93,331 indexed
CVECVE vulnerabilities
93,331 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,451–7,500 of 8,161 in High · page 150 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-1388 | CVE-2025-1388 CVSS 8.8 | Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells |
| CVE-2025-13871 | CVE-2025-13871 CVSS 8.8objectplanet | Cross-Site Request Forgery (CSRF) in the resource-management feature of ObjectPlanet Opinio 7.26 rev12562 allows to upload files on behalf of the connecte… |
| CVE-2025-13855 | CVE-2025-13855 CVSS 8.8 | IBM Storage Protect Server 8.2.0 IBM Storage Protect Plus Server is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements,… |
| CVE-2025-13816 | CVE-2025-13816 CVSS 6.3mogublog_project | A security vulnerability has been detected in moxi159753 Mogu Blog v2 up to 5.2. The impacted element is the function FileOperation.unzip of the file /networkD… |
| CVE-2025-13813 | CVE-2025-13813 CVSS 5.6mogublog_project | A vulnerability was identified in moxi159753 Mogu Blog v2 up to 5.2. This issue affects some unknown processing of the file /storage/ of the component Storage … |
| CVE-2025-13808 | CVE-2025-13808 CVSS 7.3orionsec | A flaw has been found in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1. Affected by this vulnerability is the function update of the file o… |
| CVE-2025-13790 | CVE-2025-13790 CVSS 4.3scada-lts | A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function. This manipulation causes cross-site request forgery. The attack ma… |
| CVE-2025-13780 | CVE-2025-13780 CVSS 9.1pgadmin | pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PL… |
| CVE-2025-13779 | CVE-2025-13779 CVSS 8.3 | Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW12… |
| CVE-2025-13777 | CVE-2025-13777 CVSS 8.3 | Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.… |
| CVE-2025-13774 | CVE-2025-13774 CVSS 8.8 | A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.4 and 13.0.1 where an SQL injection vulnerability allows authenticated users to execute u… |
| CVE-2025-13768 | CVE-2025-13768 CVSS 7.5uniong | WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying … |
| CVE-2025-13757 | CVE-2025-13757 CVSS 8.8 | SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.3.8. |
| CVE-2025-13720 | CVE-2025-13720 CVSS 8.8google | Bad cast in Loader in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corru… |
| CVE-2025-13689 | CVE-2025-13689 CVSS 8.8 | IBM DataStage on Cloud Pak for Data could allow an authenticated user to execute arbitrary commands and gain access to sensitive information due to unrestricte… |
| CVE-2025-13688 | CVE-2025-13688 CVSS 8.8 | IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the syst… |
| CVE-2025-13687 | CVE-2025-13687 CVSS 8.8 | IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the syst… |
| CVE-2025-13686 | CVE-2025-13686 CVSS 8.8 | IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the syst… |
| CVE-2025-13680 | CVE-2025-13680 CVSS 8.8 | The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the plugin allowing a user to… |
| CVE-2025-13661 | CVE-2025-13661 CVSS 7.1ivanti | Path traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote authenticated attacker to write arbitrary files outside of the intended… |
| CVE-2025-13659 | CVE-2025-13659 CVSS 8.8ivanti | Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote, unauthenticated attacker to wr… |
| CVE-2025-13641 | CVE-2025-13641 CVSS 8.8 | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and includi… |
| CVE-2025-13639 | CVE-2025-13639 CVSS 8.1google | Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML pag… |
| CVE-2025-13638 | CVE-2025-13638 CVSS 8.8google | Use after free in Media Stream in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
| CVE-2025-13633 | CVE-2025-13633 CVSS 8.8google | Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially… |
| CVE-2025-13631 | CVE-2025-13631 CVSS 8.8google | Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a c… |
| CVE-2025-13630 | CVE-2025-13630 CVSS 8.8 | Type Confusion in V8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
| CVE-2025-13614 | CVE-2025-13614 CVSS 8.1 | The Cool Tag Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cool_tag_cloud' shortcode in all versions up to, and inc… |
| CVE-2025-13609 | CVE-2025-13609 CVSS 8.2 | A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TP… |
| CVE-2025-13603 | CVE-2025-13603 CVSS 8.8 | The WP AUDIO GALLERY plugin for WordPress is vulnerable to Unauthorized Arbitrary File Read in all versions up to, and including, 2.0. This is due to insuffici… |
| CVE-2025-13581 | CVE-2025-13581 CVSS 6.3facebook-julykringcadayona | A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /schedule… |
| CVE-2025-13580 | CVE-2025-13580 CVSS 6.3code-projects | A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID… |
| CVE-2025-13579 | CVE-2025-13579 CVSS 6.3code-projects | A vulnerability was found in code-projects Library System 1.0. This impacts an unknown function of the file /return.php. The manipulation of the argument ID re… |
| CVE-2025-13576 | CVE-2025-13576 CVSS 6.3fabian | A vulnerability was detected in code-projects Blog Site 1.0. The affected element is an unknown function of the file /admin.php. Performing manipulation result… |
| CVE-2025-13575 | CVE-2025-13575 CVSS 6.3fabian | A security vulnerability has been detected in code-projects Blog Site 1.0. Impacted is the function category_exists of the file /resources/functions/blog.php o… |
| CVE-2025-13573 | CVE-2025-13573 CVSS 6.3projectworlds | A security flaw has been discovered in projectworlds can pass malicious payloads up to 1.0. This vulnerability affects unknown code of the file /add_book.php. … |
| CVE-2025-13571 | CVE-2025-13571 CVSS 6.3fabian | A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /listorder.ph… |
| CVE-2025-13570 | CVE-2025-13570 CVSS 6.3angeljudesuarez | A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=state.… |
| CVE-2025-13569 | CVE-2025-13569 CVSS 6.3angeljudesuarez | A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/?page=city. Such manipulation of t… |
| CVE-2025-13568 | CVE-2025-13568 CVSS 6.3angeljudesuarez | A flaw has been found in itsourcecode COVID Tracking System 1.0. This impacts an unknown function of the file /admin/?page=people. This manipulation of the arg… |
| CVE-2025-13567 | CVE-2025-13567 CVSS 6.3angeljudesuarez | A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This affects an unknown function of the file /admin/?page=establishment. The manipulati… |
| CVE-2025-13553 | CVE-2025-13553 CVSS 8.8 | A weakness has been identified in D-Link DWR-M920 1.1.50. This affects the function sub_41C7FC of the file /boafrm/formPinManageSetup. This manipulation of the… |
| CVE-2025-13552 | CVE-2025-13552 CVSS 8.8 | A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm… |
| CVE-2025-13551 | CVE-2025-13551 CVSS 8.8 | A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The affected element is an unknown function of the file /boafrm/form… |
| CVE-2025-13550 | CVE-2025-13550 CVSS 8.8 | A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Impacted is an unknown function of the file /boafrm/formVpnConfigSet… |
| CVE-2025-13549 | CVE-2025-13549 CVSS 8.8 | A vulnerability was found in D-Link DIR-822K 1.00. This issue affects the function sub_455524 of the file /boafrm/formNtp. Performing manipulation of the argum… |
| CVE-2025-13548 | CVE-2025-13548 CVSS 8.8 | A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This vulnerability affects unknown code of the file /boafrm/formFire… |
| CVE-2025-13547 | CVE-2025-13547 CVSS 8.8 | A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This affects an unknown part of the file /boafrm/formDdns. This manipulation … |
| CVE-2025-13543 | CVE-2025-13543 CVSS 8.8 | The PostGallery plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'PostGalleryUploader' class functions… |
| CVE-2025-13536 | CVE-2025-13536 CVSS 8.8 | The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and includi… |