Menu

Star on GitHub · 3.3k

2025

48,153 vulnerabilities published in 2025.

Results

48,153· Page 417/964
7.3
CVE-2025-8407

A vulnerability, which was classified as critical, has been found in code-projects Vehicle Management 1.0. This issue af

4.4
CVE-2025-7738

A flaw was found in Ansible Automation Platform (AAP) where the Gateway API returns the client secret for certain GitHub

6.3
CVE-2025-54589

Copyparty is a portable file server. In versions 1.18.6 and below, when accessing the recent uploads page at `/?ru`, use

7.2
CVE-2025-8213

The NinjaScanner – Virus & Malware scan plugin for WordPress is vulnerable to arbitrary file deletion due to insufficien

4.3
CVE-2025-8401

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all

6.3
CVE-2025-8382

A vulnerability, which was classified as critical, was found in Campcodes Online Hotel Reservation System 1.0. Affected

6.3
CVE-2025-8381

A vulnerability, which was classified as critical, has been found in Campcodes Online Hotel Reservation System 1.0. This

4.3
CVE-2025-8151

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Path Traversal in all versions up to,

4.3
CVE-2025-8068

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of

3.5
CVE-2025-8380

A vulnerability classified as problematic was found in Campcodes Online Hotel Reservation System 1.0. This vulnerability

4.7
CVE-2025-8379

A vulnerability classified as critical has been found in Campcodes Online Hotel Reservation System 1.0. This affects an

7.3
CVE-2025-8378

A vulnerability was found in Campcodes Online Hotel Reservation System 1.0. It has been rated as critical. Affected by t

7.3
CVE-2025-8376

A vulnerability classified as critical has been found in code-projects Vehicle Management 1.0. Affected is an unknown fu

7.2
CVE-2025-41688

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the

N/A
CVE-2025-40980

A Stored Cross Site Scripting vulnerability has been found in UltimatePOS by UltimateFosters. This vulnerability is due

7.5
CVE-2025-2813

An unauthenticated remote attacker can cause a Denial of Service by sending a large number of requests to the http servi

7.3
CVE-2025-8375

A vulnerability was found in code-projects Vehicle Management 1.0. It has been rated as critical. This issue affects som

7.3
CVE-2025-8374

A vulnerability was found in code-projects Vehicle Management 1.0. It has been declared as critical. This vulnerability

N/A
CVE-2025-8192

There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied

6.1
CVE-2025-24854

A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could al

7.5
CVE-2025-24853

A carefully crafted request when creating a header link using the wiki markup syntax, which could allow the attacker to

7.3
CVE-2025-8373

A vulnerability was found in code-projects Vehicle Management 1.0. It has been classified as critical. This affects an u

7.3
CVE-2025-8372

A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue i

5.4
CVE-2025-7205

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting

6.5
CVE-2025-54757

Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malici

6.5
CVE-2025-54752

Multiple versions of PowerCMS improperly neutralize formula elements in a CSV file. If a product user creates a malform

7.2
CVE-2025-46359

A path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A product administrator ma

5.4
CVE-2025-41396

A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwri

5.4
CVE-2025-41391

Stored cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product user accesses a maliciou

6.1
CVE-2025-36563

Reflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product administrator accesse

7.3
CVE-2025-8371

A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vu

4.3
CVE-2025-8370

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9. Affected is an unknown funct

4.3
CVE-2025-8369

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9. This issue affects some

4.3
CVE-2025-8368

A vulnerability classified as problematic was found in Portabilis i-Educar 2.9. This vulnerability affects unknown code

8.8
CVE-2025-53558

ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge o

4.3
CVE-2025-8367

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.9. This affects an unknown part of the

4.3
CVE-2025-8366

A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some u

8.8
CVE-2025-7847

The AI Engine plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the re

6.4
CVE-2025-5720

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author’

3.5
CVE-2025-8365

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected by this vulnerabili

7.3
CVE-2025-8348

A vulnerability has been found in Kehua Charging Pile Cloud Platform 1.0 and classified as critical. This vulnerability

6.3
CVE-2025-8347

A vulnerability, which was classified as critical, was found in Kehua Charging Pile Cloud Platform 1.0. This affects an

4.3
CVE-2025-8346

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue

6.3
CVE-2025-8345

A vulnerability classified as critical was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7.

6.3
CVE-2025-8344

A vulnerability classified as critical has been found in openviglet shio up to 0.3.8. Affected is the function shStaticF

4.3
CVE-2025-8343

A vulnerability was found in openviglet shio up to 0.3.8. It has been rated as critical. This issue affects the function

4.3
CVE-2025-8340

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic.

7.3
CVE-2025-8339

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical.

7.3
CVE-2025-8338

A vulnerability was found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this issu

3.8
CVE-2025-54085

CVE-2025-54085 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.