Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

48,153· Page 469/964
7.8
CVE-2025-47103

InDesign Desktop versions 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could resul

7.8
CVE-2025-43594

InDesign Desktop versions 19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in a

7.8
CVE-2025-43592

InDesign Desktop versions 19.5.3 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could

7.8
CVE-2025-43591

InDesign Desktop versions 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could resul

5.5
CVE-2025-30313

Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to d

9.6
CVE-2025-27203

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lea

5.5
CVE-2025-27165

Substance3D - Stager versions 3.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to d

7.3
CVE-2025-7196

A vulnerability was found in code-projects Jonnys Liquor 1.0. It has been rated as critical. Affected by this issue is s

8.8
CVE-2025-7194

A vulnerability was found in D-Link DI-500WF 17.04.10A1T. It has been declared as critical. Affected by this vulnerabili

5.3
CVE-2025-7031

Missing Authentication for Critical Function vulnerability in Drupal Config Pages Viewer allows Exploiting Incorrectly C

6.5
CVE-2025-7030

Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrec

8.8
CVE-2025-49551

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Use of Hard-coded Credentials vulnerability t

2.4
CVE-2025-49546

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Access Control vulnerability that c

6.2
CVE-2025-49545

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabil

6.8
CVE-2025-49544

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity

4.3
CVE-2025-49543

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerabili

5.2
CVE-2025-49542

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerab

4.3
CVE-2025-49541

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerabili

4.3
CVE-2025-49540

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerabili

4.5
CVE-2025-49539

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity

7.4
CVE-2025-49538

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an XML Injection vulnerability that could lead

7.9
CVE-2025-49537

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Neutralization of Special Elements

7.3
CVE-2025-49536

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Incorrect Authorization vulnerability that c

9.3
CVE-2025-49535

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity

5.5
CVE-2025-43584

Substance3D - Viewer versions 0.22 and earlier are affected by an out-of-bounds read vulnerability that could lead to di

5.5
CVE-2025-43583

Substance3D - Viewer versions 0.22 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead

7.8
CVE-2025-43582

Substance3D - Viewer versions 0.22 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could res

7.3
CVE-2025-7193

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System up to 1.0. It has been classified as criti

6.3
CVE-2025-7192

A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ss

7.5
CVE-2025-53355

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. A command injection vulne

9.8
CVE-2025-37103

Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of i

7.3
CVE-2025-7191

A vulnerability has been found in code-projects Student Enrollment System 1.0 and classified as critical. This vulnerabi

6.3
CVE-2025-7190

A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. This affect

6.3
CVE-2025-48386

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-

N/A
CVE-2025-48385

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-

8.0
CVE-2025-48384KEV

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-

7.2
CVE-2025-37102

An authenticated command injection vulnerability exists in the Command line interface of HPE Networking Instant On Acces

4.3
CVE-2025-27369

IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to information disclosure of sensitive information due to a

5.3
CVE-2025-27367

IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to improper input validation due to bypassing of client-side v

5.3
CVE-2024-49784

IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data with AE

5.3
CVE-2024-49783

IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data. If a

6.1
CVE-2023-43039

IBM OpenPages with Watson 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary

5.4
CVE-2025-7363

The TitleIcon extension for MediaWiki is vulnerable to stored XSS through the #titleicon_unicode parser function. User i

5.4
CVE-2025-7362

The MsUpload extension for MediaWiki is vulnerable to stored XSS via the msu-continue system message, which is inserted

6.3
CVE-2025-7189

A vulnerability, which was classified as critical, has been found in code-projects Chat System 1.0. Affected by this iss

6.3
CVE-2025-7188

A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an

5.4
CVE-2025-53479

The CheckUser extension’s Special:CheckUser interface is vulnerable to reflected XSS via the rev-deleted-user message. T

4.9
CVE-2025-4663

An Improper Check for Unusual or Exceptional Conditions vulnerability in Brocade Fabric OS before 9.2.2.a could allow

5.5
CVE-2025-47135

Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure o

7.8
CVE-2025-30312

Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.