94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,801–7,850 of 8,161 in High · page 157 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-11398 | CVE-2025-11398 CVSS 6.3nikhil-bhalerao | A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The impacted element is an unknown function of the file /profile.php of… |
| CVE-2025-11393 | CVE-2025-11393 CVSS 8.7 | A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of this flaw, the proxy attaches the clus… |
| CVE-2025-11389 | CVE-2025-11389 CVSS 8.8tenda | A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveAutoQos. Performing a manipulation of th… |
| CVE-2025-11388 | CVE-2025-11388 CVSS 8.8tenda | A vulnerability was identified in Tenda AC15 15.03.05.18. This impacts an unknown function of the file /goform/setNotUpgrade. Such manipulation of the argument… |
| CVE-2025-11387 | CVE-2025-11387 CVSS 8.8tenda | A vulnerability was determined in Tenda AC15 15.03.05.18. This affects an unknown function of the file /goform/fast_setting_pppoe_set. This manipulation of the… |
| CVE-2025-11386 | CVE-2025-11386 CVSS 8.8tenda | A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/SetDDNSCfg of the component POST Parameter… |
| CVE-2025-11385 | CVE-2025-11385 CVSS 8.8tenda | A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fast_setting_wifi_set. The mani… |
| CVE-2025-11371 | Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability KEVCVSS 7.5Gladinet | Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files. |
| CVE-2025-1137 | CVE-2025-1137 CVSS 8.8 | IBM Storage Scale 5.2.2.0 and 5.2.2.1, under certain configurations, could allow an authenticated user to execute privileged commands due to improper input neu… |
| CVE-2025-11359 | CVE-2025-11359 CVSS 6.3codeastro | A security vulnerability has been detected in code-projects Simple Banking System 1.0. The affected element is an unknown function of the file /transfermoney.p… |
| CVE-2025-11358 | CVE-2025-11358 CVSS 6.3codeastro | A weakness has been identified in code-projects Simple Banking System 1.0. Impacted is an unknown function of the file /removeuser.php. Executing manipulation … |
| CVE-2025-11357 | CVE-2025-11357 CVSS 6.3codeastro | A security flaw has been discovered in code-projects Simple Banking System 1.0. This issue affects some unknown processing of the file /createuser.php. Perform… |
| CVE-2025-11356 | CVE-2025-11356 CVSS 8.8tenda | A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulatio… |
| CVE-2025-11355 | CVE-2025-11355 CVSS 8.8utt | A vulnerability has been found in UTT 1250GW up to v2v3.2.2-200710. Affected by this vulnerability is the function strcpy of the file /goform/aspChangeChannel.… |
| CVE-2025-11353 | CVE-2025-11353 CVSS 6.3fabian | A vulnerability was detected in code-projects Online Hotel Reservation System 1.0. This impacts an unknown function of the file /admin/addgalleryexec.php. Perf… |
| CVE-2025-11352 | CVE-2025-11352 CVSS 6.3fabian | A security vulnerability has been detected in code-projects Online Hotel Reservation System 1.0. This affects an unknown function of the file /admin/addexec.ph… |
| CVE-2025-11351 | CVE-2025-11351 CVSS 6.3fabian | A weakness has been identified in code-projects Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file /admin/editpicexec… |
| CVE-2025-11343 | CVE-2025-11343 CVSS 7.3code-projects | A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulatio… |
| CVE-2025-11339 | CVE-2025-11339 CVSS 8.8dlink | A vulnerability has been found in D-Link DI-7100G C1 up to 20250928. This issue affects the function sub_4BD4F8 of the file /webchat/hi_block.asp of the compon… |
| CVE-2025-11330 | CVE-2025-11330 CVSS 6.3phpgurukul | A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/sales-reports… |
| CVE-2025-11328 | CVE-2025-11328 CVSS 8.8tenda | A vulnerability was detected in Tenda AC18 15.03.05.19(6318). This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of th… |
| CVE-2025-11327 | CVE-2025-11327 CVSS 8.8tenda | A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318). This vulnerability affects unknown code of the file /goform/SetUpnpCfg. The manipul… |
| CVE-2025-11326 | CVE-2025-11326 CVSS 8.8tenda | A weakness has been identified in Tenda AC18 15.03.05.19(6318). This affects an unknown part of the file /goform/WifiMacFilterSet. Executing a manipulation of … |
| CVE-2025-11325 | CVE-2025-11325 CVSS 8.8tenda | A security flaw has been discovered in Tenda AC18 15.03.05.19(6318). Affected by this issue is some unknown functionality of the file /goform/fast_setting_pppo… |
| CVE-2025-11324 | CVE-2025-11324 CVSS 8.8tenda | A vulnerability was identified in Tenda AC18 15.03.05.19(6318). Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. S… |
| CVE-2025-11323 | CVE-2025-11323 CVSS 8.8utt | A vulnerability was determined in UTT 1250GW up to v2v3.2.2-200710. Affected is the function strcpy of the file /goform/formUserStatusRemark. This manipulation… |
| CVE-2025-1132 | CVE-2025-1132 CVSS 8.8 | A time-based blind SQL Injection vulnerability exists in the ChurchCRM 5.13.0 and prior EditEventAttendees.php within the EN_tyid parameter. The parameter is d… |
| CVE-2025-11307 | CVE-2025-11307 CVSS 8.8 | The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.48 does not sanitize user input provided via an AJAX action, allowing unauthenticated user… |
| CVE-2025-11305 | CVE-2025-11305 CVSS 8.8utt | A vulnerability has been found in UTT HiPER 840G up to 3.1.1-190328. Affected by this issue is the function strcpy of the file /goform/formTaskEdit. The manipu… |
| CVE-2025-11303 | CVE-2025-11303 CVSS 6.3belkin | A vulnerability was detected in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/mp. Performing a manipulation of the argument comma… |
| CVE-2025-11302 | CVE-2025-11302 CVSS 8.8belkin | A security vulnerability has been detected in Belkin F9K1015 1.00.10. This impacts an unknown function of the file /goform/formWpsStart. Such manipulation of t… |
| CVE-2025-11301 | CVE-2025-11301 CVSS 8.8belkin | A weakness has been identified in Belkin F9K1015 1.00.10. This affects an unknown function of the file /goform/formWlanSetupWPS. This manipulation of the argum… |
| CVE-2025-11300 | CVE-2025-11300 CVSS 8.8belkin | A security flaw has been discovered in Belkin F9K1015 1.00.10. The impacted element is an unknown function of the file /goform/formWlanMP. The manipulation of … |
| CVE-2025-11299 | CVE-2025-11299 CVSS 8.8belkin | A vulnerability was identified in Belkin F9K1015 1.00.10. The affected element is an unknown function of the file /goform/formWanTcpipSetup. The manipulation o… |
| CVE-2025-11298 | CVE-2025-11298 CVSS 6.3belkin | A vulnerability was determined in Belkin F9K1015 1.00.10. Impacted is an unknown function of the file /goform/formSetWanStatic. Executing a manipulation of the… |
| CVE-2025-11297 | CVE-2025-11297 CVSS 8.8belkin | A vulnerability was found in Belkin F9K1015 1.00.10. This issue affects some unknown processing of the file /goform/formSetLanguage. Performing a manipulation … |
| CVE-2025-11296 | CVE-2025-11296 CVSS 8.8belkin | A vulnerability has been found in Belkin F9K1015 1.00.10. This vulnerability affects unknown code of the file /goform/formPPTPSetup. Such manipulation of the a… |
| CVE-2025-11295 | CVE-2025-11295 CVSS 8.8belkin | A flaw has been found in Belkin F9K1015 1.00.10. This affects an unknown part of the file /goform/formPPPoESetup. This manipulation of the argument pppUserName… |
| CVE-2025-11294 | CVE-2025-11294 CVSS 8.8belkin | A vulnerability was detected in Belkin F9K1015 1.00.10. Affected by this issue is some unknown functionality of the file /goform/formL2TPSetup. The manipulatio… |
| CVE-2025-11293 | CVE-2025-11293 CVSS 8.8belkin | A security vulnerability has been detected in Belkin F9K1015 1.00.10. Affected by this vulnerability is an unknown functionality of the file /goform/formConnec… |
| CVE-2025-11292 | CVE-2025-11292 CVSS 6.3belkin | A weakness has been identified in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing a manipulation of … |
| CVE-2025-11290 | CVE-2025-11290 CVSS 8.1 | A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret Handler. Such manipulation of the argume… |
| CVE-2025-11288 | CVE-2025-11288 CVSS 8.8 | A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET P… |
| CVE-2025-11285 | CVE-2025-11285 CVSS 6.3mcphubx | A vulnerability was found in samanhappy MCPHub up to 0.9.10. Affected by this issue is some unknown functionality of the file src/controllers/serverController.… |
| CVE-2025-11221 | CVE-2025-11221 CVSS 8.8 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFl… |
| CVE-2025-11209 | CVE-2025-11209 CVSS 8.2google | Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker to spoof the contents of the Omnibox (URL … |
| CVE-2025-11205 | CVE-2025-11205 CVSS 8.8google | Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentially exploi… |
| CVE-2025-11192 | CVE-2025-11192 CVSS 8.6extremenetworks | A vulnerability in Extreme Networks’ Fabric Engine (VOSS) before 9.3 was discovered. When SD-WAN AutoSense is enabled on a port, it may automatically configure… |
| CVE-2025-11168 | CVE-2025-11168 CVSS 8.8 | The Mementor Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.2.5. This is due to plugin not properly ha… |
| CVE-2025-11152 | CVE-2025-11152 CVSS 8.6 | Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3. |