Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

48,153· Page 565/964
6.3
CVE-2025-5384

A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAuto

2.4
CVE-2025-5383

A vulnerability was found in Yifang CMS up to 2.0.2 and classified as problematic. Affected by this issue is some unknow

2.7
CVE-2025-5381

A vulnerability, which was classified as problematic, was found in Yifang CMS up to 2.0.2. Affected is the function down

6.3
CVE-2025-5380

A vulnerability, which was classified as critical, has been found in ashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 up to 4d3f0ad

4.3
CVE-2025-5379

A vulnerability classified as critical was found in NuCom NC-WR744G 8.5.5 Build 20200530.307. This vulnerability affects

4.3
CVE-2025-5378

A vulnerability classified as problematic has been found in Astun Technology iShare Maps 5.4.0. This affects an unknown

4.3
CVE-2025-5377

A vulnerability was found in Astun Technology iShare Maps 5.4.0. It has been rated as problematic. Affected by this issu

7.3
CVE-2025-5376

A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0. It has been declared as

7.2
CVE-2025-4857

The Newsletters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.9.9

5.3
CVE-2025-4691

The Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking plugin for WordPress is vulnerable to I

6.3
CVE-2025-5375

A vulnerability was found in PHPGurukul HPGurukul Online Birth Certificate System 2.0. It has been classified as critica

6.3
CVE-2025-5374

A vulnerability was found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This issue affec

6.3
CVE-2025-5373

A vulnerability has been found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This vulner

7.3
CVE-2025-5371

A vulnerability, which was classified as critical, has been found in SourceCodester Health Center Patient Record Managem

6.4
CVE-2025-5290

The Borderless – Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th

6.4
CVE-2025-3813

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_ele

6.4
CVE-2025-5292

The Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Buil

6.4
CVE-2025-5285

The Product Subtitle for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘htmlTag’

8.8
CVE-2025-4672

The Offsprout Page Builder plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization plac

9.8
CVE-2025-4631

The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the stockt

9.8
CVE-2025-4607

The PSW Front-end Login & Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to,

6.4
CVE-2025-4595

The FastSpring plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fastspring/block-fast

6.4
CVE-2025-4590

The Daisycon prijsvergelijkers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'daisy

8.8
CVE-2025-4103

The WP-GeoMeta plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wp_aj

7.3
CVE-2025-5370

A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. Affected by this vulnerability is an unk

7.3
CVE-2025-5369

A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected i

6.3
CVE-2025-5368

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. This issue affe

4.7
CVE-2025-5016

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Excerpt Highl

7.3
CVE-2025-5367

A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0. It has been declared as critical. This vulne

7.3
CVE-2025-5365

A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been classified as critical. This a

5.1
CVE-2018-25111

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.

7.3
CVE-2025-5364

A vulnerability was found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by thi

7.3
CVE-2025-5363

A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected b

7.3
CVE-2025-5362

A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affecte

7.3
CVE-2025-5361

A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Th

7.3
CVE-2025-5360

A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability

9.8
CVE-2025-48949

Navidrome is an open source web-based music collection server and streamer. Versions 0.55.0 through 0.55.2 have a vulner

6.5
CVE-2025-48948

Navidrome is an open source web-based music collection server and streamer. A permission verification flaw in versions p

3.7
CVE-2025-48946

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. libo

N/A
CVE-2025-48882

PHPOffice Math is a library that provides a set of classes to manipulate different formula file formats. Prior to versio

7.1
CVE-2025-2503

An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to per

7.8
CVE-2025-2502

An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to ele

7.8
CVE-2025-2501

An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate pr

5.3
CVE-2025-1479

An open debug interface was reported in the Legion Space software included on certain Legion devices that could allow a

7.3
CVE-2025-5359

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects a

6.5
CVE-2025-48944

vLLM is an inference and serving engine for large language models (LLMs). In version 0.8.0 up to but excluding 0.9.0, th

6.5
CVE-2025-48943

vLLM is an inference and serving engine for large language models (LLMs). Version 0.8.0 up to but excluding 0.9.0 have a

6.5
CVE-2025-48942

vLLM is an inference and serving engine for large language models (LLMs). In versions 0.8.0 up to but excluding 0.9.0, h

9.8
CVE-2025-48938

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been id

N/A
CVE-2025-48885

application-urlshortener create shortened URLs for XWiki pages. Versions prior to 1.2.4 are vulnerable to users with vie

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.