94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 8,001–8,050 of 8,161 in High · page 161 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-10420 | CVE-2025-10420 CVSS 6.3oretnom23 | A vulnerability was detected in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /form137.php. Performing manipulation of th… |
| CVE-2025-10419 | CVE-2025-10419 CVSS 8.8 | A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /del_… |
| CVE-2025-10418 | CVE-2025-10418 CVSS 8.8 | A weakness has been identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_stude… |
| CVE-2025-10409 | CVE-2025-10409 CVSS 8.8 | A weakness has been identified in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /rms.php?page=users. Executing manipulati… |
| CVE-2025-10408 | CVE-2025-10408 CVSS 8.8 | A security flaw has been discovered in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /edit_user.p… |
| CVE-2025-10407 | CVE-2025-10407 CVSS 8.8 | A vulnerability was identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_user.… |
| CVE-2025-10401 | CVE-2025-10401 CVSS 8.8 | A vulnerability was detected in D-Link DIR-823x up to 250416. The affected element is an unknown function of the file /goform/diag_ping. Performing manipulatio… |
| CVE-2025-10400 | CVE-2025-10400 CVSS 8.8 | A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-m… |
| CVE-2025-1040 | CVE-2025-1040 CVSS 8.8 | AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection (SSTI) that could lead to Remote Code Execution (RCE). The vulnerability … |
| CVE-2025-10398 | CVE-2025-10398 CVSS 8.8 | A security flaw has been discovered in fcba_zzm ics-park Smart Park Management System 2.0. This vulnerability affects unknown code of the file FileUploadUtils.… |
| CVE-2025-10391 | CVE-2025-10391 CVSS 8.8 | A security vulnerability has been detected in CRMEB up to 5.6.1. The impacted element is the function testOutUrl of the file app/services/out/OutAccountService… |
| CVE-2025-10390 | CVE-2025-10390 CVSS 8.8 | A weakness has been identified in CRMEB up to 5.6.1. The affected element is the function editAddress of the file app/services/user/UserAddressServices.php. Ex… |
| CVE-2025-10389 | CVE-2025-10389 CVSS 8.8 | A security flaw has been discovered in CRMEB up to 5.6.1. Impacted is the function Save of the file app/services/system/admin/SystemAdminServices.php of the co… |
| CVE-2025-10387 | CVE-2025-10387 CVSS 6.3codesiddhant | A vulnerability was determined in codesiddhant Jasmin Ransomware up to 1.0.1. This vulnerability affects unknown code of the file /handshake.php. This manipula… |
| CVE-2025-10385 | CVE-2025-10385 CVSS 8.8 | A vulnerability has been found in Mercury KM08-708H GiGA WiFi Wave2 1.1. Affected by this issue is the function sub_450B2C of the file /goform/mcr_setSysAdm. T… |
| CVE-2025-10380 | CVE-2025-10380 CVSS 8.8 | The Advanced Views – Display Posts, Custom Fields, and More plugin for WordPress is vulnerable to Server-Side Template Injection in all versions up to, and inc… |
| CVE-2025-10325 | CVE-2025-10325 CVSS 8.8 | A vulnerability was identified in Wavlink WL-WN578W2 221110. This impacts the function sub_401340/sub_401BA4 of the file /cgi-bin/login.cgi. Such manipulation … |
| CVE-2025-10318 | CVE-2025-10318 CVSS 8.8 | A vulnerability was identified in JeecgBoot up to 3.8.2. Affected by this vulnerability is an unknown functionality of the file /api/system/sendWebSocketMsg of… |
| CVE-2025-10314 | CVE-2025-10314 CVSS 8.8 | Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation FREQSHIP-mini for Windows versions 8.0.0 to 8.0.2 allows a local attacker to exe… |
| CVE-2025-10299 | CVE-2025-10299 CVSS 8.8 | The WPBifröst – Instant Passwordless Temporary Login Links plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the … |
| CVE-2025-10293 | CVE-2025-10293 CVSS 8.8 | The Keyy Two Factor Authentication (like Clef) plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and inclu… |
| CVE-2025-10291 | CVE-2025-10291 CVSS 8.8 | A weakness has been identified in linlinjava litemall up to 1.8.0. This affects the function WxAftersaleController of the file /wx/aftersale/cancel. Executing … |
| CVE-2025-1028 | CVE-2025-1028 CVSS 8.1 | The Contact Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the contact form upload feature in all … |
| CVE-2025-10278 | CVE-2025-10278 CVSS 8.8 | A flaw has been found in YunaiV ruoyi-vue-pro up to 2025.09. Impacted is an unknown function of the file /crm/contact/transfer. This manipulation of the argume… |
| CVE-2025-10277 | CVE-2025-10277 CVSS 6.3iocoder | A vulnerability was detected in YunaiV yudao-cloud up to 2025.09. This issue affects some unknown processing of the file /crm/receivable/submit. The manipulati… |
| CVE-2025-10276 | CVE-2025-10276 CVSS 8.8 | A security vulnerability has been detected in YunaiV ruoyi-vue-pro up to 2025.09. This vulnerability affects unknown code of the file /crm/contract/transfer. T… |
| CVE-2025-10275 | CVE-2025-10275 CVSS 8.8 | A weakness has been identified in YunaiV yudao-cloud up to 2025.09. This affects an unknown part of the file /crm/business/transfer. Executing manipulation of … |
| CVE-2025-10265 | CVE-2025-10265 CVSS 8.8 | Certain models of NVR developed by Digiever has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands … |
| CVE-2025-1026 | CVE-2025-1026 CVSS 8.6 | Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, w… |
| CVE-2025-10244 | CVE-2025-10244 CVSS 8.7autodesk | A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting (XSS) vulnerability. A … |
| CVE-2025-10240 | CVE-2025-10240 CVSS 8.8 | A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may … |
| CVE-2025-10228 | CVE-2025-10228 CVSS 8.8 | Session Fixation vulnerability in Rolantis Information Technologies Agentis allows Session Hijacking. This issue affects Agentis: before 4.44. |
| CVE-2025-10223 | CVE-2025-10223 CVSS 5.4axxonsoft | Insufficient Session Expiration (CWE-613) in the Web Admin Panel in AxxonSoft Axxon One (C-Werk) prior to 2.0.3 on Windows allows a local or remote authenticat… |
| CVE-2025-1022 | CVE-2025-1022 CVSS 8.2 | Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation in the setHtml function, invoked by Browsershot::html(), wh… |
| CVE-2025-10210 | CVE-2025-10210 CVSS 6.3chancms | A weakness has been identified in yanyutao0402 ChanCMS up to 3.3.0. Impacted is the function Search of the file app/modules/api/service/Api.js. Executing manip… |
| CVE-2025-10205 | CVE-2025-10205 CVSS 8.8 | Use of a One-Way Hash with a Predictable Salt vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5. and newer versions |
| CVE-2025-10201 | CVE-2025-10201 CVSS 8.8google | Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation vi… |
| CVE-2025-10200 | CVE-2025-10200 CVSS 8.8google | Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a craf… |
| CVE-2025-10174 | CVE-2025-10174 CVSS 8.3 | Cleartext Transmission of Sensitive Information vulnerability in Pan Software & Information Technologies Ltd. PanCafe Pro allows Flooding. This issue affects … |
| CVE-2025-10172 | CVE-2025-10172 CVSS 8.8 | A flaw has been found in UTT 750W up to 3.2.2-191225. This issue affects some unknown processing of the file /goform/formPictureUrl. Executing manipulation of … |
| CVE-2025-10171 | CVE-2025-10171 CVSS 8.8 | A vulnerability was detected in UTT 1250GW up to 3.2.2-200710. This vulnerability affects the function sub_453DC of the file /goform/formConfigApConfTemp. Perf… |
| CVE-2025-10170 | CVE-2025-10170 CVSS 8.8 | A security vulnerability has been detected in UTT 1200GW up to 3.0.0-170831. This affects the function sub_4B48F8 of the file /goform/formApLbConfig. Such mani… |
| CVE-2025-10169 | CVE-2025-10169 CVSS 8.8 | A weakness has been identified in UTT 1200GW up to 3.0.0-170831. Affected by this issue is some unknown functionality of the file /goform/ConfigWirelessBase. T… |
| CVE-2025-1014 | CVE-2025-1014 CVSS 8.8mozilla | Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed. This vulnerability was fixed in Fir… |
| CVE-2025-10120 | CVE-2025-10120 CVSS 8.8 | A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipul… |
| CVE-2025-10110 | CVE-2025-10110 CVSS 8.8 | A vulnerability was identified in ChanCMS up to 3.3.1. Impacted is an unknown function of the file /search/. The manipulation with the input '%20or%201=1%20%23… |
| CVE-2025-1011 | CVE-2025-1011 CVSS 8.8mozilla | A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vul… |
| CVE-2025-10106 | CVE-2025-10106 CVSS 8.8 | A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.1. This affects an unknown part of the file /cms/collect/search. Such manipulation of the argu… |
| CVE-2025-10105 | CVE-2025-10105 CVSS 8.8 | A flaw has been found in yanyutao0402 ChanCMS up to 3.3.1. Affected by this issue is some unknown functionality of the file /cms/article/search. This manipulat… |
| CVE-2025-10101 | CVE-2025-10101 CVSS 7.8 | Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Mach-O file may allow Local Execution of Code or Denial-of-Service of… |