Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

48,153· Page 802/964
9.8
CVE-2025-1869

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/c

7.8
CVE-2025-21424

Memory corruption while calling the NPU driver APIs concurrently.

6.8
CVE-2025-1868

Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scann

8.7
CVE-2025-0475

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, an

7.8
CVE-2024-53034

Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed wit

7.8
CVE-2024-53033

Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer addr

7.8
CVE-2024-53032

Memory corruption may occur in keyboard virtual device due to guest VM interaction.

7.8
CVE-2024-53031

Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.

7.8
CVE-2024-53030

Memory corruption while processing input message passed from FE driver.

7.8
CVE-2024-53029

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine.

7.8
CVE-2024-53028

Memory corruption may occur while processing message from frontend during allocation.

7.5
CVE-2024-53027

Transient DOS may occur while processing the country IE.

5.5
CVE-2024-53025

Transient DOS can occur while processing UCI command.

7.8
CVE-2024-53024

Memory corruption in display driver while detaching a device.

7.8
CVE-2024-53023

Memory corruption may occur while accessing a variable during extended back to back tests.

7.8
CVE-2024-53022

Memory corruption may occur during communication between primary and guest VM.

7.8
CVE-2024-53014

Memory corruption may occur while validating ports and channels in Audio driver.

7.8
CVE-2024-53012

Memory corruption may occur due to improper input validation in clock device.

7.9
CVE-2024-53011

Information disclosure may occur due to improper permission and access controls to Video Analytics engine.

7.8
CVE-2024-49836

Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.

7.8
CVE-2024-45580

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.

7.8
CVE-2024-43062

Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.

7.8
CVE-2024-43061

Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound mode

7.8
CVE-2024-43060

Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.

7.8
CVE-2024-43059

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

7.8
CVE-2024-43057

Memory corruption while processing command in Glink linux.

5.5
CVE-2024-43056

Transient DOS during hypervisor virtual I/O operation in a virtual machine.

7.8
CVE-2024-43055

Memory corruption while processing camera use case IOCTL call.

5.5
CVE-2024-43051

Information disclosure while deriving keys for a session for any Widevine use case.

5.4
CVE-2024-38426

While processing the authentication message in UE, improper authentication may lead to information disclosure.

6.5
CVE-2024-24778

Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resou

5.3
CVE-2024-10925

A vulnerability in GitLab-EE affecting all versions from 16.2 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 1

5.4
CVE-2024-8186

An issue has been discovered in GitLab CE/EE affecting all versions from 16.6 before 17.7.6, 17.8 before 17.8.4, and 17.

5.3
CVE-2025-25280

Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Mach

7.5
CVE-2025-24846

Authentication bypass vulnerability exists in FutureNet AS series (Industrial Routers) provided by Century Systems Co.,

7.1
CVE-2025-24654

Missing Authorization vulnerability in SEO Squirrly SEO Plugin by Squirrly SEO squirrly-seo.This issue affects SEO Plugi

N/A
CVE-2025-1867

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in ithewei libhv allows H

N/A
CVE-2025-1866

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Po

9.8
CVE-2025-1864

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overfl

7.3
CVE-2025-1859

A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some

7.3
CVE-2025-1858

A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unk

7.3
CVE-2025-1857

A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This affe

7.3
CVE-2025-1856

A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue i

8.1
CVE-2025-1723

Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session m

6.3
CVE-2025-1855

A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this v

6.3
CVE-2025-1854

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unkn

4.9
CVE-2024-53386

Stage.js through 0.8.10 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not di

4.9
CVE-2024-53382

Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but

8.8
CVE-2025-1853

A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub_49E09

8.8
CVE-2025-1852

A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.