93,331 indexed
CVECVE vulnerabilities
93,331 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,201–7,250 of 8,161 in High · page 145 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-2007 | CVE-2025-2007 CVSS 8.1 | The Import Export Suite for CSV and XML Datafeed plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the … |
| CVE-2025-2006 | CVE-2025-2006 CVSS 8.8 | The Inline Image Upload for BBPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the file uploading… |
| CVE-2025-20046 | CVE-2025-20046 CVSS 8.0 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial… |
| CVE-2025-20029 | CVE-2025-20029 CVSS 8.8 | Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitra… |
| CVE-2025-20018 | CVE-2025-20018 CVSS 8.4 | Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2025-20003 | CVE-2025-20003 CVSS 8.2 | Improper link resolution before file access ('Link Following') for some Intel(R) Graphics Driver software installers may allow an authenticated user to potenti… |
| CVE-2025-1943 | CVE-2025-1943 CVSS 8.2 | Memory safety bugs present in Firefox 135 and Thunderbird 135. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s… |
| CVE-2025-1932 | CVE-2025-1932 CVSS 8.1mozilla | An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This … |
| CVE-2025-1930 | CVE-2025-1930 CVSS 8.8mozilla | On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led t… |
| CVE-2025-1924 | CVE-2025-1924 CVSS 8.2 | A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receive maliciously crafted packets,… |
| CVE-2025-1920 | CVE-2025-1920 CVSS 8.8 | Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
| CVE-2025-1919 | CVE-2025-1919 CVSS 8.8 | Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted … |
| CVE-2025-1918 | CVE-2025-1918 CVSS 8.8 | Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted… |
| CVE-2025-1916 | CVE-2025-1916 CVSS 8.8 | Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exp… |
| CVE-2025-1915 | CVE-2025-1915 CVSS 8.1 | Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a … |
| CVE-2025-1914 | CVE-2025-1914 CVSS 8.8 | Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chr… |
| CVE-2025-1855 | CVE-2025-1855 CVSS 8.8 | A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionalit… |
| CVE-2025-1854 | CVE-2025-1854 CVSS 8.8 | A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/adm… |
| CVE-2025-1851 | CVE-2025-1851 CVSS 8.8 | A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of the file /goform/S… |
| CVE-2025-1849 | CVE-2025-1849 CVSS 8.8 | A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is an unknown functionality of the file /import_data… |
| CVE-2025-1848 | CVE-2025-1848 CVSS 8.8 | A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the file /import_data_check. The manipulati… |
| CVE-2025-1847 | CVE-2025-1847 CVSS 8.8 | A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to impro… |
| CVE-2025-1833 | CVE-2025-1833 CVSS 8.8 | A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. Affected by this issue is the function sendNotice of the file src/… |
| CVE-2025-1832 | CVE-2025-1832 CVSS 8.8 | A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the function getUserList of the file src/main/jav… |
| CVE-2025-1829 | CVE-2025-1829 CVSS 8.8 | A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the… |
| CVE-2025-1828 | CVE-2025-1828 CVSS 8.8 | Crypt::Random Perl package 1.05 through 1.55 may use rand() function, which is not cryptographically strong, for cryptographic functions. If the Provider is n… |
| CVE-2025-1820 | CVE-2025-1820 CVSS 8.8 | A vulnerability has been found in zj1983 zz up to 2024-8 and classified as critical. Affected by this vulnerability is the function getOaWid of the file src/ma… |
| CVE-2025-1812 | CVE-2025-1812 CVSS 8.8 | A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/S… |
| CVE-2025-1801 | CVE-2025-1801 CVSS 8.1 | A flaw was found in the Ansible aap-gateway. Concurrent requests handled by the gateway grpc service can result in concurrency issues due to race condition req… |
| CVE-2025-1800 | CVE-2025-1800 CVSS 8.8 | A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_details of the file /view… |
| CVE-2025-1796 | CVE-2025-1796 CVSS 8.8 | A vulnerability in langgenius/dify v0.10.1 allows an attacker to take over any account, including administrator accounts, by exploiting a weak pseudo-random nu… |
| CVE-2025-1785 | CVE-2025-1785 CVSS 8.1 | The Download Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.08 via the 'wpdm_newfile' action. This… |
| CVE-2025-1770 | CVE-2025-1770 CVSS 8.8 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and incl… |
| CVE-2025-1763 | CVE-2025-1763 CVSS 8.7 | An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific con… |
| CVE-2025-1758 | CVE-2025-1758 CVSS 8.8 | Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: * LoadMaster: 7.2.40.0 and above * ECS: All versio… |
| CVE-2025-1727 | CVE-2025-1727 CVSS 8.1 | The protocol used for remote linking over RF for End-of-Train and Head-of-Train (also known as a FRED) relies on a BCH checksum for packet creation. It is po… |
| CVE-2025-1723 | CVE-2025-1723 CVSS 8.1 | Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in th… |
| CVE-2025-1717 | CVE-2025-1717 CVSS 8.1 | The Login Me Now plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.2. This is due to insecure authentication ba… |
| CVE-2025-1712 | CVE-2025-1712 CVSS 8.8 | Argument injection in special agent configuration in Checkmk <2.4.0p1, <2.3.0p32, <2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary files |
| CVE-2025-1707 | CVE-2025-1707 CVSS 8.8 | The Review Schema plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.4 via post meta. This makes it possible … |
| CVE-2025-1692 | CVE-2025-1692 CVSS 8.8 | The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text … |
| CVE-2025-1687 | CVE-2025-1687 CVSS 8.8 | The Cardealer theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.4. This is due to missing nonce validation … |
| CVE-2025-1682 | CVE-2025-1682 CVSS 8.8 | The Cardealer theme for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.4 due to missing capability check on the 'save_se… |
| CVE-2025-1674 | CVE-2025-1674 CVSS 8.2 | A lack of input validation allows for out of bounds reads caused by malicious or malformed packets. |
| CVE-2025-1673 | CVE-2025-1673 CVSS 8.2 | A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation. |
| CVE-2025-1657 | CVE-2025-1657 CVSS 8.8 | The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to unauthorized modification of data and PHP Object Injection due to a mi… |
| CVE-2025-1653 | CVE-2025-1653 CVSS 8.8 | The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.2.0. This… |
| CVE-2025-1643 | CVE-2025-1643 CVSS 8.8 | A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been rated as problematic. This issue affects some unknown processing of the file /DadosPess… |
| CVE-2025-1639 | CVE-2025-1639 CVSS 8.8 | The Animation Addons for Elementor Pro plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on th… |
| CVE-2025-1594 | CVE-2025-1594 CVSS 8.8 | A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc… |