Menu

Star on GitHub · 3.3k

2025

48,153 vulnerabilities published in 2025.

Results

48,153· Page 425/964
7.3
CVE-2025-8273

A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown

7.3
CVE-2025-8272

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects s

9.8
CVE-2025-6918

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncvav Virtual PBX

N/A
CVE-2025-40730

HTML injection in Vox Media's Chorus CMS. This vulnerability allows an attacker to execute JavaScript code in the victim

7.3
CVE-2025-8271

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been declared as critical. This vulnerabilit

7.3
CVE-2025-8270

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been classified as critical. This affects an

7.3
CVE-2025-8269

A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue i

6.3
CVE-2025-8266

A vulnerability has been found in yanyutao0402 ChanCMS up to 3.1.2 and classified as critical. Affected by this vulnerab

4.7
CVE-2025-8265

A vulnerability classified as critical has been found in 299Ko CMS 2.0.0. This affects an unknown part of the file /admi

4.8
CVE-2025-27802

The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) v

4.8
CVE-2025-27801

The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) v

4.8
CVE-2025-27800

The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) v

4.3
CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function

7.3
CVE-2025-8261

A weakness has been identified in Vaelsys VaelsysV4 4.1.0. This vulnerability affects unknown code of the file /grid/vgr

3.1
CVE-2025-8260

A security flaw has been discovered in Vaelsys VaelsysV4 up to 5.1.0/5.4.0. This affects an unknown part of the file /gr

7.3
CVE-2025-8259

A vulnerability was identified in Vaelsys VaelsysV4 up to 5.1.0/5.4.0. Affected by this issue is the function execute_Da

8.2
CVE-2025-8267

Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery (SSRF) due to an incomplete

5.3
CVE-2025-8258

A vulnerability, which was classified as problematic, has been found in Cool Mo Maigcal Number App up to 1.0.3 on Androi

5.3
CVE-2025-8257

A vulnerability classified as problematic was found in Lobby Universe Lobby App up to 2.8.0 on Android. Affected by this

6.3
CVE-2025-8256

A vulnerability classified as critical has been found in code-projects Online Ordering System 1.0. Affected is an unknow

7.3
CVE-2025-8255

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects s

6.3
CVE-2025-8254

A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. This vulnerabili

7.3
CVE-2025-8253

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been classified as critical. This affects an

7.3
CVE-2025-8252

A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue i

2.9
CVE-2023-53161

The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic.

2.9
CVE-2023-53160

The sequoia-openpgp crate before 1.16.0 for Rust allows out-of-bounds array access and a panic.

4.5
CVE-2023-53159

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_ho

7.3
CVE-2025-8251

A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vu

5.9
CVE-2022-50237

The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair impleme

7.3
CVE-2025-8250

A vulnerability, which was classified as critical, was found in code-projects Exam Form Submission 1.0. Affected is an u

7.3
CVE-2025-8249

A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. This issue

7.3
CVE-2025-8248

A vulnerability classified as critical was found in code-projects Online Ordering System 1.0. This vulnerability affects

4.1
CVE-2023-53158

The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IF

6.3
CVE-2025-8247

A vulnerability classified as critical has been found in Projectworlds Online Admission System 1.0. This affects an unkn

5.3
CVE-2023-53157

The rosenpass crate before 0.2.1 for Rust allows remote attackers to cause a denial of service (panic) via a one-byte UD

8.8
CVE-2025-8246

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is

8.8
CVE-2025-8245

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulne

8.8
CVE-2025-8244

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unkno

8.8
CVE-2025-8243

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unkno

3.2
CVE-2024-58266

The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may fa

3.1
CVE-2024-58265

The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby deny

8.8
CVE-2025-8242

A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affec

7.3
CVE-2025-8241

A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. This af

3.2
CVE-2024-58264

The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.

4.5
CVE-2023-53156

The transpose crate before 0.2.3 for Rust allows an integer overflow via input_width and input_height arguments.

7.3
CVE-2025-8240

A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by

3.7
CVE-2024-58263

The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.

2.9
CVE-2024-58262

The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed

2.9
CVE-2024-58261

The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: N

7.3
CVE-2025-8239

A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerabili

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.