Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

48,153· Page 628/964
8.8
CVE-2025-4354

A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the fun

6.3
CVE-2025-4353

A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424.

6.3
CVE-2025-4352

A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250

8.8
CVE-2025-4350

A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. This vulnerability affects the functi

8.8
CVE-2025-4349

A vulnerability classified as critical has been found in D-Link DIR-600L up to 2.07B01. This affects the function formSy

8.2
CVE-2025-0984

Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Input During Web Page Generation (XSS or 'Cr

8.8
CVE-2025-4348

A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been rated as critical. Affected by this issue is the

8.8
CVE-2025-4347

A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been declared as critical. Affected by this vulnerabi

9.8
CVE-2025-40625

Unrestricted file upload in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to upload any file wi

9.8
CVE-2025-40624

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to ob

9.8
CVE-2025-40623

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to ob

9.8
CVE-2025-40622

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to ob

9.8
CVE-2025-40621

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to ob

9.8
CVE-2025-40620

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to ob

8.8
CVE-2025-4346

A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been classified as critical. Affected is the function

8.8
CVE-2025-4345

A vulnerability was found in D-Link DIR-600L up to 2.07B01 and classified as critical. This issue affects the function f

8.8
CVE-2025-4344

A vulnerability, which was classified as critical, was found in D-Link DIR-600L up to 2.07B01. This affects the function

8.1
CVE-2025-46762

Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute ar

6.4
CVE-2025-3782

The Cision Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all version

7.5
CVE-2025-2011

The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter

8.8
CVE-2025-4343

A vulnerability has been found in D-Link DIR-600L up to 2.07B01 and classified as critical. This vulnerability affects t

8.8
CVE-2025-4342

A vulnerability, which was classified as critical, has been found in D-Link DIR-600L up to 2.07B01. Affected by this iss

6.3
CVE-2025-4341

A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is th

3.3
CVE-2025-27248

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

3.3
CVE-2025-27241

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

3.8
CVE-2025-27132

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through o

3.3
CVE-2025-25218

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

3.3
CVE-2025-25052

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow.

3.3
CVE-2025-22886

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.

7.8
CVE-2025-21475

Memory corruption while processing escape code, when DisplayId is passed with large unsigned value.

7.8
CVE-2025-21470

Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.

7.8
CVE-2025-21469

Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call.

7.8
CVE-2025-21468

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to w

7.8
CVE-2025-21467

Memory corruption while reading the FW response from the shared queue.

7.8
CVE-2025-21462

Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.

7.8
CVE-2025-21460

Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed cont

7.5
CVE-2025-21459

Transient DOS while parsing per STA profile in ML IE.

7.8
CVE-2025-21453

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential f

7.5
CVE-2024-49847

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.

8.2
CVE-2024-49846

Memory corruption while decoding of OTA messages from T3448 IE.

7.8
CVE-2024-49845

Memory corruption during the FRS UDS generation process.

7.8
CVE-2024-49844

Memory corruption while triggering commands in the PlayReady Trusted application.

7.8
CVE-2024-49842

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.

7.8
CVE-2024-49841

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.

7.8
CVE-2024-49835

Memory corruption while reading secure file.

6.6
CVE-2024-49830

Memory corruption while processing an IOCTL call to set mixer controls.

6.7
CVE-2024-49829

Memory corruption can occur during context user dumps due to inadequate checks on buffer length.

6.6
CVE-2024-45583

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations.

6.6
CVE-2024-45581

Memory corruption while sound model registration for voice activation with audio kernel driver.

7.8
CVE-2024-45579

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request informa

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.