2025 CVEs (page 434)
Page 434 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-22298 | Medium | 4.3 | 2025-01-07 | Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2025-22297 | Medium | 4.3 | 2025-01-07 | Cross-Site Request Forgery (CSRF) vulnerability in aipost AI WP Writer ai-wp-writer allows Cross Site Request Forgery.This issue affects AI WP Writer: from n/a… |
CVE-2025-22293 | Medium | 6.5 | 2025-01-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gutentor Gutentor gutentor allows DOM-Based XSS.This issu… |
CVE-2025-22261 | Medium | 6.5 | 2025-01-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allo… |
CVE-2025-22395 | High | 8.2 | 2025-01-07 | Dell Update Package Framework, versions prior to 22.01.02, contain(s) a Local Privilege Escalation Vulnerability. A local low privileged attacker could potenti… |
CVE-2025-21620 | High | 7.5 | 2025-01-06 | Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. When you send a request with the Authorization header to one domain, and the re… |
CVE-2025-21616 | Medium | 5.4 | 2025-01-06 | Plane is an open-source project management tool. A cross-site scripting (XSS) vulnerability has been identified in Plane versions prior to 0.23. The vulnerabil… |
CVE-2025-21617 | | 2025-01-06 | Guzzle OAuth Subscriber signs Guzzle requests using OAuth 1.0. Prior to 0.8.1, Nonce generation does not use sufficient entropy nor a cryptographically secure… | |
CVE-2025-21618 | High | 7.5 | 2025-01-06 | NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in in… |
CVE-2025-21615 | Medium | 5.5 | 2025-01-06 | AAT (Another Activity Tracker) is a GPS-tracking application for tracking sportive activities, with emphasis on cycling. Versions lower than v1.26 of AAT are v… |
CVE-2025-21614 | High | 7.5 | 2025-01-06 | go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to… |
CVE-2025-21613 | Critical | 9.8 | 2025-01-06 | go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5… |
CVE-2025-21612 | High | 8.6 | 2025-01-06 | TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Prior to 2.7.2, TabberTransclude.php doesn't escape the user-supplied page name when o… |
CVE-2025-21611 | High | 8.8 | 2025-01-06 | tgstation-server is a production scale tool for BYOND server management. Prior to 6.12.3, roles used to authorize API methods were incorrectly OR'd instead of… |
CVE-2025-21604 | | 2025-01-06 | LangChain4j-AIDeepin is a Retrieval enhancement generation (RAG) project. Prior to 3.5.0, LangChain4j-AIDeepin uses MD5 to hash files, which may cause file upl… | |
CVE-2025-0233 | High | 7.3 | 2025-01-05 | A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/… |
CVE-2025-0232 | Medium | 6.3 | 2025-01-05 | A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2025-0231 | Medium | 6.3 | 2025-01-05 | A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-0230 | Medium | 6.3 | 2025-01-05 | A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/pri… |
CVE-2025-0229 | Medium | 6.3 | 2025-01-05 | A vulnerability, which was classified as critical, has been found in code-projects Travel Management System 1.0. This issue affects some unknown processing of… |
CVE-2025-0228 | Low | 2.4 | 2025-01-05 | A vulnerability has been found in code-projects Local Storage Todo App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /… |
CVE-2025-0227 | Medium | 4.3 | 2025-01-05 | A vulnerability, which was classified as problematic, was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). This affects an unknown part… |
CVE-2025-0226 | Medium | 4.3 | 2025-01-05 | A vulnerability, which was classified as problematic, has been found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this issue… |
CVE-2025-0225 | Medium | 4.3 | 2025-01-05 | A vulnerability classified as problematic was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is an unk… |
CVE-2025-0224 | Medium | 5.3 | 2025-01-05 | A vulnerability was found in Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U), SH-16200A-5(1U) and NVR5-8200PX up to 20241220. It ha… |
CVE-2025-0223 | Medium | 5.5 | 2025-01-05 | A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x800… |
CVE-2025-0222 | Medium | 5.5 | 2025-01-05 | A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the… |
CVE-2025-0221 | Medium | 5.5 | 2025-01-05 | A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the lib… |
CVE-2025-0220 | Low | 2.4 | 2025-01-05 | A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part of the component Ethernet Configuration… |
CVE-2025-0219 | Low | 2.4 | 2025-01-05 | A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the comp… |
CVE-2025-0214 | Medium | 4.1 | 2025-01-04 | A vulnerability was found in TMD Custom Header Menu 4.0.0.1 on OpenCart. It has been rated as problematic. This issue affects some unknown processing of the fi… |
CVE-2025-0213 | Medium | 6.3 | 2025-01-04 | A vulnerability was found in Campcodes Project Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /fo… |
CVE-2025-0212 | Medium | 6.3 | 2025-01-04 | A vulnerability was found in Campcodes Student Grading System 1.0. It has been classified as critical. This affects an unknown part of the file /view_students… |
CVE-2025-0211 | Medium | 6.3 | 2025-01-04 | A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2025-0210 | High | 7.3 | 2025-01-04 | A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown funct… |
CVE-2025-0208 | Medium | 6.3 | 2025-01-04 | A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /summary.php. The… |
CVE-2025-0207 | High | 7.3 | 2025-01-04 | A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality… |
CVE-2025-0206 | Medium | 5.3 | 2025-01-04 | A vulnerability classified as critical was found in code-projects Online Shoe Store 1.0. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2025-0205 | Medium | 6.3 | 2025-01-04 | A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /details2.php. The ma… |
CVE-2025-0204 | Medium | 6.3 | 2025-01-04 | A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /detail… |
CVE-2025-0203 | Medium | 6.3 | 2025-01-04 | A vulnerability was found in code-projects Student Management System 1.0. It has been declared as critical. This vulnerability affects the function showSubject… |
CVE-2025-0202 | Medium | 5.5 | 2025-01-04 | A vulnerability was found in TCS BaNCS 10. It has been classified as problematic. This affects an unknown part of the file /REPORTS/REPORTS_SHOW_FILE.jsp. The… |
CVE-2025-0201 | Medium | 6.3 | 2025-01-04 | A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknow… |
CVE-2025-0200 | Medium | 6.3 | 2025-01-04 | A vulnerability has been found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this vulnerability i… |
CVE-2025-22390 | High | 7.5 | 2025-01-04 | An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS due to insufficient enforcement of p… |
CVE-2025-22389 | High | 8.0 | 2025-01-04 | An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS, where the application does not prop… |
CVE-2025-22388 | Medium | 5.7 | 2025-01-04 | An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0. A high-severity Stored Cross-Site Scripting (XSS) vulnerability exists in the CMS, all… |
CVE-2025-22387 | High | 7.5 | 2025-01-04 | An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests for resources where the session token is… |
CVE-2025-22386 | High | 7.3 | 2025-01-04 | An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity session issue exists in the Commerce B2B application, affecting th… |
CVE-2025-22385 | Medium | 5.9 | 2025-01-04 | An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created accounts, the Commerce B2B application does not require email conf… |
CVE-2025-22384 | High | 7.5 | 2025-01-04 | An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business logic exists in the Commerce B2B applica… |
CVE-2025-22383 | Medium | 4.6 | 2025-01-04 | An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity input validation issue exists in the Commerce B2B application, aff… |
CVE-2025-0199 | Medium | 6.3 | 2025-01-03 | A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Affected is an unknown functi… |
CVE-2025-22376 | Medium | 5.3 | 2025-01-03 | In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which… |
CVE-2025-0198 | Medium | 6.3 | 2025-01-03 | A vulnerability, which was classified as critical, has been found in code-projects Point of Sales and Inventory Management System 1.0. This issue affects some… |
CVE-2025-0197 | Medium | 6.3 | 2025-01-03 | A vulnerability classified as critical was found in code-projects Point of Sales and Inventory Management System 1.0. This vulnerability affects unknown code o… |
CVE-2025-0196 | Medium | 6.3 | 2025-01-03 | A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. This affects an unknown part of the… |
CVE-2025-0195 | Medium | 6.3 | 2025-01-03 | A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. Affected by this issue is some un… |
CVE-2025-21610 | Medium | 5.3 | 2025-01-03 | Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Versions prior to 2.1.12 are vulnerable to cross-site scripting when pasting mali… |
CVE-2025-21609 | Critical | 9.1 | 2025-01-03 | SiYuan is self-hosted, open source personal knowledge management software. SiYuan Note version 3.1.18 has an arbitrary file deletion vulnerability. The vulnera… |
CVE-2025-22275 | Critical | 9.3 | 2025-01-03 | iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by reading the /tmp/framer.t… |
CVE-2025-0176 | Medium | 6.3 | 2025-01-03 | A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown p… |
CVE-2025-0175 | Low | 3.5 | 2025-01-03 | A vulnerability was found in code-projects Online Shop 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view.php… |
CVE-2025-0174 | Medium | 6.3 | 2025-01-03 | A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been classified as critical. This affects an unknown part… |
CVE-2025-0173 | Medium | 6.3 | 2025-01-02 | A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2025-0172 | Medium | 6.3 | 2025-01-02 | A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2025-0171 | Medium | 6.3 | 2025-01-02 | A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/deleteuser.ph… |
CVE-2025-22214 | Medium | 4.3 | 2025-01-02 | Landray EIS 2001 through 2006 allows Message/fi_message_receiver.aspx?replyid= SQL injection. |
CVE-2025-0168 | Medium | 6.3 | 2025-01-01 | A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. This affects an unknown part of the file /_parse/_feedback_system.p… |