94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 8,101–8,150 of 8,161 in High · page 163 of 164
| ID | Title | Summary |
|---|---|---|
| CVE-2025-0682 | CVE-2025-0682 CVSS 8.8 | The ThemeREX Addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.0 via the 'trx_sc_reviews' shortcode … |
| CVE-2025-0669 | CVE-2025-0669 CVSS 8.8 | Cross-Site Request Forgery (CSRF) vulnerability in BOINC Server allows Cross Site Request Forgery.This issue affects BOINC Server: before 1.4.3. |
| CVE-2025-0650 | CVE-2025-0650 CVSS 8.1 | A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured… |
| CVE-2025-0636 | CVE-2025-0636 CVSS 8.4 | EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Co… |
| CVE-2025-0628 | CVE-2025-0628 CVSS 8.1 | An improper authorization vulnerability exists in the main-latest version of BerriAI/litellm. When a user with the role 'internal_user_viewer' logs into the ap… |
| CVE-2025-0616 | CVE-2025-0616 CVSS 8.2 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknolojik Center Telecommunication Industry Trade Co. Lt… |
| CVE-2025-0611 | CVE-2025-0611 CVSS 8.2 | Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
| CVE-2025-0610 | CVE-2025-0610 CVSS 8.6 | Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request Forgery. This issue affects QR Menü: from s1.05.06 before v1.05.… |
| CVE-2025-0602 | CVE-2025-0602 CVSS 8.7 | A stored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPE… |
| CVE-2025-0595 | CVE-2025-0595 CVSS 8.7 | A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows… |
| CVE-2025-0593 | CVE-2025-0593 CVSS 8.8 | The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by using lower-level functions to interact with the device. |
| CVE-2025-0592 | CVE-2025-0592 CVSS 8.8 | The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by manipulating the firmware file and uploading it to the device. |
| CVE-2025-0566 | CVE-2025-0566 CVSS 8.8 | A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13. This affects the function formSetDevNetName of the file /goform/SetDevNetName.… |
| CVE-2025-0539 | CVE-2025-0539 CVSS 8.8 | In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material allo… |
| CVE-2025-0530 | CVE-2025-0530 CVSS 8.2 | A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. This vulnerability affects unknown code of the file /_parse/… |
| CVE-2025-0490 | CVE-2025-0490 CVSS 8.8 | A vulnerability, which was classified as critical, has been found in Fanli2012 native-php-cms 1.0. This issue affects some unknown processing of the file /flad… |
| CVE-2025-0489 | CVE-2025-0489 CVSS 8.8 | A vulnerability classified as critical was found in Fanli2012 native-php-cms 1.0. This vulnerability affects unknown code of the file /fladmin/friendlink_dodel… |
| CVE-2025-0488 | CVE-2025-0488 CVSS 8.8 | A vulnerability classified as critical has been found in Fanli2012 native-php-cms 1.0. This affects an unknown part of the file product_list.php. The manipulat… |
| CVE-2025-0467 | CVE-2025-0467 CVSS 8.2 | Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memor… |
| CVE-2025-0457 | CVE-2025-0457 CVSS 8.8 | The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbit… |
| CVE-2025-0452 | CVE-2025-0452 CVSS 8.2 | eosphoros-ai/DB-GPT version latest is vulnerable to arbitrary file deletion on Windows systems via the '/v1/agent/hub/update' endpoint. The application fails t… |
| CVE-2025-0447 | CVE-2025-0447 CVSS 8.8 | Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalation via a crafted HTML… |
| CVE-2025-0443 | CVE-2025-0443 CVSS 8.8 | Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gest… |
| CVE-2025-0438 | CVE-2025-0438 CVSS 8.8 | Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML p… |
| CVE-2025-0437 | CVE-2025-0437 CVSS 8.8 | Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.… |
| CVE-2025-0436 | CVE-2025-0436 CVSS 8.8 | Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
| CVE-2025-0434 | CVE-2025-0434 CVSS 8.8 | Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
| CVE-2025-0411 | 7-Zip Mark of the Web Bypass Vulnerability KEVCVSS 7.07-Zip | 7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary co… |
| CVE-2025-0410 | CVE-2025-0410 CVSS 8.8 | A vulnerability classified as critical was found in liujianview gymxmjpa 1.0. This vulnerability affects the function MenberDaoInpl of the file src/main/java/c… |
| CVE-2025-0409 | CVE-2025-0409 CVSS 8.8 | A vulnerability classified as critical has been found in liujianview gymxmjpa 1.0. This affects the function MembertypeDaoImpl of the file src/main/java/com/li… |
| CVE-2025-0408 | CVE-2025-0408 CVSS 8.8 | A vulnerability was found in liujianview gymxmjpa 1.0. It has been rated as critical. Affected by this issue is the function LoosDaoImpl of the file src/main/j… |
| CVE-2025-0407 | CVE-2025-0407 CVSS 8.8 | A vulnerability was found in liujianview gymxmjpa 1.0. It has been declared as critical. Affected by this vulnerability is the function EquipmentDaoImpl of the… |
| CVE-2025-0406 | CVE-2025-0406 CVSS 8.8 | A vulnerability was found in liujianview gymxmjpa 1.0. It has been classified as critical. Affected is the function SubjectDaoImpl of the file src/main/java/co… |
| CVE-2025-0405 | CVE-2025-0405 CVSS 8.8 | A vulnerability was found in liujianview gymxmjpa 1.0 and classified as critical. This issue affects the function GoodsDaoImpl of the file src/main/java/com/li… |
| CVE-2025-0402 | CVE-2025-0402 CVSS 8.8 | A vulnerability classified as critical was found in 1902756969 reggie 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/… |
| CVE-2025-0394 | CVE-2025-0394 CVSS 8.8 | The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file uploads due to m… |
| CVE-2025-0392 | CVE-2025-0392 CVSS 8.8 | A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. Affected is the function datagrid… |
| CVE-2025-0391 | CVE-2025-0391 CVSS 8.8 | A vulnerability, which was classified as critical, has been found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This issue affects the funct… |
| CVE-2025-0366 | CVE-2025-0366 CVSS 8.8 | The Jupiter X Core plugin for WordPress is vulnerable to Local File Inclusion to Remote Code Execution in all versions up to, and including, 4.8.7 via the get_… |
| CVE-2025-0358 | CVE-2025-0358 CVSS 8.8 | During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed… |
| CVE-2025-0345 | CVE-2025-0345 CVSS 8.8 | A vulnerability was found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this issue is the function listData of the file /sys/menu/listData. Th… |
| CVE-2025-0344 | CVE-2025-0344 CVSS 8.8 | A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of the file /commpara… |
| CVE-2025-0334 | CVE-2025-0334 CVSS 8.8 | A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of the file /sys/user… |
| CVE-2025-0333 | CVE-2025-0333 CVSS 8.8 | A vulnerability, which was classified as critical, was found in leiyuxi cy-fast 1.0. Affected is the function listData of the file /sys/role/listData. The mani… |
| CVE-2025-0324 | CVE-2025-0324 CVSS 8.8 | The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges. |
| CVE-2025-0300 | CVE-2025-0300 CVSS 8.8 | A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file … |
| CVE-2025-0294 | CVE-2025-0294 CVSS 8.8 | A vulnerability has been found in SourceCodester Home Clean Services Management System 1.0 and classified as critical. Affected by this vulnerability is an unk… |
| CVE-2025-0291 | CVE-2025-0291 CVSS 8.8 | Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… |
| CVE-2025-0286 | CVE-2025-0286 CVSS 8.4 | Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate t… |
| CVE-2025-0248 | CVE-2025-0248 CVSS 8.1 | HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote, unauthenticat… |