Menu

Star on GitHub · 3.4k

2025

48,153 vulnerabilities published in 2025.

Results

48,153· Page 342/964
5.4
CVE-2025-33083

IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticat

5.4
CVE-2025-33082

IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticat

6.1
CVE-2025-0656

IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthentic

8.8
CVE-2025-9782

A vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423. This vulnerability affects the function sub_4466F8 of

8.8
CVE-2025-9781

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20211108.1423. This affects the function sub_4162DC of the file

8.8
CVE-2025-9780

A flaw has been found in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this issue is the function sub_419BE0 of the f

8.8
CVE-2025-9779

A vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this vulnerability is the function sub_

8.6
CVE-2025-2412

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft QR Menu allows Authentication Bypass

8.6
CVE-2025-0610

Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request Forgery. This issue affec

7.3
CVE-2024-12925

Improper Validation of Certificate with Host Mismatch vulnerability in Akınsoft QR Menü allows HTTP Response Splitting.

6.3
CVE-2024-12924

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Akınsoft QR Menü allows Forceful Browsing, Phishing

4.3
CVE-2024-12914

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akınsoft QR

1.9
CVE-2025-9778

A security vulnerability has been detected in Tenda W12 up to 3.0.0.6(3948). Affected is an unknown function of the file

5.9
CVE-2025-36133

IBM App Connect Enterprise Certified Container CD: 9.2.0 through 11.6.0, 12.1.0 through 12.14.0, and 12.0 LTS: 12.0.0 th

7.3
CVE-2025-9775

A vulnerability was found in RemoteClinic up to 2.0. Impacted is an unknown function of the file /staff/edit-my-profile.

4.3
CVE-2025-9774

A vulnerability has been found in RemoteClinic up to 2.0. This issue affects some unknown processing of the file /patien

4.3
CVE-2025-9773

A flaw has been found in RemoteClinic up to 2.0. This vulnerability affects unknown code of the file /staff/edit.php. Ex

7.3
CVE-2025-9772

A vulnerability was detected in RemoteClinic up to 2.0. This affects an unknown part of the file /staff/edit.php. Perfor

7.3
CVE-2025-9771

A security vulnerability has been detected in SourceCodester Eye Clinic Management System 1.0. Affected by this issue is

7.3
CVE-2025-9770

A weakness has been identified in Campcodes Hospital Management System 1.0. Affected by this vulnerability is an unknown

4.1
CVE-2025-9769

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng

6.3
CVE-2025-9768

A vulnerability was identified in itsourcecode Sports Management System 1.0. This impacts an unknown function of the fil

N/A
CVE-2025-58318

Delta Electronics DIAView has an authentication bypass vulnerability.

9.8
CVE-2022-38696

In BootRom, there's a possible missing payload size check. This could lead to memory buffer overflow without requiring a

7.8
CVE-2022-38695

In BootRom, there's a possible unchecked command index. This could lead to local escalation of privilege with no additio

7.8
CVE-2022-38694

In BootRom, there is a possible unchecked write address. This could lead to local escalation of privilege with no additi

9.8
CVE-2022-38693

In FDL1, there is a possible missing payload size check. This could lead to memory buffer overflow without requiring add

9.8
CVE-2022-38692

In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. This could lead to memory buffe

7.8
CVE-2022-38691

In BootROM, there is a possible missing validation for Certificate Type 0. This could lead to local escalation of privil

7.3
CVE-2025-9767

A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the fil

7.3
CVE-2025-9766

A vulnerability was found in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of t

7.3
CVE-2025-9765

A vulnerability has been found in itsourcecode Sports Management System 1.0. The affected element is an unknown function

7.3
CVE-2025-9764

A flaw has been found in itsourcecode Sports Management System 1.0. Impacted is an unknown function of the file /Admin/r

9.8
CVE-2025-6507

A vulnerability in the h2oai/h2o-3 repository allows attackers to exploit deserialization of untrusted data, potentially

9.8
CVE-2025-54857

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge BAS

8.8
CVE-2025-20708

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation

6.7
CVE-2025-20707

In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privil

7.8
CVE-2025-20706

In mbrain, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege

7.8
CVE-2025-20705

In monitor_hang, there is a possible memory corruption due to use after free. This could lead to local escalation of pri

8.0
CVE-2025-20704

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of

6.5
CVE-2025-20703

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of s

7.3
CVE-2025-9763

A vulnerability was detected in Campcodes Online Learning Management System 1.0. This issue affects some unknown process

7.3
CVE-2025-9761

A security vulnerability has been detected in Campcodes Online Feeds Product Inventory System 1.0. This vulnerability af

6.3
CVE-2025-9760

A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/Api/m

7.3
CVE-2025-9759

A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is

6.3
CVE-2025-9758

A vulnerability was identified in deepakmisal24 Chemical Inventory Management System up to 1.0. Affected by this vulnera

4.9
CVE-2025-9570

The eHRD CTMS developed by Sunnet has an Arbitrary File Reading vulnerability, allowing remote attackers with administra

7.5
CVE-2025-7731

Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU

7.3
CVE-2025-7405

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU mod

7.3
CVE-2025-9757

A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →