2025 CVEs (page 76)
Page 76 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-13747 | Medium | 6.4 | 2025-12-12 | The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a regex bypass in nsp_shortcode function in all versions up to, and incl… |
CVE-2025-13440 | Medium | 5.3 | 2025-12-12 | The Premmerce Wishlist for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.1.10. This is due to… |
CVE-2025-13408 | Medium | 4.3 | 2025-12-12 | The Foxtool All-in-One: Contact chat button, Custom login, Media optimize images plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio… |
CVE-2025-13366 | Medium | 4.3 | 2025-12-12 | The Rabbit Hole plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect… |
CVE-2025-13363 | Medium | 4.3 | 2025-12-12 | The IMAQ Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing nonce valida… |
CVE-2025-13334 | High | 8.1 | 2025-12-12 | The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized database resets and file deletion due to a missing capability check on the "blaze_de… |
CVE-2025-13320 | Medium | 6.8 | 2025-12-12 | The WP User Manager plugin for WordPress is vulnerable to Arbitrary File Deletion in all versions up to, and including, 2.9.12. This is due to insufficient val… |
CVE-2025-13314 | Medium | 5.3 | 2025-12-12 | The Product Filtering by Categories, Tags, Price Range for WooCommerce – Filter Plus plugin for WordPress is vulnerable to unauthorized modification of data in… |
CVE-2025-12968 | High | 8.8 | 2025-12-12 | The Infility Global plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and capability checks in all versions up t… |
CVE-2025-12963 | Critical | 9.8 | 2025-12-12 | The LazyTasks – Project & Task Management with Collaboration, Kanban and Gantt Chart plugin for WordPress is vulnerable to privilege escalation via account tak… |
CVE-2025-12883 | Medium | 5.3 | 2025-12-12 | The Campay Woocommerce Payment Gateway plugin for WordPress is vulnerable to Unauthenticated Payment Bypass in all versions up to, and including, 1.2.2. This i… |
CVE-2025-12834 | Medium | 6.1 | 2025-12-12 | The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failure_message' parameter in ver… |
CVE-2025-12830 | Medium | 6.4 | 2025-12-12 | The Better Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider widget in all versions up to, and including, 1.5.5… |
CVE-2025-12824 | High | 8.8 | 2025-12-12 | The Player Leaderboard plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0.2 via the 'player_leaderboard' shor… |
CVE-2025-12783 | Medium | 4.3 | 2025-12-12 | The Premmerce Brands for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveBrand… |
CVE-2025-12650 | Medium | 6.4 | 2025-12-12 | The Simple post listing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class_name' parameter in the postlist shortcode in all versi… |
CVE-2025-13886 | High | 7.5 | 2025-12-12 | The LT Unleashed plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.1 via the 'template' parameter in the `bo… |
CVE-2025-13839 | Medium | 6.4 | 2025-12-12 | The LJUsers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter of the 'ljuser' shortcode in all versions up to, and inc… |
CVE-2025-13670 | Medium | 6.7 | 2025-12-12 | The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability |
CVE-2025-13669 | Medium | 6.7 | 2025-12-12 | Uncontrolled Search Path Element vulnerability in Altera High Level Synthesis Compiler on Windows allows Search Order Hijacking.This issue affects High Level S… |
CVE-2025-13665 | Medium | 6.7 | 2025-12-12 | The System Console Utility for Windows is vulnerable to a DLL planting vulnerability |
CVE-2025-13053 | Low | 3.7 | 2025-12-12 | When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certificate verification can allow an attacker able to intercept n… |
CVE-2025-13052 | Medium | 5.9 | 2025-12-12 | When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can… |
CVE-2025-10451 | High | 8.2 | 2025-12-12 | Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption. |
CVE-2025-67779 | High | 7.5 | 2025-12-12 | It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific cas… |
CVE-2025-67780 | Medium | 4.2 | 2025-12-11 | SpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 (e.g., on Mini1_prod2) allow administrative actions via unauthenticated LAN gRPC requests, aka MA… |
CVE-2025-66452 | Medium | 6.1 | 2025-12-11 | LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON parsing errors; SyntaxError from express.json(… |
CVE-2025-66451 | Medium | 6.5 | 2025-12-11 | LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when creating prompts, JSON requests are sent to define and modify the prom… |
CVE-2025-66450 | Medium | 5.4 | 2025-12-11 | LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when a user posts a question, the iconURL parameter of the POST request can… |
CVE-2025-66446 | High | 8.8 | 2025-12-11 | MaxKB is an open-source AI assistant for enterprise. Versions 2.3.1 and below have improper file permissions which allow attackers to overwrite the built-in dy… |
CVE-2025-66419 | High | 8.8 | 2025-12-11 | MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and esca… |
CVE-2025-64721 | Critical | 10.0 | 2025-12-11 | Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.6 and below, the SYSTEM-level servic… |
CVE-2025-34506 | High | 8.8 | 2025-12-11 | WBCE CMS version 1.6.3 and prior contains an authenticated remote code execution vulnerability that allows administrators to upload malicious modules. Attacker… |
CVE-2025-34504 | Medium | 6.1 | 2025-12-11 | KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft m… |
CVE-2025-34499 | | 2025-12-11 | AnyDesk 7.0.15 and 9.0.1 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated SYSTE… | |
CVE-2025-13668 | Medium | 6.7 | 2025-12-11 | A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege. |
CVE-2025-66590 | High | 7.8 | 2025-12-11 | In AzeoTech DAQFactory release 20.7 (Build 2555), an out-of-bounds write vulnerability can be exploited by an attacker to cause the program to write data past… |
CVE-2025-66589 | Critical | 9.1 | 2025-12-11 | In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past th… |
CVE-2025-66588 | High | 7.8 | 2025-12-11 | In AzeoTech DAQFactory release 20.7 (Build 2555), an access of uninitialized pointer vulnerability can be exploited by an attacker which can lead to arbitrary… |
CVE-2025-66586 | High | 7.8 | 2025-12-11 | In AzeoTech DAQFactory release 20.7 (Build 2555), an access of resource using incompatible type vulnerability can be exploited to cause memory corruption while… |
CVE-2025-66585 | High | 7.8 | 2025-12-11 | In AzeoTech DAQFactory release 20.7 (Build 2555), a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .c… |
CVE-2025-66429 | High | 8.8 | 2025-12-11 | An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. T… |
CVE-2025-64702 | Medium | 5.3 | 2025-12-11 | quic-go is an implementation of the QUIC protocol in Go. Versions 0.56.0 and below are vulnerable to excessive memory allocation through quic-go's HTTP/3 clien… |
CVE-2025-55816 | Medium | 6.1 | 2025-12-11 | HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file. |
CVE-2025-14538 | Low | 3.5 | 2025-12-11 | A security vulnerability has been detected in yangshare warehouseManager 仓库管理系统 1.1.0. This affects the function addCustomer of the file CustomerManageHandler… |
CVE-2025-14537 | High | 7.3 | 2025-12-11 | A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /prev… |
CVE-2025-14293 | Medium | 6.5 | 2025-12-11 | The WP Job Portal plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.4.0 via the 'downloadCustomUploadedFile' fu… |
CVE-2025-13664 | Medium | 6.7 | 2025-12-11 | A potential security vulnerability in Quartus® Prime Standard Edition Design Software may allow escalation of privilege. |
CVE-2025-13663 | Medium | 6.7 | 2025-12-11 | Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the tar… |
CVE-2025-55184 | High | 7.5 | 2025-12-11 | A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, inclu… |
CVE-2025-55183 | Medium | 5.3 | 2025-12-11 | An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2… |
CVE-2025-36938 | Medium | 6.8 | 2025-12-11 | In U-Boot of append_uint32_le(), there is a possible fault injection due to a logic error in the code. This could lead to physical escalation of privilege with… |
CVE-2025-36937 | Critical | 9.8 | 2025-12-11 | In AudioDecoder::HandleProduceRequest of audio_decoder.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote… |
CVE-2025-36936 | High | 7.8 | 2025-12-11 | In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of pri… |
CVE-2025-36935 | High | 7.8 | 2025-12-11 | In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privi… |
CVE-2025-36934 | High | 7.4 | 2025-12-11 | In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escal… |
CVE-2025-36932 | High | 7.8 | 2025-12-11 | In tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, there is a possible memory overwrite due to improper input validation. This could lead… |
CVE-2025-36931 | High | 7.8 | 2025-12-11 | In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with… |
CVE-2025-36930 | High | 7.8 | 2025-12-11 | In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with… |
CVE-2025-36929 | Medium | 5.5 | 2025-12-11 | In AreFencesRegistered of gxp_fence_manager.cc, there is a possible information leak due to improper input validation. This could lead to local information dis… |
CVE-2025-36928 | High | 7.8 | 2025-12-11 | In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege w… |
CVE-2025-36927 | High | 7.8 | 2025-12-11 | In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of… |
CVE-2025-36925 | High | 7.8 | 2025-12-11 | In WAVES_send_data_to_dsp of libaoc_waves.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… |
CVE-2025-36924 | High | 8.0 | 2025-12-11 | In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remot… |
CVE-2025-36923 | High | 8.0 | 2025-12-11 | In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to re… |
CVE-2025-36922 | Medium | 6.7 | 2025-12-11 | In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege in the OS Ke… |
CVE-2025-36921 | Medium | 5.5 | 2025-12-11 | In ProtocolPsUnthrottleApn() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati… |
CVE-2025-36919 | High | 7.8 | 2025-12-11 | In aocc_read of aoc_channel_dev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional… |
CVE-2025-36918 | High | 7.8 | 2025-12-11 | In aoc_service_read_message of aoc_ipc_core.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of… |
CVE-2025-36917 | Medium | 6.5 | 2025-12-11 | In SwDcpItg of up_L2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check. This could lead to remote denial of service… |
CVE-2025-36916 | High | 7.0 | 2025-12-11 | In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of privilege with… |
CVE-2025-36912 | Medium | 6.5 | 2025-12-11 | In cellular modem, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execu… |
CVE-2025-36889 | Medium | 5.5 | 2025-12-11 | In onCreateTasks of CameraActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with n… |
CVE-2025-14536 | High | 7.3 | 2025-12-11 | A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-14535 | Critical | 9.8 | 2025-12-11 | A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. The manipulat… |
CVE-2025-13481 | High | 8.8 | 2025-12-11 | IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to impro… |
CVE-2025-13214 | High | 7.6 | 2025-12-11 | IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow th… |
CVE-2025-13211 | Medium | 5.3 | 2025-12-11 | IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to cause a denial of service in the email service due to improper control of inte… |
CVE-2025-13148 | High | 8.1 | 2025-12-11 | IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that pass… |
CVE-2025-56130 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH_3.0(1)B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to… |
CVE-2025-56129 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_diagnos… |
CVE-2025-56127 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the get_wanobj in… |
CVE-2025-56124 | High | 7.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST req… |
CVE-2025-56123 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a craft… |
CVE-2025-56122 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST… |
CVE-2025-56120 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST req… |
CVE-2025-56118 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST req… |
CVE-2025-56117 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the mod… |
CVE-2025-56114 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to t… |
CVE-2025-56113 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP_3.0(1)B11P280YST250F V1.xxV2.xx allowing attackers to execute arbitrary commands via a crafted P… |
CVE-2025-56111 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the network_set_wa… |
CVE-2025-56110 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_deal_up… |
CVE-2025-56109 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_wireles… |
CVE-2025-56108 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwd… |
CVE-2025-56107 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the submit_wifi i… |
CVE-2025-56106 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request… |
CVE-2025-56102 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request… |
CVE-2025-56101 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to t… |
CVE-2025-56099 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie RG-YST AP_3.0(1)B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the… |
CVE-2025-56098 | High | 8.8 | 2025-12-11 | OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the mod… |