93,331 indexed
CVECVE vulnerabilities
93,331 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,501–7,550 of 8,161 in High · page 151 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-13534 | CVE-2025-13534 CVSS 8.8 | The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.2.… |
| CVE-2025-13516 | CVE-2025-13516 CVSS 8.1 | The SureMail – SMTP and Email Logs Plugin for WordPress is vulnerable to Unrestricted Upload of File with Dangerous Type in versions up to and including 1.9.0.… |
| CVE-2025-13506 | CVE-2025-13506 CVSS 8.8 | Execution with Unnecessary Privileges vulnerability in Nebim Neyir Computer Industry and Services Inc. Nebim V3 ERP allows Expanding Control over the Operating… |
| CVE-2025-13481 | CVE-2025-13481 CVSS 8.8ibm | IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to impro… |
| CVE-2025-13468 | CVE-2025-13468 CVSS 8.1 | A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete_forum/delete_career/delete_comment/delete… |
| CVE-2025-13435 | CVE-2025-13435 CVSS 8.1 | A security vulnerability has been detected in Dreampie Resty up to 1.3.1.SNAPSHOT. This affects the function Request of the file /resty-httpclient/src/main/jav… |
| CVE-2025-13417 | CVE-2025-13417 CVSS 8.6 | The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perfor… |
| CVE-2025-1341 | CVE-2025-1341 CVSS 8.1 | A vulnerability, which was classified as problematic, was found in PMWeb 7.2.0. This affects an unknown part of the component Setting Handler. The manipulation… |
| CVE-2025-1340 | CVE-2025-1340 CVSS 8.8 | A vulnerability classified as critical has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected is the function setPasswordCfg of the file /cgi-bin/cste… |
| CVE-2025-13399 | CVE-2025-13399 CVSS 8.8 | A weakness in the web interface’s application layer encryption in VX800v v1.0 allows an adjacent attacker to brute force the weak AES key and decrypt intercept… |
| CVE-2025-1339 | CVE-2025-1339 CVSS 8.8 | A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been rated as critical. This issue affects the function setL2tpdConfig of the file /cg… |
| CVE-2025-13379 | CVE-2025-13379 CVSS 8.6 | IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the att… |
| CVE-2025-13377 | CVE-2025-13377 CVSS 8.1 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficien… |
| CVE-2025-13371 | CVE-2025-13371 CVSS 8.6 | The MoneySpace plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.13.9. This is due to the plugin sto… |
| CVE-2025-1336 | CVE-2025-1336 CVSS 8.1 | A vulnerability has been found in CmsEasy 7.7.7.9 and classified as problematic. Affected by this vulnerability is the function deleteimg_action in the library… |
| CVE-2025-1335 | CVE-2025-1335 CVSS 8.1 | A vulnerability, which was classified as problematic, was found in CmsEasy 7.7.7.9. Affected is the function deleteimg_action in the library lib/admin/file_adm… |
| CVE-2025-13347 | CVE-2025-13347 CVSS 8.8 | A flaw has been found in SourceCodester Train Station Ticketing System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=save_user. Exe… |
| CVE-2025-13346 | CVE-2025-13346 CVSS 8.8 | A vulnerability was detected in SourceCodester Train Station Ticketing System 1.0. This affects an unknown part of the file /ajax.php?action=save_station. Perf… |
| CVE-2025-13345 | CVE-2025-13345 CVSS 8.8 | A security vulnerability has been detected in SourceCodester Train Station Ticketing System 1.0. Affected by this issue is some unknown functionality of the fi… |
| CVE-2025-13334 | CVE-2025-13334 CVSS 8.1 | The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized database resets and file deletion due to a missing capability check on the "blaze_de… |
| CVE-2025-13325 | CVE-2025-13325 CVSS 8.8 | A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollment_edit1.php. E… |
| CVE-2025-13322 | CVE-2025-13322 CVSS 8.1 | The WP AUDIO GALLERY plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in all versions up to, and includin… |
| CVE-2025-13319 | CVE-2025-13319 CVSS 8.8 | An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted… |
| CVE-2025-13316 | CVE-2025-13316 CVSS 8.1 | Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypt… |
| CVE-2025-13306 | CVE-2025-13306 CVSS 8.8 | A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /boafrm/formD… |
| CVE-2025-13304 | CVE-2025-13304 CVSS 8.8 | A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of th… |
| CVE-2025-13290 | CVE-2025-13290 CVSS 6.3fabian | A vulnerability has been found in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /saveorder.ph… |
| CVE-2025-13289 | CVE-2025-13289 CVSS 6.31000projects | A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /Teach… |
| CVE-2025-13288 | CVE-2025-13288 CVSS 8.8 | A security vulnerability has been detected in Tenda CH22 1.0.0.1. This impacts the function fromPptpUserSetting of the file /goform/PPTPUserSetting. The manipu… |
| CVE-2025-13287 | CVE-2025-13287 CVSS 6.3angeljudesuarez | A weakness has been identified in itsourcecode Online Voting System 1.0. This affects an unknown function of the file /index.php?page=categories. Executing man… |
| CVE-2025-13286 | CVE-2025-13286 CVSS 6.3angeljudesuarez | A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_use… |
| CVE-2025-13282 | CVE-2025-13282 CVSS 8.1cht | TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs … |
| CVE-2025-13279 | CVE-2025-13279 CVSS 6.3fabian | A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Perfor… |
| CVE-2025-13278 | CVE-2025-13278 CVSS 6.3projectworlds | A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrowed_book_search.php. … |
| CVE-2025-13274 | CVE-2025-13274 CVSS 6.3campcodes | A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.p… |
| CVE-2025-13273 | CVE-2025-13273 CVSS 6.3campcodes | A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the f… |
| CVE-2025-13270 | CVE-2025-13270 CVSS 6.3campcodes | A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=save_course. Th… |
| CVE-2025-13269 | CVE-2025-13269 CVSS 6.3campcodes | A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action… |
| CVE-2025-13264 | CVE-2025-13264 CVSS 6.3oretnom23 | A security flaw has been discovered in SourceCodester Online Magazine Management System 1.0. This affects an unknown part of the file /view_magazine.php. The m… |
| CVE-2025-13263 | CVE-2025-13263 CVSS 6.3oretnom23 | A vulnerability was identified in SourceCodester Online Magazine Management System 1.0. Affected by this issue is some unknown functionality of the file /categ… |
| CVE-2025-13260 | CVE-2025-13260 CVSS 6.3campcodes | A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/edit_product.php. Such m… |
| CVE-2025-13259 | CVE-2025-13259 CVSS 6.3campcodes | A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit_unit.php. This manipulation … |
| CVE-2025-13258 | CVE-2025-13258 CVSS 8.8 | A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipulation of… |
| CVE-2025-13256 | CVE-2025-13256 CVSS 6.3projectworlds | A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrow.php. Executing a ma… |
| CVE-2025-13255 | CVE-2025-13255 CVSS 6.3projectworlds | A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some unknown processing of the file /book_searc… |
| CVE-2025-13254 | CVE-2025-13254 CVSS 6.3projectworlds | A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /add_member.php. Su… |
| CVE-2025-13253 | CVE-2025-13253 CVSS 6.3projectworlds | A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /add_librarian.php. This manip… |
| CVE-2025-13251 | CVE-2025-13251 CVSS 8.8 | A flaw has been found in WeiYe-Jing datax-web up to 2.1.2. Affected is an unknown function. Executing manipulation can lead to sql injection. The attack may be… |
| CVE-2025-13250 | CVE-2025-13250 CVSS 8.8 | A vulnerability was detected in WeiYe-Jing datax-web up to 2.1.2. This impacts the function remove/update/pause/start/triggerJob of the component Job Handler. … |
| CVE-2025-13243 | CVE-2025-13243 CVSS 8.8 | A vulnerability was found in code-projects Student Information System 2.0. Impacted is an unknown function of the file /editprofile.php. The manipulation resul… |