94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,851–7,900 of 8,161 in High · page 158 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-11151 | CVE-2025-11151 CVSS 8.2 | Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz B… |
| CVE-2025-11142 | CVE-2025-11142 CVSS 8.8 | The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited afte… |
| CVE-2025-11138 | CVE-2025-11138 CVSS 6.3wenkucms_project | A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results i… |
| CVE-2025-11130 | CVE-2025-11130 CVSS 8.4 | A weakness has been identified in iHongRen pptp-vpn 1.0/1.0.1 on macOS. This issue affects the function shouldAcceptNewConnection of the file HelpTool/HelperTo… |
| CVE-2025-11123 | CVE-2025-11123 CVSS 8.8tenda | A flaw has been found in Tenda AC18 15.03.05.19. This impacts an unknown function of the file /goform/saveAutoQos. This manipulation of the argument enable cau… |
| CVE-2025-11122 | CVE-2025-11122 CVSS 8.8tenda | A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file /goform/WizardHandle. The manipulation of the argument WAN… |
| CVE-2025-11121 | CVE-2025-11121 CVSS 6.3tenda | A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. The manipula… |
| CVE-2025-11120 | CVE-2025-11120 CVSS 8.8tenda | A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executin… |
| CVE-2025-11117 | CVE-2025-11117 CVSS 8.8tenda | A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulat… |
| CVE-2025-11114 | CVE-2025-11114 CVSS 6.3codeastro | A flaw has been found in CodeAstro Online Leave Application 1.0. Affected by this vulnerability is an unknown functionality of the file /leaveAplicationForm.ph… |
| CVE-2025-11113 | CVE-2025-11113 CVSS 6.3codeastro | A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the… |
| CVE-2025-11104 | CVE-2025-11104 CVSS 6.3codeastro | A vulnerability was detected in CodeAstro Electricity Billing System 1.0. Affected by this issue is some unknown functionality of the file /admin/bill.php. The… |
| CVE-2025-11100 | CVE-2025-11100 CVSS 6.3dlink | A vulnerability was identified in D-Link DIR-823X 250416. This affects the function uci_set of the file /goform/set_wifi_blacklists. Such manipulation leads to… |
| CVE-2025-11099 | CVE-2025-11099 CVSS 6.3dlink | A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function uci_del of the file /goform/delete_prohibiting. This manipulatio… |
| CVE-2025-11098 | CVE-2025-11098 CVSS 6.3dlink | A vulnerability was found in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_wifi_blacklists. The manipulation of t… |
| CVE-2025-11097 | CVE-2025-11097 CVSS 6.3dlink | A vulnerability has been found in D-Link DIR-823X 250416. Impacted is an unknown function of the file /goform/set_device_name. The manipulation of the argument… |
| CVE-2025-11096 | CVE-2025-11096 CVSS 6.3dlink | A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diag_traceroute. Executing manipulation of the … |
| CVE-2025-11095 | CVE-2025-11095 CVSS 6.3dlink | A vulnerability was detected in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/delete_offline_device. Performing manipulat… |
| CVE-2025-11092 | CVE-2025-11092 CVSS 6.3dlink | A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_switch_settings. This manip… |
| CVE-2025-11091 | CVE-2025-11091 CVSS 8.8tenda | A security flaw has been discovered in Tenda AC21 up to 16.03.08.16. Affected by this vulnerability is the function sscanf of the file /goform/SetStaticRouteCf… |
| CVE-2025-11090 | CVE-2025-11090 CVSS 6.3angeljudesuarez | A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected is an unknown function of the file /admin/employee/index.php?view=edit. The… |
| CVE-2025-11088 | CVE-2025-11088 CVSS 6.3angeljudesuarez | A weakness has been identified in itsourcecode Open Source Job Portal 1.0. Impacted is an unknown function of the file /admin/vacancy/index.php?view=edit. This… |
| CVE-2025-11087 | CVE-2025-11087 CVSS 8.8 | The Zegen Core plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 2.0.1. This is due t… |
| CVE-2025-11086 | CVE-2025-11086 CVSS 8.1 | The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation in all versions up to, and in… |
| CVE-2025-1108 | CVE-2025-1108 CVSS 8.6 | Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify the content of ema… |
| CVE-2025-11078 | CVE-2025-11078 CVSS 6.3angeljudesuarez | A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/c… |
| CVE-2025-11054 | CVE-2025-11054 CVSS 6.3angeljudesuarez | A security vulnerability has been detected in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/category/i… |
| CVE-2025-11050 | CVE-2025-11050 CVSS 6.3portabilis | A flaw has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /periodo-lancamento. Executing manipulation can lead to impro… |
| CVE-2025-11049 | CVE-2025-11049 CVSS 6.3portabilis | A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /unificacao-aluno. Performing … |
| CVE-2025-11048 | CVE-2025-11048 CVSS 6.3portabilis | A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /consulta-… |
| CVE-2025-11047 | CVE-2025-11047 CVSS 6.3portabilis | A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /module/Api/aluno. This manipulation of the argum… |
| CVE-2025-11041 | CVE-2025-11041 CVSS 6.3angeljudesuarez | A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.p… |
| CVE-2025-11038 | CVE-2025-11038 CVSS 6.3angeljudesuarez | A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of the file /details.php?action=post. Execu… |
| CVE-2025-11029 | CVE-2025-11029 CVSS 4.3vvveb | A weakness has been identified in givanz Vvveb up to 1.0.7.2. This vulnerability affects unknown code. Executing manipulation can lead to cross-site request fo… |
| CVE-2025-11020 | CVE-2025-11020 CVSS 8.8 | An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with… |
| CVE-2025-10989 | CVE-2025-10989 CVSS 6.3ruoyi | A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This vulnerability affects unknown code of the file /system/role/authUser/selectAll. Pe… |
| CVE-2025-10988 | CVE-2025-10988 CVSS 6.3iocoder | A vulnerability was identified in YunaiV ruoyi-vue-pro up to 2025.09. This affects an unknown part of the file /crm/business/transfer. Such manipulation leads … |
| CVE-2025-10987 | CVE-2025-10987 CVSS 6.3iocoder | A vulnerability was determined in YunaiV yudao-cloud up to 2025.09. Affected by this issue is some unknown functionality of the file /crm/contact/transfer of t… |
| CVE-2025-1098 | CVE-2025-1098 CVSS 8.8 | A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations … |
| CVE-2025-1097 | CVE-2025-1097 CVSS 8.8 | A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to … |
| CVE-2025-10968 | CVE-2025-10968 CVSS 8.8 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in GG Soft Software Se… |
| CVE-2025-10964 | CVE-2025-10964 CVSS 6.3wavlink | A weakness has been identified in Wavlink NU516U1. Affected by this vulnerability is the function sub_401B30 of the file /cgi-bin/firewall.cgi. This manipulati… |
| CVE-2025-10963 | CVE-2025-10963 CVSS 6.3wavlink | A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. Affected is the function sub_4016F0 of the file /cgi-bin/firewall.cgi. The manipulation o… |
| CVE-2025-10962 | CVE-2025-10962 CVSS 6.3wavlink | A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This impacts the function sub_403198 of the file /cgi-bin/wireless.cgi of the component SetNam… |
| CVE-2025-10961 | CVE-2025-10961 CVSS 5.5wavlink | A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. This affects the function sub_4030C0 of the file /cgi-bin/wireless.cgi of the component Delete… |
| CVE-2025-10960 | CVE-2025-10960 CVSS 6.3wavlink | A vulnerability was found in Wavlink NU516U1 M16U1_V240425. The impacted element is the function sub_402D1C of the file /cgi-bin/wireless.cgi of the component … |
| CVE-2025-10959 | CVE-2025-10959 CVSS 6.3wavlink | A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. The affected element is the function sub_401778 of the file /cgi-bin/firewall.cgi. Such manipu… |
| CVE-2025-10958 | CVE-2025-10958 CVSS 6.3wavlink | A flaw has been found in Wavlink NU516U1 M16U1_V240425. Impacted is the function sub_403010 of the file /cgi-bin/wireless.cgi of the component AddMac Page. Thi… |
| CVE-2025-10953 | CVE-2025-10953 CVSS 8.8 | A security vulnerability has been detected in UTT 1200GW and 1250GW up to 3.0.0-170831/3.2.2-200710. This vulnerability affects unknown code of the file /gofor… |
| CVE-2025-10948 | CVE-2025-10948 CVSS 8.8 | A vulnerability has been found in MikroTik RouterOS 7. This affects the function parse_json_element of the file /rest/ip/address/print of the component libjson… |