93,331 indexed
CVECVE vulnerabilities
93,331 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,751–7,800 of 8,161 in High · page 156 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-11653 | CVE-2025-11653 CVSS 8.8utt | A vulnerability was determined in UTT HiPER 2620G up to 3.1.4. Impacted is the function strcpy of the file /goform/fNTP. This manipulation of the argument NTPS… |
| CVE-2025-11652 | CVE-2025-11652 CVSS 8.8utt | A vulnerability was found in UTT 进取 518G up to V3v3.2.7-210919-161313. This issue affects some unknown processing of the file /goform/formTaskEdit_ap. The mani… |
| CVE-2025-11651 | CVE-2025-11651 CVSS 8.8utt | A vulnerability has been found in UTT 进取 518G up to V3v3.2.7-210919-161313. This vulnerability affects the function sub_4247AC of the file /goform/formRemoteCo… |
| CVE-2025-11646 | CVE-2025-11646 CVSS 8.1 | A vulnerability was detected in Tomofun Furbo 360 and Furbo Mini. This vulnerability affects unknown code of the component GATT Service. The manipulation resul… |
| CVE-2025-11643 | CVE-2025-11643 CVSS 8.1 | A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini. Affected by this vulnerability is an unknown functionality of the file /squashfs-root/… |
| CVE-2025-11636 | CVE-2025-11636 CVSS 5.6furbo | A security vulnerability has been detected in Tomofun Furbo 360 up to FB0035_FW_036. This issue affects some unknown processing of the component Account Handle… |
| CVE-2025-11621 | CVE-2025-11621 CVSS 8.1 | Vault and Vault Enterprise’s (“Vault”) AWS Auth method may be susceptible to authentication bypass if the role of the configured bound_principal_iam is the sam… |
| CVE-2025-11619 | CVE-2025-11619 CVSS 8.8devolutions | Improper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and earlier allows attackers in MitM position to intercept traffic. |
| CVE-2025-11613 | CVE-2025-11613 CVSS 6.3fabian | A vulnerability was found in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file /addcategory.php. The manipulation of t… |
| CVE-2025-11612 | CVE-2025-11612 CVSS 6.3fabian | A vulnerability has been found in code-projects Simple Food Ordering System 1.0. This impacts an unknown function of the file /addproduct.php. The manipulation… |
| CVE-2025-11611 | CVE-2025-11611 CVSS 6.3codeastro | A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the a… |
| CVE-2025-11610 | CVE-2025-11610 CVSS 6.3codeastro | A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manip… |
| CVE-2025-11609 | CVE-2025-11609 CVSS 3.7fabian | A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component express-session. This manipulation of … |
| CVE-2025-11607 | CVE-2025-11607 CVSS 6.3harry0703 | A weakness has been identified in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function upload_music of the file app/controllers/v1/mus… |
| CVE-2025-11605 | CVE-2025-11605 CVSS 6.3fabian | A vulnerability was identified in code-projects Client Details System 1.0. Impacted is an unknown function of the file /admin/update-profile.php. Such manipula… |
| CVE-2025-11603 | CVE-2025-11603 CVSS 6.3fabian | A vulnerability was found in code-projects Simple Food Ordering System 1.0. This vulnerability affects unknown code of the file /editproduct.php. The manipulat… |
| CVE-2025-11600 | CVE-2025-11600 CVSS 6.3fabian | A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file editcategory.php. Such… |
| CVE-2025-11593 | CVE-2025-11593 CVSS 6.3codeastro | A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This man… |
| CVE-2025-11592 | CVE-2025-11592 CVSS 6.3codeastro | A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation o… |
| CVE-2025-11591 | CVE-2025-11591 CVSS 6.3codeastro | A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/acti… |
| CVE-2025-11590 | CVE-2025-11590 CVSS 6.3codeastro | A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-… |
| CVE-2025-11589 | CVE-2025-11589 CVSS 6.3codeastro | A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a m… |
| CVE-2025-11588 | CVE-2025-11588 CVSS 6.3codeastro | A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of t… |
| CVE-2025-11561 | CVE-2025-11561 CVSS 8.8 | A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configurations, the Kerbero… |
| CVE-2025-11554 | CVE-2025-11554 CVSS 6.3portabilis | A security vulnerability has been detected in Portabilis i-Educar up to 2.9.10. Affected by this issue is some unknown functionality of the file app/Http/Contr… |
| CVE-2025-11552 | CVE-2025-11552 CVSS 6.3fabian | A vulnerability was identified in code-projects Online Complaint Site 1.0. This impacts an unknown function of the file /admin/category.php. Such manipulation … |
| CVE-2025-11531 | CVE-2025-11531 CVSS 8.8 | HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths. This potential vulnerabil… |
| CVE-2025-11530 | CVE-2025-11530 CVSS 6.3fabian | A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php. This manipulation … |
| CVE-2025-11528 | CVE-2025-11528 CVSS 8.8tenda | A vulnerability was identified in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/saveAutoQos. The manipulation of the argument ena… |
| CVE-2025-11527 | CVE-2025-11527 CVSS 8.8tenda | A vulnerability was determined in Tenda AC7 15.03.06.44. The impacted element is an unknown function of the file /goform/fast_setting_pppoe_set. Executing a ma… |
| CVE-2025-11526 | CVE-2025-11526 CVSS 8.8tenda | A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function of the file /goform/WifiMacFilterSet. Performing a manipulation… |
| CVE-2025-11525 | CVE-2025-11525 CVSS 8.8tenda | A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnp… |
| CVE-2025-11524 | CVE-2025-11524 CVSS 8.8tenda | A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the file /goform/SetDDNSCfg. This manipulation of the argument dd… |
| CVE-2025-11523 | CVE-2025-11523 CVSS 6.3tenda | A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argumen… |
| CVE-2025-11521 | CVE-2025-11521 CVSS 8.1 | The Astra Security Suite – Firewall & Malware Scan plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient validation of remote URLs f… |
| CVE-2025-11516 | CVE-2025-11516 CVSS 6.3fabian | A weakness has been identified in code-projects Online Complaint Site 1.0. Impacted is an unknown function of the file /cms/users/complaint-details.php. Execut… |
| CVE-2025-11515 | CVE-2025-11515 CVSS 6.3fabian | A security flaw has been discovered in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/users/register-comp… |
| CVE-2025-11514 | CVE-2025-11514 CVSS 6.3fabian | A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manip… |
| CVE-2025-11478 | CVE-2025-11478 CVSS 6.3janobe | A weakness has been identified in SourceCodester Farm Management System 1.0. This issue affects some unknown processing of the file /myCart.php. This manipulat… |
| CVE-2025-11461 | CVE-2025-11461 CVSS 8.8 | Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements. This issue af… |
| CVE-2025-11460 | CVE-2025-11460 CVSS 8.8google | Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. (Chromium secur… |
| CVE-2025-1146 | CVE-2025-1146 CVSS 8.1 | CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has ide… |
| CVE-2025-11458 | CVE-2025-11458 CVSS 8.1google | Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.… |
| CVE-2025-11444 | CVE-2025-11444 CVSS 8.8totolink | A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cs… |
| CVE-2025-11436 | CVE-2025-11436 CVSS 6.3jhumanj | A vulnerability was detected in JhumanJ OpnForm up to 1.9.3. Affected by this issue is some unknown functionality of the file /answer. The manipulation results… |
| CVE-2025-1143 | CVE-2025-1143 CVSS 8.4 | Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these cre… |
| CVE-2025-11426 | CVE-2025-11426 CVSS 6.3projectworlds | A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the … |
| CVE-2025-11417 | CVE-2025-11417 CVSS 6.3campcodes | A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This vulnerability affects unknown code of the file /admin/voters_add… |
| CVE-2025-11410 | CVE-2025-11410 CVSS 6.3campcodes | A flaw has been found in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/voters_add.php. Executing … |
| CVE-2025-11409 | CVE-2025-11409 CVSS 6.3campcodes | A vulnerability was detected in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /index.php. Per… |