94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,951–8,000 of 8,161 in High · page 160 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-10626 | CVE-2025-10626 CVSS 8.8 | A flaw has been found in SourceCodester Online Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /admin/update_s3.php.… |
| CVE-2025-10625 | CVE-2025-10625 CVSS 6.3janobe | A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/da… |
| CVE-2025-10622 | CVE-2025-10622 CVSS 8.0 | A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary … |
| CVE-2025-10620 | CVE-2025-10620 CVSS 8.8 | A flaw has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file /editp2.php. Executing manipulat… |
| CVE-2025-10618 | CVE-2025-10618 CVSS 6.3angeljudesuarez | A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue is some unknown functionality of the fil… |
| CVE-2025-10617 | CVE-2025-10617 CVSS 6.3razormist | A weakness has been identified in SourceCodester Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/posit… |
| CVE-2025-10616 | CVE-2025-10616 CVSS 6.3angeljudesuarez | A security flaw has been discovered in itsourcecode E-Commerce Website 1.0. Affected is an unknown function of the file /admin/users.php. The manipulation resu… |
| CVE-2025-10615 | CVE-2025-10615 CVSS 6.3angeljudesuarez | A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /admin/products.php. The manipulation leads… |
| CVE-2025-10613 | CVE-2025-10613 CVSS 6.3facebook-julykringcadayona | A vulnerability has been found in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /leveledit1.php. Such ma… |
| CVE-2025-10608 | CVE-2025-10608 CVSS 6.3portabilis | A vulnerability was detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /enrollment-history/. Performing manipu… |
| CVE-2025-10602 | CVE-2025-10602 CVSS 6.3janobe | A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/dele… |
| CVE-2025-10595 | CVE-2025-10595 CVSS 6.3janobe | A vulnerability has been found in SourceCodester Online Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /a… |
| CVE-2025-10594 | CVE-2025-10594 CVSS 6.3janobe | A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admi… |
| CVE-2025-10593 | CVE-2025-10593 CVSS 6.3janobe | A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/update_student.php… |
| CVE-2025-10592 | CVE-2025-10592 CVSS 6.3itsourcecode | A security vulnerability has been detected in itsourcecode Online Public Access Catalog OPAC 1.0. This impacts an unknown function of the file mysearch.php of … |
| CVE-2025-10589 | CVE-2025-10589 CVSS 8.8 | The N-Reporter, N-Cloud, and N-Probe developed by N-Partner has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitr… |
| CVE-2025-10582 | CVE-2025-10582 CVSS 8.8 | The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.2.0 due to insufficient es… |
| CVE-2025-1058 | CVE-2025-1058 CVSS 8.1 | CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when malicious firmware is downloaded. |
| CVE-2025-10555 | CVE-2025-10555 CVSS 8.7 | A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows a… |
| CVE-2025-10537 | CVE-2025-10537 CVSS 8.8 | Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruptio… |
| CVE-2025-10534 | CVE-2025-10534 CVSS 8.1 | Spoofing issue in the Site Permissions component. This vulnerability was fixed in Firefox 143 and Thunderbird 143. |
| CVE-2025-10533 | CVE-2025-10533 CVSS 8.8 | Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140… |
| CVE-2025-1052 | CVE-2025-1052 CVSS 8.8 | Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
| CVE-2025-1051 | CVE-2025-1051 CVSS 8.8 | Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on… |
| CVE-2025-10502 | CVE-2025-10502 CVSS 8.8 | Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious network t… |
| CVE-2025-10501 | CVE-2025-10501 CVSS 8.8google | Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
| CVE-2025-10500 | CVE-2025-10500 CVSS 8.8google | Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
| CVE-2025-1050 | CVE-2025-1050 CVSS 8.8 | Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affect… |
| CVE-2025-10494 | CVE-2025-10494 CVSS 8.1 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation… |
| CVE-2025-1049 | CVE-2025-1049 CVSS 8.8 | Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on… |
| CVE-2025-10488 | CVE-2025-10488 CVSS 8.1 | The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to arbitrary file move due to insufficien… |
| CVE-2025-10483 | CVE-2025-10483 CVSS 8.8 | A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admi… |
| CVE-2025-10481 | CVE-2025-10481 CVSS 8.8 | A security vulnerability has been detected in SourceCodester Online Student File Management System 1.0. This impacts an unknown function of the file /remove_fi… |
| CVE-2025-1048 | CVE-2025-1048 CVSS 8.8 | Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary cod… |
| CVE-2025-10471 | CVE-2025-10471 CVSS 8.8 | A vulnerability was detected in ZKEACMS 4.3. Impacted is the function Proxy of the file src/ZKEACMS/Controllers/MediaController.cs. Performing manipulation of … |
| CVE-2025-10470 | CVE-2025-10470 CVSS 8.6 | The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, leading to uncontrolled… |
| CVE-2025-10467 | CVE-2025-10467 CVSS 8.9 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PROLIZ Computer Software Hardware Service Trade Lt… |
| CVE-2025-10465 | CVE-2025-10465 CVSS 8.8 | Unrestricted Upload of File with Dangerous Type vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Sensaway allows Upload a Web Shel… |
| CVE-2025-10457 | CVE-2025-10457 CVSS 8.1 | The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a conne… |
| CVE-2025-10451 | CVE-2025-10451 CVSS 8.2 | Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption. |
| CVE-2025-10449 | CVE-2025-10449 CVSS 8.6 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saysis Computer Systems Trade Ltd. Co. Saysis Web Portal allows… |
| CVE-2025-10443 | CVE-2025-10443 CVSS 8.8 | A vulnerability was identified in Tenda AC9 and AC15 15.03.05.14/15.03.05.18. This vulnerability affects the function formexeCommand of the file /goform/exeCom… |
| CVE-2025-10442 | CVE-2025-10442 CVSS 8.8 | A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of… |
| CVE-2025-10438 | CVE-2025-10438 CVSS 8.6 | Path Traversal: 'dir/../../filename' vulnerability in Yordam Information Technology Consulting Education and Electrical Systems Industry Trade Inc. Yordam Kata… |
| CVE-2025-10431 | CVE-2025-10431 CVSS 8.8 | A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/ajax_represent.php. Such… |
| CVE-2025-10430 | CVE-2025-10430 CVSS 8.8 | A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/barcode.p… |
| CVE-2025-10429 | CVE-2025-10429 CVSS 8.8 | A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Affected by this vulnerability is an unknown functionality of the file /ad… |
| CVE-2025-10428 | CVE-2025-10428 CVSS 8.8 | A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/seo_setti… |
| CVE-2025-10427 | CVE-2025-10427 CVSS 8.8 | A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/operation/user.php. … |
| CVE-2025-10421 | CVE-2025-10421 CVSS 8.8 | A flaw has been found in SourceCodester Student Grading System 1.0. This vulnerability affects unknown code of the file /update_account.php. Executing manipula… |