability exists in STEALTHONE D220/D340 provided by Y'S corporation. An attacker who can access the affected product may obtain the administ… |
CVE-2025-20055 | Critical | 9.8 | 2025-01-14 | OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340 provided by Y'S corporation. An attacker who can access the affected… |
CVE-2025-20016 | High | 7.2 | 2025-01-14 | OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340/D440 provided by Y'S corporation. A user with an administrative privi… |
CVE-2025-0394 | High | 8.8 | 2025-01-14 | The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file uploads due to m… |
CVE-2025-0393 | Medium | 6.1 | 2025-01-14 | The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1006. This… |
CVE-2025-23082 | High | 7.2 | 2025-01-14 | Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests… |
CVE-2025-23038 | Medium | 5.4 | 2025-01-14 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was… |
CVE-2025-23037 | Medium | 5.4 | 2025-01-14 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was… |
CVE-2025-23036 | Medium | 5.4 | 2025-01-14 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability w… |
CVE-2025-23035 | Medium | 5.4 | 2025-01-14 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was… |
CVE-2025-23034 | Medium | 6.1 | 2025-01-14 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability w… |
CVE-2025-23033 | Medium | 5.4 | 2025-01-14 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was… |
CVE-2025-23032 | Medium | 5.4 | 2025-01-14 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was… |
CVE-2025-23031 | Medium | 5.4 | 2025-01-14 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was… |
CVE-2025-23030 | Medium | 6.1 | 2025-01-14 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability w… |
CVE-2025-0070 | Critical | 9.9 | 2025-01-14 | SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to obtain illegitimate access to the system by exploiting improper… |
CVE-2025-0069 | High | 7.8 | 2025-01-14 | Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account… |
CVE-2025-0068 | Medium | 4.3 | 2025-01-14 | An obsolete functionality in SAP NetWeaver Application Server ABAP did not perform necessary authorization checks. Because of this, an authenticated attacker c… |
CVE-2025-0067 | Medium | 6.3 | 2025-01-14 | Due to a missing authorization check on service endpoints in the SAP NetWeaver Application Server Java, an attacker with standard user role can create JCo conn… |
CVE-2025-0066 | Critical | 9.9 | 2025-01-14 | Under certain conditions SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework) allows an attacker to access restricted information due… |
CVE-2025-0063 | High | 8.8 | 2025-01-14 | SAP NetWeaver AS ABAP and ABAP Platform does not check for authorization when a user executes some RFC function modules. This could lead to an attacker with ba… |
CVE-2025-0061 | High | 8.7 | 2025-01-14 | SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interactio… |
CVE-2025-0060 | Medium | 6.5 | 2025-01-14 | SAP BusinessObjects Business Intelligence Platform allows an authenticated user with restricted access to inject malicious JS code which can read sensitive inf… |
CVE-2025-0059 | Medium | 6.0 | 2025-01-14 | Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP store user input in the local browser storage to improve usability. An attacker… |
CVE-2025-0058 | Medium | 6.5 | 2025-01-14 | In SAP Business Workflow and SAP Flexible Workflow, an authenticated attacker can manipulate a parameter in an otherwise legitimate resource request to view se… |
CVE-2025-0057 | Medium | 4.8 | 2025-01-14 | SAP NetWeaver AS JAVA (User Admin Application) is vulnerable to stored cross site scripting vulnerability. An attacker posing as an admin can upload a photo wi… |
CVE-2025-0056 | Medium | 6.0 | 2025-01-14 | SAP GUI for Java saves user input on the client PC to improve usability. An attacker with administrative privileges or access to the victim�s user directory on… |
CVE-2025-0055 | Medium | 6.0 | 2025-01-14 | SAP GUI for Windows stores user input on the client PC to improve usability. Under very specific circumstances an attacker with administrative privileges or ac… |
CVE-2025-0053 | Medium | 5.3 | 2025-01-14 | SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to gain unauthorized access to system information. By using a specific URL param… |
CVE-2025-22619 | Medium | 6.1 | 2025-01-13 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability w… |
CVE-2025-22618 | Medium | 5.4 | 2025-01-13 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was… |
CVE-2025-22617 | Medium | 6.1 | 2025-01-13 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability w… |
CVE-2025-22616 | Medium | 5.4 | 2025-01-13 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was… |
CVE-2025-22615 | Medium | 6.1 | 2025-01-13 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability w… |
CVE-2025-22614 | Medium | 5.4 | 2025-01-13 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was… |
CVE-2025-22613 | Medium | 5.4 | 2025-01-13 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was… |
CVE-2025-22138 | | 2025-01-13 | @codidact/qpixel is a Q&A-based community knowledge-sharing software. In affected versions when a category is set to private or limited-visibility within QPixe… | |
CVE-2025-22134 | Medium | 4.2 | 2025-01-13 | When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly… |
CVE-2025-23027 | | 2025-01-13 | next-forge is a Next.js project boilerplate for modern web application. The BASEHUB_TOKEN commited in apps/web/.env.example. Users should avoid use of this tok… |