93,331 indexed
CVECVE vulnerabilities
93,331 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,301–7,350 of 8,161 in High · page 147 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-15275 | CVE-2025-15275 CVSS 8.8 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
| CVE-2025-15274 | CVE-2025-15274 CVSS 8.8 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
| CVE-2025-15273 | CVE-2025-15273 CVSS 8.8 | FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary cod… |
| CVE-2025-15272 | CVE-2025-15272 CVSS 8.8 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
| CVE-2025-15271 | CVE-2025-15271 CVSS 8.8 | FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
| CVE-2025-15270 | CVE-2025-15270 CVSS 8.8 | FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
| CVE-2025-15269 | CVE-2025-15269 CVSS 8.8 | FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
| CVE-2025-15254 | CVE-2025-15254 CVSS 8.8 | A vulnerability was found in Tenda W6-S 1.0.0.4(510). This affects the function TendaAte of the file /goform/ate of the component ATE Service. Performing a man… |
| CVE-2025-15253 | CVE-2025-15253 CVSS 8.8 | A vulnerability has been found in Tenda M3 1.0.0.13(4903). The impacted element is an unknown function of the file /goform/exeCommand. Such manipulation of the… |
| CVE-2025-15252 | CVE-2025-15252 CVSS 8.8 | A flaw has been found in Tenda M3 1.0.0.13(4903). The affected element is the function formSetRemoteDhcpForAp of the file /goform/setDhcpAP. This manipulation … |
| CVE-2025-15240 | CVE-2025-15240 CVSS 8.8quantatw | QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload a… |
| CVE-2025-15234 | CVE-2025-15234 CVSS 8.8tenda | A weakness has been identified in Tenda M3 1.0.0.13(4903). Impacted is the function formSetRemoteInternetLanInfo of the file /goform/setInternetLanInfo. This m… |
| CVE-2025-15233 | CVE-2025-15233 CVSS 8.8tenda | A security flaw has been discovered in Tenda M3 1.0.0.13(4903). This issue affects the function formSetAdInfoDetails of the file /goform/setAdInfoDetail. The m… |
| CVE-2025-15232 | CVE-2025-15232 CVSS 8.8tenda | A vulnerability was identified in Tenda M3 1.0.0.13(4903). This vulnerability affects the function formSetAdPushInfo of the file /goform/setAdPushInfo. The man… |
| CVE-2025-15231 | CVE-2025-15231 CVSS 8.8tenda | A vulnerability was determined in Tenda M3 1.0.0.13(4903). This affects the function formSetRemoteVlanInfo of the file /goform/setVlanInfo. Executing a manipul… |
| CVE-2025-15230 | CVE-2025-15230 CVSS 8.8tenda | A vulnerability was found in Tenda M3 1.0.0.13(4903). Affected by this issue is the function formSetVlanPolicy of the file /goform/setVlanPolicyData. Performin… |
| CVE-2025-15218 | CVE-2025-15218 CVSS 8.8tenda | A weakness has been identified in Tenda AC10U 15.03.06.48/15.03.06.49. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSe… |
| CVE-2025-15217 | CVE-2025-15217 CVSS 8.8tenda | A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler. Perform… |
| CVE-2025-15216 | CVE-2025-15216 CVSS 8.8tenda | A vulnerability was identified in Tenda AC23 16.03.07.52. This impacts the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the… |
| CVE-2025-15215 | CVE-2025-15215 CVSS 8.8tenda | A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49. This affects the function formSetPPTPUserList of the file /goform/setPptpUserList of the… |
| CVE-2025-15205 | CVE-2025-15205 CVSS 6.3fabian | A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /dow… |
| CVE-2025-1520 | CVE-2025-1520 CVSS 8.0 | PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary… |
| CVE-2025-15199 | CVE-2025-15199 CVSS 6.3code-projects | A security vulnerability has been detected in code-projects College Notes Uploading System 1.0. Impacted is an unknown function of the file /dashboard/userprof… |
| CVE-2025-15193 | CVE-2025-15193 CVSS 8.8dlink | A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. This affects the function sub_423848 of the file /boafrm/formParentControl. Performing manipulati… |
| CVE-2025-15192 | CVE-2025-15192 CVSS 6.3dlink | A security vulnerability has been detected in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_415328 of the file /boafrm/formLtefotaUpgr… |
| CVE-2025-15191 | CVE-2025-15191 CVSS 6.3dlink | A weakness has been identified in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_4155B4 of the file /boafrm/formLtefotaUpgradeFibocom. … |
| CVE-2025-15190 | CVE-2025-15190 CVSS 8.8dlink | A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50. Impacted is the function sub_42261C of the file /boafrm/formFilter. The manipulation of th… |
| CVE-2025-15189 | CVE-2025-15189 CVSS 8.8dlink | A vulnerability was identified in D-Link DWR-M920 up to 1.1.50. This issue affects the function sub_464794 of the file /boafrm/formDefRoute. The manipulation o… |
| CVE-2025-15158 | CVE-2025-15158 CVSS 8.8 | The WP Enable WebP plugin for WordPress is vulnerable to arbitrary file uploads due to improper file type validation in the 'wpse_file_and_ext_webp' function i… |
| CVE-2025-15157 | CVE-2025-15157 CVSS 8.8 | The Starfish Review Generation & Marketing for WordPress plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege esc… |
| CVE-2025-15139 | CVE-2025-15139 CVSS 6.3trendnet | A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06. This affects the function sub_43ACF4 of the file /boafrm/formWsc. Such manipulation of … |
| CVE-2025-15137 | CVE-2025-15137 CVSS 8.8trendnet | A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function sub_F934 of the file NTPSyncWithHost.cgi. The manip… |
| CVE-2025-15136 | CVE-2025-15136 CVSS 8.8trendnet | A security vulnerability has been detected in TRENDnet TEW-800MB 1.0.1.0. Affected is the function do_setWizard_asp of the file /goform/wizardset of the compon… |
| CVE-2025-15133 | CVE-2025-15133 CVSS 6.3zspace | A vulnerability was identified in ZSPACE Z4Pro+ 1.0.0440024. The impacted element is the function zfilev2_api_CloseSafe of the file /v2/file/safe/close of the … |
| CVE-2025-15132 | CVE-2025-15132 CVSS 6.3zspace | A vulnerability was determined in ZSPACE Z4Pro+ 1.0.0440024. The affected element is the function zfilev2_api_open of the file /v2/file/safe/open of the compon… |
| CVE-2025-15131 | CVE-2025-15131 CVSS 6.3zspace | A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2_api_SafeStatus of the file /v2/file/safe/status of the component HTTP … |
| CVE-2025-15107 | CVE-2025-15107 CVSS 3.7actionsky | A security vulnerability has been detected in actiontech sqle up to 4.2511.0. The impacted element is an unknown function of the file sqle/utils/jwt.go of the … |
| CVE-2025-15101 | CVE-2025-15101 CVSS 8.8 | An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to execute arbit… |
| CVE-2025-15100 | CVE-2025-15100 CVSS 8.8 | The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03. This is due to the plugin all… |
| CVE-2025-15096 | CVE-2025-15096 CVSS 8.8 | The 'Videospirecore Theme Plugin' plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.6. … |
| CVE-2025-15085 | CVE-2025-15085 CVSS 4.3youlai | A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.0. This affects the function deductBalance of the file mall-ums/ums-boot/src/main/java/… |
| CVE-2025-15050 | CVE-2025-15050 CVSS 8.8 | A security vulnerability has been detected in code-projects Student File Management System 1.0. This affects an unknown part of the file /save_file.php. Such m… |
| CVE-2025-15025 | CVE-2025-15025 CVSS 8.8 | Authorization bypass through User-Controlled key vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade … |
| CVE-2025-15024 | CVE-2025-15024 CVSS 8.8 | Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry a… |
| CVE-2025-15023 | CVE-2025-15023 CVSS 8.8 | Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation S… |
| CVE-2025-15009 | CVE-2025-15009 CVSS 8.8 | A flaw has been found in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function FilenameUtils.getExtension of the file /dev-api/common/upload… |
| CVE-2025-15004 | CVE-2025-15004 CVSS 8.8 | A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelist_main.php. The manipulation of the argument orde… |
| CVE-2025-1500 | CVE-2025-1500 CVSS 8.0 | IBM Maximo Application Suite 9.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened. |
| CVE-2025-14997 | CVE-2025-14997 CVSS 8.8 | The BuddyPress Xprofile Custom Field Types plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delet… |
| CVE-2025-14995 | CVE-2025-14995 CVSS 8.8tenda | A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument… |