Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

22,410 of 48,153· Page 79/449
4.3
CVE-2025-12290

A vulnerability has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall Syste

4.3
CVE-2025-12289

A flaw has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Af

4.3
CVE-2025-12288

A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4. Affected is an unknown function of the file

4.7
CVE-2025-12287

A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 2

6.4
CVE-2025-50055

Cross-site scripting (XSS) vulnerability in the SAML Authentication module in OpenVPN Access Server version 2.14.0 throu

4.3
CVE-2025-12283

A security flaw has been discovered in code-projects Client Details System 1.0. The impacted element is an unknown funct

6.1
CVE-2025-41384

Cross-Site Scripting (XSS) vulnerability reflected in SuiteCRM v7.14.1. This vulnerability allows an attacker to execute

4.3
CVE-2025-12276

A vulnerability was detected in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. Affected by this issue is som

4.3
CVE-2025-12270

A vulnerability was determined in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. The impacted element is an

6.3
CVE-2025-12268

A vulnerability has been found in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. Impacted is an unknown func

4.3
CVE-2025-59463

An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.

6.5
CVE-2025-59462

An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates an

5.5
CVE-2025-59459

An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing pe

4.3
CVE-2025-12267

A flaw has been found in abhicodebox ModernShop 20250922. This issue affects some unknown processing of the file /search

6.3
CVE-2025-12266

A vulnerability was detected in Zytec Dalian Zhuoyun Technology Central Authentication Service up to 20251009. This vuln

6.3
CVE-2025-12263

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the

6.3
CVE-2025-12262

A vulnerability was determined in code-projects Online Event Judging System 1.0. This impacts an unknown function of the

5.3
CVE-2025-46583

There is a Denial of Service(DoS)vulnerability in the ZTE MC889A Pro product. Due to insufficient validation of the inpu

6.3
CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/ac

6.3
CVE-2025-12256

A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code

6.3
CVE-2025-12255

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of th

6.3
CVE-2025-12254

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown

6.3
CVE-2025-12252

A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file

4.7
CVE-2025-12250

A flaw has been found in OpenWGA 7.11.12 Build 737. This affects an unknown function of the file WGA.File of the compone

6.3
CVE-2025-12249

A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. The impacted element is an unknown function

4.3
CVE-2025-12246

A security flaw has been discovered in chatwoot up to 4.7.0. This issue affects some unknown processing of the file app/

5.3
CVE-2025-12245

A vulnerability was identified in chatwoot up to 4.7.0. This vulnerability affects the function initPostMessageCommunica

4.3
CVE-2025-12244

A vulnerability was determined in code-projects Simple E-Banking System 1.0. This affects an unknown part of the file /e

6.3
CVE-2025-12243

A vulnerability was found in code-projects Client Details System 1.0. Affected by this issue is some unknown functionali

6.3
CVE-2025-12242

A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown func

6.3
CVE-2025-12238

A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown fun

5.4
CVE-2025-11154

The IDonate WordPress plugin before 2.1.13 does not have authorisation and CSRF when deleting users via an action handl

4.7
CVE-2025-12226

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function save_house

6.3
CVE-2025-12223

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/

6.3
CVE-2025-12222

A security vulnerability has been detected in Bdtask Flight Booking Software up to 3.1. Affected by this issue is some u

4.3
CVE-2025-58918

Cross-Site Request Forgery (CSRF) vulnerability in Waituk Entrada theme allows Cross Site Request Forgery.This issue aff

6.5
CVE-2025-48088

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm_Force U

5.3
CVE-2025-12205

A vulnerability was detected in Kamailio 5.5. The affected element is the function sr_push_yy_state of the file src/core

5.3
CVE-2025-12204

A security vulnerability has been detected in Kamailio 5.5. Impacted is the function rve_destroy of the file src/core/rv

6.3
CVE-2025-12203

A weakness has been identified in givanz Vvveb up to 1.0.7.3. This issue affects the function sanitizeFileName of the fi

4.9
CVE-2025-62988

Server-Side Request Forgery (SSRF) vulnerability in Codeless Slider Templates slider-templates allows Server Side Reques

6.5
CVE-2025-62987

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Builderall Builder

6.5
CVE-2025-62985

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in llamaman Simple Pu

6.5
CVE-2025-62984

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPeka WP AdCenter

6.5
CVE-2025-62983

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sudar Muthu Posts

5.9
CVE-2025-62982

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sarah Giles Dynami

4.7
CVE-2025-62981

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zo

5.4
CVE-2025-62980

Missing Authorization vulnerability in MDZ Persian Admnin Fonts persian-admin-fonts allows Exploiting Incorrectly Config

5.3
CVE-2025-62979

Insertion of Sensitive Information Into Sent Data vulnerability in airesvsg ACF to REST API acf-to-rest-api allows Retri

4.3
CVE-2025-62978

Missing Authorization vulnerability in Kiotviet KiotViet Sync kiotvietsync allows Exploiting Incorrectly Configured Acce

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.