Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

48,153· Page 745/964
9.3
CVE-2025-30524

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in origincode Product

6.5
CVE-2025-2820

An authenticated attacker can compromise the availability of the device via the network

6.6
CVE-2025-2819

There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validat

9.3
CVE-2025-28942

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Trust Payments Tru

8.5
CVE-2025-28939

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in EuroCizia WP Googl

7.1
CVE-2025-28935

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in puzich Fancybox Pl

7.1
CVE-2025-28934

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in chaozh Simple Post

7.1
CVE-2025-28928

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sureshdsk Are you

7.1
CVE-2025-28924

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Simbul ZenphotoPre

7.1
CVE-2025-28921

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in homejunction Spati

7.1
CVE-2025-28917

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in crazyloong Custom

9.8
CVE-2025-28916

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

7.1
CVE-2025-28911

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gravity2pdf Gravit

7.1
CVE-2025-28903

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hectorgarrofe Driv

7.1
CVE-2025-28899

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in toddhuish WP Event

9.3
CVE-2025-28898

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP Mu

9.9
CVE-2025-28893

Improper Control of Generation of Code ('Code Injection') vulnerability in Govind Visual Text Editor visual-text-editor

7.1
CVE-2025-28890

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in puzich Lightview P

7.1
CVE-2025-28889

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in starblank Custom P

6.5
CVE-2025-28885

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fiverraffiliates F

7.1
CVE-2025-28882

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Omnify, Inc. Omnif

7.1
CVE-2025-28880

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jotis Blue Captcha

7.1
CVE-2025-28877

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in m.tiggelaar Key4ce

8.5
CVE-2025-28873

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Scott Taylor Shuff

7.1
CVE-2025-28869

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shauno NextGEN Gal

7.1
CVE-2025-28865

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lionelroux WP Colo

7.1
CVE-2025-28858

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arrow Plugins Arro

7.1
CVE-2025-28855

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in srcoley Teleport t

7.6
CVE-2025-27404

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versio

7.1
CVE-2025-27267

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in srcoley Random Quo

7.5
CVE-2025-27015

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

7.1
CVE-2025-27014

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designingmedia Hos

8.1
CVE-2025-26986

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

9.3
CVE-2025-26941

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church

5.9
CVE-2025-26929

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Account

6.5
CVE-2025-26923

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event p

6.5
CVE-2025-26922

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in techthemes AuraMar

6.5
CVE-2025-26869

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Build allows Store

6.5
CVE-2025-26747

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 99colorthemes Rain

6.5
CVE-2025-26739

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themefunction news

7.1
CVE-2025-26584

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Travis Ballard TBT

7.1
CVE-2025-26583

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Video

7.1
CVE-2025-26581

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Pictu

7.1
CVE-2025-26579

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Micro

7.1
CVE-2025-26576

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in takumin WP Simple

7.1
CVE-2025-26575

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Maurer Displa

7.1
CVE-2025-26573

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JamRizzi Technolog

7.1
CVE-2025-26566

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Frank In Stock Mai

7.1
CVE-2025-26565

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kagla GNUPress gnu

7.1
CVE-2025-26564

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kagla GNUCommerce

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.