Menu

Star on GitHub · 3.4k

2025

48,153 vulnerabilities published in 2025.

Results

16,974 of 48,153· Page 178/340
8.8
CVE-2025-5476

Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability. This vulnerability allows network-adja

7.5
CVE-2025-5475

Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability. This vulnerability allow

8.8
CVE-2025-6373

A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. This vulnerability affects the fun

8.8
CVE-2025-6372

A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.06B01. This affects the function formS

8.8
CVE-2025-6371

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.06B01. Affected by this issue is

8.8
CVE-2025-6370

A vulnerability classified as critical was found in D-Link DIR-619L 2.06B01. Affected by this vulnerability is the funct

8.8
CVE-2025-6369

A vulnerability classified as critical has been found in D-Link DIR-619L 2.06B01. Affected is the function formdumpeasys

8.8
CVE-2025-6368

A vulnerability was found in D-Link DIR-619L 2.06B01. It has been rated as critical. This issue affects the function for

8.8
CVE-2025-6367

A vulnerability was found in D-Link DIR-619L 2.06B01. It has been declared as critical. This vulnerability affects unkno

7.3
CVE-2025-6364

A vulnerability has been found in code-projects Simple Pizza Ordering System 1.0 and classified as critical. Affected by

7.3
CVE-2025-6363

A vulnerability, which was classified as critical, was found in code-projects Simple Pizza Ordering System 1.0. Affected

7.3
CVE-2025-6362

A vulnerability, which was classified as critical, has been found in code-projects Simple Pizza Ordering System 1.0. Thi

7.3
CVE-2025-6361

A vulnerability classified as critical was found in code-projects Simple Pizza Ordering System 1.0. This vulnerability a

7.3
CVE-2025-6360

A vulnerability classified as critical has been found in code-projects Simple Pizza Ordering System 1.0. This affects an

7.3
CVE-2025-6359

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been rated as critical. Affected by

8.8
CVE-2025-34029

An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscm

8.8
CVE-2025-34024

An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp for

8.1
CVE-2024-4994

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1.0 before 16.11.5, all versions starting fr

7.3
CVE-2025-6358

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been declared as critical. Affected

7.3
CVE-2025-6357

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been classified as critical. Affecte

7.3
CVE-2025-6356

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0 and classified as critical. This issue affec

8.5
CVE-2025-5121

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A

8.7
CVE-2025-2443

An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass

7.3
CVE-2025-6355

A vulnerability has been found in SourceCodester Online Hotel Reservation System 1.0 and classified as critical. This vu

7.3
CVE-2025-6354

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by th

7.5
CVE-2025-45331

brplot v420.69.1 contains a Null Pointer Dereference (NPD) vulnerability in the br_dagens_handle_once function of its da

7.5
CVE-2025-44203

In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is com

8.8
CVE-2025-52825

Cross-Site Request Forgery (CSRF) vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows Privilege

8.5
CVE-2025-52822

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design WP R

8.5
CVE-2025-52821

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in thanhtungtnt Video

7.5
CVE-2025-52802

Missing Authorization vulnerability in enguerranws Import YouTube videos as WP Posts import-youtube-videos-as-wp-post al

7.1
CVE-2025-52795

Cross-Site Request Forgery (CSRF) vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows Cro

7.1
CVE-2025-52794

Cross-Site Request Forgery (CSRF) vulnerability in Creative-Solutions Creative Contact Form sexy-contact-form allows Sto

7.1
CVE-2025-52793

Cross-Site Request Forgery (CSRF) vulnerability in Esselink.nu Esselink.nu Settings esselinknu-settings allows Reflected

7.1
CVE-2025-52792

Cross-Site Request Forgery (CSRF) vulnerability in vgstef WP User Stylesheet Switcher wp-user-stylesheet-switcher allows

7.1
CVE-2025-52791

Cross-Site Request Forgery (CSRF) vulnerability in devfelixmoira Knowledge Base – Knowledge Base Maker knowledge-base-ma

7.1
CVE-2025-52790

Cross-Site Request Forgery (CSRF) vulnerability in r-win WP-DownloadCounter wp-downloadcounter allows Stored XSS.This is

7.1
CVE-2025-52789

Cross-Site Request Forgery (CSRF) vulnerability in George Lewe Lewe ChordPress chordpress allows Stored XSS.This issue a

7.1
CVE-2025-52784

Cross-Site Request Forgery (CSRF) vulnerability in hideoguchi Bluff Post bluff-post allows Stored XSS.This issue affects

7.1
CVE-2025-52783

Cross-Site Request Forgery (CSRF) vulnerability in themelocation Change Cart button Colors WooCommerce wc-style allows S

7.1
CVE-2025-52782

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in King Rayhan Scroll

7.1
CVE-2025-52781

Cross-Site Request Forgery (CSRF) vulnerability in Beee TinyNav tinynav allows Stored XSS.This issue affects TinyNav: fr

7.1
CVE-2025-52780

Cross-Site Request Forgery (CSRF) vulnerability in Mohammad Parsa Logo Manager For Samandehi samandehi-logo-manager allo

7.1
CVE-2025-52772

Cross-Site Request Forgery (CSRF) vulnerability in Adnan Haque (a11n) Virtual Moderator allows Cross-Site Scripting (XSS

7.5
CVE-2025-52715

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

7.5
CVE-2025-52708

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

7.1
CVE-2025-49873

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Elessi e

8.1
CVE-2025-3319

IBM Spectrum Protect Server 8.1 through 8.1.26 could allow attacker to bypass authentication due to improper session aut

7.3
CVE-2025-6344

A vulnerability has been found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this vulne

7.3
CVE-2025-6343

A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0. Affected is an unkn

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →