Search
98,288 CVEs
CVEs (98,288, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 301–325 of 98,288 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↑ | Description |
|---|---|---|---|---|---|
| CVE-2025-12241 | HIGH | 8.8 | 2025-10-27 | A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This impacts the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST Para… | |
| CVE-2025-12242 | LOW | 6.3 | 2025-10-27 | A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendanc… | |
| CVE-2025-12243 | LOW | 6.3 | 2025-10-27 | A vulnerability was found in code-projects Client Details System 1.0. Affected by this issue is some unknown functionality of the file clientdetails/welcome.php of the comp… | |
| CVE-2025-11682 | HIGH | Patched | — | 2025-10-27 | Stored cross-site scripting (XSS) vulnerability in the LMT Dashboard of the Perx Customer Engagement & Loyalty Platform allows an authenticated attacker to execute arbitrar… |
| CVE-2025-12244 | LOW | 4.3 | 2025-10-27 | A vulnerability was determined in code-projects Simple E-Banking System 1.0. This affects an unknown part of the file /eBank/register.php. Executing manipulation of the arg… | |
| CVE-2025-12245 | MEDIUM | Patched | 5.3 | 2025-10-27 | A vulnerability was identified in chatwoot up to 4.7.0. This vulnerability affects the function initPostMessageCommunication of the file app/javascript/sdk/IFrameHelper.js … |
| CVE-2025-12246 | LOW | Patched | 4.3 | 2025-10-27 | A security flaw has been discovered in chatwoot up to 4.7.0. This issue affects some unknown processing of the file app/javascript/shared/components/IframeLoader.vue of the… |
| CVE-2025-12247 | MEDIUM | 7.0 | 2025-10-27 | A weakness has been identified in Hasleo Backup Suite up to 5.2. Impacted is an unknown function of the component HasleoImageMountService/HasleoBackupSuiteService. This man… | |
| CVE-2025-12248 | MEDIUM | 7.3 | 2025-10-27 | A security vulnerability has been detected in CLTPHP 3.0. The affected element is an unknown function of the file /home/search.html. Such manipulation of the argument keywo… | |
| CVE-2025-12249 | LOW | 6.3 | 2025-10-27 | A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. The impacted element is an unknown function of the component Edit Ticket Page. Performing manip… | |
| CVE-2025-12080 | MEDIUM | — | 2025-10-27 | On Wear OS devices, when Google Messages is configured as the default SMS/MMS/RCS application, the handling of ACTION_SENDTO intents utilizing the sms:, smsto:, mms:, and m… | |
| CVE-2025-12250 | LOW | 4.7 | 2025-10-27 | A flaw has been found in OpenWGA 7.11.12 Build 737. This affects an unknown function of the file WGA.File of the component TMLScript API. Executing manipulation can lead to… | |
| CVE-2025-12251 | LOW | 3.5 | 2025-10-27 | A vulnerability has been found in OpenWGA 7.11.12 Build 737. This impacts an unknown function of the component Admin UI. The manipulation leads to cross site scripting. The… | |
| CVE-2025-12252 | LOW | 6.3 | 2025-10-27 | A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /ajax/action.php. The manipulation of the argument c… | |
| CVE-2025-12253 | MEDIUM | 7.3 | 2025-10-27 | A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/portal/get_expired… | |
| CVE-2025-12254 | LOW | 6.3 | 2025-10-27 | A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /add_judge.php. Such manip… | |
| CVE-2025-12255 | LOW | 6.3 | 2025-10-27 | A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /add_contestant.php. Performing manipulation … | |
| CVE-2025-46582 | HIGH | 7.7 | 2025-10-27 | A private key disclosure vulnerability exists in ZTE's ZXMP M721 product. A low-privileged user can bypass authorization checks to view the device's communication private k… | |
| CVE-2025-10561 | NONE | — | 2025-10-27 | Rejected reason: This CVE ID was assigned in error. The End-of-Life status of a component, by itself, does not constitute a vulnerability under the CVE Program’s rules. T… | |
| CVE-2025-12256 | LOW | 6.3 | 2025-10-27 | A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code of the file /edit_contestant.php. Executing manipul… | |
| CVE-2025-12257 | MEDIUM | 7.3 | 2025-10-27 | A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /view_result.php. The … | |
| CVE-2025-12258 | HIGH | 8.8 | 2025-10-27 | A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component POST Paramete… | |
| CVE-2025-12259 | HIGH | 8.8 | 2025-10-27 | A flaw has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component POST … | |
| CVE-2025-12260 | HIGH | 8.8 | 2025-10-27 | A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi of the componen… | |
| CVE-2025-12261 | LOW | 6.3 | 2025-10-27 | A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipula… |