Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

48,153· Page 539/964
6.1
CVE-2024-41505

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the "Pessoas" (persons) section

6.1
CVE-2024-41504

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS). In the "Oportunidades" (opportuni

6.1
CVE-2024-41503

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the field "Ttulo" (title) insid

6.1
CVE-2024-41502

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) via the form field "Observaces" (o

2.4
CVE-2025-5973

A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this

2.4
CVE-2025-5972

A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is

5.5
CVE-2025-47112

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds read vulne

5.5
CVE-2025-47111

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a NULL Pointer Dereference

7.8
CVE-2025-47107

InCopy versions 20.2, 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in

5.5
CVE-2025-43579

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an Information Exposure vul

5.5
CVE-2025-43578

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds read vulne

7.8
CVE-2025-43577

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerabil

7.8
CVE-2025-43576

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerabil

7.8
CVE-2025-43575

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds write vuln

7.8
CVE-2025-43574

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerabil

7.8
CVE-2025-43573

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerabil

7.8
CVE-2025-43550

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerabil

7.8
CVE-2025-30327

InCopy versions 20.2, 19.5.3 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could resu

6.3
CVE-2025-5971

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been classified as critical. This affe

8.8
CVE-2025-5943

MicroDicom DICOM Viewer suffers from an out-of-bounds write vulnerability. Remote attackers are able to exploit this i

7.8
CVE-2025-43588

Substance3D - Sampler versions 5.0 and earlier are affected by an out-of-bounds write vulnerability that could result in

7.8
CVE-2025-43581

Substance3D - Sampler versions 5.0 and earlier are affected by an out-of-bounds write vulnerability that could result in

6.1
CVE-2025-36580

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Gener

6.8
CVE-2025-36578

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Incorrect Authorization vulnerability. A low privilege

6.1
CVE-2025-36577

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Gener

2.7
CVE-2025-36576

Dell Wyse Management Suite, versions prior to WMS 5.2, contain a Cross-Site Request Forgery (CSRF) vulnerability. A high

7.5
CVE-2025-36575

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Exposure of Sensitive Information Through Data Queries

8.2
CVE-2025-36574

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthentica

6.6
CVE-2025-2884

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack

9.8
CVE-2025-2474

Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker

N/A
CVE-2025-0052

Improper input validation performed during the authentication process of FlashBlade could lead to a system Denial of Ser

N/A
CVE-2025-0051

Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Ser

5.4
CVE-2024-37396

A stored cross-site scripting (XSS) vulnerability in the Calendar function of REDCap 13.1.9 allows authenticated users t

5.4
CVE-2024-37395

A stored cross-site scripting (XSS) vulnerability in the Public Survey function of REDCap 13.1.9 allows authenticated us

5.4
CVE-2024-37394

A stored cross-site scripting (XSS) vulnerability in the Project Dashboards of REDCap 13.1.9 allows authenticated users

2.4
CVE-2025-5970

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as problematic. Affected by t

8.8
CVE-2025-5969

A vulnerability has been found in D-Link DIR-632 FW103B08 and classified as critical. Affected by this vulnerability is

8.2
CVE-2025-47977

Improper neutralization of input during web page generation ('cross-site scripting') in Nuance Digital Engagement Platfo

4.4
CVE-2025-47969

Exposure of sensitive information to an unauthorized actor in Windows Hello allows an authorized attacker to disclose in

7.8
CVE-2025-47968

Improper input validation in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.

7.8
CVE-2025-47962

Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally.

8.4
CVE-2025-47957

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

5.5
CVE-2025-47956

External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally.

7.8
CVE-2025-47955

Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privi

8.4
CVE-2025-47953

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

7.8
CVE-2025-47176

'.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally.

7.8
CVE-2025-47175

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

7.8
CVE-2025-47174

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

7.8
CVE-2025-47173

Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally.

8.8
CVE-2025-47172

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allo

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.