CVE-2025 list

CVE-2025 records published after 2025

Page two of six: records 1,001 to 2,000 of the 5,305 published after 2025, newest first. The first page carries the figures for After 2025.

CVE-2025 records published after 2025, newest first: records 1,001 to 2,000 of 5,305
CVE Summary CVSS EPSS Published Signals
CVE-2025-32747Dell PowerFlex Manager incorrect privilege assignment5.3CNA v3.10.1%2026-05-22Fix
CVE-2025-32746Dell PowerFlex Manager insecure storage of sensitive information4.0CNA v3.10.1%2026-05-22Fix
CVE-2025-32745Dell PowerFlex Manager improper certificate validation4.2CNA v3.10.1%2026-05-22Fix
CVE-2025-26483Dell PowerFlex Manager open redirect6.1CNA v3.10.2%2026-05-22Fix
CVE-2025-71217Trend Micro TrendAI Apex One (Mac) An origin validation error7.8CISA ADP v3.10.3%2026-05-21Fix
CVE-2025-71216Trend Micro TrendAI Apex One (Mac) time-of-check time-of-use race condition7.8CISA ADP v3.10.3%2026-05-21Fix
CVE-2025-71215Trend Micro TrendAI Apex One (Mac) time-of-check time-of-use race condition7.0CISA ADP v3.10.3%2026-05-21Fix
CVE-2025-71214Trend Micro TrendAI Apex One (Mac) An origin validation error7.8CISA ADP v3.10.4%2026-05-21Fix
CVE-2025-71213Trend Micro TrendAI Apex One An origin validation error7.8CNA v3.10.3%2026-05-21Fix
CVE-2025-71212Trend Micro TrendAI Apex One link following7.8CNA v3.10.5%2026-05-21Fix
CVE-2025-71211Trend Micro TrendAI Apex One path traversal9.8CNA v3.13.8%2026-05-21Fix
CVE-2025-71210Trend Micro TrendAI Apex One path traversal9.8CNA v3.13.8%2026-05-21Fix
CVE-2025-13479IDOR in PosCube's QR Menu7.5CNA v3.10.3%2026-05-21
CVE-2025-13477OTP Bypass in Digital Operation Services' WifiBurada7.1CNA v3.10.2%2026-05-21
CVE-2025-33255NVIDIA TensorRT-LLM deserialization of untrusted data7.5CNA v3.10.6%2026-05-20Fix
CVE-2025-32750Dell PowerFlex Manager directory listing7.5CNA v3.10.4%2026-05-20Fix
CVE-2025-31985HCL BigFix Service Management X-Content-Type-Options header information disclosure3.7CNA v3.10.2%2026-05-20Fix
CVE-2025-31973HCL BigFix Service Management is susceptible to a Configuration Insecure Use of Base Image Version4.0CNA v3.10.2%2026-05-20Fix
CVE-2025-15369Xpro Addons WordPress plugin unauthorized access5.3CNA v3.10.2%2026-05-20Fix
CVE-2025-11954CSRF in Sitemio's WISECP8.0CNA v3.10.2%2026-05-20
CVE-2025-70950Gohttp is vulnerable to directory traversal via a crafted request7.3CISA ADP v3.10.5%2026-05-19
CVE-2025-57798Joplin has denial of service (DoS) via Uncontrolled Resource Allocation through Title Input5.5CNA v3.10.2%2026-05-19Fix
CVE-2025-51427ModelScope is vulnerable to arbitrary code injection via a crafted module7.3CISA ADP v3.10.5%2026-05-19Fix
CVE-2025-40904HTML injection in Smart Polling in Guardian/CMC5.1CNA v4.00.2%2026-05-19Fix
CVE-2025-40903HTML injection in Schedule Restore Archive in Guardian/CMC4.8CNA v4.00.2%2026-05-19Fix
CVE-2025-40902HTML injection in Users in Guardian/CMC4.8CNA v4.00.2%2026-05-19Fix
CVE-2025-40901HTML injection in Credentials Manager in Guardian/CMC4.8CNA v4.00.2%2026-05-19Fix
CVE-2025-40900Angular template injection in Reports in Guardian/CMC5.1CNA v4.00.2%2026-05-19Fix
CVE-2025-15645Ledger Nano X, Flex, Stax MCU firmware update denial of service5.1CNA v4.00.2%2026-05-19Fix
CVE-2025-15609Fortis For WooCommerce WordPress plugin sensitive API key disclosure7.5CISA ADP v3.10.4%2026-05-19Fix
CVE-2025-14575Qt An uncontrolled search path1.8CNA v4.00.1%2026-05-19Fix
CVE-2025-65954simplesamlphp-module-casserver SimpleSAMLphp-casserver has an open redirect vulnerability via logout4.7CNA v3.00.3%2026-05-18Fix
CVE-2025-57282Ngrok is vulnerable to command injection8.8CISA ADP v3.11.0%2026-05-18
CVE-2025-56352tinyMQTT CONNECT packet handling resource exhaustion7.5CISA ADP v3.10.3%2026-05-18
CVE-2025-4202Multicollab: Content Team Collaboration and Editorial Workflow WordPress plugin unauthorized access4.3CNA v3.10.2%2026-05-16Fix
CVE-2025-67437Medical Management System password reset function improper access control6.5CISA ADP v3.10.2%2026-05-15
CVE-2025-67031ORSEE participant profile field processing code injection6.3CISA ADP v3.10.3%2026-05-15
CVE-2025-66664AMD Radeon™ RX 6000 Series Graphics Products out-of-bounds read4.6CNA v4.00.1%2026-05-15
CVE-2025-66660AMD Radeon™ RX 6000 Series Graphics Products improper quantity validation1.8CNA v4.00.1%2026-05-15
CVE-2025-54518AMD EPYC™ 7002 Series Processors improper isolation7.3CNA v4.00.3%2026-05-15Fix
CVE-2025-54517AMD Instinct™ MI250 out-of-bounds write8.5CNA v4.00.1%2026-05-15
CVE-2025-54511AMD MI-25 improper handling of insufficient privileges5.3CNA v4.00.2%2026-05-15
CVE-2025-52540AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics out-of-bounds write8.5CNA v4.00.1%2026-05-15
CVE-2025-52532AMD Radeon™ PRO V620 race condition2.0CNA v4.00.1%2026-05-15
CVE-2025-48521AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics improper input validation6.9CNA v4.00.1%2026-05-15
CVE-2025-48520AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics out-of-bounds read6.9CNA v4.00.1%2026-05-15
CVE-2025-48519AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics out-of-bounds write8.5CNA v4.00.1%2026-05-15
CVE-2025-48516AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics incorrect default permissions6.9CNA v4.00.1%2026-05-15
CVE-2025-48513AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics uninitialized resource use6.9CNA v4.00.1%2026-05-15
CVE-2025-48512AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics incorrect default permissions7.0CNA v4.00.1%2026-05-15
CVE-2025-29944AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics buffer overflow6.8CNA v4.00.1%2026-05-15
CVE-2025-29938AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics unchecked return value7.1CNA v4.00.1%2026-05-15
CVE-2025-29937AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics out-of-bounds read5.8CNA v4.00.1%2026-05-15
CVE-2025-29936AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics improper input validation8.4CNA v4.00.1%2026-05-15
CVE-2025-29935AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics out-of-bounds write8.4CNA v4.00.1%2026-05-15
CVE-2025-14972silabs.com Simplicity SDK insufficient DPA countermeasure reseeding4.1CNA v4.00.1%2026-05-15
CVE-2025-0045AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics improper input validation6.9CNA v4.00.1%2026-05-15
CVE-2025-0044AMD Ryzen™ Al Max+ An out-of-bounds read4.8CNA v4.00.1%2026-05-15
CVE-2025-0040AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics improper access control5.3CNA v4.00.1%2026-05-15
CVE-2025-0028AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics unchecked return value8.3CNA v4.00.1%2026-05-15
CVE-2025-69443coleam00 Archon remote code execution6.3CISA ADP v3.10.3%2026-05-14
CVE-2025-68421Hard-coded credentials in Comarch ERP Optima8.7CNA v4.00.2%2026-05-14Fix
CVE-2025-68420Privilege escalation in Comarch ERP Optima7.5CNA v4.00.1%2026-05-14Fix
CVE-2025-64526Strapi has a rate limit bypass on users-permissions plugin via attacker-controlled email keying6.9CNA v4.00.5%2026-05-14Fix
CVE-2025-62628AMD AIM-T Manageability Service uncontrolled search path7.0CNA v4.00.1%2026-05-14
CVE-2025-62625AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics improper privilege management6.0CNA v4.00.2%2026-05-14
CVE-2025-62619AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics missing authentication6.3CNA v4.00.3%2026-05-14
CVE-2025-62317HCL AION URL parameters information disclosure2.6CNA v3.10.1%2026-05-14
CVE-2025-62316HCL AION HTTP response headers clickjacking2.3CNA v3.10.1%2026-05-14
CVE-2025-62313HCL AION authentication vulnerability5.4CNA v3.10.2%2026-05-14
CVE-2025-62312HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication3.0CNA v3.10.1%2026-05-14
CVE-2025-62311HCL AION backend service communication cleartext transmission of sensitive information4.3CNA v3.10.1%2026-05-14
CVE-2025-62310HCL AION data transmission cleartext transmission of sensitive information5.4CNA v3.10.0%2026-05-14
CVE-2025-62309HCL AION input field autocomplete information disclosure2.6CNA v3.10.1%2026-05-14
CVE-2025-62308HCL AION information disclosure5.1CNA v3.10.1%2026-05-14
CVE-2025-62305HCL AION information disclosure5.1CNA v3.10.1%2026-05-14
CVE-2025-15345MapGeo - Interactive Geo Maps WordPress plugin reflected cross-site scripting via map parameter6.1CNA v3.10.2%2026-05-14Fix
CVE-2025-15025IDOR in Yordam Informatics' Library Automation System8.8CNA v3.10.3%2026-05-14Fix
CVE-2025-15024RCE in Yordam Informatics' Library Automation System8.8CNA v3.10.2%2026-05-14Fix
CVE-2025-15023Improper access control in Yordam Informatics' Library Automation System8.8CNA v3.10.2%2026-05-14Fix
CVE-2025-14870Allocation of resources without limits or throttling in GitLab7.5CNA v3.10.3%2026-05-14Fix
CVE-2025-14869Improper validation of specified quantity in input in GitLab7.5CNA v3.10.4%2026-05-14Fix
CVE-2025-13874Authorization bypass through user-controlled key in GitLab4.3CNA v3.10.2%2026-05-14Fix
CVE-2025-12669Improper control of generation of code (code injection) in GitLab5.4CNA v3.10.2%2026-05-14Fix
CVE-2025-12008IDOR in APPYAP's Yaay Social Media App8.8CNA v3.10.2%2026-05-14
CVE-2025-11024SQLi in Akıllı Ticaret's E-Commerce Pack9.8CNA v3.10.4%2026-05-14Fix
CVE-2025-62627AMD ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products untrusted pointer dereference7.2CNA v4.00.1%2026-05-13
CVE-2025-62624AMD ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products heap-based buffer overflow8.8CNA v4.00.1%2026-05-13
CVE-2025-62623AMD ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products heap-based buffer overflow8.8CNA v4.00.1%2026-05-13
CVE-2025-61972AMD EPYC™ 9004 Series Processors improper locking8.5CNA v4.00.1%2026-05-13
CVE-2025-61971AMD EPYC™ 9004 Series Processors improper locking5.9CNA v4.00.1%2026-05-13
CVE-2025-32425AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS5.1CNA v4.00.2%2026-05-13Fix
CVE-2025-29338NXP moal.ko Wi-Fi driver woal_init_module_param function buffer overflow5.6CISA ADP v3.10.2%2026-05-13Exploit code
CVE-2025-28344Striso control firmware AuxJack function stack-based buffer overflow7.5CISA ADP v3.10.3%2026-05-13
CVE-2025-28343Striso control firmware ThreadReadButtons function stack-based buffer overflow7.5CISA ADP v3.10.3%2026-05-13
CVE-2025-27853Garmin Empirbus Wireless Display Unit missing authentication7.3CISA ADP v3.10.3%2026-05-13Fix
CVE-2025-27852Garmin Empirbus Wireless Display Unit cross-site scripting5.0CISA ADP v3.10.1%2026-05-13Fix
CVE-2025-27851Garmin Empirbus Wireless Display Unit cross-site request forgery9.3CISA ADP v3.10.1%2026-05-13Fix
CVE-2025-27850Garmin Empirbus Wireless Display Unit link following7.5CISA ADP v3.10.4%2026-05-13Fix
CVE-2025-14767WPC Badge Management for WooCommerce WordPress plugin stored cross-site scripting5.5CNA v3.10.2%2026-05-13Fix
CVE-2025-14755Cost Calculator Builder WordPress plugin insecure direct object reference5.3CNA v3.10.2%2026-05-13Fix
CVE-2025-14033ilGhera Support System for WooCommerce WordPress plugin unauthorized access5.3CNA v3.10.3%2026-05-13Fix
CVE-2025-11159Hitachi Vantara Pentaho Data Integration and Analytics vulnerable third-party component7.2NVD v3.10.3%2026-05-13Fix
CVE-2025-9989Broadstreet WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.2%2026-05-13Fix
CVE-2025-9988Broadstreet WordPress plugin missing authorization authenticated Advertiser creation4.3CNA v3.10.2%2026-05-13Fix
CVE-2025-9987Broadstreet WordPress plugin authenticated (Subscriber+) information disclosure5.3CNA v3.10.3%2026-05-13Fix
CVE-2025-70842FluentCMS File Management module stored cross-site scripting5.4CISA ADP v3.10.1%2026-05-12
CVE-2025-67604Fortinet FortiAnalyzer use of a dangerous function5.2CNA v3.10.4%2026-05-12Fix
CVE-2025-65719Open Source Kubectl MCP Server vulnerable to arbitrary code execution9.8CISA ADP v3.10.6%2026-05-12Fix
CVE-2025-65088Out-of-bounds read in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share7.8NVD v3.10.2%2026-05-12Fix
CVE-2025-65087Out-of-bounds read in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share7.8NVD v3.10.2%2026-05-12Fix
CVE-2025-65086Out-of-bounds write in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share7.8NVD v3.10.2%2026-05-12Fix
CVE-2025-53870Fortinet FortiAP OS command injection6.5CNA v3.10.6%2026-05-12Fix
CVE-2025-53844Fortinet FortiOS A out-of-bounds write8.3CNA v3.10.6%2026-05-12Fix
CVE-2025-53681Fortinet FortiMail SQL injection6.3CNA v3.10.4%2026-05-12Fix
CVE-2025-53680Fortinet FortiAP-U OS command injection6.1CNA v3.10.6%2026-05-12Fix
CVE-2025-46311Apple iOS and iPadOS UI misrepresentation7.5CISA ADP v3.10.2%2026-05-12Fix
CVE-2025-43524Apple macOS sandbox escape8.8CISA ADP v3.10.1%2026-05-12Fix
CVE-2025-40949Siemens RUGGEDCOM ROX MX5000 OS command injection8.9CNA v4.00.7%2026-05-12Fix
CVE-2025-40948Siemens RUGGEDCOM ROX MX5000 argument injection6.1CNA v4.00.4%2026-05-12Fix
CVE-2025-40947Siemens RUGGEDCOM ROX MX5000 OS command injection7.7CNA v4.00.5%2026-05-12Fix
CVE-2025-40946Siemens blueplanet 100 NX3 M8 hard-coded cryptographic key7.2CNA v4.00.2%2026-05-12Fix
CVE-2025-40833Siemens IE/PB LINK HA null pointer dereference8.7CNA v4.00.3%2026-05-12Fix
CVE-2025-36515AI Playground software uncontrolled search path5.4CNA v4.00.1%2026-05-12Fix
CVE-2025-36510Display Virtualization denial of service6.8CNA v4.00.1%2026-05-12Fix
CVE-2025-35991Intel platforms UEFI firmware for some improper initialization5.6CNA v4.00.1%2026-05-12Fix
CVE-2025-35990Intel Endpoint Management Assistant (EMA) software improper input validation8.7CNA v4.00.2%2026-05-12Fix
CVE-2025-35979Intel(R) Processors information disclosure6.8CNA v4.00.1%2026-05-12Fix
CVE-2025-35969Intel(R) Server Firmware Update Utility Software uncontrolled search path5.4CNA v4.00.1%2026-05-12Fix
CVE-2025-27723Intel(R) Ethernet 800 series use-after-free6.8CNA v4.00.1%2026-05-12Fix
CVE-2025-15463Advanced Custom Fields: Extended WordPress plugin unauthenticated arbitrary shortcode execution6.5CNA v3.10.4%2026-05-12Fix
CVE-2025-12659Heap-based buffer overflow in Siemens Simcenter Femap7.3CNA v4.00.2%2026-05-12Fix
CVE-2025-6577SQLi in Akilli Commerce's E-Commerce Website9.8CNA v3.10.3%2026-05-12Fix
CVE-2025-65418docuFORM Managed Print Service Client path traversal7.5CISA ADP v3.10.6%2026-05-11
CVE-2025-65417docuFORM Managed Print Service Client login page reflected cross-site scripting6.1CISA ADP v3.10.2%2026-05-11
CVE-2025-65416docuFORM Managed Print Service Client pmupdate.php unrestricted file upload6.3CISA ADP v3.10.3%2026-05-11
CVE-2025-65415docuFORM Managed Print Service Client login page session fixation5.4CISA ADP v3.10.2%2026-05-11
CVE-2025-61314Mecury docuForm dfm-menu_orderopt.php reflected cross-site scripting7.3CISA ADP v3.10.3%2026-05-11
CVE-2025-61313Mecury docuForm dfm-menu_markeralerts.php reflected cross-site scripting7.3CISA ADP v3.10.3%2026-05-11
CVE-2025-61312Mecury docuForm acc-menu_pricess.php reflected cross-site scripting7.3CISA ADP v3.10.3%2026-05-11
CVE-2025-61311Mecury docuForm dfm-menu_alerts.php reflected cross-site scripting7.3CISA ADP v3.10.3%2026-05-11
CVE-2025-61310Mecury docuForm acc-menu_billings.php reflected cross-site scripting6.1CISA ADP v3.10.2%2026-05-11
CVE-2025-61309Mecury docuForm dfm-menu_departments.php reflected cross-site scripting6.1CISA ADP v3.10.2%2026-05-11
CVE-2025-61308Mecury docuForm dfm-menu_maintenance.php reflected cross-site scripting6.1CISA ADP v3.10.2%2026-05-11
CVE-2025-61307Mecury docuForm acc-menu_papers.php reflected cross-site scripting6.1CISA ADP v3.10.2%2026-05-11
CVE-2025-61306Mecury docuForm dfm-menu_coveragealerts.php reflected cross-site scripting6.1CISA ADP v3.10.2%2026-05-11
CVE-2025-61305Mecury docuForm dfm-menu_firmware.php reflected cross-site scripting6.1CISA ADP v3.10.2%2026-05-11
CVE-2025-43992Dell ECS authentication bypass5.6CNA v3.10.2%2026-05-11Fix
CVE-2025-10908WSO2 Identity Server Magic Link and Pass Key authentication authentication bypass7.3CISA ADP v3.10.2%2026-05-11Fix
CVE-2025-10470WSO2 Identity Server Magic Link authenticator denial of service8.6CNA v3.10.3%2026-05-11Fix
CVE-2025-9973WSO2 Identity Server adaptive authentication authorization bypass6.4CNA v3.10.4%2026-05-11Fix
CVE-2025-8325Improper access control via Gateway API in multiple WSO2 Products allows Unauthorized Operations6.3CNA v3.10.2%2026-05-11Fix
CVE-2025-8154HTTP header injection via Webhook API in multiple WSO2 Products allows Response Header Manipulation5.3CNA v3.10.2%2026-05-11Fix
CVE-2025-14179PHP SQL injection in pdo_firebird via NUL bytes in quoted strings7.4CNA v4.00.4%2026-05-10Fix
CVE-2025-15634HCL BigFix WebUI is affected by a missing authorization5.3CNA v4.00.2%2026-05-09Fix
CVE-2025-15633HCL BigFix WebUI is affected by an improper authorization5.3CNA v4.00.2%2026-05-09Fix
CVE-2025-71302Linux kernel Panthor GPU driver race condition7.8CNA v3.10.2%2026-05-08Fix
CVE-2025-71301Linux kernel DRM GEM shmem helper vulnerability5.5NVD v3.10.1%2026-05-08Fix
CVE-2025-71300Linux kernel ZynqMP device tree OP-TEE node vulnerability7.8CNA v3.10.1%2026-05-08Fix
CVE-2025-71299Linux kernel Cadence QuadSPI driver vulnerability5.5NVD v3.10.1%2026-05-08Fix
CVE-2025-71298Linux kernel DRM GEM shmem helper vulnerability5.5NVD v3.10.1%2026-05-08Fix
CVE-2025-71297Linux kernel rtw88 8822b Wi-Fi driver vulnerability5.5NVD v3.10.1%2026-05-08Fix
CVE-2025-71296Linux kernel DRM GEM shmem helper vulnerability5.5NVD v3.10.1%2026-05-08Fix
CVE-2025-69691pfSense mass assignment9.9CISA ADP v3.10.7%2026-05-08
CVE-2025-69690pfSense deserialization of untrusted data9.1CISA ADP v3.10.8%2026-05-08
CVE-2025-69599RayVentory Scan Engine privilege escalation9.8CISA ADP v3.10.4%2026-05-08
CVE-2025-69233Apache CloudStack: Domain/account resources limits not honored6.5CNA v3.10.4%2026-05-08Fix
CVE-2025-67888Control Web Panel admin/index.php OS command injection7.3CISA ADP v3.13.6%2026-05-08MetasploitExploit code
CVE-2025-678871C-Bitrix Translate module remote code execution9.8CISA ADP v3.11.5%2026-05-08Exploit code
CVE-2025-67886Bitrix24 Translate module remote code execution6.3CISA ADP v3.11.0%2026-05-08Exploit code
CVE-2025-67486Dolibarr has an authenticated remote code execution via eval injection in user extrafields8.6CNA v4.00.9%2026-05-08
CVE-2025-66467Apache CloudStack: MinIO policy remains intact on bucket deletion8.0CNA v3.10.4%2026-05-08Fix
CVE-2025-66172Apache CloudStack Backup plugin vulnerability8.1CISA ADP v3.10.5%2026-05-08Fix
CVE-2025-66171Apache CloudStack: Any user can create a new VM from backups they should not have access to6.5CISA ADP v3.10.5%2026-05-08Fix
CVE-2025-66170Apache CloudStack: Any user can list backups that they should not have access to6.5CISA ADP v3.10.5%2026-05-08Fix
CVE-2025-55449AstrBot is vulnerable to RCE with hard-coded JWT signing keys7.3CISA ADP v3.10.3%2026-05-08Exploit codeFix
CVE-2025-68604WPGraphQL WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2026-05-07Fix
CVE-2025-68060Team Member WordPress plugin SQL injection7.6CNA v3.10.2%2026-05-07Fix
CVE-2025-67202Sidekiq-cron is vulnerable to a cross-site scripting (XSS) vulnerability via crafted URL6.1CISA ADP v3.10.2%2026-05-07Fix
CVE-2025-66105Bus Ticket Booking with Seat Reservation WordPress plugin broken access control5.3CNA v3.10.2%2026-05-07Fix
CVE-2025-65122Youtube-regex vulnerable to Regex denial of service7.5CISA ADP v3.10.3%2026-05-07
CVE-2025-63706Next-npm-version is vulnerable to command injection9.8CISA ADP v3.11.5%2026-05-07
CVE-2025-63705Node-ts-ocr is vulnerable to OS command injection via the invokeImageOcr function in src/index.js8.8CISA ADP v3.11.2%2026-05-07
CVE-2025-63704Query-parser-string is vulnerable to prototype pollution9.8CISA ADP v3.10.5%2026-05-07
CVE-2025-63703Parse-ini is vulnerable to prototype pollution in index.js9.8CISA ADP v3.10.4%2026-05-07
CVE-2025-62127WEN Logo Slider WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.1%2026-05-07Fix
CVE-2025-14341Input Data Manipulation in DivvyDrive Information Technologies' DivvyDrive8.3CNA v3.10.2%2026-05-07Fix
CVE-2025-9661Hitachi Virtual Storage Platform One Block 23 management gui OS command injection8.1CNA v3.10.9%2026-05-07Fix
CVE-2025-4397Medtronic MyCareLink Patient Monitor Data Encryption Weakness6.8CNA v3.10.1%2026-05-07Fix
CVE-2025-4386Medtronic MyCareLink Patient Monitor Hardware Debug Port6.8CNA v3.10.2%2026-05-07Fix
CVE-2025-2514Hitachi Virtual Storage Platform G130 missing brute-force protection5.3CNA v3.10.3%2026-05-07Fix
CVE-2025-1978Remote code execution vulnerability in Hitachi Storage Navigator and the maintenance console8.3CNA v3.10.5%2026-05-07Fix
CVE-2025-71295Linux kernel buffer cache folio release null pointer dereference5.5NVD v3.10.1%2026-05-06Fix
CVE-2025-71294Linux kernel AMDGPU buffer functions null pointer dereference5.5NVD v3.10.1%2026-05-06Fix
CVE-2025-71293Linux kernel drm/amdgpu/ras null pointer dereference5.5NVD v3.10.1%2026-05-06Fix
CVE-2025-71292Linux kernel JFS rename integer overflow7.5CNA v3.10.3%2026-05-06Fix
CVE-2025-71291Linux kernel bcm_vk null pointer dereference5.5NVD v3.10.1%2026-05-06Fix
CVE-2025-71290Linux kernel TI FPC202 driver memory leak5.5NVD v3.10.1%2026-05-06Fix
CVE-2025-71289Linux kernel NTFS3 file truncation vulnerability7.1CNA v3.10.3%2026-05-06Fix
CVE-2025-71288Linux kernel mtk-smi memory leak5.5NVD v3.10.1%2026-05-06Fix
CVE-2025-71287Linux kernel mtk-smi memory leak5.5NVD v3.10.1%2026-05-06Fix
CVE-2025-71286Linux kernel SOF audio bytes controls vulnerability7.8CNA v3.10.1%2026-05-06Fix
CVE-2025-71285Linux kernel QRTR MHI transport null pointer dereference5.5NVD v3.10.1%2026-05-06Fix
CVE-2025-71274Linux kernel rpmsg driver_override attribute race condition7.8CNA v3.10.1%2026-05-06Fix
CVE-2025-71273Linux kernel rtw88 Wi-Fi driver memory leak5.5NVD v3.10.1%2026-05-06Fix
CVE-2025-71272Linux kernel MOST driver interface registration memory leak5.5NVD v3.10.1%2026-05-06Fix
CVE-2025-71271In the Linux kernel, the following vulnerability has been resolved: hfsplus: ensure sb->s_fs_info is always cleaned up When hfsplus was converted to the new mount api a bug was introduced by changing the allocation pattern of sb->s_fs_info. If setup_bdev_super() fails after a new superblock has be5.5NVD v3.10.1%2026-05-06Fix
CVE-2025-71256UNISOC chipsets nr modem improper input validation7.5CNA v3.10.3%2026-05-06Fix
CVE-2025-71255UNISOC chipsets Modem IMS improper input validation7.5CNA v3.10.3%2026-05-06Fix
CVE-2025-71254UNISOC chipsets Modem IMS improper input validation7.5CNA v3.10.3%2026-05-06Fix
CVE-2025-71253UNISOC chipsets Modem IMS improper input validation7.5CNA v3.10.3%2026-05-06Fix
CVE-2025-71252UNISOC chipsets Modem IMS improper input validation7.5CNA v3.10.3%2026-05-06Fix
CVE-2025-71251UNISOC chipsets IMS crash7.5CNA v3.10.3%2026-05-06Fix
CVE-2025-62345HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure Input Text vulnerability2.7CNA v3.10.2%2026-05-06
CVE-2025-59854HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability3.1CNA v3.10.1%2026-05-06Fix
CVE-2025-59853HCL DFXAnalytics is affected by an improper error handling3.1CNA v3.10.2%2026-05-06Fix
CVE-2025-59852HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability3.7CNA v3.10.1%2026-05-06Fix
CVE-2025-59851HCL DFXAnalytics is affected by an Insecure Security header configuration vulnerability3.7CNA v3.10.2%2026-05-06Fix
CVE-2025-52613HCL BigFix Service Management (SM) is affected by use of a vulnerable component4.6CNA v3.10.2%2026-05-06Fix
CVE-2025-31984HCL BigFix Service Management X-Content-Type-Options header information disclosure3.7CNA v3.10.1%2026-05-06Fix
CVE-2025-31983HCL BigFix Service Management (SM) improperly implemented security check3.7CNA v3.10.1%2026-05-06Fix
CVE-2025-31982HCL BigFix Service Management unlinked directories information disclosure3.7CNA v3.10.2%2026-05-06Fix
CVE-2025-31978HCL BigFix Service Management (SM) does not adequately sanitize or safely render4.6CNA v3.10.1%2026-05-06Fix
CVE-2025-31976HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials4.8CNA v3.10.2%2026-05-06Fix
CVE-2025-31975HCL BigFix Service Management server banner information disclosure2.6CNA v3.10.2%2026-05-06Fix
CVE-2025-31974HCL BigFix Service Management (SM) is susceptible to a Root File System not Mounted as Read-Only3.9CNA v3.10.2%2026-05-06Fix
CVE-2025-31970HCL DFXAnalytics is affected by an Insecure Security header configuration vulnerability5.3CNA v3.10.1%2026-05-06Fix
CVE-2025-31960HCL BigFix Service Management reporting module information disclosure5.3CNA v3.10.2%2026-05-06Fix
CVE-2025-31959HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images3.5CNA v3.10.1%2026-05-06Fix
CVE-2025-31957HCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF)2.6CNA v3.10.1%2026-05-06Fix
CVE-2025-31951HCL BigFix RunBookAI command injection8.8CNA v3.10.2%2026-05-06
CVE-2025-66369Samsung Exynos 5G NR NAS registration handling denial of service7.5CISA ADP v3.10.3%2026-05-05
CVE-2025-61669jupyter_server next parameter open redirect can redirect users to external domains6.3CNA v4.00.2%2026-05-05Fix
CVE-2025-52206ISPConfig cross-site scripting4.7CISA ADP v3.10.2%2026-05-05Fix
CVE-2025-42611Improper certificate validation in multiple RouterOS services6.5CNA v3.10.2%2026-05-05
CVE-2025-13618Mentoring WordPress plugin unauthenticated privilege escalation in mentoring_process_registration9.8CNA v3.10.3%2026-05-05Fix
CVE-2025-70072An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter::ConvertMeshMultiMaterial() components6.5CISA ADP v3.10.2%2026-05-04Fix
CVE-2025-70071An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray()5.9CISA ADP v3.10.5%2026-05-04Fix
CVE-2025-70070An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry()6.5CISA ADP v3.10.2%2026-05-04Fix
CVE-2025-70069An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial() method7.5CISA ADP v3.10.4%2026-05-04Fix
CVE-2025-70067Assimp versions up to buffer overflow9.8CISA ADP v3.10.3%2026-05-04Fix
CVE-2025-67796IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users8.1CISA ADP v3.10.2%2026-05-04Fix
CVE-2025-58074Privilege escalation during the installation of Norton Secure VPN via the Microsoft Store8.8CNA v3.10.1%2026-05-04
CVE-2025-47408Qualcomm Snapdragon untrusted pointer dereference in Power Optimization firmware7.8CNA v3.10.1%2026-05-04Fix
CVE-2025-47407Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in DSP service7.8CNA v3.10.1%2026-05-04Fix
CVE-2025-47406Qualcomm Snapdragon buffer over-read in DSP service6.1CNA v3.10.1%2026-05-04Fix
CVE-2025-47405Qualcomm Snapdragon untrusted pointer dereference in Camera7.8CNA v3.10.1%2026-05-04Fix
CVE-2025-47404Qualcomm Snapdragon buffer copy without checking size of input in Automotive Audio6.5CNA v3.10.1%2026-05-04Fix
CVE-2025-47403Qualcomm Snapdragon buffer over-read in WLAN firmware6.5CNA v3.10.2%2026-05-04Fix
CVE-2025-47401Qualcomm Snapdragon buffer over-read in WLAN HAL6.5CNA v3.10.2%2026-05-04Fix
CVE-2025-14320XSS in Tegsoft's Online Support Application9.8CNA v3.10.3%2026-05-04
CVE-2025-13605Shell command injection in 3onedata GW1101-1D(RS-485)-TB-P modbus gateway9.3CNA v4.00.2%2026-05-04Fix
CVE-2025-14726Widgets for Social Photo Feed WordPress plugin unauthorized access6.5CNA v3.10.8%2026-05-02NucleiFix
CVE-2025-69606GSVoIP web panel gateways.php error page cross-site scripting6.1CISA ADP v3.10.4%2026-05-01
CVE-2025-63548An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet specially crafted to bear a non-valid value in any Boolean field.7.5CISA ADP v3.10.3%2026-05-01
CVE-2025-63547An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to the MTU length field7.5CISA ADP v3.10.4%2026-05-01
CVE-2025-52347PassMark BurnInTest, OSForensics and PerformanceTest DirectIo64.sys driver privilege escalation7.8CISA ADP v3.10.1%2026-05-01
CVE-2025-71284Synway SMG Gateway Management Software OS command injection via radius_address9.3CNA v4.05.7%2026-04-30
CVE-2025-56568PCO reachable assertion7.5CISA ADP v3.10.3%2026-04-30
CVE-2025-51846CryptPad unbounded WebSocket frame flood8.7CNA v4.00.6%2026-04-30Fix
CVE-2025-46115open5gs PDU Session Modification Request handling denial of service7.5CISA ADP v3.10.3%2026-04-30
CVE-2025-36335IBM watsonx.data intelligence vulnerabilities found6.2CNA v3.10.1%2026-04-30Fix
CVE-2025-36180IBM Inadequate Pod Communication Restrictions, affects watsonx.data5.3CNA v3.10.2%2026-04-30Fix
CVE-2025-36122IBM Db2 stmtheap denial of service6.5CNA v3.10.2%2026-04-30Fix
CVE-2025-14688IBM Db2 denial of service5.3CNA v3.10.2%2026-04-30Fix
CVE-2025-14576Qt possible QML code injection in VectorImage component7.8NVD v3.10.2%2026-04-30Fix
CVE-2025-14543RTI Connext Professional XML external entity injection8.8CNA v4.00.2%2026-04-30Fix
CVE-2025-13030django-mdeditor is missing authentication for critical function9.8NVD v3.10.3%2026-04-30
CVE-2025-56537OpenNebula stored cross-site scripting6.1CISA ADP v3.10.2%2026-04-29
CVE-2025-56536OpenNebula stored cross-site scripting6.1CISA ADP v3.10.2%2026-04-29
CVE-2025-56535OpenNebula cross-site scripting6.1CISA ADP v3.10.2%2026-04-29
CVE-2025-56534OpenNebula custom authenticator driver cross-site scripting6.1CISA ADP v3.10.2%2026-04-29
CVE-2025-50328B1 Free Archiver archive extraction security feature bypass7.3CISA ADP v3.10.3%2026-04-29
CVE-2025-10503Reflected cross-site scripting via Authentication endpoint in WSO2 Identity Server6.1CNA v3.10.2%2026-04-29Fix
CVE-2025-67223Aranda Software Service Desk Aranda File Server activity logs information disclosure7.5CISA ADP v3.10.6%2026-04-28Exploit code
CVE-2025-60889Stellar-group Hpx deserialization of untrusted data9.8CISA ADP v3.10.5%2026-04-28
CVE-2025-60887Cista raw namespace pointer insecure deserialization5.3CNA v3.10.2%2026-04-28
CVE-2025-48431Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error7.5CISA ADP v3.11.1%2026-04-28Fix
CVE-2025-10539Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking App4.8CISA ADP v3.10.2%2026-04-28Fix
CVE-2025-69689Fan Control Open File dialog privilege escalation8.8CISA ADP v3.10.1%2026-04-27
CVE-2025-69428Pro-Bit information disclosure7.5CISA ADP v3.10.3%2026-04-27
CVE-2025-54505AMD EPYC™ 7001 Series Processors information disclosure2.0CNA v4.00.2%2026-04-27Fix
CVE-2025-15626Authenticated user can bypass authorization in Ribblr Crochet and Knitting iOS application5.3CNA v4.00.2%2026-04-27
CVE-2025-67259ClassroomIO course API endpoint improper access control6.5CISA ADP v3.10.2%2026-04-24
CVE-2025-62233Apache DolphinScheduler: Deserialization of untrusted data in RPC6.3CISA ADP v3.10.5%2026-04-24Fix
CVE-2025-61872Mahara Elasticsearch7 search plugin cross-site scripting6.1CISA ADP v3.10.2%2026-04-24
CVE-2025-59308Mahara institution administration improper access control4.7CISA ADP v3.10.2%2026-04-24
CVE-2025-11762HubSpot All-In-One Marketing WordPress plugin information disclosure4.3CNA v3.10.2%2026-04-24Fix
CVE-2025-70994Yadea T5 Electric Bicycle keyless entry system weak authentication7.3CISA ADP v3.10.3%2026-04-23Exploit code
CVE-2025-66286Red Hat Enterprise Linux 6 webkitgtk: Authorization bypass4.7CNA v3.10.2%2026-04-23
CVE-2025-62373Pipecat vulnerable to remote code execution by Pickle deserialization via LivekitFrameSerializer9.8CNA v3.10.7%2026-04-23Fix
CVE-2025-62110Rescue Shortcodes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-04-23Fix
CVE-2025-62104ACF Galerie 4 WordPress plugin broken access control4.3CNA v3.10.2%2026-04-23Fix
CVE-2025-50229jizhiCMS SQL injection9.8CISA ADP v3.10.4%2026-04-23
CVE-2025-36074IBM Security Verify Directory unrestricted file upload5.5CNA v3.10.3%2026-04-23Fix
CVE-2025-13763Libopensc: OpenSC: Multiple uses of uninitialized variable5.7CNA v3.10.3%2026-04-23Fix
CVE-2025-10549DLL hijacking in EfficientLab Controlio leads to local privilege escalation5.1CISA ADP v3.10.2%2026-04-23Fix
CVE-2025-58922Avada WordPress theme cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-04-22Fix
CVE-2025-9957Incorrect authorization in GitLab2.7CNA v3.10.4%2026-04-22Fix
CVE-2025-6016Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2026-04-22Fix
CVE-2025-3922Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2026-04-22Fix
CVE-2025-0186Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2026-04-22Fix
CVE-2025-41029SQL injection in Zeon Academy Pro by Zeon Global Tech9.3CNA v4.00.2%2026-04-21
CVE-2025-41011HTML injection in PHP Point Of Sale6.1NVD v3.10.2%2026-04-21
CVE-2025-31981HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption5.3CNA v3.10.1%2026-04-21Fix
CVE-2025-31958HCL BigFix Service Management (SM) is susceptible to HTTP request smuggling3.7CNA v3.10.2%2026-04-21Fix
CVE-2025-15638Net::Dropbear versions for Perl contains a vulnerable version of libtomcrypt10.0CISA ADP v3.10.6%2026-04-21Fix
CVE-2025-14362GoAnywhere MFT SFTP Service Login vulnerable to brute force Attack under certain Circumstances7.3CNA v3.10.2%2026-04-21Fix
CVE-2025-13826Incorrect input validation on the Zervit portable HTTP/Web server8.2CNA v4.00.3%2026-04-21
CVE-2025-10354SemanticMediaWiki reflected cross-site scripting (XSS) in Semantic MediaWiki5.1CNA v4.00.3%2026-04-21Fix
CVE-2025-1241Encryption vulnerable to brute-force decryption in GoAnywhere MFT5.8CNA v3.10.1%2026-04-21Fix
CVE-2025-66954Buffalo Link Station nasapi endpoint information disclosure6.5CISA ADP v3.10.3%2026-04-20
CVE-2025-66335Apache Doris MCP Server: MCP SQL inject5.3CISA ADP v3.10.7%2026-04-20Fix
CVE-2025-13480Incorrect authorization in Fudo Enterprise6.5NVD v3.10.3%2026-04-20Fix
CVE-2025-70795Safetica Application suite STProcessMonitor driver denial of service5.5CISA ADP v3.10.2%2026-04-17Exploit code
CVE-2025-65104Firebird: Information leak vulnerability in firebird3 client when used with newer server7.9CNA v3.10.2%2026-04-17Fix
CVE-2025-46641Dell PowerProtect Data Domain improper authentication6.6CNA v3.10.4%2026-04-17Fix
CVE-2025-46607Dell PowerProtect Data Domain improper authentication6.6CNA v3.10.4%2026-04-17Fix
CVE-2025-46606Dell PowerProtect Data Domain missing brute-force protection6.2CNA v3.10.4%2026-04-17Fix
CVE-2025-46605Dell PowerProtect Data Domain session fixation6.2CNA v3.10.3%2026-04-17Fix
CVE-2025-36568Dell PowerProtect Data Domain BoostFS insufficiently protected credentials7.8CNA v3.10.1%2026-04-17Fix
CVE-2025-15625Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud Server9.8NVD v3.10.4%2026-04-17Fix
CVE-2025-15624Plaintext storage of a password in Sparx Pro Cloud Server7.5NVD v3.10.4%2026-04-17Fix
CVE-2025-15623Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user7.5NVD v3.10.3%2026-04-17Fix
CVE-2025-15622Sparx Enterprise Architect client reveals plaintext OAuth2 client secret6.2CNA v4.00.2%2026-04-17
CVE-2025-54510AMD EPYC™ 9004 Series Processors improper locking5.9CNA v4.00.1%2026-04-16
CVE-2025-54502AMD EPYC™ 9004 Series Processors privilege escalation7.1CNA v4.00.1%2026-04-16
CVE-2025-43937Dell PowerScale OneFS sensitive information in log files6.6CNA v3.10.1%2026-04-16Fix
CVE-2025-43935Dell PowerScale OneFS improper resource release4.4CNA v3.10.1%2026-04-16Fix
CVE-2025-43883Dell PowerScale OneFS improper check for exceptional conditions4.1CNA v3.10.1%2026-04-16Fix
CVE-2025-36579Dell Pro 14 Essential PV14250 weak password recovery5.1CNA v3.10.2%2026-04-16Fix
CVE-2025-15621Sparx Enterprise Architect insufficiently protected credentials6.0NVD v3.10.1%2026-04-16Fix
CVE-2025-14868Career Section WordPress plugin cross-site request forgery to arbitrary file deletion8.8CNA v3.10.4%2026-04-16Fix
CVE-2025-13364WP Maps WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-04-16Fix
CVE-2025-12624Improper Token Invalidation in WSO2 Identity Server allows Access after Account Lock6.0CNA v3.10.2%2026-04-16Fix
CVE-2025-6024WSO2 API Manager and Identity Server authentication endpoint cross-site scripting6.1CNA v3.10.2%2026-04-16Fix
CVE-2025-67841Nordic Semiconductor IronSide SE nRF54H20 algorithmic complexity7.5CISA ADP v3.10.3%2026-04-15
CVE-2025-63029WCFM Marketplace WordPress plugin SQL injection7.6CNA v3.10.3%2026-04-15Fix
CVE-2025-54550Apache Airflow: RCE by race condition in example_xcom dag8.1CISA ADP v3.10.6%2026-04-15Fix
CVE-2025-53444Userpro WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-04-15Fix
CVE-2025-52641HCL AION Internal Filesystem Exploration vulnerability2.9CNA v3.10.1%2026-04-15Fix
CVE-2025-41118Grafana Pyroscope Tencent COS configuration API information disclosure9.1CNA v3.10.4%2026-04-15Fix
CVE-2025-40899Stored cross-site scripting (XSS) in Assets and Nodes in Guardian/CMC7.1CNA v4.00.3%2026-04-15Fix
CVE-2025-40897Incorrect authorization for Threat Intelligence in Guardian/CMC7.2CNA v4.00.3%2026-04-15Fix
CVE-2025-15636YouTube Showcase WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-04-15Fix
CVE-2025-15635Smart Online Order for Clover WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-04-15Fix
CVE-2025-15610OpenText RightFax deserialization of untrusted data9.3CNA v4.00.3%2026-04-15
CVE-2025-15470Eleganzo WordPress theme authenticated (Subscriber+) arbitrary directory deletion6.5CNA v3.10.3%2026-04-15Fix
CVE-2025-14813Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks9.3CNA v4.00.3%2026-04-15Fix
CVE-2025-12141Grafana Alerting Editors can edit destination of webhooks they did not create1.3CNA v4.00.3%2026-04-15Fix
CVE-2025-70023transloadit uppy type confusion9.8CISA ADP v3.10.4%2026-04-14
CVE-2025-69993Leafletjs Leaflet cross-site scripting6.1CNA v3.10.2%2026-04-14
CVE-2025-69893implementation of BIP-39 mnemonic processing side-channel information leak4.6CISA ADP v3.10.2%2026-04-14
CVE-2025-68649Fortinet FortiManager Cloud path traversal5.4CNA v3.10.4%2026-04-14Fix
CVE-2025-65136manikandan580 School Management System contact-us.php reflected cross-site scripting6.1CISA ADP v3.10.2%2026-04-14
CVE-2025-65135manikandan580 School Management System between-date-reprtsdetails.php SQL injection9.8CNA v3.10.3%2026-04-14
CVE-2025-65134manikandan580 School Management System contact-us.php reflected cross-site scripting6.1CISA ADP v3.10.2%2026-04-14
CVE-2025-65133School Management System SQL injection9.8CISA ADP v3.10.5%2026-04-14
CVE-2025-65132alandsilva26 hotel-management-php 1.0 is vulnerable to Cross Site Scripting (XSS) in /public/admin/edit_room.php which allows an attacker to inject and execute arbitrary JavaScript via the room_id GET parameter.6.1CISA ADP v3.10.2%2026-04-14
CVE-2025-63939anirudhkannan Grocery Store Management System search_products_itname.php SQL injection9.8CNA v3.10.3%2026-04-14
CVE-2025-61886Fortinet FortiSandbox PaaS cross-site scripting4.9CNA v3.10.3%2026-04-14Fix
CVE-2025-61848Fortinet FortiManager SQL injection6.5CNA v3.10.5%2026-04-14Fix
CVE-2025-61624Fortinet Multiple Products path traversal5.4CNA v3.11.1%2026-04-14KEVFix
CVE-2025-61260OpenAI Codex CLI enables code execution9.8CISA ADP v3.16.6%2026-04-14
CVE-2025-59809Fortinet FortiSOAR on-premise server-side request forgery4.1CNA v3.10.2%2026-04-14Fix
CVE-2025-53847Fortinet FortiOS A missing authentication6.2CNA v3.10.3%2026-04-14Fix
CVE-2025-40745Siemens Software Center improper certificate validation6.3CNA v4.00.1%2026-04-14Fix
CVE-2025-15565Nexi XPay WordPress plugin missing authorization to unauthenticated order Status modification5.3CNA v3.10.2%2026-04-14Fix
CVE-2025-13822Authentication bypass in MCPHub5.3NVD v3.10.4%2026-04-14Fix
CVE-2025-8095Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge9.1CNA v4.00.2%2026-04-14
CVE-2025-7389Progress Software OpenEdge unauthorized arbitrary file read via RMI in AdminServer interface8.2CNA v4.00.3%2026-04-14
CVE-2025-70936Vtiger CRM MailManager module reflected cross-site scripting5.4CISA ADP v3.10.1%2026-04-13
CVE-2025-69627Gonitro Nitro PDF Pro use-after-free8.4CISA ADP v3.10.2%2026-04-13
CVE-2025-69624Gonitro Nitro PDF Pro null pointer dereference7.5CISA ADP v3.10.4%2026-04-13
CVE-2025-66769Gonitro Nitro PDF Pro A null pointer dereference7.5CISA ADP v3.10.4%2026-04-13
CVE-2025-66236Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI7.5CISA ADP v3.10.4%2026-04-13Fix
CVE-2025-63743Snipe-IT profile name fields vulnerability5.4CISA ADP v3.10.2%2026-04-13
CVE-2025-51414Phpgurukul Online Course Registration profile picture arbitrary file upload8.8CISA ADP v3.10.3%2026-04-13
CVE-2025-31991HCL DevOps Velocity is susceptible to brute-force attacks6.8CNA v3.10.2%2026-04-13Fix
CVE-2025-156321Panel-dev MaxKB MdPreview chat.ts cross-site scripting5.1CNA v4.00.3%2026-04-13Fix
CVE-2025-15441Form Maker WordPress plugin SQL injection6.8CISA ADP v3.10.3%2026-04-13Fix
CVE-2025-3756Denial of service vulnerabilities in System 800xA, Symphony® Plus IEC 618507.1CNA v4.00.2%2026-04-13Fix
CVE-2025-66447Chamilo LMS has validation-less redirect on login page0.0CNA v3.10.2%2026-04-10Fix
CVE-2025-58920Cerato WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-04-10
CVE-2025-58913VideoPro WordPress theme local file inclusion8.1CNA v3.10.5%2026-04-10
CVE-2025-44560owntone-server buffer overflow9.8CISA ADP v3.10.3%2026-04-10
CVE-2025-14545YML for Yandex Market WordPress plugin Shop Manager+ RCE via Feed Generation6.5CISA ADP v3.10.3%2026-04-10Fix
CVE-2025-5804WordPress Case Theme User plugin local file inclusion7.5CNA v3.10.5%2026-04-10Fix
CVE-2025-70811phpBB cross-site request forgery4.3CISA ADP v3.10.1%2026-04-09Fix
CVE-2025-70810phpBB cross-site request forgery8.8CISA ADP v3.10.2%2026-04-09
CVE-2025-70797LimeSurvey cross-site scripting6.1CISA ADP v3.10.3%2026-04-09
CVE-2025-70365Kiamo stored cross-site scripting5.4CISA ADP v3.10.1%2026-04-09
CVE-2025-70364Kiamo code injection8.8CISA ADP v3.10.3%2026-04-09
CVE-2025-63238LimeSurvey cross-site scripting6.1CISA ADP v3.10.2%2026-04-09
CVE-2025-62718Axios has a NO_PROXY Hostname Normalization Bypass that leads to SSRF6.3CNA v4.01.2%2026-04-09Fix
CVE-2025-62188Apache DolphinScheduler: Users can access sensitive information through the actuator endpoint7.5CISA ADP v3.10.5%2026-04-09Fix
CVE-2025-59969Juniper Networks Junos OS Evolved advanced forwarding toolkit buffer overflow7.1CNA v4.00.2%2026-04-09Fix
CVE-2025-57735Apache Airflow: Airflow Logout not Invalidating JWT9.1CISA ADP v3.10.7%2026-04-09Fix
CVE-2025-50228jizhiCMS server-side request forgery9.1CISA ADP v3.10.3%2026-04-09
CVE-2025-45806rrweb-snapshot cross-site scripting6.1CISA ADP v3.10.2%2026-04-09
CVE-2025-15480Canonical Ubuntu senstive information disclosure was affecting ubuntu-desktop-provision2.7CNA v4.00.3%2026-04-09
CVE-2025-14551Senstive information disclosure was affecting subiquity2.7CNA v4.00.3%2026-04-09
CVE-2025-13926Contemporary Controls BASC 20T reliance on untrusted inputs in a security decision9.3CNA v4.00.4%2026-04-09
CVE-2025-13914Apstra: SSH host key validation vulnerability for managed devices7.0CNA v4.00.3%2026-04-09Fix
CVE-2025-58713Red Hat Process Automation 7 rhpam: Privilege escalation via excessive /etc/passwd permissions6.4CNA v3.10.1%2026-04-08
CVE-2025-57854Red Hat OpenShift Update Service osus-operator: Privilege escalation6.4CNA v3.10.1%2026-04-08
CVE-2025-57853Red Hat Web Terminal Web-terminal: Privilege escalation via excessive /etc/passwd permissions6.4CNA v3.10.2%2026-04-08
CVE-2025-57851Red Hat Multicluster Engine for Kubernetes mce: Privilege escalation6.4CNA v3.10.1%2026-04-08
CVE-2025-57847Red Hat Ansible Automation Platform Ansible-automation-platform: Privilege escalation6.4CNA v3.10.2%2026-04-08Fix
CVE-2025-57175Siklu EtherHaul 8010 hard-coded password6.8v3.10.1%2026-04-08
CVE-2025-52222D-Link DI-8003G buffer overflow7.5v3.10.3%2026-04-08
CVE-2025-52221Tenda AC6 buffer overflow9.8v3.10.4%2026-04-08
CVE-2025-50673D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.4%2026-04-08
CVE-2025-50672D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.4%2026-04-08
CVE-2025-50671D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-50670D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-50669D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.4%2026-04-08
CVE-2025-50668D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.4%2026-04-08
CVE-2025-50667D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.4%2026-04-08
CVE-2025-50666D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.6%2026-04-08
CVE-2025-50665D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.6%2026-04-08
CVE-2025-50664D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.6%2026-04-08
CVE-2025-50663D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-50662D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-50661D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.6%2026-04-08
CVE-2025-50660D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-50659D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-50657D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-50655D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-50654D-Link DI-8003 buffer overflow7.5v3.10.5%2026-04-08
CVE-2025-50653D-Link DI-8003 buffer overflow7.5v3.10.5%2026-04-08
CVE-2025-50652D-Link DI-8003 buffer overflow7.5v3.10.5%2026-04-08
CVE-2025-50650D-Link DI-8003 buffer overflow7.5v3.10.5%2026-04-08
CVE-2025-50649D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-50648D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-50647D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-50646D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-50645D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-50644D-Link DI-8003 buffer overflow7.5CISA ADP v3.10.5%2026-04-08
CVE-2025-45059D-Link DI-8300 buffer overflow7.5CISA ADP v3.10.4%2026-04-08
CVE-2025-45058D-Link DI-8300 buffer overflow7.5CISA ADP v3.10.4%2026-04-08
CVE-2025-45057D-Link DI-8300 buffer overflow7.5CISA ADP v3.10.4%2026-04-08
CVE-2025-30650Junos OS: Privileged local user can gain access to a Linux-based FPC as root8.4CNA v4.00.1%2026-04-08Fix
CVE-2025-14816Mitsubishi Electric GENESIS64 GUI vulnerability cleartext storage of sensitive information9.3CNA v4.00.1%2026-04-08Fix
CVE-2025-14815Mitsubishi Electric GENESIS64 cleartext storage of sensitive information9.3CNA v4.00.1%2026-04-08Fix
CVE-2025-14732Elementor Website Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-04-08Fix
CVE-2025-14243Mirror-registry: Openshift mirror registry: User enumeration via authentication error messages5.3CNA v3.10.3%2026-04-08
CVE-2025-12664Improper validation of specified quantity in input in GitLab7.5CNA v3.10.6%2026-04-08Fix
CVE-2025-9484Missing authorization in GitLab4.3CNA v3.10.3%2026-04-08Fix
CVE-2025-1794AM LottiePlayer WordPress plugin authenticated (Author+) stored cross-site scripting via SVG5.4CNA v3.10.2%2026-04-08Fix
CVE-2025-71058Dual DHCP DNS Server DNS response validation vulnerability9.1CISA ADP v3.10.5%2026-04-07
CVE-2025-70844Yaffa vulnerable to cross-site scripting6.1CISA ADP v3.10.3%2026-04-07
CVE-2025-69515JXL 9 Inch Car Android Double Din Player infotainment system vulnerability9.1CISA ADP v3.10.5%2026-04-07
CVE-2025-65116Buffer overflow vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM5.5CNA v3.10.1%2026-04-07Fix
CVE-2025-65115Remote code execution vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM8.8CNA v3.10.6%2026-04-07Fix
CVE-2025-62818Samsung Exynos 980 out-of-bounds write9.8CISA ADP v3.10.5%2026-04-07Fix
CVE-2025-56015GenieACS has an unauthenticated access vulnerability via the NBI API endpoint7.5CISA ADP v3.10.4%2026-04-07Exploit code
CVE-2025-52909Samsung Exynos 980 buffer overflow9.8CISA ADP v3.10.5%2026-04-07Fix
CVE-2025-52908Samsung Exynos 980 buffer overflow9.8CISA ADP v3.10.5%2026-04-07Fix
CVE-2025-39666Checkmk omd: Local privilege escalation when executing omd commands as root9.3CNA v4.00.1%2026-04-07Fix
CVE-2025-24819A relative path traversal vulnerability in Nokia MantaRay NM5.7CISA ADP v3.10.2%2026-04-07Fix
CVE-2025-24818An OS command injection vulnerability in Nokia MantaRay NM8.0CISA ADP v3.11.0%2026-04-07Fix
CVE-2025-24817An OS command injection vulnerability in Nokia MantaRay NM8.0CISA ADP v3.11.0%2026-04-07Fix
CVE-2025-20628Ping Identity PingIDM An insufficient access control granularity6.9CNA v4.00.2%2026-04-07
CVE-2025-15611Popup Box AYS Pro WordPress plugin Admin+ stored cross-site scripting (XSS) via CSRF5.4CISA ADP v3.10.1%2026-04-07Fix
CVE-2025-14944Backup Migration WordPress plugin missing authorization5.3CNA v3.10.6%2026-04-07Fix
CVE-2025-14859Semtech LR11xx Secure Boot Bypass7.0CNA v4.00.1%2026-04-07Fix
CVE-2025-14858Semtech LR11xx Encrypted Firmware Disclosure5.1CNA v4.00.1%2026-04-07Fix
CVE-2025-14857Semtech LR11xx Memory Write Access Control Bypass5.4CNA v4.00.2%2026-04-07Fix
CVE-2025-14821Libssh: Libssh: Insecure default configuration leads to local man-in-the-middle attacks on windows7.0NVD v3.10.1%2026-04-07Fix
CVE-2025-13044IBM Concert predictable identifiers6.2CNA v3.10.1%2026-04-07Fix
CVE-2025-61166Ascertia Signinghub open redirect6.1CISA ADP v3.10.2%2026-04-06
CVE-2025-59440Samsung Exynos 980 denial of service7.5CISA ADP v3.10.3%2026-04-06Fix
CVE-2025-58349Samsung Exynos 980 crash9.1CISA ADP v3.10.3%2026-04-06Fix
CVE-2025-57835Samsung Exynos 980 crash7.5CISA ADP v3.10.3%2026-04-06Fix
CVE-2025-57834Samsung Exynos 980 denial of service7.5CISA ADP v3.10.4%2026-04-06Fix
CVE-2025-54602Samsung Exynos 980 race condition7.0CISA ADP v3.10.1%2026-04-06Fix
CVE-2025-54601Samsung Exynos 980 race condition7.0CISA ADP v3.10.1%2026-04-06Fix
CVE-2025-54328Samsung Exynos 980 stack-based buffer overflow10.0CISA ADP v3.10.5%2026-04-06Exploit codeFix
CVE-2025-54324Samsung Exynos 980 denial of service7.5CISA ADP v3.10.3%2026-04-06Fix
CVE-2025-48651Google Android KMKeymasterApplet.java information disclosure5.5v3.10.1%2026-04-06Fix
CVE-2025-47400Qualcomm Snapdragon buffer over-read in Computer Vision7.1CNA v3.10.1%2026-04-06Fix
CVE-2025-47392Qualcomm Snapdragon integer overflow or wraparound in GPS8.8CNA v3.10.2%2026-04-06Fix
CVE-2025-47391Qualcomm Snapdragon stack-based buffer overflow in Camera driver7.8CNA v3.10.1%2026-04-06Fix
CVE-2025-47390Qualcomm Snapdragon buffer over-read in Camera7.8CNA v3.10.1%2026-04-06Fix
CVE-2025-47389Qualcomm Snapdragon buffer copy without checking size of input in Automotive Platform7.8CNA v3.10.1%2026-04-06Fix
CVE-2025-47374Qualcomm Snapdragon use-after-free in Camera driver6.5CNA v3.10.1%2026-04-06Fix
CVE-2025-15064Ultimate Member WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-04-04Fix
CVE-2025-14938Listeo-Core - Directory Plugin by Purethemes WordPress plugin unauthenticated arbitrary Media upload5.3CNA v3.10.3%2026-04-04Fix
CVE-2025-13368Xpro Addons 140+ Widgets for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-04-04Fix
CVE-2025-68153Canonical Juju incorrect authorization7.1CNA v4.00.2%2026-04-03Fix
CVE-2025-68152Juju: Read All Controller Logs from Compromised Workload6.9CNA v4.00.4%2026-04-03Fix
CVE-2025-64340FastMCP has a command injection vulnerability Gemini CLI6.7CNA v3.10.7%2026-04-03Fix
CVE-2025-59711Kovai Biztalk360 path traversal8.3CISA ADP v3.10.7%2026-04-03
CVE-2025-59710Kovai Biztalk360 unrestricted file upload8.8v3.10.5%2026-04-03
CVE-2025-59709Kovai Biztalk360 path traversal6.8v3.10.9%2026-04-03
CVE-2025-10681Gardyn Mobile Application and device firmware use hard-coded credentials8.8CNA v4.00.3%2026-04-03Fix
CVE-2025-7024Local privilege escalation in Windows Server OS through installed Tetra Connectivity Server (TCS)5.6CNA v4.00.1%2026-04-03
CVE-2025-65114Apache Traffic Server: Malformed chunked message body allows request smuggling7.5CISA ADP v3.10.4%2026-04-02Fix
CVE-2025-58136Apache Traffic Server: A simple legitimate POST request causes a crash7.5CISA ADP v3.10.7%2026-04-02Fix
CVE-2025-43264Apple macOS memory corruption8.8CISA ADP v3.10.4%2026-04-02Fix
CVE-2025-43257Apple macOS link following8.7CISA ADP v3.10.2%2026-04-02Fix
CVE-2025-43238Apple macOS integer overflow6.2CISA ADP v3.10.2%2026-04-02Fix
CVE-2025-43236Apple macOS type confusion3.3CISA ADP v3.10.2%2026-04-02Fix
CVE-2025-43219Apple macOS out-of-bounds write8.8CISA ADP v3.10.4%2026-04-02Fix
CVE-2025-43210Apple iPadOS out-of-bounds read6.3CISA ADP v3.10.5%2026-04-02Fix
CVE-2025-43202Apple macOS out-of-bounds write8.8CISA ADP v3.10.4%2026-04-02Fix
CVE-2025-15620HiOS Switch Platform denial of service via Web interface8.6NVD v3.10.5%2026-04-02Fix
CVE-2025-71282XenForo path disclosure via open_basedir Exceptions8.7CNA v4.00.3%2026-04-01Fix
CVE-2025-71281XenForo template Method Call Restriction Bypass9.8v3.10.3%2026-04-01Fix
CVE-2025-71280XenForo Local Account Page Caching information disclosure5.5v3.10.1%2026-04-01Fix
CVE-2025-71279XenForo Passkey Security Bypass9.3CNA v4.00.5%2026-04-01Fix
CVE-2025-71278XenForo OAuth2 Unauthorized Scope request8.7CNA v4.00.3%2026-04-01Fix
CVE-2025-67807Sage Dpw response discrepancy4.7CISA ADP v3.10.1%2026-04-01
CVE-2025-67806Sage Dpw observable discrepancy5.3v3.10.3%2026-04-01
CVE-2025-67805Sage Dpw missing authentication7.5v3.10.3%2026-04-01
CVE-2025-66487IBM Aspera Shares email rate limiting denial of service2.7CNA v3.10.3%2026-04-01Fix
CVE-2025-66486IBM Aspera Shares cross-site scripting4.8CNA v3.10.2%2026-04-01Fix
CVE-2025-66485IBM Aspera Shares host header validation HTTP header injection5.4CNA v3.10.2%2026-04-01Fix
CVE-2025-66484IBM Aspera Shares web UI stored cross-site scripting5.5CNA v3.10.2%2026-04-01Fix
CVE-2025-66483IBM Aspera Shares password reset session handling insufficient session expiration6.3CNA v3.10.2%2026-04-01Fix
CVE-2025-66442Arm Tf-psa-crypto timing side channel5.1CISA ADP v3.10.3%2026-04-01Fix
CVE-2025-36375IBM DataPower Gateway vulnerable to CSRF6.5CNA v3.10.2%2026-04-01Fix
CVE-2025-36373Incorrect administrative access control in IBM DataPower Gateway4.1CNA v3.10.3%2026-04-01Fix
CVE-2025-15484Order Notification for WooCommerce REST API permission checks authentication bypass9.1CISA ADP v3.10.2%2026-04-01Fix
CVE-2025-13916IBM Aspera Shares weak cryptographic algorithm5.9CNA v3.10.2%2026-04-01Fix
CVE-2025-13855IBM Storage Protect Server JSON-RPC endpoint SQL injection7.6CNA v3.10.3%2026-04-01Fix
CVE-2025-13535King Addons for Elementor WordPress plugin DOM-based stored cross-site scripting6.4CNA v3.10.2%2026-04-01Fix
CVE-2025-62184Adobe Pega Platform stored cross-site scripting4.8CNA v4.00.3%2026-03-31Fix
CVE-2025-41357Reflected cross-site scripting on Anon Proxy Server6.1v3.10.2%2026-03-31Fix
CVE-2025-41356Reflected cross-site scripting in Anon Proxy Server6.1v3.10.2%2026-03-31Fix
CVE-2025-41355Reflected cross-site scripting on Anon Proxy Server6.1v3.10.2%2026-03-31Fix
CVE-2025-32957baserCMS: Unsafe file upload leading to remote code execution (RCE)8.7CNA v3.10.6%2026-03-31Fix
CVE-2025-15618Business::OnlinePayment::StoredTransaction versions for Perl uses an insecure secret key9.1CISA ADP v3.10.3%2026-03-31
CVE-2025-14213Cato's Socket WebUI is vulnerable to OS command injection8.3CNA v4.01.0%2026-03-31
CVE-2025-10559Dassault Systèmes DELMIA Factory Resource Manager Factory Resource Management path traversal7.1CNA v3.10.3%2026-03-31Fix
CVE-2025-10553Dassault Systèmes DELMIA Factory Resource Manager stored cross-site scripting8.7CNA v3.10.2%2026-03-31Fix
CVE-2025-10551Dassault Systèmes ENOVIA Collaborative Industry Innovator stored cross-site scripting8.7CNA v3.10.2%2026-03-31Fix
CVE-2025-66215OpenSC: Stack-buffer-overflow write in card-oberthur3.8CNA v3.10.2%2026-03-30Fix
CVE-2025-66038OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers3.9CNA v3.10.3%2026-03-30Fix
CVE-2025-66037OpenSC out-of-bounds read3.9CNA v3.10.3%2026-03-30Fix
CVE-2025-49010OpenSC: Stack-buffer-overflow write in GET RESPONSE3.8CNA v3.10.1%2026-03-30Fix
CVE-2025-15379Command injection in MLflow/MLflow10.0v3.12.4%2026-03-30Fix
CVE-2025-15036Path traversal vulnerability in MLflow/MLflow10.0v3.10.6%2026-03-30Fix
CVE-2025-7741Yokogawa Electric CENTUM VP hard-coded password2.1CNA v4.00.2%2026-03-30Fix
CVE-2025-3716ESET, spol. s r.o ESET PROTECT On-Prem response discrepancy5.3CNA v4.00.2%2026-03-30Fix
CVE-2025-15604Amon2 versions for Perl use an insecure random_string implementation for security functions9.8NVD v3.10.5%2026-03-28Fix
CVE-2025-15445Restaurant Cafeteria WordPress theme Subscriber+ arbitrary plugin Installation/Activation5.4CISA ADP v3.10.3%2026-03-28
CVE-2025-12886Oxygen WordPress theme unauthenticated server-side request forgery via route_path7.2CNA v3.10.2%2026-03-28Fix
CVE-2025-9497Microchip TimeProvider 4100 Hard-coded Upgrade Decryption Passwords5.5CNA v4.00.3%2026-03-28Fix
CVE-2025-69988BS Producten Petcam Wi-Fi network interface improper access control6.5CNA v3.10.2%2026-03-27
CVE-2025-69986LSC Indoor Camera ONVIF GetStreamUri function stack-based buffer overflow7.2CISA ADP v3.10.5%2026-03-27
CVE-2025-61190Lyrasis DSpace cross-site scripting6.1CISA ADP v3.10.2%2026-03-27
CVE-2025-59032Open-Xchange OX Dovecot Pro crash7.5CNA v3.10.7%2026-03-27Fix
CVE-2025-59031Open-Xchange OX Dovecot Pro information disclosure4.3CNA v3.10.3%2026-03-27Fix
CVE-2025-59028Open-Xchange OX Dovecot Pro denial of service5.3CNA v3.10.4%2026-03-27Fix
CVE-2025-15617Wazuh GitHub Actions Workflow Exposure of Sensitive Credentials8.1NVD v3.10.4%2026-03-27Exploit code
CVE-2025-15616Wazuh agent and Manager OS command injection and untrusted search path7.2NVD v3.11.6%2026-03-27Fix
CVE-2025-15615Wazuh Manager authd service Improper SSL/TLS Renegotiation Handling leading to denial of service7.5NVD v3.10.5%2026-03-27
CVE-2025-15612Wazuh Provisioning Scripts improper certificate validation8.1NVD v3.10.2%2026-03-27
CVE-2025-15381Unauthorized access to Tracing and Assessment endpoints in MLflow/MLflow7.1NVD v3.10.3%2026-03-27
CVE-2025-13478OpenText Identity Manager Cache Misconfiguration leading to Cross-user data exposure8.4CNA v4.00.3%2026-03-27Fix
CVE-2025-55277HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability2.6CNA v3.10.2%2026-03-26Fix
CVE-2025-55276HCL Aftermarket DPC internal IP address information disclosure3.1CNA v3.10.2%2026-03-26Fix
CVE-2025-55275HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability3.7CNA v3.10.2%2026-03-26Fix
CVE-2025-55274HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability2.6CNA v3.10.2%2026-03-26Fix
CVE-2025-55273HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability4.3CNA v3.10.2%2026-03-26Fix
CVE-2025-55272HCL Aftermarket DPC service banner information disclosure3.1CNA v3.10.2%2026-03-26Fix
CVE-2025-55271HCL Aftermarket DPC is affected by HTTP response splitting3.1CNA v3.10.3%2026-03-26Fix
CVE-2025-55270HCL Aftermarket DPC is affected by improper input validation3.5CNA v3.11.0%2026-03-26Fix
CVE-2025-55269HCL Aftermarket DPC is affected by weak password Policy4.2CNA v3.10.2%2026-03-26Fix
CVE-2025-55268HCL Aftermarket DPC denial of service4.3CNA v3.10.3%2026-03-26Fix
CVE-2025-55267HCL Aftermarket DPC is affected by unrestricted file upload5.7CNA v3.10.3%2026-03-26Fix
CVE-2025-55266HCL Aftermarket DPC is affected by session fixation5.9CNA v3.10.3%2026-03-26Fix
CVE-2025-55265HCL Aftermarket DPC information disclosure6.5CNA v3.10.3%2026-03-26Fix
CVE-2025-55264HCL Aftermarket DPC is affected by failure to Invalidate Session on Password Change5.5CNA v3.10.1%2026-03-26Fix
CVE-2025-55263HCL Aftermarket DPC is affected by Hard-coded Sensitive Data7.3CNA v3.10.2%2026-03-26Fix
CVE-2025-55262HCL Aftermarket DPC is affected by SQL injection8.3CNA v3.10.3%2026-03-26Fix
CVE-2025-55261HCL Aftermarket DPC is affected by Missing Functional Level Access Control8.1CNA v3.10.3%2026-03-26Fix
CVE-2025-41368Smallsrv Small HTTP Server SecurityManager path traversal8.1v3.10.6%2026-03-26Fix
CVE-2025-41359Smallsrv Small HTTP Server service path configuration unquoted search path7.8v3.10.2%2026-03-26Fix
CVE-2025-41027GDTaller reflected cross-site scripting6.1v3.10.2%2026-03-26Fix
CVE-2025-41026GDTaller reflected cross-site scripting6.1v3.10.2%2026-03-26Fix
CVE-2025-15488Responsive Plus WordPress plugin unauthenticated arbitrary shortcode execution6.5CISA ADP v3.10.3%2026-03-26Fix
CVE-2025-15433Shared Files WordPress plugin Contributor+ arbitrary file download6.8CISA ADP v3.10.4%2026-03-26Fix
CVE-2025-15101ASUS Router web management interface of certain ASUS OS command injection8.6CNA v4.00.9%2026-03-26Fix
CVE-2025-12805Red Hat OpenShift AI Llama Stack service network policy improper isolation8.1CNA v3.10.4%2026-03-26Fix
CVE-2025-70952PF4J is vulnerable to path traversal or Zip Slip attack through improper handling of zip entry names7.5v3.10.9%2026-03-25Fix
CVE-2025-70888osslsigncode improper privilege management9.8CISA ADP v3.10.5%2026-03-25Fix
CVE-2025-70887Ralphje Signify improper privilege management8.8v3.10.3%2026-03-25Fix
CVE-2025-69358EventPrime WordPress plugin broken access control7.5CNA v3.10.3%2026-03-25Fix
CVE-2025-69347WPSubscription WordPress plugin insecure direct object references (IDOR)8.6CNA v3.10.4%2026-03-25Fix
CVE-2025-69096Zorka WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-03-25
CVE-2025-67030Plexus-utils has a directory traversal vulnerability in its extractFile method8.8v3.10.7%2026-03-25Fix
CVE-2025-64648IBM Concert cleartext transmission of sensitive information5.9CNA v3.10.2%2026-03-25Fix
CVE-2025-64647IBM Concert 1.0.0 through 2.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information5.9CNA v3.10.2%2026-03-25Fix
CVE-2025-64646IBM Concert information disclosure6.2CNA v3.10.2%2026-03-25Fix
CVE-2025-59707N2WS N2W authentication bypass by spoofing9.8v3.10.5%2026-03-25Fix
CVE-2025-59706N2WS N2W authentication bypass by spoofing9.8v3.10.5%2026-03-25Fix
CVE-2025-43534Apple iOS and iPadOS improper access control6.8CISA ADP v3.10.2%2026-03-25Fix
CVE-2025-40842Ericsson Indoor Connect 8855 improper neutralization of input during web page generation8.5CNA v4.00.1%2026-03-25Fix
CVE-2025-40841Ericsson Indoor Connect 8855 cross-site request forgery5.1CNA v4.00.1%2026-03-25Fix
CVE-2025-36440IBM Concert information disclosure5.1CNA v3.10.1%2026-03-25Fix
CVE-2025-36438IBM Concert improper channel restriction5.1CNA v3.10.1%2026-03-25Fix
CVE-2025-36422IBM InfoSphere Information Server is vulnerable to cross-site request forgery4.3CNA v3.10.1%2026-03-25Fix
CVE-2025-36258IBM InfoSphere Information Server is vulnerable due to plaintext storage of a password7.1CNA v3.10.2%2026-03-25Fix
CVE-2025-36187IBM Knowledge Catalog Standard Cartridge information disclosure4.4CNA v3.10.2%2026-03-25Fix
CVE-2025-32991N2W Backup& Recovery race condition9.0CISA ADP v3.10.3%2026-03-25Fix
CVE-2025-27260Ericsson Indoor Connect 8855 Improper Filtering of Special Elements vulnerability7.2CNA v4.00.2%2026-03-25Fix
CVE-2025-14974IBM InfoSphere Information Server is vulnerable due to insecure direct object reference5.7CNA v3.10.3%2026-03-25Fix
CVE-2025-14917IBM WebSphere Application Server Liberty could provide weaker than expected security6.7CNA v3.10.4%2026-03-25Fix
CVE-2025-14915IBM WebSphere Application Server Liberty is affected by a privilege escalation6.5CNA v3.10.6%2026-03-25Fix
CVE-2025-14912IBM InfoSphere Information Server is vulnerable to server-side request forgery5.4CNA v3.10.2%2026-03-25Fix
CVE-2025-14810IBM InfoSphere Information Server is vulnerable due to insufficient session expiration6.3CNA v3.10.2%2026-03-25Fix
CVE-2025-14808IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information3.1CNA v3.10.2%2026-03-25Fix
CVE-2025-14807IBM InfoSphere Information Server is vulnerable to HTTP header injection6.5CNA v3.10.2%2026-03-25Fix
CVE-2025-14790IBM InfoSphere Information Server is vulnerable to disclosure of sensitive information6.5CNA v3.10.2%2026-03-25Fix
CVE-2025-14684IBM Maximo Application Suite Monitor component uses Log Forging which is vulnerable to4.0CNA v3.10.1%2026-03-25Fix
CVE-2025-14595Missing authorization in GitLab4.3CNA v3.10.3%2026-03-25Fix
CVE-2025-13436Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2026-03-25Fix
CVE-2025-13078Improper validation of specified quantity in input in GitLab6.5CNA v3.10.4%2026-03-25Fix
CVE-2025-12708IBM Concert hard-coded credentials6.2CNA v3.10.1%2026-03-25Fix
CVE-2025-64998Session hijacking via exposed session signing secret in distributed Checkmk setups7.3CNA v4.00.3%2026-03-24Fix
CVE-2025-41660CODESYS Control Boot Application Replacement enables code execution8.8CNA v3.10.4%2026-03-24Fix
CVE-2025-33254NVIDIA Triton Inference Server race condition7.5CNA v3.10.3%2026-03-24Fix
CVE-2025-33248NVIDIA Megatron-LM deserialization of untrusted data7.8CNA v3.10.2%2026-03-24Fix
CVE-2025-33247NVIDIA Megatron-LM deserialization of untrusted data7.8CNA v3.10.3%2026-03-24Fix
CVE-2025-33244NVIDIA Apex deserialization of untrusted data9.0CNA v3.10.6%2026-03-24Fix
CVE-2025-33242NVIDIA HGX and DGX B300 denial of service5.9CNA v3.10.3%2026-03-24Fix
CVE-2025-33238NVIDIA Triton Inference Server race condition7.5CNA v3.10.3%2026-03-24Fix
CVE-2025-33216NVIDIA SNAP-4 Container incorrect buffer size calculation6.8CNA v3.10.3%2026-03-24Fix
CVE-2025-33215NVIDIA SNAP-4 Container out-of-range pointer offset6.8CNA v3.10.3%2026-03-24Fix
CVE-2025-11571Command execution vulnerability in Simplicity Installer2.1CNA v4.00.4%2026-03-24Fix
CVE-2025-60949Census CSWeb leaked configuration files7.5NVD v3.10.4%2026-03-23Fix
CVE-2025-60948Census CSWeb stored XSS5.4v3.10.2%2026-03-23Fix
CVE-2025-60947Census CSWeb arbitrary file upload8.7CNA v4.00.5%2026-03-23Fix
CVE-2025-60946Census CSWeb path traversal8.7CNA v4.00.5%2026-03-23Fix
CVE-2025-52204Znuny::ITSM A cross-site scripting6.1CISA ADP v3.10.2%2026-03-23Exploit codeFix
CVE-2025-41008SQL injection in Sinturno9.3CNA v4.00.2%2026-03-23
CVE-2025-41007SQL injection in Cuantis9.3CNA v4.00.3%2026-03-23
CVE-2025-15606Denial of service (DoS) in HTTPD Input Handling on TP-Link TD-W8961N7.1CNA v4.00.3%2026-03-23Fix
CVE-2025-15605TP-Link Archer NX200, NX210, NX500 and NX600 hard-coded cryptographic key8.5CNA v4.00.1%2026-03-23Fix
CVE-2025-15519Command injection in Modem Management CLI on TP-Link Archer NX200, NX210, NX500 and NX6008.5CNA v4.00.6%2026-03-23Fix
CVE-2025-15518Command injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX6008.5CNA v4.00.6%2026-03-23Fix
CVE-2025-15517Authorization bypass in HTTP Server endpoints on TP-Link Archer NX200, NX210, NX500 and NX6008.6CNA v4.03.0%2026-03-23Fix
CVE-2025-13997King Addons for Elementor WordPress plugin unauthenticated API keys disclosure5.3CNA v3.10.2%2026-03-23Fix
CVE-2025-10736ReviewX WordPress plugin unauthorized access6.5CNA v3.10.2%2026-03-23Fix
CVE-2025-10734ReviewX WordPress plugin information disclosure5.3CNA v3.10.2%2026-03-23Fix
CVE-2025-10731ReviewX WordPress plugin information disclosure5.3CNA v3.10.3%2026-03-23Fix
CVE-2025-10679ReviewX bulkTenReviews function remote code execution7.3CNA v3.10.4%2026-03-23Fix
CVE-2025-6229Shaonsina Sina Extension for Elementor Fancy Text and Countdown widgets stored cross-site scripting6.4CNA v3.10.2%2026-03-23Fix
CVE-2025-71276Alinto SOGo cross-site scripting6.1v3.10.1%2026-03-22Fix
CVE-2025-14037Invelity Products Feeds WordPress plugin cross-site request forgery to arbitrary file deletion8.1CNA v3.10.2%2026-03-21
CVE-2025-13910WP-WebAuthn WordPress plugin unauthenticated stored cross-site scripting6.1CNA v3.10.3%2026-03-21
CVE-2025-67260Aster-te Terrapack Tkservercgi unrestricted file upload8.8CISA ADP v3.10.4%2026-03-20
CVE-2025-63261Awstats OS command injection7.8CISA ADP v3.11.0%2026-03-20Fix
CVE-2025-63260Syncfusion cross-site scripting5.4CISA ADP v3.10.2%2026-03-20
CVE-2025-62846QNAP QuRouter SQL injection7.3CNA v4.00.2%2026-03-20Fix
CVE-2025-62845QNAP QuRouter escape sequence injection5.6CNA v4.00.2%2026-03-20Fix
CVE-2025-62844QNAP QuRouter weak authentication4.0CNA v4.00.2%2026-03-20Fix
CVE-2025-62843QNAP Systems QuRouter improper channel restriction0.9CNA v4.00.3%2026-03-20Fix
CVE-2025-59383QNAP Media Streaming Add-on stack-based buffer overflow2.7CNA v4.00.3%2026-03-20Fix
CVE-2025-55988DreamFactory has a directory traversal7.2CISA ADP v3.10.9%2026-03-20Fix
CVE-2025-46598Bitcoin Core resource amplification5.3CISA ADP v3.10.3%2026-03-20Fix
CVE-2025-46597Bitcoin Core integer overflow7.5CISA ADP v3.10.3%2026-03-20Fix
CVE-2025-15608Buffer overflow in Network Probe Handling function of TP-Link Archer AX53 + Archer AX557.7CNA v4.00.6%2026-03-20Fix
CVE-2025-15607Authenticated command injection in mcsd service of TP-Link Archer AX537.3CNA v4.02.0%2026-03-20Fix
CVE-2025-71260BMC FootPrints ITSM VIEWSTATE deserialization RCE8.7CNA v4.034.4%2026-03-19NucleiEmerging ThreatsKCVFix
CVE-2025-71259BMC FootPrints ITSM blind SSRF in externalfeed/RSS7.1v3.112.9%2026-03-19NucleiEmerging ThreatsKCVFix
CVE-2025-71258BMC FootPrints ITSM blind SSRF in searchWeb7.1v3.117.4%2026-03-19NucleiEmerging ThreatsKCVFix
CVE-2025-71257BMC FootPrints ITSM authentication bypass9.1v3.144.6%2026-03-19Reported exploitedNucleiEmerging ThreatsExploit codeKCVFix
CVE-2025-69720GNU ncurses stack-based buffer overflow7.8NVD v3.10.5%2026-03-19Fix
CVE-2025-68836Table of Contents Creator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.1%2026-03-19
CVE-2025-67618Brookside WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-03-19
CVE-2025-67115Sercomm SCE4255W setup.cgi log parameter path traversal6.5CISA ADP v3.10.4%2026-03-19
CVE-2025-67114Sercomm SCE4255W credential generation algorithm vulnerability9.8CISA ADP v3.10.5%2026-03-19
CVE-2025-67113CWMP client OS command injection9.8CISA ADP v3.11.2%2026-03-19
CVE-2025-67112Sercomm SCE4255W configuration backup and restore hard-coded cryptographic key9.8CISA ADP v3.10.4%2026-03-19
CVE-2025-62043WPCasa WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.1%2026-03-19Fix
CVE-2025-60237Finag WordPress theme PHP object injection9.8CNA v3.10.5%2026-03-19
CVE-2025-60233Zuut WordPress theme PHP object injection9.8CNA v3.10.4%2026-03-19
CVE-2025-53222tagDiv Opt-In Builder WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-03-19Fix
CVE-2025-50001tagDiv Composer WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.1%2026-03-19Fix
CVE-2025-36051IBM QRadar SIEM information disclosure6.2CNA v3.10.1%2026-03-19Fix
CVE-2025-32223Tutor LMS WordPress plugin insecure direct object references (IDOR)6.5CNA v3.10.3%2026-03-19Fix
CVE-2025-15051IBM QRadar SIEM cross-site scripting5.4CNA v3.10.1%2026-03-19Fix
CVE-2025-14716Secomea GateManager unauthorized access to information6.5CNA v3.10.4%2026-03-19Fix
CVE-2025-13995IBM QRadar SIEM information disclosure5.0CNA v3.10.2%2026-03-19Fix
CVE-2025-71270Linux kernel LoongArch BPF JIT vulnerability5.5v3.10.1%2026-03-18Fix
CVE-2025-71269Linux kernel Btrfs qgroup reservation accounting vulnerability7.5CNA v3.10.2%2026-03-18Fix
CVE-2025-71268Linux kernel Btrfs inline extent creation memory leak7.5CNA v3.10.2%2026-03-18Fix
CVE-2025-71267Linux kernel NTFS3 attribute list handling infinite loop5.5NVD v3.10.1%2026-03-18Fix
CVE-2025-71266Linux kernel NTFS3 directory index lookup infinite loop5.5NVD v3.10.1%2026-03-18Fix
CVE-2025-71265Linux kernel NTFS3 attribute run list parsing infinite loop5.5NVD v3.10.1%2026-03-18Fix
CVE-2025-67830Mura Cms SQL injection9.8CISA ADP v3.10.3%2026-03-18Fix
CVE-2025-67829Mura Cms SQL injection9.8CISA ADP v3.10.3%2026-03-18Fix
CVE-2025-58112Microsoft Dynamics 365 Customer Engagement Reporting Services report upload SQL injection8.8CISA ADP v3.10.5%2026-03-18
CVE-2025-55046Mura Cms cross-site request forgery8.1CISA ADP v3.10.1%2026-03-18Fix
CVE-2025-55045Mura Cms cross-site request forgery7.1CISA ADP v3.10.1%2026-03-18Fix
CVE-2025-55044Mura Cms cross-site request forgery8.8CISA ADP v3.10.1%2026-03-18Fix
CVE-2025-55043Mura Cms cross-site request forgery6.5CISA ADP v3.10.2%2026-03-18Fix
CVE-2025-55041Mura Cms cross-site request forgery8.0CISA ADP v3.10.1%2026-03-18Fix
CVE-2025-55040Mura Cms cross-site request forgery8.8CISA ADP v3.10.2%2026-03-18Fix
CVE-2025-41258LibreChat RAG API authentication bypass8.0CNA v3.10.3%2026-03-18
CVE-2025-31703Dahua NVR2-4KS3 authentication bypass2.4CNA v4.00.2%2026-03-18
CVE-2025-15363Get Use APIs WordPress plugin Contributor+ stored XSS5.9CISA ADP v3.10.1%2026-03-18Fix
CVE-2025-15031Path traversal vulnerability in MLflow/MLflow9.1v3.10.9%2026-03-18Fix
CVE-2025-12518Bee Content Design Befree SDK stored XSS in beefree.io5.3CNA v4.00.3%2026-03-18Fix
CVE-2025-71239Linux kernel audit change attributes class vulnerability5.5v3.10.1%2026-03-17Fix
CVE-2025-66633Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-66617Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-66503Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-66342Canva Affinity EMF functionality type confusion7.8CNA v3.10.3%2026-03-17Fix
CVE-2025-66042Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-66000Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-65119Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-64776Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-64735Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-64733Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-64301Canva Affinity out-of-bounds write7.8CNA v3.10.3%2026-03-17Fix
CVE-2025-62500Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-62403Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-62320HCL Sametime Product HTML injection4.7CNA v3.10.2%2026-03-17Fix
CVE-2025-61979Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-61952Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-58427Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-47873Canva Affinity EMF functionality out-of-bounds read7.1v3.10.3%2026-03-17Fix
CVE-2025-31966HCL Sametime boolean-based SQL injection in multiple Unica components2.7CNA v3.10.2%2026-03-17Fix
CVE-2025-15584Endpoint DLP Driver Filter Communication Port integer overflow6.8CNA v4.00.1%2026-03-17Fix
CVE-2025-14806IBM Planning Analytics information disclosure5.7CNA v3.10.3%2026-03-17Fix
CVE-2025-14031IBM Sterling B2B Integrator and IBM Sterling File Gateway denial of service7.5CNA v3.10.3%2026-03-17Fix
CVE-2025-13406Softing smartLink SW-HT Softing Industrial Automation GmbH null pointer dereference6.8CNA v4.00.3%2026-03-17
CVE-2025-71264Mumble out-of-bounds read5.3v3.10.3%2026-03-16Fix
CVE-2025-69902minimal_wrapper.py component of kubectl-mcp-server v1.2.0 command injection9.8CISA ADP v3.12.1%2026-03-16
CVE-2025-69809p2r3 Bareiron write-what-where condition9.8CISA ADP v3.10.5%2026-03-16
CVE-2025-69808p2r3 Bareiron out-of-bounds access9.1CISA ADP v3.10.3%2026-03-16
CVE-2025-69784Xcitium Openedr uncontrolled search path8.8CISA ADP v3.10.2%2026-03-16
CVE-2025-69783Xcitium Openedr execution with unnecessary privileges7.8CISA ADP v3.10.2%2026-03-16
CVE-2025-69768Chyrp Admin.php SQL injection7.5CISA ADP v3.10.4%2026-03-16
CVE-2025-69727INDEX-EDUCATION PRONOTE profile image URL generation insecure direct object reference5.3CISA ADP v3.10.2%2026-03-16Exploit code
CVE-2025-69693FFmpeg out-of-bounds read5.4CISA ADP v3.10.3%2026-03-16Fix
CVE-2025-69246Lack of bruteforce protection in Raytha CMS9.8v3.10.4%2026-03-16Fix
CVE-2025-69245Reflected XSS in Raytha CMS6.1v3.10.3%2026-03-16Fix
CVE-2025-69243User enumeration in Raytha CMS5.3v3.10.3%2026-03-16Fix
CVE-2025-69242Reflected XSS in Raytha CMS6.1v3.10.2%2026-03-16Fix
CVE-2025-69241Stored XSS in Raytha CMS5.4v3.10.2%2026-03-16Fix
CVE-2025-69240Header Poisoning in Raytha CMS8.8v3.10.2%2026-03-16Fix
CVE-2025-69239Server-Site Request Forgery in Raytha CMS2.7NVD v3.10.2%2026-03-16Fix
CVE-2025-69238Cross-site request forgery in Raytha CMS4.3v3.10.1%2026-03-16Fix
CVE-2025-69237Stored XSS in Raytha CMS5.4v3.10.2%2026-03-16Fix
CVE-2025-69236Stored XSS in Raytha CMS5.4v3.10.2%2026-03-16Fix
CVE-2025-69196FastMCP OAuth Proxy token reuse across MCP servers7.4CNA v4.00.4%2026-03-16Fix
CVE-2025-68971Forgejo attachment upload denial of service6.5CISA ADP v3.10.5%2026-03-16
CVE-2025-66687Doom Launcher game file extraction path traversal7.5CISA ADP v3.10.7%2026-03-16
CVE-2025-65734openeclass An arbitrary file upload5.4CISA ADP v3.10.2%2026-03-16
CVE-2025-62319Boolean-based SQL injection in multiple Unica components9.8CNA v3.10.3%2026-03-16
CVE-2025-57543NetBox cross-site scripting6.1CISA ADP v3.10.2%2026-03-16
CVE-2025-54920Apache Spark: Spark History Server code execution8.8CISA ADP v3.15.3%2026-03-16Fix
CVE-2025-52649HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature1.8CNA v3.10.1%2026-03-16Fix
CVE-2025-52648HCL AION improper signature verification4.8CNA v3.10.1%2026-03-16Fix
CVE-2025-52646HCL AION query execution SQL injection2.2CNA v3.10.1%2026-03-16Fix
CVE-2025-52645HCL AION model packaging and distribution vulnerability1.9CNA v3.10.1%2026-03-16Fix
CVE-2025-52644HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. The absence of proper auditing mechanisms may reduce traceability of user activities and could potentially impact monitoring, accountability, or incident investigation processes.5.8CNA v3.10.1%2026-03-16Fix
CVE-2025-52643HCL AION file parsing vulnerability4.7CNA v3.10.1%2026-03-16Fix
CVE-2025-52642HCL AION is affected by an internal filesystem paths disloser vulnerability3.3CNA v3.10.1%2026-03-16Fix
CVE-2025-52638HCL AION generated containers vulnerability5.6CNA v3.10.1%2026-03-16Fix
CVE-2025-52637HCL AION query execution SQL injection4.5CNA v3.10.2%2026-03-16Fix
CVE-2025-52636HCL AION is affected by a improper handling of uploads files Size1.8CNA v3.10.1%2026-03-16Fix
CVE-2025-52458OpenHarmony arkcompiler_ets_runtime has an out-of-bounds write5.5CNA v3.10.2%2026-03-16Fix
CVE-2025-50881The `flow/admin/moniteur.php` script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution. When handling GET requests, the script takes user-supplied input from the `action` URL parameter, performs insufficient validation, and incorporates this input into a stri8.8CISA ADP v3.10.6%2026-03-16
CVE-2025-41432OpenHarmony arkcompiler_ets_runtime has an out-of-bounds write5.5CNA v3.10.2%2026-03-16Fix
CVE-2025-26474OpenHarmony communication_ipc an improper input validation3.3CNA v3.10.1%2026-03-16Fix
CVE-2025-25277OpenHarmony arkcompiler_ets_runtime has a type confusion6.3CNA v3.10.2%2026-03-16Fix
CVE-2025-15587Credentials exposure in tinycontrol devices8.6CNA v4.00.2%2026-03-16Fix
CVE-2025-15554Admin Passwords Cached by Browsers in Truesec LAPSWebUI7.8v3.10.1%2026-03-16Fix
CVE-2025-15553Insecure Logout Functionality in Truesec LAPSWebUI7.1v3.10.1%2026-03-16Fix
CVE-2025-15552Long Session Lifetime in Truesec LAPSWebUI7.8v3.10.1%2026-03-16Fix
CVE-2025-15540Authenticated RCE in Raytha CMS8.8v3.10.5%2026-03-16Fix
CVE-2025-15060claude-hovercraft executeClaudeCode command injection remote code execution9.8CNA v3.01.6%2026-03-16
CVE-2025-13460IBM Aspera Console information disclosure5.3CNA v3.10.2%2026-03-16Fix
CVE-2025-13459IBM Aspera Console denial of service2.7CNA v3.10.4%2026-03-16Fix
CVE-2025-13212IBM Aspera Console denial of service5.3CNA v3.10.3%2026-03-16Fix
CVE-2025-12736OpenHarmony multimedia_audio_standard has an insecure storage of sensitive information6.5CNA v3.10.2%2026-03-16Fix
CVE-2025-11500Credentials exposure in tinycontrol devices8.7CNA v4.00.3%2026-03-16Fix
CVE-2025-10685Softing smartLink SW-PN HTTP POST with specific higher content length leads into heap corruption7.7CNA v4.00.5%2026-03-16
CVE-2025-10461Softing smartLink SW-HT global file reads caused by improper URL checks in webserver5.3CNA v4.00.4%2026-03-16
CVE-2025-6969OpenHarmony ability_ability_runtime an improper input validation5.0CNA v3.10.1%2026-03-16Fix
CVE-2025-2274Stored cross-site scripting in Forcepoint Web Security4.8CNA v4.00.2%2026-03-16Fix
CVE-2025-14287Command injection in MLflow/MLflow8.8v3.11.5%2026-03-15Fix
CVE-2025-71263AT&T Bell Labs UNIX buffer overflow7.8v3.10.2%2026-03-13
CVE-2025-66249Apache Livy: Unauthorized directory access6.3CISA ADP v3.10.6%2026-03-13Exploit codeFix
CVE-2025-60012Apache Livy: Restrict file access6.3CISA ADP v3.10.5%2026-03-13Exploit codeFix
CVE-2025-57849Fuse: Privilege escalation via excessive /etc/passwd permissions6.4CNA v3.10.2%2026-03-13
CVE-2025-36368IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL injection6.5CNA v3.10.3%2026-03-13Fix
CVE-2025-15515vivo Easyshare missing authentication6.9CNA v4.00.2%2026-03-13Fix
CVE-2025-14811IBM Sterling Partner Engagement Manager information disclosure3.1CNA v3.10.2%2026-03-13Fix
CVE-2025-14504IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting5.4CNA v3.10.2%2026-03-13Fix
CVE-2025-14483IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure4.3CNA v3.10.2%2026-03-13Fix
CVE-2025-13779ABB AWIN GW100 rev.2 Configuration Data Spill7.2CNA v4.00.3%2026-03-13Fix
CVE-2025-13778ABB AWIN GW100 rev.2 Device Reboot Control7.1CNA v4.00.3%2026-03-13Fix
CVE-2025-13777ABB AWIN GW100 rev.2 authentication bypass due to Improper Session Validation7.2CNA v4.00.2%2026-03-13Fix
CVE-2025-13726IBM Sterling Partner Engagement Manager information disclosure5.3CNA v3.10.3%2026-03-13Fix
CVE-2025-13723IBM Sterling Partner Engagement Manager information disclosure5.3CNA v3.10.2%2026-03-13Fix
CVE-2025-13718IBM Sterling Partner Engagement Manager information disclosure3.7CNA v3.10.2%2026-03-13Fix
CVE-2025-13702IBM Sterling Partner Engagement Manager cross-site scripting6.1CNA v3.10.2%2026-03-13Fix
CVE-2025-12455OpenText Vertica response discrepancy5.1CNA v4.00.3%2026-03-13Fix
CVE-2025-12454OpenText Vertica management console reflected cross-site scripting5.1CNA v4.00.2%2026-03-13Fix
CVE-2025-12453OpenText Vertica management console reflected cross-site scripting5.1CNA v4.00.2%2026-03-13Fix
CVE-2025-8766Red Hat OpenShift Data Foundation Multi-Cloud Object Gateway container image privilege escalation6.4CNA v3.10.2%2026-03-13Fix
CVE-2025-70873SQLite information disclosure7.5CISA ADP v3.10.3%2026-03-12Fix
CVE-2025-70245D-Link DIR-513 stack-based buffer overflow9.8v3.10.6%2026-03-12
CVE-2025-66955Asseco Live Contact Plan local file inclusion6.5CISA ADP v3.10.3%2026-03-12
CVE-2025-61154GNU LibreDWG heap-based buffer overflow6.5CISA ADP v3.10.2%2026-03-12
CVE-2025-59388QNAP Hyper Data Protector hard-coded credentials6.6CNA v4.00.5%2026-03-12Fix
CVE-2025-15473Timetics WordPress plugin unauthenticated Payment/Booking Status update4.3CISA ADP v3.10.2%2026-03-12Fix
CVE-2025-15038ASUS Business System Control Interface An out-of-bounds read6.9CNA v4.00.1%2026-03-12Fix
CVE-2025-15037ASUS Business System Control Interface An incorrect permission assignment6.8CNA v4.00.1%2026-03-12Fix
CVE-2025-13913Inductive Automation Ignition Software deserialization of untrusted data6.8v3.10.3%2026-03-12Fix
CVE-2025-13462Python CPython tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling2.0CNA v4.00.2%2026-03-12Fix
CVE-2025-70330Easy Grade Pro EGP gradebook file parser out-of-bounds read3.3CISA ADP v3.10.1%2026-03-11Exploit code
CVE-2025-70082Lantronix EDS3000PS unverified password change9.8CISA ADP v3.10.5%2026-03-11Fix
CVE-2025-70041oslabs-beta ThermaKube hard-coded password9.8CISA ADP v3.10.4%2026-03-11
CVE-2025-70027Sunbirded-portal server-side request forgery7.5CISA ADP v3.10.3%2026-03-11
CVE-2025-70024benkeen generatedata SQL injection9.8CISA ADP v3.10.5%2026-03-11
CVE-2025-68623Microsoft DirectX End-User Runtime Web Installer privilege escalation8.8CISA ADP v3.10.1%2026-03-11
CVE-2025-67298ClassroomIO authentication bypass by spoofing8.1CISA ADP v3.10.2%2026-03-11Fix
CVE-2025-67041Lantronix EDS3000PS OS command injection9.8CISA ADP v3.10.4%2026-03-11Fix
CVE-2025-67039Lantronix EDS3000PS authentication bypass using an alternate path or channel9.1CISA ADP v3.10.4%2026-03-11Fix
CVE-2025-67038Lantronix EDS5000 code injection9.3CNA v4.019.3%2026-03-11KEVEmerging ThreatsExploit codeFix
CVE-2025-67037Lantronix EDS5000, G520, and X300 OS command injection8.8CISA ADP v3.10.4%2026-03-11Fix
CVE-2025-67036Lantronix EDS5000, G520, and X300 OS command injection8.8CISA ADP v3.10.4%2026-03-11Fix
CVE-2025-67035Lantronix EDS5000 OS command injection9.8CISA ADP v3.10.4%2026-03-11Fix
CVE-2025-67034Lantronix EDS5000, G520, and X300 OS command injection8.8CISA ADP v3.10.5%2026-03-11Fix
CVE-2025-66956Asseco SEE Live attachment improper access control9.9CISA ADP v3.10.5%2026-03-11
CVE-2025-62328HCL Nomad server on Domino is affected by a missing default frame-ancestors directive3.7CNA v3.10.2%2026-03-11Fix
CVE-2025-14513Improper validation of specified quantity in input in GitLab7.5CNA v3.10.5%2026-03-11Fix
CVE-2025-13929Allocation of resources without limits or throttling in GitLab7.5CNA v3.10.5%2026-03-11Fix
CVE-2025-13690Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2026-03-11Fix
CVE-2025-13067Royal Addons for Elementor WordPress plugin arbitrary file upload8.8CNA v3.10.5%2026-03-11Fix
CVE-2025-12704Missing authorization in GitLab3.5CNA v3.10.2%2026-03-11Fix
CVE-2025-12697Improper encoding or escaping of output in GitLab2.2CNA v3.10.3%2026-03-11Fix
CVE-2025-12690Local privilege escalation in NGFW Engine7.3CNA v4.00.1%2026-03-11Fix
CVE-2025-12576Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2026-03-11Fix
CVE-2025-12555Incorrect authorization in GitLab4.3CNA v3.10.2%2026-03-11Fix
CVE-2025-12473RTMKit WordPress plugin reflected cross-site scripting via themebuilder parameter6.1CNA v3.10.2%2026-03-11Fix
CVE-2025-70802Tenda G1 hard-coded password8.4CISA ADP v3.10.2%2026-03-10
CVE-2025-70798Tenda i24 hard-coded password8.4CISA ADP v3.10.2%2026-03-10
CVE-2025-70251D-Link DIR-513 stack-based buffer overflow7.5CISA ADP v3.10.6%2026-03-10
CVE-2025-70249D-Link DIR-513 stack-based buffer overflow7.5CISA ADP v3.10.7%2026-03-10
CVE-2025-70247D-Link DIR-513 stack-based buffer overflow7.5CISA ADP v3.10.7%2026-03-10
CVE-2025-70246D-Link DIR-513 stack-based buffer overflow7.5CISA ADP v3.10.6%2026-03-10
CVE-2025-70244D-Link DIR-513 stack-based buffer overflow7.5CISA ADP v3.10.6%2026-03-10
CVE-2025-70242D-Link DIR-513 stack-based buffer overflow7.5CISA ADP v3.10.7%2026-03-10
CVE-2025-70227D-Link DIR-513 stack-based buffer overflow7.5CISA ADP v3.10.6%2026-03-10
CVE-2025-70129PluXml comment anti-spam captcha vulnerability5.3CISA ADP v3.10.3%2026-03-10
CVE-2025-70128PluXml A stored cross-site scripting6.1CISA ADP v3.10.2%2026-03-10
CVE-2025-70025Generatedata cross-site scripting6.1CISA ADP v3.10.3%2026-03-10
CVE-2025-69615Telekom Account Management Portal missing brute-force protection9.1CISA ADP v3.10.5%2026-03-10
CVE-2025-69614Telekom Account Management Portal weak password recovery9.4CISA ADP v3.10.4%2026-03-10
CVE-2025-68648Fortinet FortiAnalyzer format string6.5CNA v3.10.6%2026-03-10Fix
CVE-2025-68482Fortinet FortiAnalyzer improper certificate validation6.3CNA v3.10.2%2026-03-10Fix
CVE-2025-66413Git for Windows leaks NTLM hash when cloning from an attacker-controlled server7.4CNA v3.10.3%2026-03-10Fix
CVE-2025-66178Fortinet FortiWeb OS command injection6.7CNA v3.11.7%2026-03-10Fix
CVE-2025-56422LimeSurvey A deserialization of untrusted data9.8CISA ADP v3.10.9%2026-03-10
CVE-2025-56421LimeSurvey is vulnerable to SQL injection7.5CISA ADP v3.10.5%2026-03-10Fix
CVE-2025-55717Fortinet FortiVoice cleartext storage of sensitive information3.8CNA v3.10.1%2026-03-10Fix
CVE-2025-54820Fortinet FortiManager stack-based buffer overflow7.0CNA v3.10.9%2026-03-10Fix
CVE-2025-54659Fortinet FortiSOAR Agent Communication Bridge path traversal5.5CNA v3.10.5%2026-03-10Fix
CVE-2025-53608Fortinet FortiSandbox cross-site scripting4.6CNA v3.10.3%2026-03-10Fix
CVE-2025-49784Fortinet FortiAnalyzer-BigData SQL injection5.6CNA v3.10.4%2026-03-10Fix
CVE-2025-48840Fortinet FortiWeb authentication bypass by spoofing5.0CNA v3.10.5%2026-03-10Fix
CVE-2025-48611Google Android DeviceId.java privilege escalation10.0CNA v3.10.2%2026-03-10Fix
CVE-2025-48418Fortinet FortiAnalyzer hidden functionality6.4CNA v3.10.5%2026-03-10Fix
CVE-2025-41712Janitza UMG 96RM-E 24V(5222063) incorrect permission assignment on power analyzer6.5CNA v3.10.4%2026-03-10Fix
CVE-2025-41711Janitza UMG 96RM-E 24V(5222063) weak cryptographic algorithm5.3CNA v3.10.3%2026-03-10Fix
CVE-2025-41710Janitza UMG 96RM-E 24V(5222063) use of hard-coded credentials in power analyzer6.5CNA v3.10.4%2026-03-10Fix
CVE-2025-41709Janitza UMG 96RM-E 24V(5222063) command injection in power analyzer via Modbus-TCP and Modbus-RTU9.8CNA v3.12.2%2026-03-10Fix
CVE-2025-40943Siemens SIMATIC Drive Controller CPU 1504D TF eval injection9.4CNA v4.00.5%2026-03-10Fix
CVE-2025-36920Google Android alloc.c out-of-bounds write8.4CISA ADP v3.10.1%2026-03-10Fix
CVE-2025-36227IBM Aspera Faspex 5 HTTP header injection5.4CNA v3.10.2%2026-03-10Fix
CVE-2025-36226IBM Aspera Faspex 5 cross-site scripting5.4CNA v3.10.2%2026-03-10Fix
CVE-2025-36173IBM InfoSphere Data Architect cross-site scripting6.1CNA v3.10.1%2026-03-10Fix
CVE-2025-36105IBM Planning Analytics Advanced Certified Containers environment variables information disclosure4.4CNA v3.10.1%2026-03-10Fix
CVE-2025-27769Siemens Heliox Flex 180 kW EV Charging Station improper channel restriction2.4CNA v4.00.1%2026-03-10Fix
CVE-2025-22850Time-of-check time-of-use race condition in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local5.6CNA v4.00.1%2026-03-10Fix
CVE-2025-22444Exposure of resource to wrong sphere in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local acce5.6CNA v4.00.1%2026-03-10Fix
CVE-2025-20105Improper input validation in some UEFI firmware SMM module for the Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local ac8.7CNA v4.00.1%2026-03-10Fix
CVE-2025-20096Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when attack5.9CNA v4.00.1%2026-03-10Fix
CVE-2025-20073Intel(R) Reference Platforms information disclosure1.8CNA v4.00.1%2026-03-10Fix
CVE-2025-20068Improper input validation in the UEFI ImcErrorHandler module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via l7.1CNA v4.00.1%2026-03-10Fix
CVE-2025-20064Improper input validation in the UEFI FlashUcAcmSmm module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local8.7CNA v4.00.1%2026-03-10Fix
CVE-2025-20028Time-of-check time-of-use race condition in the WheaERST SMM module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occu7.1CNA v4.00.1%2026-03-10Fix
CVE-2025-20027Improper input validation in the UEFI WheaERST module for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local ac7.1CNA v4.00.1%2026-03-10Fix
CVE-2025-20005Improper buffer restrictions in some UEFI firmware for some Intel(R) reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when5.6CNA v4.00.1%2026-03-10Fix
CVE-2025-13957Schneider Electric EcoStruxure™ IT Data Center Expert hard-coded credentials7.5CNA v4.00.7%2026-03-10Fix
CVE-2025-13902Schneider Electric Modicon Controllers M241/M251 cross-site scripting5.1CNA v4.00.2%2026-03-10Fix
CVE-2025-13901Schneider Electric Modicon M241/M251 improper resource release6.9CNA v4.00.5%2026-03-10Fix
CVE-2025-13219IBM Aspera Orchestrator URL query parameters information disclosure5.9CNA v3.10.3%2026-03-10Fix
CVE-2025-13213IBM Aspera Orchestrator HTTP header injection5.4CNA v3.10.2%2026-03-10Fix
CVE-2025-11739Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) deserialization of untrusted data8.5CNA v4.00.2%2026-03-10Fix
CVE-2025-11158Hitachi Vantara Pentaho DATA Integration And Analytics missing authorization9.1CNA v3.10.4%2026-03-10Fix
CVE-2025-2399Denial of service (DoS) vulnerability in Mitsubishi Electric CNC Series5.9CNA v3.10.5%2026-03-10Fix
CVE-2025-70973ScadaBR session fixation4.8CISA ADP v3.10.2%2026-03-09
CVE-2025-70250D-Link DIR-513 stack-based buffer overflow7.5CISA ADP v3.10.5%2026-03-09
CVE-2025-70243D-Link DIR-513 stack-based buffer overflow7.5CISA ADP v3.10.6%2026-03-09
CVE-2025-70238D-Link DIR-513 stack-based buffer overflow7.5CISA ADP v3.10.6%2026-03-09
CVE-2025-70060Ymfe Yapi cross-site scripting5.4CISA ADP v3.10.2%2026-03-09
CVE-2025-70059Ymfe Yapi resource exhaustion7.5CISA ADP v3.10.3%2026-03-09
CVE-2025-70050Lesspass cleartext storage of sensitive information6.5CISA ADP v3.10.2%2026-03-09
CVE-2025-70048Nexusinterface cleartext transmission of sensitive information7.5CISA ADP v3.10.2%2026-03-09
CVE-2025-70047Nexusinterface resource exhaustion7.5CISA ADP v3.10.3%2026-03-09
CVE-2025-70046Miazzy Oa-font-service inclusion of untrusted functionality9.8CISA ADP v3.10.4%2026-03-09
CVE-2025-70042Opensourcelabs Thermakube server-side request forgery9.8CISA ADP v3.10.3%2026-03-09
CVE-2025-70040Lupinlin1 Jimeng Web MCP Server sensitive information in log files5.3CISA ADP v3.10.2%2026-03-09
CVE-2025-70039linagora Twake OS command injection9.8CISA ADP v3.10.4%2026-03-09
CVE-2025-70038linagora Twake cross-site scripting8.8CISA ADP v3.10.3%2026-03-09
CVE-2025-70037linagora Twake open redirect6.1CISA ADP v3.10.2%2026-03-09
CVE-2025-70034mscdex ssh2 regular expression denial of service7.5CISA ADP v3.10.3%2026-03-09
CVE-2025-70033Sunbirded-portal cross-site scripting5.4CISA ADP v3.10.2%2026-03-09
CVE-2025-70032Sunbirded-portal open redirect6.1CISA ADP v3.10.2%2026-03-09
CVE-2025-70031Sunbirded-portal cross-site request forgery8.8CISA ADP v3.10.2%2026-03-09
CVE-2025-70030Sunbirded-portal regular expression denial of service7.5CISA ADP v3.10.3%2026-03-09
CVE-2025-70028Sunbirded-portal path traversal7.5CISA ADP v3.10.4%2026-03-09
CVE-2025-69648GNU Binutils infinite loop6.2CISA ADP v3.10.2%2026-03-09Fix
CVE-2025-69647GNU Binutils infinite loop6.2CISA ADP v3.10.2%2026-03-09Fix
CVE-2025-69279UNISOC chipsets nr modem crash7.5CNA v3.10.2%2026-03-09Fix
CVE-2025-69278UNISOC chipsets nr modem crash7.5CNA v3.10.2%2026-03-09Fix
CVE-2025-69219Apache Airflow Providers HTTP has Unsafe Pickle Deserializatio leading to RCE via HttpOperator8.8CISA ADP v3.10.7%2026-03-09Exploit codeFix
CVE-2025-68402FreshRSS has an authentication bypass due to truncated bcrypt hash [edge branch]8.2CNA v4.00.3%2026-03-09
CVE-2025-62166FreshRSS has an IDOR which allows for viewing feeds of any user and leaking tokens7.5CNA v3.10.4%2026-03-09Fix
CVE-2025-61616UNISOC chipsets nr modem crash7.5CNA v3.10.3%2026-03-09Fix
CVE-2025-61615UNISOC chipsets nr modem crash7.5CNA v3.10.3%2026-03-09Fix
CVE-2025-61614UNISOC chipsets nr modem crash7.5CNA v3.10.3%2026-03-09Fix
CVE-2025-61613UNISOC chipsets nr modem crash7.5CNA v3.10.3%2026-03-09Fix
CVE-2025-61612UNISOC chipsets nr modem crash7.5CNA v3.10.3%2026-03-09Fix
CVE-2025-61611UNISOC UDX710 modem improper input validation7.5CNA v3.10.6%2026-03-09Fix
CVE-2025-41772MBS UBR-01 Mk II wwwupdate.cgi Session token in URL7.5CNA v3.10.3%2026-03-09Fix
CVE-2025-41767MBS UBR-01 Mk II signature bypass on update upload7.2CNA v3.10.2%2026-03-09Fix
CVE-2025-41766MBS UBR-01 Mk II stack buffer overflow on parsing web request8.8CNA v3.10.5%2026-03-09Fix
CVE-2025-41765MBS UBR-01 Mk II unchecked role in wwwupload.cgi9.1CNA v3.10.3%2026-03-09Fix
CVE-2025-41764MBS UBR-01 Mk II unchecked role in wwwupdate.cgi9.1CNA v3.10.4%2026-03-09Fix
CVE-2025-41763MBS UBR-01 Mk II unchecked role in wwwdnload.cgi6.5CNA v3.10.2%2026-03-09Fix
CVE-2025-41762MBS UBR-01 Mk II secret leak with wwwdnload.cgi6.2CNA v3.10.1%2026-03-09Fix
CVE-2025-41761MBS UBR-01 Mk II privilege escalation possible7.8CNA v3.10.2%2026-03-09Fix
CVE-2025-41760MBS UBR-01 Mk II Pass filter with Empty Table4.9CNA v3.10.3%2026-03-09Fix
CVE-2025-41759MBS UBR-01 Mk II use of wildcard (* or all) in block list4.9CNA v3.10.3%2026-03-09Fix
CVE-2025-41758MBS UBR-01 Mk II arbitrary Write with wwwupload.cgi8.8CNA v3.10.5%2026-03-09Fix
CVE-2025-41757MBS Universal BACnet Router backup restore function path traversal8.8CNA v3.10.5%2026-03-09Fix
CVE-2025-41756MBS Universal BACnet Router ubr-editfile method arbitrary file write8.1CNA v3.10.3%2026-03-09Fix
CVE-2025-41755MBS Universal BACnet Router ubr-logread method path traversal6.5CNA v3.10.5%2026-03-09Fix
CVE-2025-41754MBS Universal BACnet Router ubr-editfile method arbitrary file read6.5CNA v3.10.3%2026-03-09Fix
CVE-2025-40639SQL injection in Eventobot9.8NVD v3.10.3%2026-03-09Fix
CVE-2025-40638Reflected cross-site scripting (XSS) in Eventobot6.1NVD v3.10.2%2026-03-09Fix
CVE-2025-15576FreeBSD jail chroot escape via fd exchange with a different jail7.5v3.10.1%2026-03-09Fix
CVE-2025-15568Command injection vulnerability on TP-Link Archer AXE758.5CNA v4.01.4%2026-03-09Fix
CVE-2025-15547FreeBSD jail escape by a privileged user via nullfs8.8v3.10.1%2026-03-09Fix
CVE-2025-14769FreeBSD ipfw denial of service7.5CISA ADP v3.11.1%2026-03-09Fix
CVE-2025-14558FreeBSD remote code execution via ND6 Router Advertisements7.2CISA ADP v3.16.3%2026-03-09MetasploitEmerging ThreatsExploit codeFix
CVE-2025-14675Meta Box WordPress plugin authenticated (Contributor+) arbitrary file deletion7.2CNA v3.12.4%2026-03-07Fix
CVE-2025-14353ZIP Code Based Content Protection WordPress plugin unauthenticated SQL injection7.5CNA v3.10.3%2026-03-07Fix
CVE-2025-8899Paid Videochat Turnkey Site HTML5 PPV Live Webcams WordPress plugin privilege escalation8.8CNA v3.10.4%2026-03-07Fix
CVE-2025-70363ibexa Ez Platform information disclosure7.5CISA ADP v3.10.2%2026-03-06
CVE-2025-69654QuickJS reachable assertion7.5CISA ADP v3.10.3%2026-03-06
CVE-2025-69653QuickJS reachable assertion6.5CISA ADP v3.10.2%2026-03-06
CVE-2025-69652GNU Binutils readelf DWARF parser denial of service6.2CISA ADP v3.10.2%2026-03-06Fix
CVE-2025-69651GNU Binutils null pointer dereference5.5v3.10.2%2026-03-06Fix
CVE-2025-69650GNU Binutils double free7.5v3.10.5%2026-03-06Fix
CVE-2025-69649GNU Binutils null pointer dereference7.5v3.10.3%2026-03-06Fix
CVE-2025-69646GNU Binutils logic flaw5.5CISA ADP v3.10.2%2026-03-06Fix
CVE-2025-69645GNU Binutils logic flaw5.5CISA ADP v3.10.2%2026-03-06Fix
CVE-2025-69644GNU Binutils logic flaw5.0CISA ADP v3.10.1%2026-03-06Fix
CVE-2025-59544Chamilo: Unauthorized access to update category of any user6.9CNA v4.00.2%2026-03-06Fix
CVE-2025-59543Chamilo: Account takeover via stored XSS in Course Description9.1CNA v3.10.3%2026-03-06Fix
CVE-2025-59542Chamilo: Account takeover via stored XSS in Course Learning Paths9.1CNA v3.10.3%2026-03-06Fix
CVE-2025-59541Chamilo: CSRF vulnerability in Project Deletion8.1CNA v3.10.2%2026-03-06Fix
CVE-2025-59540Chamilo: Stored cross-site scripting (XSS) in Chamilo LMS Exercise Feedback6.4CNA v4.00.2%2026-03-06Fix
CVE-2025-55289Chamilo: Stored cross-site scripting in Skills Argumentation8.8CNA v3.10.3%2026-03-06Fix
CVE-2025-30413Acronis Cyber Protect Cloud Agent incorrect permission assignment4.4CNA v3.00.2%2026-03-06Fix
CVE-2025-15602Snipe-IT mass assignment vulnerability leading to privilege escalation8.7CNA v4.00.5%2026-03-06Exploit codeFix
CVE-2025-11792Acronis Cyber Protect Cloud Agent uncontrolled search path7.3CNA v3.00.1%2026-03-06Fix
CVE-2025-11791Acronis Cyber Protect 17 missing authorization5.5CNA v3.00.1%2026-03-06Fix
CVE-2025-11790Acronis Cyber Protect Cloud Agent incorrect permission assignment4.4CNA v3.00.1%2026-03-06Fix
CVE-2025-70995Aranda Service Desk Web Edition file upload endpoint remote code execution8.8CISA ADP v3.10.6%2026-03-05Exploit code
CVE-2025-70949@perfood/couch-auth has an observable timing discrepancy7.5CISA ADP v3.10.4%2026-03-05
CVE-2025-70948@perfood/couch-auth has a host header injection9.3CISA ADP v3.10.4%2026-03-05
CVE-2025-70616Diebold Nixdorf Wnbios64.sys Wincor Nixdorf stack-based buffer overflow7.8CISA ADP v3.10.2%2026-03-05
CVE-2025-70614Opencode Ussd Gateway missing authorization8.1CISA ADP v3.10.3%2026-03-05
CVE-2025-70233D-Link DIR-513 stack-based buffer overflow9.8CISA ADP v3.10.7%2026-03-05
CVE-2025-70232D-Link DIR-513 stack-based buffer overflow9.8CISA ADP v3.10.7%2026-03-05
CVE-2025-70231D-Link DIR-513 path traversal9.8CISA ADP v3.10.7%2026-03-05
CVE-2025-70230D-Link DIR-513 stack-based buffer overflow9.8CISA ADP v3.10.8%2026-03-05
CVE-2025-70229D-Link DIR-513 stack-based buffer overflow9.8CISA ADP v3.10.7%2026-03-05
CVE-2025-69534Python-markdown has an uncaught exception7.5v3.10.6%2026-03-05Fix
CVE-2025-69411ionCube tester plus WordPress plugin arbitrary file download7.5CNA v3.11.6%2026-03-05NucleiFix
CVE-2025-69343Theater for WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-03-05Fix
CVE-2025-69340WeDesignTech Ultimate Booking Addon WordPress plugin broken access control7.5CNA v3.10.4%2026-03-05Fix
CVE-2025-69339Molla WordPress theme local file inclusion8.1CNA v3.10.5%2026-03-05Fix
CVE-2025-69338Riode Core WordPress plugin SQL injection9.3CNA v3.10.4%2026-03-05Fix
CVE-2025-69090Remons WordPress theme local file inclusion8.1CNA v3.10.5%2026-03-05Fix
CVE-2025-68555Nutrie WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-03-05Fix