Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

22,410 of 48,153· Page 337/449
5.5
CVE-2022-49751

In the Linux kernel, the following vulnerability has been resolved: w1: fix WARNING after calling w1_process() I got t

5.5
CVE-2022-49750

In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Add u64 casts to avoid overflowing

5.5
CVE-2022-49749

In the Linux kernel, the following vulnerability has been resolved: i2c: designware: use casting of u64 in clock multip

5.5
CVE-2022-49748

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shi

5.5
CVE-2022-49747

In the Linux kernel, the following vulnerability has been resolved: erofs/zmap.c: Fix incorrect offset calculation Eff

5.5
CVE-2022-49746

In the Linux kernel, the following vulnerability has been resolved: dmaengine: imx-sdma: Fix a possible memory leak in

5.5
CVE-2022-49745

In the Linux kernel, the following vulnerability has been resolved: fpga: m10bmc-sec: Fix probe rollback Handle probe

5.5
CVE-2022-49744

In the Linux kernel, the following vulnerability has been resolved: mm/uffd: fix pte marker when fork() without fork ev

5.5
CVE-2022-49742

In the Linux kernel, the following vulnerability has been resolved: f2fs: initialize locks earlier in f2fs_fill_super()

5.5
CVE-2022-49741

In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: fix error handling code in ufx_usb_

4.7
CVE-2025-2855

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue

5.9
CVE-2025-26762

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WooComm

6.5
CVE-2025-26265

A segmentation fault in openairinterface5g v2.1.0 allows attackers to cause a Denial of Service (DoS) via a crafted UE C

5.9
CVE-2025-22640

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in integrationdevpayt

6.5
CVE-2025-22638

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in acowebs Product Ta

4.3
CVE-2025-22637

Cross-Site Request Forgery (CSRF) vulnerability in verkkovaraani Print PDF Generator and Publisher nopeamedia allows Cro

5.4
CVE-2025-22634

Cross-Site Request Forgery (CSRF) vulnerability in MD Abu Jubayer Hossain Easy Booked – Appointment Booking and Scheduli

5.3
CVE-2025-22629

Missing Authorization vulnerability in iNET iNET Webkit inet-webkit allows Accessing Functionality Not Properly Constrai

6.5
CVE-2025-22497

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bramwaas Simple Go

5.9
CVE-2025-22496

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MarMar8x Notif Bel

6.5
CVE-2025-22278

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yudleethemes Whiti

6.2
CVE-2025-31181

A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.

6.2
CVE-2025-31180

A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.

6.2
CVE-2025-31179

A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.

6.2
CVE-2025-31178

A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.

6.2
CVE-2025-31176

A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.

4.3
CVE-2025-30221

Pitchfork is a preforking HTTP server for Rack applications. Versions prior to 0.11.0 are vulnerable to HTTP Response He

6.3
CVE-2025-2854

A vulnerability classified as critical was found in code-projects Payroll Management System 1.0. Affected by this vulner

6.5
CVE-2025-29497

libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHFILLSTYLES function.

6.5
CVE-2025-29496

libming v0.4.8 was discovered to contain a segmentation fault via the decompileDUPLICATECLIP function. This vulnerabilit

6.5
CVE-2025-29494

libming v0.4.8 was discovered to contain a segmentation fault via the decompileGETMEMBER function. This vulnerability al

6.5
CVE-2025-29493

libming v0.4.8 was discovered to contain a segmentation fault via the decompileGETPROPERTY function. This vulnerability

6.5
CVE-2025-29492

libming v0.4.8 was discovered to contain a segmentation fault via the decompileSETVARIABLE function.

6.5
CVE-2025-29491

An allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of libming v0.48 allows attackers to cause a

6.5
CVE-2025-29490

libming v0.4.8 was discovered to contain a segmentation fault via the decompileCALLMETHOD function. This vulnerability a

6.5
CVE-2025-29489

libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHLINESTYLES function.

6.5
CVE-2025-29488

libming v0.4.8 was discovered to contain a memory leak via the parseSWF_INITACTION function.

6.5
CVE-2025-29486

libming v0.4.8 was discovered to contain a memory leak via the parseSWF_PLACEOBJECT3 function.

6.5
CVE-2025-29485

libming v0.4.8 was discovered to contain a segmentation fault via the decompileRETURN function. This vulnerability allow

6.5
CVE-2025-29483

libming v0.4.8 was discovered to contain a memory leak via the parseSWF_ENABLEDEBUGGER2 function.

4.3
CVE-2025-22671

Missing Authorization vulnerability in Leap13 Disable Elementor Editor Translation disable-elementor-editor-translation

6.5
CVE-2025-22670

Missing Authorization vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Exploiting Incor

4.3
CVE-2025-22669

Cross-Site Request Forgery (CSRF) vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Cross

6.5
CVE-2025-22668

Missing Authorization vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Exploiting Incorre

4.3
CVE-2025-22667

Missing Authorization vulnerability in Creative Werk Designs Export Order, Product, Customer & Coupon for WooCommerce to

4.3
CVE-2025-22665

Missing Authorization vulnerability in Shakeeb Sadikeen RapidLoad unusedcss allows Exploiting Incorrectly Configured Acc

6.5
CVE-2025-22660

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wolfgang Include M

6.5
CVE-2025-22659

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit Fo

5.9
CVE-2025-22649

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP Project

6.5
CVE-2025-22648

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Blog,

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.