Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

16,974 of 48,153· Page 248/340
8.6
CVE-2024-41792

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected de

7.3
CVE-2024-41791

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected de

7.5
CVE-2025-3431

The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to Arbitrary File Read in

7.7
CVE-2025-30014

SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could a

7.7
CVE-2025-27428

Due to directory traversal vulnerability, an authorized attacker could gain access to some critical information by using

8.5
CVE-2025-23186

In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function

8.8
CVE-2025-20946

Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prio

8.8
CVE-2025-20936

Improper access control in HDCP trustlet prior to SMR Apr-2025 Release 1 allows local attackers with shell privilege to

7.3
CVE-2025-3401

A vulnerability has been found in ESAFENET CDG 5.6.3.154.205_20250114 and classified as critical. This vulnerability aff

7.3
CVE-2025-3400

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. This affects an unk

7.3
CVE-2025-3399

A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5.6.3.154.205_20250114. Affected by th

8.8
CVE-2025-2526

The Streamit theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and i

8.8
CVE-2025-2525

The Streamit theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'st_

8.1
CVE-2025-32409

Ratta SuperNote A6 X2 Nomad before December 2024 allows remote code execution because an arbitrary firmware image (signe

8.6
CVE-2025-0942

The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an

7.3
CVE-2025-3384

A vulnerability was found in 1000 Projects Human Resource Management System 1.0. It has been classified as critical. Aff

7.3
CVE-2025-3383

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0 and classified as critical.

7.5
CVE-2025-32034

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph th

7.5
CVE-2025-32033

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph th

7.5
CVE-2025-32032

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph th

7.5
CVE-2025-32031

Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to

7.5
CVE-2025-32030

Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to

7.5
CVE-2025-31496

apollo-compiler is a query-based compiler for the GraphQL query language. Prior to 1.27.0, a vulnerability in Apollo Com

7.3
CVE-2025-3380

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. Affected by this issue is s

7.3
CVE-2025-3379

A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. Affected by this vulnerability is an unknown

7.3
CVE-2025-3378

A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. Affected is an unknown function of the

7.3
CVE-2025-3377

A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. This issue affects some unknown proc

7.3
CVE-2025-3376

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknow

7.3
CVE-2025-3375

A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of

7.3
CVE-2025-3374

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown f

7.3
CVE-2025-3373

A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is a

8.8
CVE-2025-28409

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the add method of the /add/{parentId} endp

8.8
CVE-2025-28407

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the edit method of the /edit/{dictId} endp

7.2
CVE-2025-28403

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method does not properly vali

7.3
CVE-2025-3372

A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function

7.3
CVE-2025-3371

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unk

7.3
CVE-2025-3370

A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unk

7.5
CVE-2025-30195

An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets c

7.3
CVE-2025-3353

A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. This affect

7.3
CVE-2025-3352

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this

7.3
CVE-2025-3351

A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by

7.3
CVE-2025-3350

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected

7.3
CVE-2025-3349

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unk

7.5
CVE-2025-21448

Transient DOS may occur while parsing SSID in action frames.

7.8
CVE-2025-21447

Memory corruption may occur while processing device IO control call for session control.

7.8
CVE-2025-21443

Memory corruption while processing message content in eAVB.

7.8
CVE-2025-21442

Memory corruption while transmitting packet mapping information with invalid header payload size.

7.8
CVE-2025-21441

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

7.8
CVE-2025-21440

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

7.8
CVE-2025-21439

Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provi

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.