CVE-2025 list

CVE-2025 records published in January 2025

Page two of two: records 1,001 to 1,854 of the 1,854 published in January 2025, newest first. The first page carries the figures for January 2025.

CVE-2025 records published in January 2025, newest first: records 1,001 to 1,854 of 1,854
CVE Summary CVSS EPSS Published Signals
CVE-2025-23823CNZZ&51LA for WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23822Category Custom Fields WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23821WP Cookies Alert WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23820Content Security Policy Pro WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23818More Link Modifier WordPress plugin CSRF to cross-site scripting7.1CNA v3.10.2%2025-01-16
CVE-2025-23817MHR-Custom-Anti-Copy WordPress plugin CSRF to stored cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-01-16
CVE-2025-23816Metaphor Widgets WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-16
CVE-2025-23815root Cookie WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23810Len Slider WordPress plugin CSRF to reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-01-16
CVE-2025-23808Custom List Table Example WordPress plugin CSRF to reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-01-16
CVE-2025-23807Spiderpowa Embed PDF WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-16
CVE-2025-23805SEOReseller Partner WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23804WP Service Payment Form With Authorize.net WordPress plugin CSRF to reflected cross-site scripting7.1CNA v3.10.2%2025-01-16
CVE-2025-23802WP-Revive Adserver WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-16
CVE-2025-23801Style Admin WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23800OrangeBox WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23797WP Options Editor WordPress plugin CSRF to privilege escalation9.8CNA v3.10.4%2025-01-16
CVE-2025-23796Easy Portfolio WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-16
CVE-2025-23795Easy FAQs WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-16
CVE-2025-23794wp_amaps WordPress plugin reflected cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-16
CVE-2025-23793Auto FTP WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2025-01-16
CVE-2025-23791Horizontal Line Shortcode WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-16
CVE-2025-23785AI Responsive Gallery Album WordPress plugin broken access control4.3CNA v3.10.4%2025-01-16
CVE-2025-23783Greek Namedays Widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-16
CVE-2025-23780Easy Code Snippets WordPress plugin SQL injection7.6CNA v3.10.6%2025-01-16
CVE-2025-23779ResAds WordPress plugin SQL injection7.6CNA v3.10.6%2025-01-16
CVE-2025-23778User Sync ActiveCampaign WordPress plugin broken access control5.4CNA v3.10.5%2025-01-16
CVE-2025-23777GDPR Personal Data Reports WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-16
CVE-2025-23776Cache Sniper for Nginx WordPress plugin broken access control4.3CNA v3.10.4%2025-01-16
CVE-2025-23775GMAPS for WPBakery Page Builder Free WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-16
CVE-2025-23772imaGenius WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-16
CVE-2025-23767Marmoset Viewer WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-16
CVE-2025-23765W3SPEEDSTER WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-01-16
CVE-2025-23764Copy Move Posts WordPress plugin broken access control5.3CNA v3.10.5%2025-01-16Fix
CVE-2025-23761Woo Tuner WordPress plugin broken access control5.4CNA v3.10.5%2025-01-16
CVE-2025-23760Chatter WordPress plugin CSRF to stored XSS7.1CNA v3.10.4%2025-01-16
CVE-2025-23749mybb Last Topics WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23745Tussendoor Call me Now cross-site request forgery7.1CNA v3.10.2%2025-01-16
CVE-2025-23743Social Analytics WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23720Web Push WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23717Theme My Ontraport Smartform WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23715Post and Page Notes WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23713Hack me if you can WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23712Kapost WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16Fix
CVE-2025-23710Flying Twitter Birds WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23708DF Draggable WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23703cstoltenkamp Free MailClient FMC cross-site request forgery7.1CNA v3.10.2%2025-01-16
CVE-2025-23702Anonymize Links WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23699Event Countdown Timer Plugin by TechMix WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-16
CVE-2025-23698WP Custom Google Search WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23694Shabbos and Yom Tov WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23693Secure CAPTCHA WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23692Slider for Writers WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23691Send to Twitter WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23690Book a Place WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23689Blogger Image Import WordPress plugin CSRF to stored XSS7.1CNA v3.10.3%2025-01-16
CVE-2025-23677HTTP to HTTPS link changer by Eyga.net WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23675Import Users to MailChimp WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23673Email on Publish WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23665RSV GMaps WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23664Real Seguro Viagem WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2025-01-16Fix
CVE-2025-23662WP Panoramio WordPress plugin CSRF to cross-site scripting7.1CNA v3.10.2%2025-01-16
CVE-2025-23661NV Slider WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2025-01-16
CVE-2025-23660MFPlugin WordPress plugin CSRF to cross-site scripting7.1CNA v3.10.2%2025-01-16
CVE-2025-23659MercadoLibre Integration WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2025-01-16
CVE-2025-23654Twitter Post WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23649Auphonic Importer WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23644QuoteMedia Tools WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-16
CVE-2025-23642Sidebar-Content from Shortcode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-16
CVE-2025-23641Powie's pLinks PagePeeker WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-16
CVE-2025-23640Rename Author Slug WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23639MDC YouTube Downloader WordPress plugin CSRF to stored XSS6.1NVD v3.10.2%2025-01-16
CVE-2025-23627Comment-Emailer WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2025-01-16
CVE-2025-23623Contact Form 7 CCAvenue Add-on WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-16
CVE-2025-23620Captchelfie Captcha by Selfie WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-16
CVE-2025-23618Twitter Shortcode WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2025-01-16
CVE-2025-23617Floatbox Plus WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23577Word Freshener WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23573WP Background Tile WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23572UpDownUpDown WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23569Shortcode in Comment WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23567GDReseller WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23566Custom Post WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23560Web Testimonials WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23559MemeOne WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23558Geotagged Media WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23557Find Your Reps WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23547LH Login Page WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-01-16
CVE-2025-23537Cross-Site Request Forgery (CSRF) vulnerability in קידום ובניית אתרים add custom google tag manager add-custom-google-tag-manager allows Stored XSS.This issue affects add custom google tag manager: from n/a through <= 1.0.3.7.1CNA v3.10.2%2025-01-16
CVE-2025-23533WP Lyrics WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23532MyAnime Widget WordPress plugin CSRF to privilege escalation8.8CNA v3.10.3%2025-01-16
CVE-2025-23530Custom Post Type Lockdown WordPress plugin CSRF to privilege escalation8.8CNA v3.10.3%2025-01-16
CVE-2025-23528DD Roles WordPress plugin privilege escalation8.8CNA v3.10.6%2025-01-16
CVE-2025-23514Loginplus WordPress plugin broken access control5.3CNA v3.10.6%2025-01-16
CVE-2025-23513Bible Embed WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.2%2025-01-16
CVE-2025-23511WP-BlackCheck WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.2%2025-01-16
CVE-2025-23510WordPress Logging Service plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.2%2025-01-16
CVE-2025-23508Extra Options Favicons WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23501Cookie Consent and Autoblock for GDPR/CCPA WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2025-01-16
CVE-2025-23499Board Election WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.2%2025-01-16
CVE-2025-23497Simple Project Manager WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.2%2025-01-16
CVE-2025-23483Universal Analytics Injector WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23476my-related-posts WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23471ECT Add to Cart Button WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23470Visit Site Link enhanced WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23467RSS News Scroller WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23463MD Custom content after or before of post WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23456EmailShroud WordPress plugin CSRF to reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-01-16
CVE-2025-23455WP VTiger Synchronization WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23453Stars SMTP Mailer WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-01-16Fix
CVE-2025-23452EditionGuard for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-01-16
CVE-2025-23445Easy Tynt WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.2%2025-01-16
CVE-2025-23444Scroll Top Advanced WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-16
CVE-2025-23442Shockingly Big IE6 Warning WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23438WP PT-Viewer WordPress plugin reflected XSS7.1CNA v3.10.4%2025-01-16
CVE-2025-23436Wp-Scribd-List WordPress plugin CSRF to XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23435Password Protect Plugin for WordPress CSRF to stored XSS7.1CNA v3.10.2%2025-01-16
CVE-2025-23434Easy EU Cookie law WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-16
CVE-2025-23432AlT Report WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2025-01-16
CVE-2025-23430Mass Custom Fields Manager WordPress plugin CSRF to cross-site scripting (XSS)7.1CNA v3.10.2%2025-01-16
CVE-2025-23429Altima Lookbook Free for WooCommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2025-01-16
CVE-2025-23426go Social WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.2%2025-01-16
CVE-2025-23424Marquee Style RSS News Ticker WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.2%2025-01-16
CVE-2025-23423SendGrid for WordPress plugin broken access control4.3CNA v3.10.4%2025-01-16
CVE-2025-23201Reflected cross-site scripting on error alert in librenms5.4CNA v3.10.4%2025-01-16Fix
CVE-2025-23200Stored XSS-LibreNMS-Misc Section in librenms4.6CNA v3.130.9%2025-01-16Fix
CVE-2025-23199Stored XSS-LibreNMS-Ports in librenms4.6CNA v3.11.3%2025-01-16Fix
CVE-2025-23198Stored-XSS-LibreNMS-Display-Name in librenms4.6CNA v3.10.4%2025-01-16Fix
CVE-2025-22916Edimax RE11S buffer overflow9.8CISA ADP v3.10.6%2025-01-16
CVE-2025-22913Edimax RE11S buffer overflow9.8CISA ADP v3.10.8%2025-01-16
CVE-2025-22912Edimax RE11S command injection9.8CISA ADP v3.11.9%2025-01-16Exploit code
CVE-2025-22907Edimax RE11S buffer overflow9.8CISA ADP v3.10.6%2025-01-16
CVE-2025-22906Edimax RE11S code injection9.8CISA ADP v3.12.3%2025-01-16
CVE-2025-22905Edimax RE11S code injection9.8CISA ADP v3.14.6%2025-01-16
CVE-2025-22904Edimax RE11S buffer overflow9.8CISA ADP v3.10.6%2025-01-16
CVE-2025-20630Mobile crash via object that can't be cast to String in Attachment field6.5CNA v3.10.6%2025-01-16Fix
CVE-2025-20621Mattermost webapp crash via object that can't be cast to String in Attachment field6.5CNA v3.10.5%2025-01-16Fix
CVE-2025-20072Mobile crash via improper validation of proto style in attachments6.5CNA v3.10.5%2025-01-16Fix
CVE-2025-0518FFmpeg unchecked sscanf return value which leads to memory data leak5.3NVD v3.10.4%2025-01-16Fix
CVE-2025-0476Mobile crash via file with specially crafted filename4.3CNA v3.10.4%2025-01-16Fix
CVE-2025-0473Incomplete cleanup vulnerability in PMB platform7.5v3.10.5%2025-01-16
CVE-2025-0472Information exposure vulnerability in PMB platform7.5v3.10.5%2025-01-16
CVE-2025-0471Unrestricted upload of file with dangerous type vulnerability in PMB platform9.8v3.10.6%2025-01-16
CVE-2025-0457NetVision Information airPASS OS command injection8.8CNA v3.10.9%2025-01-16Fix
CVE-2025-0456NetVision Information airPASS missing authentication9.8CNA v3.10.8%2025-01-16Fix
CVE-2025-0455NetVision Information airPASS SQL injection9.8CNA v3.10.6%2025-01-16Fix
CVE-2025-0170DWT - Directory and Listing WordPress theme reflected cross-site scripting6.1CNA v3.10.3%2025-01-16Fix
CVE-2025-23061Mongoose search injection9.8v3.17.0%2025-01-15NucleiExploit codeFix
CVE-2025-23040Maliciously crafted remote URLs could lead to credential leak in GitHub Desktop6.6CNA v3.10.8%2025-01-15Fix
CVE-2025-23013Yubico pam-u2f authentication bypass7.3CNA v4.00.4%2025-01-15Fix
CVE-2025-22997Linksys E5600 prf_table_content component stored cross-site scripting4.8CISA ADP v3.10.3%2025-01-15
CVE-2025-22996Linksys E5600 spf_table_content component stored cross-site scripting4.8CISA ADP v3.10.3%2025-01-15
CVE-2025-22976dingfanzuCMS v.1.0 SQL injection7.1CISA ADP v3.10.2%2025-01-15
CVE-2025-22968D-Link Dwr-m972v code injection9.8CISA ADP v3.12.5%2025-01-15Exploit code
CVE-2025-22964Ddsn CM3 Acora Content Management System SQL injection8.1CISA ADP v3.10.9%2025-01-15Exploit code
CVE-2025-22799Neon Product Designer WordPress plugin SQL injection8.5CNA v3.10.4%2025-01-15
CVE-2025-22798Responsive jQuery Slider WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-15
CVE-2025-22797Gallery and Lightbox WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-15
CVE-2025-22795Multilang Contact Form WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-15
CVE-2025-22793Bold pagos en linea WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-15Fix
CVE-2025-22788CoDesigner WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-01-15
CVE-2025-22787Button Block WordPress plugin broken access control8.8v3.10.3%2025-01-15Fix
CVE-2025-22786ElementInvader Addons for Elementor WordPress plugin local file inclusion8.8v3.10.7%2025-01-15Fix
CVE-2025-22785Course Booking System WordPress plugin SQL injection9.3CNA v3.12.9%2025-01-15NucleiExploit codeFix
CVE-2025-22784Background Control WordPress plugin CSRF to arbitrary file deletion8.6CNA v3.10.3%2025-01-15
CVE-2025-22782WR Price List Manager For Woocommerce WordPress plugin remote code execution (RCE)9.9CNA v3.10.5%2025-01-15Fix
CVE-2025-22781Nativery WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-15
CVE-2025-22780wp-pano WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-15
CVE-2025-22779WP News Sliders WordPress plugin broken access control4.3CNA v3.10.3%2025-01-15
CVE-2025-22778Lijit Search WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-15
CVE-2025-22776WP Bulletin Board WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-15
CVE-2025-22773WordPress Htaccess File Editor plugin broken authentication5.3CNA v3.10.4%2025-01-15Fix
CVE-2025-22769Multifox WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-15
CVE-2025-22766Zarinpal Paid Download WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-15
CVE-2025-22765WP Order By WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-15
CVE-2025-22764WP Post Corrector WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-15
CVE-2025-22762Octrace Support Pro WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-01-15
CVE-2025-22761Ajax Contact Form WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-15Fix
CVE-2025-22760CodeBard Help Desk WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2025-01-15
CVE-2025-22759Post and Page Builder by BoldGrid Visual Drag and Drop Editor WordPress plugin cross-site scripting5.4v3.10.3%2025-01-15Fix
CVE-2025-22758Elementor AI Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-15
CVE-2025-22755WP Headmaster WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-15
CVE-2025-22754Amber WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-15
CVE-2025-22753turboSMTP WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-15Fix
CVE-2025-22752GSheetConnector for Forminator Forms WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2025-01-15Fix
CVE-2025-22751Partners WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-15
CVE-2025-22750Post Carousel and Slider WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-15
CVE-2025-22749Social Media Engine WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-15
CVE-2025-22748SetMore Theme Custom Post Types WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-15
CVE-2025-22747Foundation Columns WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-15
CVE-2025-22746HireHive Job WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-15
CVE-2025-22745Navigation Du Lapin Blanc WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-15
CVE-2025-22744S-DEV SEO WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-15
CVE-2025-22743Twitter Bootstrap Collapse aka Accordian Shortcode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-15
CVE-2025-22742WP ViewSTL WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-15
CVE-2025-22738WP ULike WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2025-01-15Fix
CVE-2025-22737WpTravelly WordPress plugin broken access control5.3CNA v3.10.3%2025-01-15Fix
CVE-2025-22736User Management WordPress plugin privilege escalation8.8CNA v3.10.4%2025-01-15Fix
CVE-2025-22734Posts Footer Manager WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-01-15Fix
CVE-2025-22731Build Private Store For Woocommerce WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-01-15Fix
CVE-2025-22729VOD Infomaniak WordPress plugin broken access control4.3CNA v3.10.3%2025-01-15Fix
CVE-2025-22724Product Carousel For WooCommerce WoorouSell WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-15Fix
CVE-2025-22587SEO Bulk Editor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-15
CVE-2025-22394Dell Display Manager time-of-check time-of-use race condition6.7CNA v3.10.1%2025-01-15Fix
CVE-2025-22346Course Migration for LearnDash WordPress plugin server side request forgery (SSRF)6.4CNA v3.10.3%2025-01-15
CVE-2025-22329Agile Logix Free Google Maps stored cross-site scripting6.5CNA v3.10.3%2025-01-15
CVE-2025-22317Gallery Images Ape WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-15
CVE-2025-22146Improper authentication on SAML SSO process allows user impersonation in sentry9.1CNA v3.10.6%2025-01-15Fix
CVE-2025-21629Linux kernel IPv6 checksum offload vulnerability8.2CNA v3.10.4%2025-01-15Fix
CVE-2025-21101Dell Display Manager race condition6.6CNA v3.10.1%2025-01-15Fix
CVE-2025-21088Mattermost WebApp crash via improper validation of proto style in attachments6.5CNA v3.10.6%2025-01-15Fix
CVE-2025-21083Mattermost insufficient input validation on Post Props6.5CNA v3.10.5%2025-01-15Fix
CVE-2025-20088Mattermost insufficient input validation on Post Props6.5CNA v3.10.6%2025-01-15Fix
CVE-2025-20086Mattermost insufficient input validation on Post Props6.5CNA v3.10.4%2025-01-15Fix
CVE-2025-20036Mattermost insufficient input validation on Post Props6.5CNA v3.10.5%2025-01-15Fix
CVE-2025-0502CrafterCMS transmission of private resources into a new sphere in Crafter Engine9.1v3.10.4%2025-01-15Fix
CVE-2025-0501Issue affecting Amazon WorkSpaces Clients (when running PCoIP protocol)7.7CNA v4.00.5%2025-01-15Fix
CVE-2025-0500Amazon WorkSpaces, AppStream and DCV clients improper certificate validation7.7CNA v4.00.5%2025-01-15Fix
CVE-2025-0492D-Link DIR-823X FUN_00412244 null pointer dereference8.7CNA v4.01.9%2025-01-15
CVE-2025-0491Fanli2012 native-php-cms cat_dodel.php SQL injection9.8v3.10.6%2025-01-15
CVE-2025-0490Fanli2012 native-php-cms article_dodel.php SQL injection8.8v3.10.6%2025-01-15
CVE-2025-0489Fanli2012 native-php-cms friendlink_dodel.php SQL injection8.8v3.10.5%2025-01-15
CVE-2025-0488Fanli2012 native-php-cms product_list.php SQL injection8.8v3.10.5%2025-01-15
CVE-2025-0487Fanli2012 native-php-cms cat_edit.php SQL injection9.8v3.10.5%2025-01-15
CVE-2025-0486Fanli2012 native-php-cms login.php SQL injection9.8v3.10.5%2025-01-15
CVE-2025-0485Fanli2012 native-php-cms sysconfig_doedit.php cross-site scripting6.1v3.10.3%2025-01-15
CVE-2025-0484Fanli2012 native-php-cms Backend sysconfig_doedit.php improper authorization7.5v3.10.5%2025-01-15
CVE-2025-0483Fanli2012 native-php-cms jump.php cross-site scripting4.6v3.10.3%2025-01-15
CVE-2025-0482Fanli2012 native-php-cms user_recoverpwd.php default credentials7.3v3.10.6%2025-01-15
CVE-2025-0481D-Link DIR-878 HTTP POST request dllog.cgi information disclosure7.5v3.11.4%2025-01-15
CVE-2025-0480WuzhiCMS config.php test server-side request forgery4.3v3.10.5%2025-01-15
CVE-2025-0448Google Chrome Compositing inappropriate implementation4.3CISA ADP v3.10.3%2025-01-15Fix
CVE-2025-0447Google Chrome Navigation inappropriate implementation8.8CISA ADP v3.10.5%2025-01-15Fix
CVE-2025-0446Google Chrome extensions inappropriate implementation4.3CISA ADP v3.10.3%2025-01-15Fix
CVE-2025-0443Google Chrome extensions improper input validation8.8CISA ADP v3.10.5%2025-01-15Fix
CVE-2025-0442Google Chrome Payments inappropriate implementation6.5CISA ADP v3.10.3%2025-01-15Fix
CVE-2025-0441Google Chrome Fenced Frames inappropriate implementation6.5CISA ADP v3.10.4%2025-01-15Fix
CVE-2025-0440Google Chrome Fullscreen inappropriate implementation6.5CISA ADP v3.10.4%2025-01-15Fix
CVE-2025-0439Google Chrome race condition6.5CISA ADP v3.10.3%2025-01-15Fix
CVE-2025-0438Google Chrome Tracing stack-based buffer overflow8.8CISA ADP v3.10.5%2025-01-15Fix
CVE-2025-0437Google Chrome Metrics out-of-bounds read8.8v3.10.3%2025-01-15Fix
CVE-2025-0436Google Chrome Skia integer overflow8.8CISA ADP v3.10.6%2025-01-15Fix
CVE-2025-0435Google Chrome Navigation inappropriate implementation6.5CISA ADP v3.10.3%2025-01-15Fix
CVE-2025-0434Google Chrome V8 out-of-bounds access8.8CISA ADP v3.16.0%2025-01-15Fix
CVE-2025-0356NEC WX1500HP OS command injection7.2CNA v3.10.6%2025-01-15
CVE-2025-0355NEC WG2600HS NEC Corporation Aterm missing authentication7.5CNA v3.10.5%2025-01-15
CVE-2025-0354NEC WG2600HS NEC Corporation Aterm cross-site scripting4.8CNA v3.10.2%2025-01-15
CVE-2025-0343Swift ASN.1 can crash when parsing maliciously formed BER/DER7.5CISA ADP v3.10.3%2025-01-15Fix
CVE-2025-0215UpdraftPlus - Backup/Restore WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2025-01-15Fix
CVE-2025-0193Stored cross-site scripting (XSS) vulnerability in the MGate 5121/5122/5123 Series5.2CNA v4.00.3%2025-01-15Fix
CVE-2025-23366Org.jboss.hal:hal-console: Wildfly hal console cross-site scripting6.5CNA v3.10.5%2025-01-14Fix
CVE-2025-23082Veeam Backup for Microsoft Azure server-side request forgery7.2CNA v3.00.3%2025-01-14Fix
CVE-2025-23081Wikimedia Foundation Mediawiki various security vulnerabilities in Extension:DataTransfer6.1CISA ADP v3.10.2%2025-01-14Fix
CVE-2025-23080Wikimedia Foundation Mediawiki XSSes in Special:BadgeView5.3CISA ADP v3.10.3%2025-01-14Fix
CVE-2025-23074Wikimedia Foundation Mediawiki information disclosure2.4CISA ADP v3.10.3%2025-01-14Fix
CVE-2025-23073Wikimedia Foundation Mediawiki information disclosure3.5CISA ADP v3.10.3%2025-01-14
CVE-2025-23072Wikimedia Foundation Mediawiki XSS in Special:RefreshSpecial5.4CISA ADP v3.10.3%2025-01-14Fix
CVE-2025-23052HPE Aruba Networking AOS Authenticated command injection7.2CNA v3.11.2%2025-01-14
CVE-2025-23051Authenticated remote code execution in AOS Web-based Management interface7.2CNA v3.10.7%2025-01-14
CVE-2025-23042Gradio Blocked Path ACL Bypass vulnerability8.7CNA v4.01.0%2025-01-14Fix
CVE-2025-23041Umbraco Forms's Short and Long Answer fields are not Validated Server-Side for Maximum Length5.8CNA v3.10.4%2025-01-14Fix
CVE-2025-23038Cross-site scripting (XSS) Stored endpoint remuneracao.php parameter descricao in WeGIA6.4CNA v4.00.3%2025-01-14Fix
CVE-2025-23037Cross-site scripting (XSS) Stored endpoint control.php parameter cargo in WeGIA6.4CNA v4.00.3%2025-01-14Fix
CVE-2025-23036Cross-site scripting (XSS) Reflected endpoint pre_cadastro_funcionario.php parameter msg_e in WeGIA6.4CNA v4.00.3%2025-01-14Fix
CVE-2025-23035Cross-site scripting (XSS) Stored endpoint adicionar_tipo_quadro_horario.php parameter tipo in WeGIA6.4CNA v4.00.3%2025-01-14Fix
CVE-2025-23034Cross-site scripting (XSS) Reflected endpoint tags.php parameter msg_e in WeGIA6.4CNA v4.00.3%2025-01-14Fix
CVE-2025-23033Cross-site scripting (XSS) Stored endpoint adicionar_situacao.php parameter situacao in WeGIA6.4CNA v4.00.3%2025-01-14Fix
CVE-2025-23032Cross-site scripting (XSS) Stored endpoint adicionar_escala.php parameter escala in WeGIA6.4CNA v4.00.3%2025-01-14Fix
CVE-2025-23031Cross-site scripting (XSS) Stored endpoint adicionar_alergia.php parameter nome in WeGIA6.4CNA v4.00.3%2025-01-14Fix
CVE-2025-23030Cross-site scripting (XSS) Reflected endpoint cadastro_funcionario.php parameter cpf in WeGIA6.4CNA v4.00.3%2025-01-14Fix
CVE-2025-23025Privilege escalation (PR) through realtime WYSIWYG editing in XWiki9.1CNA v3.10.4%2025-01-14Fix
CVE-2025-23019IETF IPv6 improper verification of communication source6.5v3.11.0%2025-01-14
CVE-2025-23018IETF IPv6 improper verification of communication source6.5v3.11.0%2025-01-14
CVE-2025-22984Thecosy IceCMS component /api/squareComment/DelectSquareById improper access control7.5CISA ADP v3.10.5%2025-01-14
CVE-2025-22983Thecosy IceCMS component /square/getAllSquare/circle improper access control7.5CISA ADP v3.10.5%2025-01-14
CVE-2025-21607Success of certain Precompile Calls not Checked in Vyper2.3CNA v4.00.7%2025-01-14Fix
CVE-2025-21417Microsoft Windows Telephony service remote code execution8.8CNA v3.11.2%2025-01-14Fix
CVE-2025-21413Microsoft Windows Telephony service remote code execution8.8CNA v3.11.1%2025-01-14Fix
CVE-2025-21411Microsoft Windows Telephony service remote code execution8.8CNA v3.11.1%2025-01-14Fix
CVE-2025-21409Microsoft Windows Telephony service remote code execution8.8CNA v3.11.1%2025-01-14Fix
CVE-2025-21405Visual Studio elevation of privilege7.3CNA v3.10.5%2025-01-14Fix
CVE-2025-21403Microsoft On-Premises Data Gateway information disclosure6.4CNA v3.10.6%2025-01-14Fix
CVE-2025-21402Microsoft Office OneNote remote code execution7.8CNA v3.10.7%2025-01-14Fix
CVE-2025-21395Microsoft Access remote code execution7.8CNA v3.11.0%2025-01-14Fix
CVE-2025-21393Microsoft SharePoint server spoofing6.3CNA v3.11.1%2025-01-14Fix
CVE-2025-21389Microsoft Windows Universal Plug and Play (UPnP) device host denial of service7.5CNA v3.11.9%2025-01-14Fix
CVE-2025-21382Microsoft Windows Graphics component elevation of privilege7.8CNA v3.10.5%2025-01-14Fix
CVE-2025-21378Microsoft Windows CSC service elevation of privilege7.8CNA v3.10.6%2025-01-14Fix
CVE-2025-21374Microsoft Windows CSC service information disclosure5.5CNA v3.10.6%2025-01-14Fix
CVE-2025-21372Microsoft Brokering File System elevation of privilege7.8CNA v3.10.4%2025-01-14Fix
CVE-2025-21370Microsoft Windows Virtualization-Based Security (VBS) Enclave elevation of privilege7.8CNA v3.10.5%2025-01-14Fix
CVE-2025-21366Microsoft Access remote code execution7.8CNA v3.11.1%2025-01-14Fix
CVE-2025-21365Microsoft Office remote code execution7.8CNA v3.10.9%2025-01-14Fix
CVE-2025-21364Microsoft Excel security feature bypass7.8CNA v3.11.6%2025-01-14Fix
CVE-2025-21363Microsoft Word remote code execution7.8CNA v3.10.8%2025-01-14Fix
CVE-2025-21362Microsoft Excel remote code execution8.4CNA v3.10.9%2025-01-14Fix
CVE-2025-21361Microsoft Outlook remote code execution7.8CNA v3.10.7%2025-01-14Fix
CVE-2025-21360Microsoft AutoUpdate (MAU) elevation of privilege7.8CNA v3.10.4%2025-01-14Fix
CVE-2025-21357Microsoft Outlook remote code execution6.7CNA v3.10.6%2025-01-14Fix
CVE-2025-21356Microsoft Office Visio remote code execution7.8CNA v3.10.7%2025-01-14Fix
CVE-2025-21354Microsoft Excel remote code execution8.4CNA v3.10.9%2025-01-14Fix
CVE-2025-21348Microsoft SharePoint server remote code execution7.2CNA v3.11.8%2025-01-14Fix
CVE-2025-21346Microsoft Office security feature bypass7.1CNA v3.10.7%2025-01-14Fix
CVE-2025-21345Microsoft Office Visio remote code execution7.8CNA v3.10.6%2025-01-14Fix
CVE-2025-21344Microsoft SharePoint server remote code execution7.8CNA v3.10.8%2025-01-14Fix
CVE-2025-21343Microsoft Windows Web Threat Defense User service information disclosure7.5CNA v3.11.3%2025-01-14Fix
CVE-2025-21341Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.7%2025-01-14Fix
CVE-2025-21340Microsoft Windows Virtualization-Based Security (VBS) security feature bypass5.5CNA v3.10.5%2025-01-14Fix
CVE-2025-21339Microsoft Windows Telephony service remote code execution8.8CNA v3.11.1%2025-01-14Fix
CVE-2025-21338Microsoft Office GDI+ remote code execution7.8CNA v3.10.5%2025-01-14Fix
CVE-2025-21336Microsoft Windows Cryptographic information disclosure5.6CNA v3.10.6%2025-01-14Fix
CVE-2025-21335Microsoft Windows Hyper-V NT Kernel Integration VSP use-after-free7.8CNA v3.11.4%2025-01-14KEVFix
CVE-2025-21334Microsoft Windows Hyper-V NT Kernel Integration VSP use-after-free7.8CNA v3.11.6%2025-01-14KEVFix
CVE-2025-21333Microsoft Windows Hyper-V NT Kernel Integration VSP heap-based buffer overflow7.8CNA v3.110.1%2025-01-14KEVExploit codeFix
CVE-2025-21332Microsoft Windows MapUrlToZone security feature bypass4.3CNA v3.11.5%2025-01-14Fix
CVE-2025-21331Microsoft Windows Installer elevation of privilege7.3CNA v3.11.0%2025-01-14Fix
CVE-2025-21330Microsoft Windows Remote Desktop services denial of service7.5CNA v3.12.0%2025-01-14Fix
CVE-2025-21329Microsoft Windows MapUrlToZone security feature bypass4.3CNA v3.11.5%2025-01-14Fix
CVE-2025-21328Microsoft Windows MapUrlToZone security feature bypass4.3CNA v3.11.5%2025-01-14Fix
CVE-2025-21327Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21326Microsoft Windows internet Explorer remote code execution7.8CNA v3.11.3%2025-01-14Fix
CVE-2025-21324Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21323Microsoft Windows Kernel Memory information disclosure5.5CNA v3.10.9%2025-01-14Fix
CVE-2025-21321Microsoft Windows Kernel Memory information disclosure5.5CNA v3.10.9%2025-01-14Fix
CVE-2025-21320Microsoft Windows Kernel Memory information disclosure5.5CNA v3.10.9%2025-01-14Fix
CVE-2025-21319Microsoft Windows Kernel Memory information disclosure5.5CNA v3.10.9%2025-01-14Fix
CVE-2025-21318Microsoft Windows Kernel Memory information disclosure5.5CNA v3.10.9%2025-01-14Fix
CVE-2025-21317Microsoft Windows Kernel Memory information disclosure5.5CNA v3.10.9%2025-01-14Fix
CVE-2025-21316Microsoft Windows Kernel Memory information disclosure5.5CNA v3.10.9%2025-01-14Fix
CVE-2025-21315Microsoft Brokering File System elevation of privilege7.8CNA v3.10.6%2025-01-14Fix
CVE-2025-21314Microsoft Windows SmartScreen spoofing6.5CNA v3.11.4%2025-01-14Fix
CVE-2025-21313Microsoft Windows Security Account Manager (SAM) denial of service6.5CNA v3.11.6%2025-01-14Fix
CVE-2025-21312Microsoft Windows Smart Card Reader information disclosure2.4CNA v3.10.7%2025-01-14Fix
CVE-2025-21311Microsoft Windows NTLM V1 elevation of privilege9.8CNA v3.12.2%2025-01-14Fix
CVE-2025-21310Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21309Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.114.9%2025-01-14Fix
CVE-2025-21308Microsoft Windows Themes spoofing6.5CNA v3.12.2%2025-01-14Fix
CVE-2025-21307Microsoft Windows Reliable Multicast Transport Driver (RMCAST) remote code execution9.8CNA v3.11.9%2025-01-14Fix
CVE-2025-21306Microsoft Windows Telephony service remote code execution8.8CNA v3.11.4%2025-01-14Fix
CVE-2025-21305Microsoft Windows Telephony service remote code execution8.8CNA v3.11.4%2025-01-14Fix
CVE-2025-21304Microsoft DWM Core library elevation of privilege7.8CNA v3.10.6%2025-01-14Fix
CVE-2025-21303Microsoft Windows Telephony service remote code execution8.8CNA v3.11.4%2025-01-14Fix
CVE-2025-21302Microsoft Windows Telephony service remote code execution8.8CNA v3.11.4%2025-01-14Fix
CVE-2025-21301Microsoft Windows Geolocation service information disclosure6.5CNA v3.11.6%2025-01-14Fix
CVE-2025-21300Microsoft Windows Universal Plug and Play (UPnP) device host denial of service7.5CNA v3.12.5%2025-01-14Fix
CVE-2025-21299Microsoft Windows Kerberos security feature bypass7.1CNA v3.12.2%2025-01-14Fix
CVE-2025-21298Microsoft Windows OLE remote code execution9.8CNA v3.174.4%2025-01-14Exploit codeFix
CVE-2025-21297Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.11.4%2025-01-14Fix
CVE-2025-21296Microsoft Windows BranchCache remote code execution7.5CNA v3.10.8%2025-01-14Fix
CVE-2025-21295Microsoft Windows SPNEGO Extended Negotiation (NEGOEX) Security Mechanism remote code execution8.1CNA v3.11.6%2025-01-14Fix
CVE-2025-21294Microsoft Digest Authentication remote code execution8.1CNA v3.11.2%2025-01-14Fix
CVE-2025-21293Microsoft Windows active Directory Domain services elevation of privilege8.8CNA v3.115.0%2025-01-14Exploit codeFix
CVE-2025-21292Microsoft Windows Search service elevation of privilege8.8CNA v3.10.8%2025-01-14Fix
CVE-2025-21291Microsoft Windows Direct Show remote code execution8.8CNA v3.11.4%2025-01-14Fix
CVE-2025-21290Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.12.4%2025-01-14Fix
CVE-2025-21289Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.12.4%2025-01-14Fix
CVE-2025-21288Microsoft Windows COM server information disclosure6.5CNA v3.10.7%2025-01-14Fix
CVE-2025-21287Microsoft Windows Installer elevation of privilege7.8CNA v3.10.5%2025-01-14Fix
CVE-2025-21286Microsoft Windows Telephony service remote code execution8.8CNA v3.11.3%2025-01-14Fix
CVE-2025-21285Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.156.2%2025-01-14Fix
CVE-2025-21284Microsoft Windows Virtual Trusted Platform module denial of service5.5CNA v3.10.7%2025-01-14Fix
CVE-2025-21282Microsoft Windows Telephony service remote code execution8.8CNA v3.11.3%2025-01-14Fix
CVE-2025-21281Microsoft COM for Windows elevation of privilege7.8CNA v3.10.6%2025-01-14Fix
CVE-2025-21280Microsoft Windows Virtual Trusted Platform module denial of service5.5CNA v3.10.7%2025-01-14Fix
CVE-2025-21278Microsoft Windows Remote Desktop Gateway (RD Gateway) denial of service6.2CNA v3.10.6%2025-01-14Fix
CVE-2025-21277Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.139.1%2025-01-14Fix
CVE-2025-21276Microsoft Windows MapUrlToZone denial of service7.5CNA v3.12.4%2025-01-14Fix
CVE-2025-21275Microsoft Windows App Package Installer elevation of privilege7.8CNA v3.10.6%2025-01-14Fix
CVE-2025-21274Microsoft Windows Event Tracing denial of service5.5CNA v3.10.8%2025-01-14Fix
CVE-2025-21273Microsoft Windows Telephony service remote code execution8.8CNA v3.11.3%2025-01-14Fix
CVE-2025-21272Microsoft Windows COM server information disclosure6.5CNA v3.10.7%2025-01-14Fix
CVE-2025-21271Microsoft Windows Cloud Files Mini Filter driver elevation of privilege7.8CNA v3.10.5%2025-01-14Fix
CVE-2025-21270Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.12.4%2025-01-14Fix
CVE-2025-21269Microsoft Windows HTML Platforms security feature bypass4.3CNA v3.14.6%2025-01-14Fix
CVE-2025-21268Microsoft Windows MapUrlToZone security feature bypass4.3CNA v3.12.0%2025-01-14Fix
CVE-2025-21266Microsoft Windows Telephony service remote code execution8.8CNA v3.11.3%2025-01-14Fix
CVE-2025-21265Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21263Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21261Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21260Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21258Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21257Microsoft Windows WLAN AutoConfig service information disclosure5.5CNA v3.10.7%2025-01-14Fix
CVE-2025-21256Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21255Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21252Microsoft Windows Telephony service remote code execution8.8CNA v3.11.4%2025-01-14Fix
CVE-2025-21251Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.12.6%2025-01-14Fix
CVE-2025-21250Microsoft Windows Telephony service remote code execution8.8CNA v3.11.7%2025-01-14Fix
CVE-2025-21249Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21248Microsoft Windows Telephony service remote code execution8.8CNA v3.11.5%2025-01-14Fix
CVE-2025-21246Microsoft Windows Telephony service remote code execution8.8CNA v3.11.7%2025-01-14Fix
CVE-2025-21245Microsoft Windows Telephony service remote code execution8.8CNA v3.11.7%2025-01-14Fix
CVE-2025-21244Microsoft Windows Telephony service remote code execution8.8CNA v3.11.7%2025-01-14Fix
CVE-2025-21243Microsoft Windows Telephony service remote code execution8.8CNA v3.11.7%2025-01-14Fix
CVE-2025-21242Microsoft Windows Kerberos information disclosure5.9CNA v3.11.6%2025-01-14Fix
CVE-2025-21241Microsoft Windows Telephony service remote code execution8.8CNA v3.11.5%2025-01-14Fix
CVE-2025-21240Microsoft Windows Telephony service remote code execution8.8CNA v3.11.7%2025-01-14Fix
CVE-2025-21239Microsoft Windows Telephony service remote code execution8.8CNA v3.11.5%2025-01-14Fix
CVE-2025-21238Microsoft Windows Telephony service remote code execution8.8CNA v3.11.7%2025-01-14Fix
CVE-2025-21237Microsoft Windows Telephony service remote code execution8.8CNA v3.11.7%2025-01-14Fix
CVE-2025-21236Microsoft Windows Telephony service remote code execution8.8CNA v3.11.7%2025-01-14Fix
CVE-2025-21235Microsoft Windows PrintWorkflowUserSvc elevation of privilege7.8CNA v3.10.6%2025-01-14Fix
CVE-2025-21234Microsoft Windows PrintWorkflowUserSvc elevation of privilege7.8CNA v3.10.6%2025-01-14Fix
CVE-2025-21233Microsoft Windows Telephony service remote code execution8.8CNA v3.11.7%2025-01-14Fix
CVE-2025-21232Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21231Microsoft Windows IP Helper denial of service7.5CNA v3.12.6%2025-01-14Fix
CVE-2025-21230Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.12.7%2025-01-14Fix
CVE-2025-21229Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21228Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21227Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21226Microsoft Windows Digital Media elevation of privilege6.6CNA v3.10.9%2025-01-14Fix
CVE-2025-21225Microsoft Windows Remote Desktop Gateway (RD Gateway) denial of service5.9CNA v3.11.6%2025-01-14Fix
CVE-2025-21224Microsoft Windows Line Printer Daemon (LPD) service remote code execution8.1CNA v3.11.9%2025-01-14Fix
CVE-2025-21223Microsoft Windows Telephony service remote code execution8.8CNA v3.11.6%2025-01-14Fix
CVE-2025-21220Microsoft Message Queuing information disclosure7.5CNA v3.12.2%2025-01-14Fix
CVE-2025-21219Microsoft Windows MapUrlToZone security feature bypass4.3CNA v3.13.0%2025-01-14Fix
CVE-2025-21218Microsoft Windows Kerberos denial of service7.5CNA v3.12.6%2025-01-14Fix
CVE-2025-21217Microsoft Windows NTLM spoofing6.5CNA v3.11.9%2025-01-14Fix
CVE-2025-21215Microsoft Windows secure Boot security feature bypass4.6CNA v3.10.8%2025-01-14Fix
CVE-2025-21214Microsoft Windows BitLocker information disclosure4.2CNA v3.10.7%2025-01-14Fix
CVE-2025-21213Microsoft Windows secure Boot security feature bypass4.6CNA v3.10.7%2025-01-14Fix
CVE-2025-21211Microsoft Windows secure Boot security feature bypass6.8CNA v3.10.8%2025-01-14Fix
CVE-2025-21210Microsoft Windows BitLocker information disclosure4.2CNA v3.11.1%2025-01-14Fix
CVE-2025-21207Microsoft Windows Connected Devices Platform Service (Cdpsvc) denial of service7.5CNA v3.12.1%2025-01-14Fix
CVE-2025-21202Microsoft Windows Recovery Environment agent elevation of privilege6.1CNA v3.10.9%2025-01-14Fix
CVE-2025-21193Microsoft Windows Active Directory Federation Server spoofing6.5CNA v3.10.8%2025-01-14Fix
CVE-2025-21189Microsoft Windows MapUrlToZone security feature bypass4.3CNA v3.13.0%2025-01-14Fix
CVE-2025-21187Microsoft Power Automate remote code execution7.8CNA v3.10.7%2025-01-14Fix
CVE-2025-21186Microsoft Access remote code execution7.8CNA v3.11.1%2025-01-14Fix
CVE-2025-21178Visual Studio remote code execution8.8CNA v3.11.6%2025-01-14Fix
CVE-2025-21176Microsoft .NET, .NET Framework, and Visual Studio remote code execution8.8CNA v3.12.3%2025-01-14Fix
CVE-2025-21173Microsoft .NET elevation of privilege7.3CNA v3.11.2%2025-01-14Fix
CVE-2025-21172Microsoft .NET and Visual Studio remote code execution7.5CNA v3.11.8%2025-01-14Fix
CVE-2025-21171Microsoft .NET remote code execution7.5CNA v3.11.7%2025-01-14Fix
CVE-2025-21139Adobe Substance3D Designer heap-based buffer overflow7.8CNA v3.10.3%2025-01-14Fix
CVE-2025-21138Adobe Substance3D Designer out-of-bounds write7.8CNA v3.10.2%2025-01-14Fix
CVE-2025-21137Adobe Substance3D Designer heap-based buffer overflow7.8CNA v3.10.3%2025-01-14Fix
CVE-2025-21136Adobe Substance3D Designer out-of-bounds write7.8CNA v3.10.2%2025-01-14Fix
CVE-2025-21135Adobe Animate integer underflow (wrap or wraparound)7.8CNA v3.10.3%2025-01-14Fix
CVE-2025-21134Adobe Illustrator on iPad integer underflow (wrap or wraparound)7.8CNA v3.10.3%2025-01-14Fix
CVE-2025-21133Adobe Illustrator on iPad integer underflow (wrap or wraparound)7.8CNA v3.10.3%2025-01-14Fix
CVE-2025-21132Adobe Substance3D Stager out-of-bounds write7.8CNA v3.10.2%2025-01-14Fix
CVE-2025-21131Adobe Substance3D Stager out-of-bounds write7.8CNA v3.10.2%2025-01-14Fix
CVE-2025-21130Adobe Substance3D Stager out-of-bounds write7.8CNA v3.10.2%2025-01-14Fix
CVE-2025-21129Adobe Substance3D Stager heap-based buffer overflow7.8CNA v3.10.3%2025-01-14Fix
CVE-2025-21128Adobe Substance3D Stager stack-based buffer overflow7.8CNA v3.10.3%2025-01-14Fix
CVE-2025-21127Adobe Photoshop Desktop uncontrolled search path element7.8CNA v3.10.3%2025-01-14Fix
CVE-2025-21122Adobe Photoshop Desktop integer underflow (wrap or wraparound)7.8CNA v3.10.3%2025-01-14Fix
CVE-2025-20620Y'S STEALTHONE D220 SQL injection7.5CNA v3.10.4%2025-01-14
CVE-2025-20055Y'S STEALTHONE D220 network storage servers OS command injection9.8CNA v3.11.2%2025-01-14
CVE-2025-20016Y'S STEALTHONE D220 network storage servers OS command injection7.2CNA v3.11.1%2025-01-14
CVE-2025-0474Invoice Ninja PDF Rendering server side request forgery7.7CNA v3.10.4%2025-01-14
CVE-2025-0465AquilaCMS categories deserialization6.9CNA v4.00.9%2025-01-14
CVE-2025-0464SourceCodester Task Reminder System Maintenance Section cross-site scripting4.8v3.10.4%2025-01-14
CVE-2025-0463Shanghai Lingdang Information Technology Lingdang CRM index.php unrestricted upload9.8v3.10.4%2025-01-14
CVE-2025-0462Shanghai Lingdang Information Technology Lingdang CRM index.php SQL injection9.8v3.10.5%2025-01-14
CVE-2025-0461Shanghai Lingdang Information Technology Lingdang CRM index.php path traversal7.5v3.10.9%2025-01-14
CVE-2025-0460Blog Botz for Journal Theme blog_add unrestricted upload6.9CNA v4.00.5%2025-01-14
CVE-2025-0459libretro RetroArch Startup profapi.dll untrusted search path4.8CNA v4.00.2%2025-01-14
CVE-2025-0458Virtual Computer Vysual RH Solution Login Panel index.php cross-site scripting6.9CNA v4.00.4%2025-01-14
CVE-2025-0394Groundhogg WordPress plugin arbitrary file upload8.8CNA v3.11.1%2025-01-14Fix
CVE-2025-0393Royal Elementor Addons and Templates WordPress plugin cross-site request forgery6.1v3.10.2%2025-01-14Fix
CVE-2025-0070Improper authentication in SAP NetWeaver ABAP Server and ABAP Platform9.9CNA v3.10.7%2025-01-14Fix
CVE-2025-0069DLL hijacking vulnerability in SAPSetup7.8CNA v3.10.2%2025-01-14Fix
CVE-2025-0068Missing authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP4.3CNA v3.10.3%2025-01-14Fix
CVE-2025-0067Missing authorization check in SAP NetWeaver Application Server Java6.3CNA v3.10.3%2025-01-14Fix
CVE-2025-0066Information disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform9.9CNA v3.10.6%2025-01-14Fix
CVE-2025-0063SQL injection vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform8.8CNA v3.10.7%2025-01-14Fix
CVE-2025-0061SAP BusinessObjects Business Intelligence Platform information disclosure8.7CNA v3.10.5%2025-01-14Fix
CVE-2025-0060SAP BusinessObjects Business Intelligence Platform code injection6.5CNA v3.10.4%2025-01-14Fix
CVE-2025-0059Information disclosure vulnerability in SAP NetWeaver Application Server ABAP6.0CNA v3.10.2%2025-01-14Fix
CVE-2025-0058Information disclosure vulnerability in SAP Business Workflow and SAP Flexible Workflow6.5CNA v3.10.3%2025-01-14Fix
CVE-2025-0057Cross-site scripting vulnerability in SAP NetWeaver AS JAVA (User Admin application)4.8CNA v3.10.2%2025-01-14Fix
CVE-2025-0056Information disclosure vulnerability in SAP GUI for Java6.0CNA v3.10.2%2025-01-14Fix
CVE-2025-0055Information disclosure vulnerability in SAP GUI for Windows6.0CNA v3.10.2%2025-01-14Fix
CVE-2025-0053Information disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform5.3CNA v3.10.3%2025-01-14Fix
CVE-2025-23027haydenbleasel next-forge environment example file cleartext storage of sensitive information6.3CNA v4.00.3%2025-01-13Fix
CVE-2025-23026HTML templates containing Javascript template strings are subject to XSS in jte6.1CNA v3.10.3%2025-01-13Fix
CVE-2025-22963Sismics Teedy cross-site request forgery7.5CNA v3.10.3%2025-01-13Fix
CVE-2025-22828Apache CloudStack: Unauthorised access to annotations4.3CISA ADP v3.12.1%2025-01-13Fix
CVE-2025-22800Post SMTP WordPress plugin broken access control8.8v3.10.4%2025-01-13Fix
CVE-2025-22777GiveWP WordPress plugin PHP object injection9.8NVD v3.10.9%2025-01-13Exploit codeFix
CVE-2025-22619WeGIA cross-site scripting (XSS) Reflected endpoint editar_permissoes.php parameter msg_c6.4CNA v4.00.3%2025-01-13Fix
CVE-2025-22618WeGIA cross-site scripting (XSS) Stored endpoint adicionar_cargo.php parameter cargo6.4CNA v4.00.3%2025-01-13Fix
CVE-2025-22617WeGIA cross-site scripting (XSS) Reflected endpoint editar_socio.php parameter socio6.4CNA v4.00.3%2025-01-13Fix
CVE-2025-22616WeGIA cross-site scripting Stored endpoint dependente_parentesco_adicionar.php parameter descricao6.4CNA v4.00.3%2025-01-13Fix
CVE-2025-22615WeGIA cross-site scripting (XSS) Reflected endpoint Cadastro_Atendido.php parameter cpf6.4CNA v4.00.3%2025-01-13Fix
CVE-2025-22614LabRedesCefetRJ WeGIA dependente_editarInfoPessoal.php stored cross-site scripting6.4CNA v4.00.3%2025-01-13Fix
CVE-2025-22613WeGIA cross-site scripting (XSS) Stored endpoint informacao_adicional.php parameter descricao6.4CNA v4.00.4%2025-01-13Fix
CVE-2025-22588Scanventory WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13
CVE-2025-22586WPEX Replace DB Urls WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13
CVE-2025-22583Scan External Links WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13
CVE-2025-22576Site PIN WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13
CVE-2025-22570Inline Tweets WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13
CVE-2025-22569Featured Page Widget WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13
CVE-2025-22568Post And Page Reactions WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13
CVE-2025-22567TRUSTist REVIEWer WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13
CVE-2025-22514Axact Author List Widget WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13
CVE-2025-22506Smart Agenda WordPress plugin CSRF to stored XSS7.1CNA v3.10.3%2025-01-13Fix
CVE-2025-22499F4 Post Tree WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13Fix
CVE-2025-22498LucidLMS WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13
CVE-2025-22344Media Category Library WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13
CVE-2025-22337Order Audit Log for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13
CVE-2025-22314Food Store WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13
CVE-2025-22144Account takeover in NamelessMC9.0CNA v4.00.8%2025-01-13Fix
CVE-2025-22142Cross-site scripting in NamelessMC6.3CNA v4.00.3%2025-01-13Fix
CVE-2025-22138Private categories allow suggested edits to be viewed via the queue in @codidact/qpixel5.1CNA v4.00.4%2025-01-13
CVE-2025-22134Heap-buffer-overflow with visual mode in Vim4.2CNA v3.10.4%2025-01-13Fix
CVE-2025-0412Luxion KeyShot Viewer KSP File Parsing memory corruption remote code execution7.8CNA v3.00.4%2025-01-13Fix
CVE-2025-0410liujianview gymxmjpa MenberConntroller.java MenberDaoInpl SQL injection8.8v3.10.5%2025-01-13
CVE-2025-0409liujianview gymxmjpa MembertypeController.java MembertypeDaoImpl SQL injection8.8v3.10.5%2025-01-13
CVE-2025-0408liujianview gymxmjpa LoosController.java LoosDaoImpl SQL injection8.8v3.10.6%2025-01-13
CVE-2025-0407liujianview gymxmjpa EquipmentController.java EquipmentDaoImpl SQL injection8.8v3.10.6%2025-01-13
CVE-2025-0406liujianview gymxmjpa SubjectController.java SubjectDaoImpl SQL injection8.8v3.10.5%2025-01-13
CVE-2025-0405liujianview gymxmjpa GoodsController.java GoodsDaoImpl SQL injection8.8v3.10.6%2025-01-13
CVE-2025-0404liujianview gymxmjpa CoachController.java CoachController SQL injection5.3CNA v4.00.3%2025-01-13
CVE-2025-04031902756969 reggie Phone Number Validation sendMsg information disclosure6.9CNA v4.00.5%2025-01-13
CVE-2025-04021902756969 reggie CommonController.java upload unrestricted upload8.8v3.10.4%2025-01-13
CVE-2025-04011902756969 reggie CommonController.java download path traversal6.9CNA v4.01.3%2025-01-13Exploit code
CVE-2025-0400StarSea99 starsea-mall update cross-site scripting5.4v3.10.3%2025-01-12
CVE-2025-0399StarSea99 starsea-mall uploadController.java UploadController unrestricted upload7.2v3.10.4%2025-01-12
CVE-2025-0398longpi1 warehouse Backend updateInport cross-site scripting5.1CNA v4.00.3%2025-01-12
CVE-2025-0397reckcn SPPanAdmin edit cross-site scripting5.3CNA v4.00.4%2025-01-12
CVE-2025-0396exelban stats XPC service shouldAcceptNewConnection command injection8.5CNA v4.01.0%2025-01-12Fix
CVE-2025-23109Mozilla Firefox address bar spoofing on iOS using long hostnames6.5CISA ADP v3.10.2%2025-01-11Fix
CVE-2025-23108Mozilla Firefox Mobile iOS Full Address Bar Spoof using Open in New Tab and Javascript URI4.3CISA ADP v3.10.2%2025-01-11Fix
CVE-2025-0392Guangzhou Huayi Intelligent Technology Jeewms graphReportController.do datagridGraph SQL injection8.8v3.10.6%2025-01-11
CVE-2025-0391Guangzhou Huayi Intelligent Technology Jeewms CgFormBuildController. java saveOrUpdate SQL injection8.8v3.10.5%2025-01-11
CVE-2025-0390Guangzhou Huayi Intelligent Technology Jeewms wmOmNoticeHController.do path traversal7.5v3.10.8%2025-01-11
CVE-2025-0107Expedition: OS command injection7.7CNA v4.078.5%2025-01-11NucleiEmerging ThreatsFix
CVE-2025-0106Palo Alto Networks Expedition information disclosure6.9CNA v4.00.5%2025-01-11Fix
CVE-2025-0105Expedition: Arbitrary file deletion6.9CNA v4.013.3%2025-01-11Fix
CVE-2025-0104Expedition: Cross-site scripting (XSS)7.0CNA v4.00.4%2025-01-11Fix
CVE-2025-0103Expedition: SQL injection9.2CNA v4.00.6%2025-01-11Fix
CVE-2025-23113Vanderbilt REDCap cross-site request forgery8.8v3.10.2%2025-01-10
CVE-2025-23112Vanderbilt REDCap cross-site scripting6.1v3.10.3%2025-01-10
CVE-2025-23111Vanderbilt REDCap cross-site scripting6.1v3.10.3%2025-01-10
CVE-2025-23110Vanderbilt REDCap cross-site scripting6.1v3.10.3%2025-01-10
CVE-2025-23079Wikimedia Foundation Mediawiki XSSes in Extension:ArticleFeedbackv56.1CISA ADP v3.10.2%2025-01-10Fix
CVE-2025-23078Wikimedia Foundation Mediawiki XSS in BreadCrumbs26.5CISA ADP v3.10.3%2025-01-10Fix
CVE-2025-23022FreeType integer overflow6.2v3.10.2%2025-01-10Fix
CVE-2025-23016FastCGI fcgi integer overflow9.3CNA v3.10.6%2025-01-10Fix
CVE-2025-22949Tenda AC9 command injection9.8CISA ADP v3.11.9%2025-01-10
CVE-2025-22946Tenda AC9 buffer overflow9.8CISA ADP v3.10.9%2025-01-10
CVE-2025-22600WeGIA has a cross-site scripting Reflected endpoint `configuracao_doacao.php` parameter `avulso`6.4CNA v4.00.4%2025-01-10Fix
CVE-2025-22599WeGIA has a cross-site scripting (XSS) Reflected endpoint `home.php` parameter `msg_c`6.4CNA v4.00.4%2025-01-10Fix
CVE-2025-22598WeGIA has a cross-site scripting (XSS) Stored endpoint cadastrarSocio.php parameter nome8.3CNA v3.10.4%2025-01-10Fix
CVE-2025-22597WeGIA has a cross-site scripting Stored endpoint CobrancaController.php parameter local_recepcao8.3CNA v3.10.4%2025-01-10Fix
CVE-2025-22596WeGIA has a cross-site scripting (XSS) Reflected endpoint modulos_visiveis.php parameter'msg_c'6.4CNA v4.00.3%2025-01-10Fix
CVE-2025-22152Improper Path Validation enables path traversal in multiple components in Atheos9.4CNA v4.00.7%2025-01-10Fix
CVE-2025-0311Orbit Fox by ThemeIsle WordPress plugin stored cross-site scripting5.4v3.10.3%2025-01-10Fix
CVE-2025-22827WP Joomag WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09
CVE-2025-22826Sell Digital Downloads WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09
CVE-2025-22824Live Flight Radar WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09
CVE-2025-22823Genesis Style Shortcodes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09
CVE-2025-22822wp custom countdown WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09
CVE-2025-22821StorePress WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09
CVE-2025-22820VR Views WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09
CVE-2025-22819Qr Code and Barcode Scanner Reader WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09
CVE-2025-22818S3Player WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09
CVE-2025-22817BP Profile Shortcodes Extra WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09
CVE-2025-22815Button Block WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2025-01-09Fix
CVE-2025-22814Zephyr Admin WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-01-09Fix
CVE-2025-22813ChatBot Conversational Forms WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09Fix
CVE-2025-22812News Ticker Widget for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09Fix
CVE-2025-22811MT Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09Fix
CVE-2025-22810Content Blocks Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09Fix
CVE-2025-22809PDF Catalog Woocommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09Fix
CVE-2025-22808Surbma Premium WP WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09Fix
CVE-2025-22807Responsive Flickr Slideshow WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09Fix
CVE-2025-22806Black Widgets For Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2025-01-09Fix
CVE-2025-22805Skill Bar WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09Fix
CVE-2025-22804Author Avatars List/Block WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09Fix
CVE-2025-22803Advanced Product Information for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09Fix
CVE-2025-22802Email Templates Customizer YeeMail WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-09Fix
CVE-2025-22801HasThemes Free WooCommerce Theme 99fy Extension stored cross-site scripting6.5CNA v3.10.2%2025-01-09Fix
CVE-2025-22595Mailing Group Listserv WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-09Fix
CVE-2025-22594Better User Shortcodes WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-09
CVE-2025-22561Title Experiments Free WordPress plugin broken access control4.3CNA v3.10.3%2025-01-09
CVE-2025-22542Virtual Bot WordPress plugin SQL injection9.3CNA v3.10.4%2025-01-09
CVE-2025-22540Emailing Subscription WordPress plugin SQL injection9.3CNA v3.10.4%2025-01-09
CVE-2025-22539Custom DataBase Tables WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-09
CVE-2025-22537Google Maps Travel Route WordPress plugin SQL injection8.5CNA v3.10.4%2025-01-09
CVE-2025-22535WPListCal WordPress plugin SQL injection8.5CNA v3.10.4%2025-01-09
CVE-2025-22527Mailing Group Listserv WordPress plugin SQL injection7.6CNA v3.10.5%2025-01-09Fix
CVE-2025-22521wp Hosting Performance Check WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-09
CVE-2025-22510WC Price History for Omnibus WordPress plugin PHP object injection7.2CNA v3.11.2%2025-01-09Exploit codeFix
CVE-2025-22508FAT Event Lite WordPress plugin unauthenticated Non-arbitrary local file inclusion8.1CNA v3.10.7%2025-01-09
CVE-2025-22505NC Wishlist for Woocommerce WordPress plugin SQL injection8.5CNA v3.10.4%2025-01-09
CVE-2025-225044ECPS Web Forms WordPress plugin arbitrary file upload10.0CNA v3.10.5%2025-01-09
CVE-2025-22449Mattermost access control flaw for team admins allows unauthorized team additions3.8CNA v3.10.3%2025-01-09Fix
CVE-2025-22445Mattermost misleading UI for undefined admin console settings in Calls causes security confusion3.5CNA v3.10.3%2025-01-09Fix
CVE-2025-22361Opentracker Analytics WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-09
CVE-2025-22345TS Comfort DB WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-09
CVE-2025-22331Cf7Save Extension WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-09
CVE-2025-22330MG Parallax Slider WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-09
CVE-2025-22313Widgetize Pages Light WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-09
CVE-2025-22307Product Table for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-09Fix
CVE-2025-22295Tripetto WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2025-01-09Fix
CVE-2025-22151Strawberry GraphQL has a type resolution vulnerability3.7CNA v3.10.4%2025-01-09Fix
CVE-2025-22149MicahParks jwkset JWK Set HTTP client cache vulnerability2.1CNA v4.00.6%2025-01-09Fix
CVE-2025-21628Chatwoot has a blind SQL-injection in Conversation and Contacts filters9.1CNA v3.10.7%2025-01-09Fix
CVE-2025-21602Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash7.1CNA v4.00.2%2025-01-09Fix
CVE-2025-21600Juniper Networks Junos OS routing protocol daemon out-of-bounds read7.1CNA v4.00.2%2025-01-09Fix
CVE-2025-21599Juniper Networks Junos OS Evolved A memory leak8.7CNA v4.00.6%2025-01-09Fix
CVE-2025-21598Juniper Networks Junos OS Evolved Juniper Networks Junos OS and out-of-bounds read8.2CNA v4.00.7%2025-01-09Fix
CVE-2025-21596Junos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crash6.8CNA v4.00.2%2025-01-09Fix
CVE-2025-21593Juniper Networks Junos OS routing protocol daemon improper resource control7.1CNA v4.00.2%2025-01-09Fix
CVE-2025-21592Junos OS: SRX Series: Low privileged user able to access highly sensitive information on file system6.8CNA v4.00.2%2025-01-09Fix
CVE-2025-21385Microsoft Purview information disclosure8.8CNA v3.128.1%2025-01-09Emerging ThreatsExploit codeFix
CVE-2025-21380Microsoft Azure Marketplace SaaS Resources information disclosure8.8CNA v3.11.5%2025-01-09Fix
CVE-2025-20033Mattermost DoS via custom post type for sysconsole plugin readers4.3CNA v3.10.6%2025-01-09Fix
CVE-2025-0349Tenda AC6 GetParentControlInfo stack-based overflow9.8v3.11.8%2025-01-09
CVE-2025-0348CampCodes DepEd Equipment Inventory System add_employee.php cross-site scripting5.4v3.10.5%2025-01-09
CVE-2025-0347code-projects Admission Management System Login index.php SQL injection9.8v3.10.7%2025-01-09
CVE-2025-0346code-projects Content Management System Publish News page publishnews.php unrestricted upload7.2v3.10.6%2025-01-09
CVE-2025-0345leiyuxi cy-fast listData SQL injection8.8v3.10.5%2025-01-09
CVE-2025-0344leiyuxi cy-fast listData SQL injection8.8v3.10.5%2025-01-09
CVE-2025-0342CampCodes Computer Laboratory Management System edit cross-site scripting5.4v3.10.4%2025-01-09
CVE-2025-0341CampCodes Computer Laboratory Management System edit unrestricted upload9.8v3.10.5%2025-01-09
CVE-2025-0340code-projects Cinema Seat Reservation System deleteBooking.php SQL injection9.8v3.10.6%2025-01-09
CVE-2025-0339code-projects Online Bike Rental HTTP GET request vehical-details.php cross-site scripting6.1v3.10.4%2025-01-09
CVE-2025-0336Codezips Project Management System teacher.php SQL injection9.8v3.10.5%2025-01-09
CVE-2025-0335code-projects Online Bike Rental System Change Image unrestricted upload9.8v3.10.5%2025-01-09
CVE-2025-0334leiyuxi cy-fast listData SQL injection8.8v3.10.5%2025-01-09
CVE-2025-0333leiyuxi cy-fast listData SQL injection8.8v3.10.6%2025-01-09
CVE-2025-0331YunzMall HTTP POST Request ResetpwdController.php changePwd password recovery6.9CNA v4.00.5%2025-01-09
CVE-2025-0328KaiYuanTong ECT Platform HTTP POST request runCode.php command injection6.9CNA v4.02.2%2025-01-09
CVE-2025-0306Red Hat Enterprise Linux 10 Ruby: Openssl: Ruby marvin attack7.4CNA v3.10.6%2025-01-09Fix
CVE-2025-22215VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability4.3CNA v3.10.3%2025-01-08Fix
CVE-2025-22145Carbon has an arbitrary file include via unvalidated input passed to Carbon::setLocale6.3CNA v4.00.7%2025-01-08Fix
CVE-2025-22143WeGIA cross-site scripting (XSS) Reflected endpoint listar_permissoes.php parameter msg_e6.4CNA v4.00.3%2025-01-08Fix
CVE-2025-22141WeGIA SQL injection (Blind Time-Based) endpoint verificar_recursos_cargo.php parameter cargo9.4CNA v4.00.7%2025-01-08Fix
CVE-2025-22140WeGIA SQL injection (Blind Time-Based) endpoint dependente_listar_um.php parameter id_dependente9.4CNA v4.00.7%2025-01-08Fix
CVE-2025-22139WeGIA cross-site scripting (XSS) Reflected endpoint `configuracao_geral.php` parameter `msg`6.4CNA v4.00.3%2025-01-08Fix
CVE-2025-22137stonith404 pingvin-share arbitrary file overwrite via HTTP POST in Pingvin Share9.8CNA v3.10.6%2025-01-08Fix
CVE-2025-22136Tabby has a TCC Bypass via Misconfigured Node Fuses8.6CNA v4.00.4%2025-01-08Fix
CVE-2025-22130charmbracelet soft-serve soft Serve allows path traversal attacks5.3CNA v4.00.7%2025-01-08Fix
CVE-2025-21603PLANEX COMMUNICATIONS MZK-DP300N cross-site scripting4.8CISA ADP v3.10.3%2025-01-08
CVE-2025-21111Dell VxRail HCI plaintext password storage7.5CNA v3.10.1%2025-01-08Fix
CVE-2025-21102Dell VxRail HCI plaintext password storage7.5CNA v3.10.2%2025-01-08Fix
CVE-2025-20168Cisco Common Services Platform Collector cross-site scripting5.4CNA v3.10.3%2025-01-08Fix
CVE-2025-20167Cisco Common Services Platform Collector cross-site scripting5.4CNA v3.10.3%2025-01-08Fix
CVE-2025-20166Cisco Common Services Platform Collector cross-site scripting5.4CNA v3.10.4%2025-01-08Fix
CVE-2025-20126Cisco ThousandEyes Endpoint Agent improper certificate validation4.8CNA v3.10.2%2025-01-08Fix
CVE-2025-20123Cisco Crosswork Network Controller stored cross-site scripting4.8CNA v3.10.3%2025-01-08Fix
CVE-2025-0291Google Chrome V8 type confusion8.8v3.17.4%2025-01-08Fix
CVE-2025-0283Ivanti Connect Secure stack-based buffer overflow7.0CNA v3.117.4%2025-01-08Reported exploitedKCVFix
CVE-2025-0282Ivanti Connect Secure, Policy Secure, and ZTA Gateways stack-based buffer overflow9.0CNA v3.1100.0%2025-01-08KEVNucleiEmerging ThreatsExploit codeKCVFix
CVE-2025-0194Insertion of sensitive information into externally-accessible file or directory in GitLab6.5CNA v3.10.5%2025-01-08Fix
CVE-2025-22621Privilege escalation for users who hold the “splunk_app_soar“ role in the Splunk App for SOAR6.4CNA v3.10.3%2025-01-07Fix
CVE-2025-22593Laika Pedigree Tree WordPress plugin CSRF to stored XSS7.1CNA v3.10.3%2025-01-07
CVE-2025-225921003 Mortgage Application WordPress plugin broken access control7.5CNA v3.10.4%2025-01-07
CVE-2025-225911003 Mortgage Application WordPress plugin broken access control4.3CNA v3.10.3%2025-01-07
CVE-2025-22590Prayer Times Anywhere WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-07
CVE-2025-22589Quote Tweet WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-01-07
CVE-2025-22585Ultimate Image Hover Effects WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-07
CVE-2025-22584Timeline Pro WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-07Fix
CVE-2025-22582Uptime Robot WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-01-07
CVE-2025-22581Arcade Ready WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22580Biltorvet Dealer Tools WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22579WP Header Notification WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-01-07
CVE-2025-22578WP Cookie WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-01-07
CVE-2025-22577Able Player WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22574ICS Button WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22573Icons Enricher WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22572Legacy ePlayer WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22571Instabot WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-07Fix
CVE-2025-22563Pretty Urls WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-01-07
CVE-2025-22562Title Experiments Free WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-01-07
CVE-2025-22560Saoshyant Page Builder WordPress plugin broken access control5.3CNA v3.10.4%2025-01-07
CVE-2025-22559TubePress.NET WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-07
CVE-2025-22558mcjh button shortcode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22557News Publisher Autopilot WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-07
CVE-2025-22556Norse Rune Oracle WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-07Fix
CVE-2025-22555Smoothness Slider Shortcode WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-07
CVE-2025-22554Video Embed Optimizer WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22552Affiliate Disclosure Statement WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-07
CVE-2025-22551Boot-Modal WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07Fix
CVE-2025-22550AddFunc Mobile Detect WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22549WP Github WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22548ldap_login_password_and_role_manager WordPress plugin CSRF to stored XSS7.1CNA v3.10.4%2025-01-07
CVE-2025-22547JK Html To Pdf WordPress plugin CSRF to stored XSS7.1CNA v3.10.4%2025-01-07
CVE-2025-22546jQuery TwentyTwenty WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07Fix
CVE-2025-22545iframe to embed WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22544Mind Doodle Visual Sitemaps and Tasks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22543ST Gallery WP WordPress plugin settings Change vulnerability5.4CNA v3.10.4%2025-01-07
CVE-2025-22541WP Delete Post Copies WordPress plugin broken access control5.4CNA v3.10.4%2025-01-07Fix
CVE-2025-22538Virtual Bot WordPress plugin CSRF cross-site scripting (XSS)7.1CNA v3.10.2%2025-01-07
CVE-2025-22536WP Music Player WordPress plugin SQL injection7.6CNA v3.10.6%2025-01-07
CVE-2025-22534Slides and Presentations WordPress plugin broken access control5.4CNA v3.10.4%2025-01-07
CVE-2025-22533WOOEXIM WordPress plugin SQL injection7.6CNA v3.10.6%2025-01-07
CVE-2025-22532Simple Photo Sphere WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22531Urdu Formatter Shamil WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-07
CVE-2025-22530아임포트 결제버튼 생성 플러그인 WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22529WordPress WE Blocks plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22528Huurkalender WP WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07Fix
CVE-2025-22525Donation Block For PayPal WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-01-07Fix
CVE-2025-22524فرم ساز فرم افزار WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07Fix
CVE-2025-22522SingSong WordPress plugin CSRF to stored XSS7.1CNA v3.10.4%2025-01-07
CVE-2025-22520Tock Widget WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-01-07Fix
CVE-2025-22519eDoc Easy Tables WordPress plugin SQL injection8.5CNA v3.10.5%2025-01-07
CVE-2025-22518Justified Image Gallery WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22517List Pages at Depth WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22516Metadata SEO WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22515Show Google Analytics widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22512Help Scout WordPress plugin broken access control4.3CNA v3.10.4%2025-01-07Fix
CVE-2025-22511Slides and Presentations WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22507WPMU Prefill Post WordPress plugin SQL injection7.6CNA v3.10.6%2025-01-07
CVE-2025-22503Admin debug wordpress enable debug plugin cross-site request forgery4.3CNA v3.10.2%2025-01-07
CVE-2025-22502MindValley Super PageMash WordPress plugin SQL injection7.6CNA v3.10.6%2025-01-07
CVE-2025-22500Alpha Price Table For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-07
CVE-2025-22395Dell Update Package (DUP) Framework improper handling of insufficient permissions8.2CNA v3.10.2%2025-01-07Fix
CVE-2025-22365EMC2 Alert Boxes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-07
CVE-2025-22364Ach Invoice App WordPress plugin local file inclusion7.5CNA v3.10.6%2025-01-07
CVE-2025-22363Allada T-shirt Designer for Woocommerce WordPress plugin broken access control5.3CNA v3.10.3%2025-01-07
CVE-2025-22362WPAchievements Free WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-07
CVE-2025-22359SyncFields WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-07Fix
CVE-2025-22358Wp advertising management WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-07
CVE-2025-22357Target Notifications WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-07
CVE-2025-22355Kikx Simple Post Author Filter WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-07
CVE-2025-22354Digi Store WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-07
CVE-2025-22353BVD Easy Gallery Manager WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-07
CVE-2025-22352ELEX WooCommerce Advanced Bulk Edit Products, Prices and Attributes WordPress plugin SQL injection7.6CNA v3.10.7%2025-01-07Exploit codeFix
CVE-2025-22351Contact Form 7 Database CFDB7 WordPress plugin SQL injection7.6CNA v3.10.5%2025-01-07
CVE-2025-22350Indeed Ultimate Learning Pro WordPress plugin SQL injection7.6CNA v3.10.5%2025-01-07
CVE-2025-22349WordPress Auction plugin SQL injection7.6CNA v3.10.5%2025-01-07
CVE-2025-22348DynamicTags WordPress plugin SQL injection8.5CNA v3.10.4%2025-01-07Fix
CVE-2025-22347BSK Forms Blacklist WordPress plugin CSRF to SQL injection8.2CNA v3.10.2%2025-01-07Fix
CVE-2025-22343wpSOL WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-01-07
CVE-2025-22342WP Simple Sitemap WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-01-07
CVE-2025-22339Store Commerce WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-07
CVE-2025-22338WP-tagMaker WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-01-07
CVE-2025-22336Wizhi Multi Filters by Wenprise WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.1%2025-01-07
CVE-2025-22335Opencart Product in WP WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-01-07
CVE-2025-22334Education LMS WordPress theme stored cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22333Piotnet Addons For Elementor WordPress plugin cross-site scripting6.5CNA v3.10.2%2025-01-07Fix
CVE-2025-22328Elevio WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-01-07
CVE-2025-22327EO4WP WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-07Fix
CVE-2025-223265centsCDN WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-07
CVE-2025-22325Autocompleter WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-01-07
CVE-2025-22324OZ Canonical WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-07
CVE-2025-22323Image Hover Effects for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-07Fix
CVE-2025-22321ElementsCSS Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-07
CVE-2025-22320ProductDyno WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-07Fix
CVE-2025-22319Social Media Share Buttons WordPress plugin DearHive missing authorization4.3CNA v3.10.3%2025-01-07
CVE-2025-22316WPBITS Addons For Elementor Page Builder WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-01-07Fix
CVE-2025-22315Typing Text WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-01-07Fix
CVE-2025-22312Thim Elementor Kit WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07Fix
CVE-2025-22310TemplatesNext ToolKit WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07
CVE-2025-22309SpeakOut! Email Petitions WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07Fix
CVE-2025-22308Smart Custom FIelds WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07Fix
CVE-2025-22306Link Whisper Free WordPress plugin sensitive data exposure5.3CNA v3.10.4%2025-01-07Fix
CVE-2025-22305Hero Banner Ultimate WordPress plugin local file inclusion6.5CNA v3.10.6%2025-01-07Fix
CVE-2025-22304WP Visitor Statistics WordPress plugin broken access control4.3CNA v3.10.3%2025-01-07Fix
CVE-2025-22303WP Mailster WordPress plugin sensitive data exposure7.5v3.10.4%2025-01-07Fix
CVE-2025-22302WP Wand WordPress plugin broken access control5.3CNA v3.10.3%2025-01-07Fix
CVE-2025-22301MyBookTable Bookstore by Stormhill Media WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-01-07Fix
CVE-2025-22300PixelYourSite WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-01-07Fix
CVE-2025-22299AI for SEO WordPress plugin broken access control4.3CNA v3.10.3%2025-01-07Fix
CVE-2025-22298Hive Support WordPress plugin broken access control4.3CNA v3.10.3%2025-01-07Fix
CVE-2025-22297AI WP Writer WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-01-07Fix
CVE-2025-22296Hash Elements WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-01-07Fix
CVE-2025-22294Custom Field For WP Job Manager WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2025-01-07Exploit codeFix
CVE-2025-22293Gutentor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07Fix
CVE-2025-22261WP FullCalendar WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-01-07Fix
CVE-2025-22133WeGIA allows arbitrary file upload with remote code execution (RCE)10.0CNA v3.10.7%2025-01-07Fix
CVE-2025-22132WeGIA has a cross-site scripting (XSS) in file upload field8.3CNA v3.10.4%2025-01-07Fix
CVE-2025-21624ClipBucket V5 Playlist Cover file upload to remote code execution9.8CNA v3.11.2%2025-01-07Fix
CVE-2025-21623ClipBucket V5 Unauthenticated Template Directory Update to denial of service7.5CNA v3.11.1%2025-01-07Fix
CVE-2025-21622ClipBucket V5 Avatar URL path traversal to arbitrary file delete7.5CNA v3.11.0%2025-01-07Fix
CVE-2025-0301code-projects Online Book Shop subcat.php cross-site scripting6.1v3.10.4%2025-01-07
CVE-2025-0300code-projects Online Book Shop subcat.php SQL injection8.8v3.10.5%2025-01-07
CVE-2025-0299code-projects Online Book Shop search_result.php SQL injection9.8v3.10.6%2025-01-07
CVE-2025-0298code-projects Online Book Shop process_login.php SQL injection9.8v3.10.9%2025-01-07
CVE-2025-0297code-projects Online Book Shop detail.php SQL injection5.3CNA v4.00.7%2025-01-07
CVE-2025-0296code-projects Online Book Shop booklist.php SQL injection9.8v3.10.7%2025-01-07
CVE-2025-0295code-projects Online Book Shop booklist.php cross-site scripting5.4v3.10.5%2025-01-07
CVE-2025-0294SourceCodester Home Clean Services Management System process.php SQL injection8.8v3.10.7%2025-01-07
CVE-2025-0247Mozilla memory safety bugs fixed in Firefox 134 and Thunderbird 1349.8CISA ADP v3.110.6%2025-01-07Fix
CVE-2025-0246Mozilla address bar spoofing using an invalid protocol scheme on Firefox for Android6.5CISA ADP v3.10.4%2025-01-07Fix
CVE-2025-0245Mozilla Lock screen setting bypass in Firefox Focus for Android3.3CISA ADP v3.10.3%2025-01-07Fix
CVE-2025-0244Mozilla address bar spoofing using an invalid protocol scheme on Firefox for Android5.3CISA ADP v3.16.5%2025-01-07Fix
CVE-2025-0243Mozilla memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR, and Thunderbird5.1CISA ADP v3.10.3%2025-01-07Fix
CVE-2025-0242Mozilla Firefox memory safety bugs6.5CISA ADP v3.114.7%2025-01-07Fix
CVE-2025-0241Mozilla Firefox memory corruption when using JavaScript Text Segmentation7.7CISA ADP v3.10.7%2025-01-07Fix
CVE-2025-0240Mozilla Firefox compartment mismatch when parsing JavaScript JSON module4.0CISA ADP v3.10.7%2025-01-07Fix
CVE-2025-0239Mozilla Firefox Alt-Svc ALPN validation failure when redirected4.0CISA ADP v3.10.2%2025-01-07Fix
CVE-2025-0238Mozilla Firefox use-after-free when breaking lines in text5.3CISA ADP v3.10.8%2025-01-07Fix
CVE-2025-0237Mozilla Firefox WebChannel APIs susceptible to confused deputy attack5.4CISA ADP v3.10.6%2025-01-07Fix
CVE-2025-0218pgAdmin pgAgent batch job temporary directory vulnerability5.5CNA v3.10.2%2025-01-07Fix
CVE-2025-21620Deno's authorization headers not dropped when redirecting cross-origin7.5CNA v3.10.5%2025-01-06Fix
CVE-2025-21618zauberzeug NiceGUI On Air improper authentication7.5CNA v3.10.4%2025-01-06Fix
CVE-2025-21617Guzzle OAuth Subscriber has insufficient nonce entropy6.3CNA v4.00.5%2025-01-06Fix
CVE-2025-21616Plane has a cross-site scripting (XSS) via SVG image upload5.4CNA v3.10.3%2025-01-06Fix
CVE-2025-21615AAT allows data exfiltration by other apps installed on the same device5.5CNA v3.10.2%2025-01-06Fix
CVE-2025-21614go-git clients vulnerable to DoS via maliciously crafted Git server replies7.5CNA v3.10.7%2025-01-06Fix
CVE-2025-21613go-git has an argument injection via the URL field9.2CNA v4.01.3%2025-01-06Fix
CVE-2025-21612StarCitizenTools TabberNeue TabberTransclude cross-site scripting8.6CNA v3.10.5%2025-01-06Fix
CVE-2025-21611Tgstation-server's role authorization incorrectly OR'd with user's enabled status8.8CNA v3.10.5%2025-01-06Fix
CVE-2025-21604LangChain4j-AIDeepin Using MD5 to Hash files may cause file upload conflicts6.9CNA v4.00.3%2025-01-06Fix
CVE-2025-0233Codezips Project Management System course.php SQL injection9.8v3.10.6%2025-01-05
CVE-2025-0232Codezips Blood Bank Management System successadmin.php SQL injection8.8v3.10.5%2025-01-05
CVE-2025-0231Codezips Gym Management System submit_payments.php SQL injection8.8v3.10.5%2025-01-05
CVE-2025-0230code-projects Responsive Hotel Site print.php SQL injection9.8v3.10.7%2025-01-05
CVE-2025-0229code-projects Travel Management System enquiry.php SQL injection9.8v3.10.7%2025-01-05
CVE-2025-0228code-projects Local Storage Todo App index.html cross-site scripting4.8v3.10.3%2025-01-05
CVE-2025-0227Tsinghua Unigroup Electronic Archives System downLoad.html information disclosure5.3CNA v4.00.3%2025-01-05
CVE-2025-0226Tsinghua Unigroup Electronic Archives System downLoad.html download information disclosure5.3CNA v4.00.4%2025-01-05
CVE-2025-0225Tsinghua Unigroup Electronic Archives System exampleDownload.html path traversal5.3CNA v4.00.5%2025-01-05
CVE-2025-0224Provision-ISR SH-4050A-2 server.js information disclosure6.9CNA v4.00.4%2025-01-05
CVE-2025-0223IObit Protected Folder IOCTL IURegistryFilter.sys 0x8001E010 null pointer dereference5.5v3.10.4%2025-01-05
CVE-2025-0222IObit Protected Folder IOCTL IUProcessFilter.sys 0x8001E004 null pointer dereference5.5v3.10.4%2025-01-05
CVE-2025-0221IOBit Protected Folder IOCTL pffilter.sys 0x22200c null pointer dereference5.5v3.10.4%2025-01-05
CVE-2025-0220Trimble SPS851 Ethernet Configuration menu cross-site scripting5.1CNA v4.00.4%2025-01-05
CVE-2025-0219Trimble SPS851 Receiver Status Identity Tab cross-site scripting5.1CNA v4.00.3%2025-01-05
CVE-2025-22390Optimizely Cms weak password requirements7.5CISA ADP v3.10.4%2025-01-04Fix
CVE-2025-22389Optimizely Cms unrestricted file upload8.0CISA ADP v3.10.5%2025-01-04Fix
CVE-2025-22388Optimizely Cms cross-site scripting5.7CISA ADP v3.10.3%2025-01-04Fix
CVE-2025-22387Optimizely Configured Commerce sensitive query strings7.5CISA ADP v3.10.4%2025-01-04Fix
CVE-2025-22386Optimizely Configured Commerce insufficient session expiration7.3CISA ADP v3.10.3%2025-01-04Fix
CVE-2025-22385Optimizely Configured Commerce missing authorization5.9CISA ADP v3.10.3%2025-01-04Fix
CVE-2025-22384Optimizely Configured Commerce web parameter tampering7.5CISA ADP v3.10.4%2025-01-04Fix
CVE-2025-22383Optimizely Configured Commerce cross-site scripting4.6CISA ADP v3.10.2%2025-01-04Fix
CVE-2025-0214TMD Custom Header Menu index.php SQL injection2.1CNA v4.00.3%2025-01-04
CVE-2025-0213Campcodes Project Management System update_forms.php unrestricted upload9.8v3.10.5%2025-01-04
CVE-2025-0212Campcodes Student Grading System view_students.php SQL injection9.8v3.10.5%2025-01-04
CVE-2025-0211Campcodes School Faculty Scheduling System index.php file inclusion9.8v3.10.7%2025-01-04
CVE-2025-0210Campcodes School Faculty Scheduling System ajax.php SQL injection9.8v3.10.6%2025-01-04
CVE-2025-0208code-projects Online Shoe Store summary.php SQL injection9.8v3.10.5%2025-01-04
CVE-2025-0207code-projects Online Shoe Store login.php SQL injection9.8v3.10.7%2025-01-04
CVE-2025-0206code-projects Online Shoe Store index.php access control8.8v3.10.6%2025-01-04
CVE-2025-0205code-projects Online Shoe Store details2.php SQL injection9.8v3.10.5%2025-01-04
CVE-2025-0204code-projects Online Shoe Store details.php SQL injection9.8v3.10.6%2025-01-04
CVE-2025-0203code-projects Student Management System DbFunction.php showSubject1 SQL injection9.8v3.10.6%2025-01-04
CVE-2025-0202TCS BaNCS REPORTS_SHOW_FILE.jsp file inclusion5.1CNA v4.00.3%2025-01-04
CVE-2025-0201code-projects Point of Sales and Inventory Management System update_account.php SQL injection6.5v3.10.4%2025-01-04
CVE-2025-0200code-projects Point of Sales and Inventory Management System search_num.php SQL injection6.5v3.10.5%2025-01-04
CVE-2025-22376Net::OAuth nonce generation vulnerability5.3CISA ADP v3.10.6%2025-01-03Fix
CVE-2025-22275iTerm2 sensitive information in log files9.3CNA v3.10.5%2025-01-03Fix
CVE-2025-21610Trix allows cross-site scripting via `javascript:` URL in a link5.3CNA v3.10.4%2025-01-03Fix
CVE-2025-21609SiYuan has an arbitrary file deletion8.7CNA v4.00.6%2025-01-03
CVE-2025-0199code-projects Point of Sales and Inventory Management System minus_cart.php SQL injection6.5v3.10.4%2025-01-03
CVE-2025-0198code-projects Point of Sales and Inventory Management System search_result.php SQL injection6.5v3.10.4%2025-01-03
CVE-2025-0197code-projects Point of Sales and Inventory Management System search.php SQL injection6.5v3.10.4%2025-01-03
CVE-2025-0196code-projects Point of Sales and Inventory Management System plist.php SQL injection6.5v3.10.4%2025-01-03
CVE-2025-0195code-projects Point of Sales and Inventory Management System del_product.php SQL injection6.5v3.10.4%2025-01-03
CVE-2025-0176code-projects Point of Sales and Inventory Management System add_cart.php SQL injection7.5v3.10.4%2025-01-03
CVE-2025-0175code-projects Online Shop view.php cross-site scripting6.1v3.10.4%2025-01-03
CVE-2025-0174code-projects Point of Sales and Inventory Management System search_result2.php SQL injection6.5v3.10.4%2025-01-03
CVE-2025-22214Landray EIS fi_message_receiver.aspx SQL injection4.3CNA v3.11.3%2025-01-02Nuclei
CVE-2025-0173SourceCodester Online Eyewear Shop view_order.php SQL injection7.5v3.10.5%2025-01-02
CVE-2025-0172code-projects Chat System deleteroom.php SQL injection7.5v3.10.4%2025-01-02
CVE-2025-0171code-projects Chat System deleteuser.php SQL injection7.5v3.10.4%2025-01-02
CVE-2025-0168code-projects Job Recruitment _feedback_system.php SQL injection7.5v3.10.6%2025-01-01