93,331 indexed
CVECVE vulnerabilities
93,331 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,551–7,600 of 8,161 in High · page 152 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-13238 | CVE-2025-13238 CVSS 8.8 | A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit … |
| CVE-2025-13230 | CVE-2025-13230 CVSS 8.8 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
| CVE-2025-13229 | CVE-2025-13229 CVSS 8.8 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
| CVE-2025-13228 | CVE-2025-13228 CVSS 8.8 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
| CVE-2025-13227 | CVE-2025-13227 CVSS 8.8 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
| CVE-2025-13226 | CVE-2025-13226 CVSS 8.8 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
| CVE-2025-13224 | CVE-2025-13224 CVSS 8.8 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
| CVE-2025-13223 | Google Chromium V8 Type Confusion Vulnerability KEVCVSS 8.8Google | Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption. |
| CVE-2025-13214 | CVE-2025-13214 CVSS 7.6ibm | IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow th… |
| CVE-2025-1321 | CVE-2025-1321 CVSS 8.8 | The teachPress plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tpsearch' shortcode in all versions up to, and including, … |
| CVE-2025-13192 | CVE-2025-13192 CVSS 8.2 | The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to generic SQL Inject… |
| CVE-2025-13190 | CVE-2025-13190 CVSS 8.8 | A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. This vulnerability affects the function scandir_main of the file /portal/__ajax_exporer.sgi. The ma… |
| CVE-2025-13177 | CVE-2025-13177 CVSS 8.8 | A vulnerability was detected in Bdtask/CodeCanyon SalesERP up to 20250728. This affects an unknown part. The manipulation results in cross-site request forgery… |
| CVE-2025-13172 | CVE-2025-13172 CVSS 6.3codeastro | A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performi… |
| CVE-2025-13171 | CVE-2025-13171 CVSS 8.8 | A vulnerability was identified in ZZCMS 2023. This impacts an unknown function of the file /admin/wangkan_list.php. Such manipulation of the argument keyword l… |
| CVE-2025-13156 | CVE-2025-13156 CVSS 8.8 | The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the inser… |
| CVE-2025-1313 | CVE-2025-1313 CVSS 8.8 | The Nokri - Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.… |
| CVE-2025-13094 | CVE-2025-13094 CVSS 8.8 | The WP3D Model Import Viewer plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_import_file() funct… |
| CVE-2025-1309 | CVE-2025-1309 CVSS 8.8 | The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data that can lead t… |
| CVE-2025-13088 | CVE-2025-13088 CVSS 8.8 | The Category and Product Woocommerce Tabs plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0. This is due to … |
| CVE-2025-13069 | CVE-2025-13069 CVSS 8.8 | The Enable SVG, WebP, and ICO Upload plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1.1.3. This is due to in… |
| CVE-2025-13067 | CVE-2025-13067 CVSS 8.8 | The Royal Addons for Elementor plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1.7.1049. This is due to insuf… |
| CVE-2025-13066 | CVE-2025-13066 CVSS 8.8 | The Demo Importer Plus plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 2.0.6. This is due to insufficient fil… |
| CVE-2025-13065 | CVE-2025-13065 CVSS 8.8 | The Starter Templates plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 4.4.41. This is due to insufficient fil… |
| CVE-2025-13062 | CVE-2025-13062 CVSS 8.8 | The Supreme Modules Lite plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 2.5.62. This is due to insufficient … |
| CVE-2025-13061 | CVE-2025-13061 CVSS 8.8 | A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=manage_voting. Performing m… |
| CVE-2025-1306 | CVE-2025-1306 CVSS 8.8 | The Newscrunch theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.4. This is due to missing or incorrect… |
| CVE-2025-1305 | CVE-2025-1305 CVSS 8.8 | The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.5.4. This is due to missing or incorr… |
| CVE-2025-13042 | CVE-2025-13042 CVSS 8.8google | Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
| CVE-2025-1304 | CVE-2025-1304 CVSS 8.8 | The NewsBlogger theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the newsblogger_install_and_activate_plugin() … |
| CVE-2025-13035 | CVE-2025-13035 CVSS 8.0 | The Code Snippets plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.9.1. This is due to the plugin's use of extr… |
| CVE-2025-13027 | CVE-2025-13027 CVSS 8.1 | Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s… |
| CVE-2025-13020 | CVE-2025-13020 CVSS 8.8 | Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5. |
| CVE-2025-13019 | CVE-2025-13019 CVSS 8.1 | Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5. |
| CVE-2025-13018 | CVE-2025-13018 CVSS 8.1 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5. |
| CVE-2025-13017 | CVE-2025-13017 CVSS 8.1 | Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird… |
| CVE-2025-13014 | CVE-2025-13014 CVSS 8.8 | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbi… |
| CVE-2025-12985 | CVE-2025-12985 CVSS 8.4 | IBM Licensing Operator incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM L… |
| CVE-2025-12974 | CVE-2025-12974 CVSS 8.1 | The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the legacy chunked upload mechanism in al… |
| CVE-2025-12970 | CVE-2025-12970 CVSS 8.8 | The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who… |
| CVE-2025-12968 | CVE-2025-12968 CVSS 8.8 | The Infility Global plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and capability checks in all versions up t… |
| CVE-2025-12967 | CVE-2025-12967 CVSS 8.0 | An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a… |
| CVE-2025-12966 | CVE-2025-12966 CVSS 8.8 | The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the resolve_import_directory()… |
| CVE-2025-12957 | CVE-2025-12957 CVSS 8.8 | The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 4.5.7. This is due to insufficie… |
| CVE-2025-1295 | CVE-2025-1295 CVSS 8.8 | The Templines Elementor Helper Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.7. This is due to allowi… |
| CVE-2025-12944 | CVE-2025-12944 CVSS 8.8 | Improper input validation in NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) allows attackers with direct network access to the device to potentially exe… |
| CVE-2025-12934 | CVE-2025-12934 CVSS 8.1 | The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability chec… |
| CVE-2025-1293 | CVE-2025-1293 CVSS 8.2 | Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. T… |
| CVE-2025-12926 | CVE-2025-12926 CVSS 6.3janobe | A weakness has been identified in SourceCodester Farm Management System 1.0. The affected element is an unknown function of the file /review.php. This manipula… |
| CVE-2025-12922 | CVE-2025-12922 CVSS 6.3openclinica | A vulnerability was found in OpenClinica Community Edition up to 3.12.2/3.13. This affects an unknown part of the file /ImportCRFData?action=confirm of the com… |