Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

16,974 of 48,153· Page 38/340
8.5
CVE-2025-63534

A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the login.php component

8.5
CVE-2025-63533

A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php a

7.8
CVE-2025-61229

An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to ex

7.8
CVE-2025-61228

An issue in Shirt Pocket SuperDuper! V.3.10 and before allows a local attacker to execute arbitrary code via the softwar

8.1
CVE-2025-57489

Incorrect access control in the SDAgent component of Shirt Pocket SuperDuper! v3.10 allows attackers to escalate privile

8.6
CVE-2025-55222

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec

8.6
CVE-2025-55221

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec

7.5
CVE-2025-54851

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiwa

7.5
CVE-2025-54850

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiwa

7.5
CVE-2025-54849

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiwa

7.5
CVE-2025-54848

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiwa

8.6
CVE-2025-26858

A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially

8.6
CVE-2025-23417

A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.

7.2
CVE-2025-20085

A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.

7.1
CVE-2025-11699

nopCommerce v4.70 and prior, and version 4.80.3, does not invalidate session cookies after logout or session termination

7.8
CVE-2025-10101

Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Mach-O file may allow Local Ex

7.5
CVE-2024-53684

A cross-site request forgery (csrf) vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1

7.2
CVE-2024-49572

A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A special

8.6
CVE-2024-48882

A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A special

7.3
CVE-2024-45370

An authentication bypass vulnerability exists in the User profile management functionality of Socomec Easy Config System

8.1
CVE-2024-39148

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated

8.5
CVE-2025-63528

A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the blooddinfo.php comp

8.5
CVE-2025-63527

A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php a

8.5
CVE-2025-63526

A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System within the abs.php component. The

7.5
CVE-2024-56089

An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake respons

7.5
CVE-2025-59789

Uncontrolled recursion in the json2pb component in Apache bRPC (version < 1.15.0) on all platforms allows remote attacke

7.5
CVE-2025-41738

An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a

7.8
CVE-2025-41700

An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated C

7.5
CVE-2025-61619

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

7.5
CVE-2025-61618

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

7.5
CVE-2025-61617

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

7.5
CVE-2025-61610

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

7.5
CVE-2025-61609

In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

7.5
CVE-2025-61608

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

7.5
CVE-2025-61607

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

7.5
CVE-2025-3012

In dpc modem, there is a possible system crash due to null pointer dereference. This could lead to remote denial of serv

7.3
CVE-2025-13814

A security flaw has been discovered in moxi159753 Mogu Blog v2 up to 5.2. Impacted is the function LocalFileServiceImpl.

7.5
CVE-2025-11133

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

7.5
CVE-2025-11132

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

7.5
CVE-2025-11131

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

7.3
CVE-2025-13808

A flaw has been found in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1. Affected by this vulnerabili

7.3
CVE-2025-13806

A security vulnerability has been detected in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This impacts an unknown function of

7.3
CVE-2025-13803

A vulnerability was identified in MediaCrush 1.0.0/1.0.1. The affected element is an unknown function of the file /media

7.8
CVE-2025-64772

The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurel

7.3
CVE-2025-13792

A security flaw has been discovered in Qualitor up to 8.20.104/8.24.97. Affected by this vulnerability is the function e

7.3
CVE-2025-13788

A vulnerability has been found in Chanjet CRM up to 20251106. The impacted element is an unknown function of the file /t

7.3
CVE-2025-13786

A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fe

7.3
CVE-2025-13782

A vulnerability was identified in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Affected by this issue is

7.1
CVE-2025-66423

Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.1

8.8
CVE-2025-66289

OrangeHRM is a comprehensive human resource management (HRM) system. From version 5.0 to 5.7, the application does not i

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.