Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

16,974 of 48,153· Page 191/340
8.8
CVE-2025-40670

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to create a

8.8
CVE-2025-5875

A vulnerability classified as critical has been found in TP-LINK Technologies TL-IPC544EP-W4 1.0.9 Build 240428 Rel 6949

8.3
CVE-2025-41444

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts m

8.3
CVE-2025-36528

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Acco

8.3
CVE-2025-27709

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service

7.3
CVE-2025-5870

A vulnerability has been found in TRENDnet TV-IP121W 1.1.1 Build 36 and classified as critical. Affected by this vulnera

8.0
CVE-2025-5869

A vulnerability, which was classified as critical, was found in RT-Thread 5.1.0. Affected is the function sys_recvfrom o

8.8
CVE-2025-5894

Smart Parking Management System from Honding Technology has a Missing Authorization vulnerability, allowing remote attac

8.0
CVE-2025-5868

A vulnerability, which was classified as critical, has been found in RT-Thread 5.1.0. This issue affects the function sy

8.0
CVE-2025-5867

A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects the function csys_sendto

8.0
CVE-2025-5866

A vulnerability classified as critical has been found in RT-Thread 5.1.0. This affects the function sys_sigprocmask of t

8.0
CVE-2025-5865

A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sys_

8.8
CVE-2025-5863

A vulnerability was found in Tenda AC5 15.03.06.47. It has been classified as critical. Affected is the function formSet

8.8
CVE-2025-5862

A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. This issue affects the function formSetPP

8.8
CVE-2025-5861

A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. This vulnerability affects the funct

7.3
CVE-2025-5860

A vulnerability, which was classified as critical, was found in PHPGurukul Maid Hiring Management System 1.0. This affec

7.3
CVE-2025-5856

A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. This vulner

8.8
CVE-2025-5855

A vulnerability, which was classified as critical, was found in Tenda AC6 15.03.05.16. This affects the function formSet

8.8
CVE-2025-5854

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is th

8.8
CVE-2025-5853

A vulnerability classified as critical was found in Tenda AC6 15.03.05.16. Affected by this vulnerability is the functio

8.8
CVE-2025-5852

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUser

8.8
CVE-2025-5851

A vulnerability was found in Tenda AC15 15.03.05.19_multi. It has been rated as critical. This issue affects the functio

8.8
CVE-2025-5850

A vulnerability was found in Tenda AC15 15.03.05.19_multi. It has been declared as critical. This vulnerability affects

8.8
CVE-2025-5849

A vulnerability was found in Tenda AC15 15.03.05.19_multi. It has been classified as critical. This affects the function

8.8
CVE-2025-5848

A vulnerability was found in Tenda AC15 15.03.05.19_multi and classified as critical. Affected by this issue is the func

7.7
CVE-2025-3460

The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection. This

7.7
CVE-2025-3459

The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to command injection. T

7.1
CVE-2025-35010

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

7.1
CVE-2025-35009

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

7.1
CVE-2025-35008

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

7.1
CVE-2025-35007

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

7.1
CVE-2025-35006

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

7.1
CVE-2025-35005

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

7.1
CVE-2025-35004

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

7.7
CVE-2025-32459

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vu

7.7
CVE-2025-32458

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument),

7.7
CVE-2025-32457

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), th

7.7
CVE-2025-32456

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that

7.7
CVE-2025-32455

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd argument), that is vuln

8.8
CVE-2025-5847

A vulnerability has been found in Tenda AC9 15.03.02.13 and classified as critical. Affected by this vulnerability is th

7.3
CVE-2025-38004

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcm_op runtime updates T

7.8
CVE-2025-38003

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu read protection for procf

7.3
CVE-2025-5840

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Th

8.8
CVE-2025-5839

A vulnerability, which was classified as critical, has been found in Tenda AC9 15.03.02.13. Affected by this issue is th

8.5
CVE-2025-49619

Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks suc

7.2
CVE-2025-5303

The LTL Freight Quotes – Freightview Edition, LTL Freight Quotes – Daylight Edition and LTL Freight Quotes – Day & Ross

7.5
CVE-2025-5399

Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libc

8.8
CVE-2025-47601

Missing Authorization vulnerability in Christiaan Pieterse MaxiBlocks maxi-blocks allows Privilege Escalation.This issue

8.8
CVE-2025-5799

A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. Affected by this vulnerability is

8.8
CVE-2025-5798

A vulnerability was found in Tenda AC8 16.03.34.09. It has been classified as critical. Affected is the function fromSet

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.