94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 8,051–8,100 of 8,161 in High · page 162 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-1010 | CVE-2025-1010 CVSS 8.8mozilla | An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefo… |
| CVE-2025-10098 | CVE-2025-10098 CVSS 8.8 | A security flaw has been discovered in PHPGurukul User Management System 1.0. Affected is an unknown function of the file /admin/edit-user-profile.php. The man… |
| CVE-2025-10085 | CVE-2025-10085 CVSS 8.8 | A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file manage_website.… |
| CVE-2025-10083 | CVE-2025-10083 CVSS 8.8 | A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/… |
| CVE-2025-1006 | CVE-2025-1006 CVSS 8.8 | Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. (Chr… |
| CVE-2025-10058 | CVE-2025-10058 CVSS 8.1 | The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation … |
| CVE-2025-10057 | CVE-2025-10057 CVSS 8.8 | The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.28.… |
| CVE-2025-10020 | CVE-2025-10020 CVSS 8.5zohocorp | Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component. |
| CVE-2025-10012 | CVE-2025-10012 CVSS 6.3portabilis | A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file educar_historico_escolar_… |
| CVE-2025-10011 | CVE-2025-10011 CVSS 8.8 | A weakness has been identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /module/TabelaArredondamento/edit. Th… |
| CVE-2025-0999 | CVE-2025-0999 CVSS 8.8 | Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
| CVE-2025-0997 | CVE-2025-0997 CVSS 8.1 | Use after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exte… |
| CVE-2025-0995 | CVE-2025-0995 CVSS 8.8 | Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
| CVE-2025-0994 | Trimble Cityworks Deserialization Vulnerability KEVCVSS 8.8Trimble | Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer… |
| CVE-2025-0984 | CVE-2025-0984 CVSS 8.2 | Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in N… |
| CVE-2025-0975 | CVE-2025-0975 CVSS 8.8 | IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters. |
| CVE-2025-0956 | CVE-2025-0956 CVSS 8.1 | The WooCommerce Recover Abandoned Cart plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 24.4.0 via deserializat… |
| CVE-2025-0952 | CVE-2025-0952 CVSS 8.1 | The Eco Nature - Environment & Ecology WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of serv… |
| CVE-2025-0949 | CVE-2025-0949 CVSS 8.8 | A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file … |
| CVE-2025-0948 | CVE-2025-0948 CVSS 8.8 | A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file incview.… |
| CVE-2025-0947 | CVE-2025-0947 CVSS 8.8 | A vulnerability, which was classified as critical, has been found in itsourcecode Tailoring Management System 1.0. Affected by this issue is some unknown funct… |
| CVE-2025-0942 | CVE-2025-0942 CVSS 8.6 | The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated… |
| CVE-2025-0928 | CVE-2025-0928 CVSS 8.8 | In Juju versions prior to 3.6.8 and 2.9.52, any authenticated controller user was allowed to upload arbitrary agent binaries to any model or to the controller … |
| CVE-2025-0911 | CVE-2025-0911 CVSS 8.8 | PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
| CVE-2025-0910 | CVE-2025-0910 CVSS 8.8 | PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
| CVE-2025-0909 | CVE-2025-0909 CVSS 8.8 | PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
| CVE-2025-0908 | CVE-2025-0908 CVSS 8.8 | PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
| CVE-2025-0907 | CVE-2025-0907 CVSS 8.8 | PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
| CVE-2025-0906 | CVE-2025-0906 CVSS 8.8 | PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
| CVE-2025-0905 | CVE-2025-0905 CVSS 8.8 | PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
| CVE-2025-0904 | CVE-2025-0904 CVSS 8.8 | PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
| CVE-2025-0903 | CVE-2025-0903 CVSS 8.8 | PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbit… |
| CVE-2025-0902 | CVE-2025-0902 CVSS 8.8 | PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
| CVE-2025-0901 | CVE-2025-0901 CVSS 8.8 | PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
| CVE-2025-0899 | CVE-2025-0899 CVSS 8.8 | PDF-XChange Editor AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
| CVE-2025-0849 | CVE-2025-0849 CVSS 8.1 | A vulnerability classified as critical has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /edit-staff/ of … |
| CVE-2025-0827 | CVE-2025-0827 CVSS 8.7 | A stored Cross-site Scripting (XSS) vulnerability affecting 3DPlay in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an a… |
| CVE-2025-0802 | CVE-2025-0802 CVSS 8.1 | A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functional… |
| CVE-2025-0798 | CVE-2025-0798 CVSS 8.1 | A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. This issue affects some unknown processing of the file … |
| CVE-2025-0789 | CVE-2025-0789 CVSS 8.8 | A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /doneDetail.jsp. The manipulation of the arg… |
| CVE-2025-0788 | CVE-2025-0788 CVSS 8.8 | A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /content_top.jsp.… |
| CVE-2025-0786 | CVE-2025-0786 CVSS 8.8 | A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation … |
| CVE-2025-0762 | CVE-2025-0762 CVSS 8.8 | Use after free in DevTools in Google Chrome prior to 132.0.6834.159 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exten… |
| CVE-2025-0749 | CVE-2025-0749 CVSS 8.1 | The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is due to the 'verification_id' value being … |
| CVE-2025-0724 | CVE-2025-0724 CVSS 8.8 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.9.4.… |
| CVE-2025-0702 | CVE-2025-0702 CVSS 8.8 | A vulnerability classified as critical was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This vulnerability affects unknown code … |
| CVE-2025-0701 | CVE-2025-0701 CVSS 8.8 | A vulnerability classified as critical has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This affects an unknown part of the… |
| CVE-2025-0700 | CVE-2025-0700 CVSS 8.8 | A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been rated as critical. Affected by this issue is some u… |
| CVE-2025-0699 | CVE-2025-0699 CVSS 8.8 | A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been declared as critical. Affected by this vulnerabilit… |
| CVE-2025-0698 | CVE-2025-0698 CVSS 8.8 | A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been classified as critical. Affected is an unknown func… |