94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,901–7,950 of 8,161 in High · page 159 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-10942 | CVE-2025-10942 CVSS 8.8 | A vulnerability was identified in H3C Magic B3 up to 100R002. This affects the function AddMacList/EditMacList of the file /goform/aspForm. The manipulation of… |
| CVE-2025-1094 | CVE-2025-1094 CVSS 8.1 | Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() all… |
| CVE-2025-10932 | CVE-2025-10932 CVSS 8.2 | Uncontrolled Resource Consumption vulnerability in Progress MOVEit Transfer (AS2 module).This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.3, fro… |
| CVE-2025-10913 | CVE-2025-10913 CVSS 8.3 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saastech Cleaning and Internet Services Inc. Temiz… |
| CVE-2025-10906 | CVE-2025-10906 CVSS 8.4 | A flaw has been found in Magnetism Studios Endurance up to 3.3.0 on macOS. This affects the function loadModuleNamed:WithReply of the file /Applications/Endura… |
| CVE-2025-10897 | CVE-2025-10897 CVSS 8.6 | The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for … |
| CVE-2025-10896 | CVE-2025-10896 CVSS 8.8 | Multiple plugins for WordPress with the Jewel Theme Recommended Plugins Library are vulnerable to Unrestricted Upload of File with Dangerous Type via arbitrary… |
| CVE-2025-10892 | CVE-2025-10892 CVSS 8.8 | Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
| CVE-2025-10891 | CVE-2025-10891 CVSS 8.8google | Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
| CVE-2025-10856 | CVE-2025-10856 CVSS 8.1 | Unrestricted Upload of File with Dangerous Type vulnerability in Solvera Software Services Trade Inc. Teknoera allows File Content Injection. This issue affec… |
| CVE-2025-10854 | CVE-2025-10854 CVSS 8.1 | The txtai framework allows the loading of compressed tar files as embedding indices. While the validate function is intended to prevent path traversal vulnerab… |
| CVE-2025-10848 | CVE-2025-10848 CVSS 6.3campcodes | A vulnerability was identified in Campcodes Society Membership Information System 1.0. This issue affects some unknown processing of the file /check_student.ph… |
| CVE-2025-10846 | CVE-2025-10846 CVSS 6.3portabilis | A vulnerability was determined in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/ComponenteCurricular/edit. This m… |
| CVE-2025-10845 | CVE-2025-10845 CVSS 6.3portabilis | A vulnerability was found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/ComponenteCurricular/view. The manipulation of th… |
| CVE-2025-10844 | CVE-2025-10844 CVSS 6.3portabilis | A vulnerability has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /module/Cadastro/aluno. The … |
| CVE-2025-10840 | CVE-2025-10840 CVSS 6.3mayurik | A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown function of the file /admin/print-payment.php. T… |
| CVE-2025-10839 | CVE-2025-10839 CVSS 6.3mayurik | A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. The impacted element is an unknown function of the file /admin/inv-… |
| CVE-2025-10838 | CVE-2025-10838 CVSS 8.8tenda | A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /goform/WifiExtraSet. The manipulation of… |
| CVE-2025-10835 | CVE-2025-10835 CVSS 6.3mayurik | A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/view_payorder.p… |
| CVE-2025-10828 | CVE-2025-10828 CVSS 6.3mayurik | A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/edit.php. Su… |
| CVE-2025-10826 | CVE-2025-10826 CVSS 6.3campcodes | A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Affected by this vulnerability is an unknown functionality of the … |
| CVE-2025-10825 | CVE-2025-10825 CVSS 6.3campcodes | A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Affected is an unknown function of the file /admin/view-appointment.php… |
| CVE-2025-10815 | CVE-2025-10815 CVSS 8.8tenda | A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this issue is the function strcpy of the file /goform/SetPptpServerCfg of the compo… |
| CVE-2025-10814 | CVE-2025-10814 CVSS 6.3dlink | A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahea… |
| CVE-2025-10807 | CVE-2025-10807 CVSS 8.8 | A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/edit… |
| CVE-2025-10806 | CVE-2025-10806 CVSS 8.8 | A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/bwdates-repo… |
| CVE-2025-10805 | CVE-2025-10805 CVSS 8.8 | A vulnerability was determined in Campcodes Online Beauty Parlor Management System 1.0. This affects an unknown part of the file /admin/add-services.php. Execu… |
| CVE-2025-10804 | CVE-2025-10804 CVSS 8.8 | A vulnerability was found in Campcodes Online Beauty Parlor Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add-… |
| CVE-2025-10803 | CVE-2025-10803 CVSS 8.8 | A vulnerability has been found in Tenda AC23 up to 16.03.07.52. Affected by this vulnerability is the function sscanf of the file /goform/SetPptpServerCfg of t… |
| CVE-2025-10792 | CVE-2025-10792 CVSS 8.8 | A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /goform/formWPS. Such manipulation of the arg… |
| CVE-2025-10790 | CVE-2025-10790 CVSS 8.8 | A security flaw has been discovered in SourceCodester Simple Forum Discussion System 1.0. This affects an unknown function of the file /ajax.php?action=save_ca… |
| CVE-2025-10780 | CVE-2025-10780 CVSS 8.8 | A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file /view.php. This manipulation of the ar… |
| CVE-2025-10773 | CVE-2025-10773 CVSS 8.8 | A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3. Affected by this issue is the function delshrpath of the file /goform/set_delshrpath_cfg o… |
| CVE-2025-10764 | CVE-2025-10764 CVSS 8.8 | A vulnerability was identified in SeriaWei ZKEACMS up to 4.3. This affects the function Edit of the file src/ZKEACMS.EventAction/Controllers/PendingTaskControl… |
| CVE-2025-10757 | CVE-2025-10757 CVSS 8.8 | A weakness has been identified in UTT 1200GW up to 3.0.0-170831. The affected element is an unknown function of the file /goform/formConfigDnsFilterGlobal. Thi… |
| CVE-2025-10756 | CVE-2025-10756 CVSS 8.8 | A security flaw has been discovered in UTT HiPER 840G up to 3.1.1-190328. Impacted is an unknown function of the file /goform/getOneApConfTempEntry. The manipu… |
| CVE-2025-10714 | CVE-2025-10714 CVSS 8.4 | AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within Microsoft Windows operating… |
| CVE-2025-10707 | CVE-2025-10707 CVSS 8.8 | A weakness has been identified in JeecgBoot up to 3.8.2. Affected is an unknown function of the file /message/sysMessageTemplate/sendMsg. Executing manipulatio… |
| CVE-2025-10706 | CVE-2025-10706 CVSS 8.8 | The Classified Pro theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'cwp_addons_update_plugin_cb'… |
| CVE-2025-1070 | CVE-2025-1070 CVSS 8.1 | CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable when a malicious file is downloaded. |
| CVE-2025-10681 | CVE-2025-10681 CVSS 8.6 | Storage credentials are hardcoded in the mobile app and device firmware. These credentials do not adequately limit end user permissions and do not expire withi… |
| CVE-2025-10680 | CVE-2025-10680 CVSS 8.8 | OpenVPN 2.7_alpha1 through 2.7_beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown… |
| CVE-2025-10655 | CVE-2025-10655 CVSS 8.8frappe | SQL Injection in Frappe HelpDesk in the dashboard get_dashboard_data due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.This… |
| CVE-2025-10653 | CVE-2025-10653 CVSS 8.6 | An unauthenticated debug port may allow access to the device file system. |
| CVE-2025-10647 | CVE-2025-10647 CVSS 8.8 | The Embed PDF for WPForms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_handler_download_pdf_med… |
| CVE-2025-10639 | CVE-2025-10639 CVSS 8.8 | The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TCP port 12304. An attacker with network … |
| CVE-2025-10634 | CVE-2025-10634 CVSS 6.3dlink | A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the co… |
| CVE-2025-10629 | CVE-2025-10629 CVSS 8.8 | A vulnerability was determined in D-Link DIR-852 1.00CN B09. This issue affects the function ssdpcgi_main of the file htodcs/cgibin of the component Simple Ser… |
| CVE-2025-10628 | CVE-2025-10628 CVSS 8.8 | A vulnerability was found in D-Link DIR-852 1.00CN B09. This vulnerability affects unknown code of the file /htdocs/cgibin/hedwig.cgi of the component Web Mana… |
| CVE-2025-10627 | CVE-2025-10627 CVSS 8.8 | A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /admin/delete_user.php. Such manipul… |