Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

16,974 of 48,153· Page 165/340
8.2
CVE-2025-21427

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.

7.1
CVE-2025-21422

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.

7.3
CVE-2025-7176

A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been declared as critical. Affected by th

7.5
CVE-2025-40718

Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows

7.3
CVE-2025-7174

A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknow

8.8
CVE-2025-41224

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All ve

7.8
CVE-2025-40741

A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications con

7.8
CVE-2025-40740

A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications con

7.8
CVE-2025-40739

A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications con

8.8
CVE-2025-40738

A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly valid

8.8
CVE-2025-40737

A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application does not properly valid

8.8
CVE-2025-40735

A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected devices are vulnerable to SQL injec

7.8
CVE-2025-23365

A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application allows low-pr

7.0
CVE-2025-21006

Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attacke

8.1
CVE-2024-31854

A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connect

8.1
CVE-2024-31853

A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connect

7.0
CVE-2023-52236

A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All

7.3
CVE-2025-7173

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affect

7.3
CVE-2025-7172

A vulnerability, which was classified as critical, was found in code-projects Crime Reporting System 1.0. This affects a

7.3
CVE-2025-6744

The The Woodmart theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including

7.3
CVE-2025-7171

A vulnerability, which was classified as critical, has been found in code-projects Crime Reporting System 1.0. Affected

7.3
CVE-2025-7170

A vulnerability classified as critical was found in code-projects Crime Reporting System 1.0. Affected by this vulnerabi

7.3
CVE-2025-7169

A vulnerability classified as critical has been found in code-projects Crime Reporting System 1.0. Affected is an unknow

7.3
CVE-2025-7168

A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects

7.8
CVE-2025-38236

In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave consecutive consumed OOB skbs.

8.8
CVE-2025-6746

The WoodMart plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.2.3 via

8.8
CVE-2025-41668

A low privileged remote attacker with file access can replace a critical file or folder used by the service security-pro

8.8
CVE-2025-41667

A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read

8.8
CVE-2025-41666

A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write an

8.8
CVE-2025-25271

An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configura

8.4
CVE-2025-25269

An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege esc

8.8
CVE-2025-25268

An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting

7.8
CVE-2025-24006

A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges

7.8
CVE-2025-24005

A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due t

8.2
CVE-2025-24003

An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying

8.8
CVE-2025-7327

The Widget for Google Reviews plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and inclu

7.3
CVE-2025-7165

A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected

7.3
CVE-2025-7164

A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affe

7.3
CVE-2025-7160

A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. This affects an unknown p

7.3
CVE-2025-7157

A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an u

8.8
CVE-2025-20686

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (

8.8
CVE-2025-20685

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (

7.5
CVE-2025-7146

The iPublish System developed by Jhenggao has an Arbitrary File Reading vulnerability, allowing unauthenticated remote a

7.3
CVE-2025-7155

A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects

8.1
CVE-2025-42959

An unauthenticated attacker may exploit a scenario where a Hashed Message Authentication Code (HMAC) credential, extract

8.1
CVE-2025-42953

SAP Netweaver System Configuration does not perform necessary authorization checks for an authenticated user, resulting

7.7
CVE-2025-42952

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to add fields to arbitrary SAP database ta

7.3
CVE-2025-7147

A vulnerability has been found in CodeAstro Patient Record Management System 1.0 and classified as critical. Affected by

7.5
CVE-2025-53539

FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetr

8.1
CVE-2025-53536

Roo Code is an AI-powered autonomous coding agent. Prior to 3.22.6, if the victim had "Write" auto-approved, an attacker

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.