Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

16,974 of 48,153· Page 158/340
8.8
CVE-2025-7468

A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the funct

7.3
CVE-2025-7467

A vulnerability, which was classified as critical, was found in code-projects Modern Bag 1.0. This affects an unknown pa

7.3
CVE-2025-7466

A vulnerability, which was classified as critical, has been found in 1000projects ABC Courier Management 1.0. Affected b

8.8
CVE-2025-6423

The BeeTeam368 Extensions plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati

8.8
CVE-2025-7465

A vulnerability classified as critical was found in Tenda FH1201 1.2.0.14. Affected by this vulnerability is the functio

8.8
CVE-2025-7463

A vulnerability was found in Tenda FH1201 1.2.0.14. It has been declared as critical. This vulnerability affects the fun

8.8
CVE-2025-1313

The Nokri - Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in

7.3
CVE-2025-7461

A vulnerability was found in code-projects Modern Bag 1.0 and classified as critical. Affected by this issue is some unk

8.8
CVE-2025-6057

The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the han

7.5
CVE-2025-24294

The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the le

7.3
CVE-2025-5199

In Canonical Multipass up to and including version 1.15.1 on macOS, incorrect default permissions allow a local attacker

8.8
CVE-2025-7460

A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this vulnera

7.3
CVE-2025-7459

A vulnerability classified as critical was found in code-projects Mobile Shop 1.0. This vulnerability affects unknown co

7.3
CVE-2025-7457

A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1

7.3
CVE-2025-7456

A vulnerability, which was classified as critical, has been found in Campcodes Online Movie Theater Seat Reservation Sys

7.3
CVE-2025-7455

A vulnerability classified as critical was found in Campcodes Online Movie Theater Seat Reservation System 1.0. Affected

7.3
CVE-2025-7454

A vulnerability classified as critical has been found in Campcodes Online Movie Theater Seat Reservation System 1.0. Aff

8.1
CVE-2025-30403

A heap-buffer-overflow vulnerability is possible in mvfst via a specially crafted message during a QUIC session. This is

8.3
CVE-2013-3307

Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command inj

8.2
CVE-2025-53641

Postiz is an AI social media scheduling tool. From 1.45.1 to 1.62.3, the Postiz frontend application allows an attacker

8.1
CVE-2025-30402

A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially

8.2
CVE-2025-7029

A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register,

7.8
CVE-2025-7028

A vulnerability in the Software SMI handler (SwSmiInputValue 0x20) allows a local attacker to supply a crafted pointer (

8.2
CVE-2025-7027

A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control both the read and

8.2
CVE-2025-7026

A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register,

7.2
CVE-2025-52983

A UI Discrepancy for Security Feature vulnerability in the UI of Juniper Networks Junos OS on VM Host systems allows a

7.5
CVE-2025-52981

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon (flowd) of Juniper N

7.5
CVE-2025-52980

A Use of Incorrect Byte Ordering vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS on

7.8
CVE-2025-52954

A Missing Authorization vulnerability in the internal virtual routing and forwarding (VRF) of Juniper Networks Junos OS

7.5
CVE-2025-52946

A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Ju

8.8
CVE-2025-52089

A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenti

7.3
CVE-2025-30661

An Incorrect Permission Assignment for Critical Resource vulnerability in line card script processing of Juniper Network

7.2
CVE-2025-6851

The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and in

7.5
CVE-2025-7442

The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to SQL Injection via several parameters i

7.8
CVE-2025-30025

The communication protocol used between the server process and the service control had a flaw that could lead to a local

7.3
CVE-2025-7436

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been declared as critical. This

8.8
CVE-2025-7434

A vulnerability was found in Tenda FH451 up to 1.0.0.9 and classified as critical. Affected by this issue is the functio

8.8
CVE-2025-7423

A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). Affected by this vulnerability is the fun

8.8
CVE-2025-7422

A vulnerability classified as critical has been found in Tenda O3V2 1.0.0.12(3880). Affected is the function setAutoRebo

8.8
CVE-2025-7421

A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been rated as critical. This issue affects the function f

8.8
CVE-2025-7420

A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been declared as critical. This vulnerability affects the

8.8
CVE-2025-53515

A vulnerability exists in Advantech iView that allows for SQL injection and remote code execution through NetworkServle

8.8
CVE-2025-53475

A vulnerability exists in Advantech iView that could allow for SQL injection and remote code execution through Network

8.8
CVE-2025-52577

A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServl

7.7
CVE-2025-50109

Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to anothe

7.6
CVE-2025-48891

A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() fun

7.7
CVE-2025-46358

Emerson ValveLink products do not use or incorrectly uses a protection mechanism that provides sufficient defense agai

8.8
CVE-2025-7419

A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been classified as critical. This affects the function fr

8.8
CVE-2025-7418

A vulnerability was found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this issue is the functio

8.1
CVE-2025-1727

The protocol used for remote linking over RF for End-of-Train and Head-of-Train (also known as a FRED) relies on a BCH

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.