93,331 indexed
CVECVE vulnerabilities
93,331 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,651–7,700 of 8,161 in High · page 154 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-12384 | CVE-2025-12384 CVSS 8.6 | The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to unauthorized access/modification/loss of data in all ver… |
| CVE-2025-12382 | CVE-2025-12382 CVSS 8.8 | Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to… |
| CVE-2025-12347 | CVE-2025-12347 CVSS 6.3max-3000 | A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editor_files/save-file… |
| CVE-2025-12346 | CVE-2025-12346 CVSS 6.3max-3000 | A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/auto_post/uploads-… |
| CVE-2025-12345 | CVE-2025-12345 CVSS 8.8 | A security vulnerability has been detected in LLM-Claw 0.1.0/0.1.1/0.1.1a/0.1.1a-p1. The affected element is the function agent_deploy_init of the file /agents… |
| CVE-2025-12322 | CVE-2025-12322 CVSS 8.8tenda | A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromNatStaticSetting of the file /goform/NatStaticSetting. Executing a mani… |
| CVE-2025-1232 | CVE-2025-1232 CVSS 8.8 | The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perf… |
| CVE-2025-12295 | CVE-2025-12295 CVSS 6.6dlink | A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub_40C6B8 of the component Firmware Update Handler. Executing… |
| CVE-2025-12288 | CVE-2025-12288 CVSS 4.3bdtask | A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4. Affected is an unknown function of the file /user/edit_user/ of the component User… |
| CVE-2025-12283 | CVE-2025-12283 CVSS 4.3fabian | A security flaw has been discovered in code-projects Client Details System 1.0. The impacted element is an unknown function. The manipulation results in author… |
| CVE-2025-12274 | CVE-2025-12274 CVSS 8.8tenda | A security vulnerability has been detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListF… |
| CVE-2025-1227 | CVE-2025-1227 CVSS 8.8 | A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file com/cloudweb/oa/mappe… |
| CVE-2025-12263 | CVE-2025-12263 CVSS 6.3carmelo | A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /edit_judge.php. The manipulation … |
| CVE-2025-12262 | CVE-2025-12262 CVSS 6.3carmelo | A vulnerability was determined in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /edit_criteria.php. Executing man… |
| CVE-2025-12261 | CVE-2025-12261 CVSS 6.3codeastro | A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performi… |
| CVE-2025-12260 | CVE-2025-12260 CVSS 8.8totolink | A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi of… |
| CVE-2025-12259 | CVE-2025-12259 CVSS 8.8totolink | A flaw has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi of the co… |
| CVE-2025-12258 | CVE-2025-12258 CVSS 8.8totolink | A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component … |
| CVE-2025-12256 | CVE-2025-12256 CVSS 6.3carmelo | A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code of the file /edit_contestant.php. Exec… |
| CVE-2025-12255 | CVE-2025-12255 CVSS 6.3carmelo | A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /add_contestant.php. Performing … |
| CVE-2025-12254 | CVE-2025-12254 CVSS 6.3carmelo | A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /add_judge.ph… |
| CVE-2025-12252 | CVE-2025-12252 CVSS 6.3carmelo | A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /ajax/action.php. The manipulation of t… |
| CVE-2025-12243 | CVE-2025-12243 CVSS 6.3fabian | A vulnerability was found in code-projects Client Details System 1.0. Affected by this issue is some unknown functionality of the file clientdetails/welcome.ph… |
| CVE-2025-12242 | CVE-2025-12242 CVSS 6.3codeastro | A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/ch… |
| CVE-2025-12241 | CVE-2025-12241 CVSS 8.8totolink | A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This impacts the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the compon… |
| CVE-2025-1224 | CVE-2025-1224 CVSS 8.8 | A vulnerability classified as critical was found in ywoa up to 2024.07.03. This vulnerability affects the function listNameBySql of the file com/cloudweb/oa/ma… |
| CVE-2025-12238 | CVE-2025-12238 CVSS 6.3fabian | A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Perf… |
| CVE-2025-12236 | CVE-2025-12236 CVSS 8.8tenda | A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation … |
| CVE-2025-12235 | CVE-2025-12235 CVSS 8.0tenda | A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the a… |
| CVE-2025-12234 | CVE-2025-12234 CVSS 8.8tenda | A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the ar… |
| CVE-2025-12233 | CVE-2025-12233 CVSS 8.8tenda | A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulati… |
| CVE-2025-12225 | CVE-2025-12225 CVSS 8.8tenda | A vulnerability has been found in Tenda AC6 15.03.06.50. This issue affects some unknown processing of the file /goform/WifiGuestSet of the component HTTP Requ… |
| CVE-2025-12223 | CVE-2025-12223 CVSS 6.3bdtask | A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Pa… |
| CVE-2025-12222 | CVE-2025-12222 CVSS 6.3bdtask | A security vulnerability has been detected in Bdtask Flight Booking Software up to 3.1. Affected by this issue is some unknown functionality of the file /admin… |
| CVE-2025-12221 | CVE-2025-12221 CVSS 8.8 | Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. |
| CVE-2025-12214 | CVE-2025-12214 CVSS 8.8tenda | A vulnerability was detected in Tenda O3 1.0.0.10(2478). This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Performing a mani… |
| CVE-2025-12213 | CVE-2025-12213 CVSS 8.8tenda | A security vulnerability has been detected in Tenda O3 1.0.0.10(2478). This vulnerability affects the function SetValue/GetValue of the file /goform/setVlanCon… |
| CVE-2025-12212 | CVE-2025-12212 CVSS 8.8tenda | A weakness has been identified in Tenda O3 1.0.0.10(2478). This affects the function SetValue/GetValue of the file /goform/setNetworkService. This manipulation… |
| CVE-2025-12209 | CVE-2025-12209 CVSS 8.8tenda | A vulnerability was determined in Tenda O3 1.0.0.10(2478). Affected is the function SetValue/GetValue of the file /goform/setDhcpConfig. Executing a manipulati… |
| CVE-2025-12189 | CVE-2025-12189 CVSS 8.8 | The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for WordPress is vulnerable to Cross-Site Request F… |
| CVE-2025-12181 | CVE-2025-12181 CVSS 8.8 | The ContentStudio plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the cstu_update_post() function in all ve… |
| CVE-2025-12171 | CVE-2025-12171 CVSS 8.8 | The RESTful Content Syndication plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ingest_image() function… |
| CVE-2025-12161 | CVE-2025-12161 CVSS 8.8 | The Smart Auto Upload Images plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the auto-image creation functi… |
| CVE-2025-1216 | CVE-2025-1216 CVSS 8.8 | A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03. This issue affects the function selectNoticeList of the file com/cl… |
| CVE-2025-12154 | CVE-2025-12154 CVSS 8.8 | The Auto Thumbnailer plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadThumb() function in all vers… |
| CVE-2025-12153 | CVE-2025-12153 CVSS 8.8 | The Featured Image via URL plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation function in all versions up to, and… |
| CVE-2025-1214 | CVE-2025-1214 CVSS 8.8 | A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an unknown part of the file /user_accounts.php?uid of the componen… |
| CVE-2025-12138 | CVE-2025-12138 CVSS 8.8 | The URL Image Importer plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and includi… |
| CVE-2025-1210 | CVE-2025-1210 CVSS 8.8 | A vulnerability classified as critical was found in code-projects Wazifa System 1.0. Affected by this vulnerability is an unknown functionality of the file /co… |
| CVE-2025-12095 | CVE-2025-12095 CVSS 8.8 | The Simple Registration for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.8. This is d… |