Search
98,287 CVEs
CVEs (98,287, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 476–500 of 98,287 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↑ | Description |
|---|---|---|---|---|---|
| CVE-2025-43024 | MEDIUM | 7.5 | 2025-10-28 | A GUI dialog of an application allows to view what files are in the file system without proper authorization. | |
| CVE-2025-12336 | MEDIUM | 7.3 | 2025-10-28 | A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_index.php… | |
| CVE-2025-12337 | MEDIUM | 7.3 | 2025-10-28 | A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/admin_feature.php. Performing a ma… | |
| CVE-2025-12338 | MEDIUM | 7.3 | 2025-10-28 | A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerability affects unknown code of the file /admin/admin_product.ph. Executing … | |
| CVE-2025-12339 | MEDIUM | 7.3 | 2025-10-28 | A security vulnerability has been detected in Campcodes Retro Basketball Shoes Online Store 1.0. This issue affects some unknown processing of the file /admin/admin_footbal… | |
| CVE-2025-12341 | HIGH | 7.8 | 2025-10-28 | A vulnerability was detected in ermig1979 AntiDupl up to 2.3.12. Impacted is an unknown function of the file AntiDupl.NET.WinForms.exe of the component Delete Duplicate Ima… | |
| CVE-2025-12342 | MEDIUM | 7.3 | 2025-10-28 | A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipul… | |
| CVE-2025-12344 | LOW | 6.3 | 2025-10-28 | A vulnerability has been found in Yonyou U8 Cloud up to 5.1sp. The impacted element is an unknown function of the file /service/NCloudGatewayServlet of the component Reques… | |
| CVE-2025-12346 | LOW | Patched | 6.3 | 2025-10-28 | A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/auto_post/uploads-require-maxsi… |
| CVE-2025-12347 | LOW | Patched | 6.3 | 2025-10-28 | A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editor_files/save-file-ajax.php. Ex… |
| CVE-2025-10939 | LOW | 3.7 | 2025-10-28 | A flaw was found in Keycloak. The Keycloak guides recommend to not expose /admin path to the outside in case the installation is using a proxy. The issue occurs at least vi… | |
| CVE-2025-62777 | HIGH | 8.8 | 2025-10-28 | Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may allow an attacker within the local network to log in to the affected device via… | |
| CVE-2025-10145 | NONE | — | 2025-10-28 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-7073. Reason: This candidate is a reservation duplicate of CVE-2023-7073. Notes: All CV… | |
| CVE-2025-11735 | HIGH | 7.5 | 2025-10-28 | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the `phrase` parameter in all versions up to, and inc… | |
| CVE-2025-12378 | MEDIUM | 7.3 | 2025-10-28 | A security flaw has been discovered in code-projects Simple Food Ordering System 1.0. This issue affects some unknown processing of the file /addproduct.php. Performing man… | |
| CVE-2025-10150 | HIGH | — | 2025-10-28 | Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 sma… | |
| CVE-2025-10151 | HIGH | — | 2025-10-28 | Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLink HW-PN: from… | |
| CVE-2025-40025 | HIGH | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer for non inode dnode As syzbot reported below: -----------… | |
| CVE-2025-40026 | HIGH | 7.9 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of ins… | |
| CVE-2025-40027 | HIGH | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9_fd_cancelled Syzkaller reports a KASAN issue as below: general prote… | |
| CVE-2025-40028 | HIGH | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: binder: fix double-free in dbitmap A process might fail to allocate a new bitmap when trying to expand… | |
| CVE-2025-41090 | HIGH | — | 2025-10-28 | microCLAUDIA in v3.2.0 and prior has an improper access control vulnerability. This flaw allows an authenticated user to perform unauthorized actions on other organization… | |
| CVE-2025-55758 | MEDIUM | 5.4 | 2025-10-28 | Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered. | |
| CVE-2025-40029 | NONE | — | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: Check return value of platform_get_resource() platform_get_resource() returns NULL in cas… | |
| CVE-2025-40030 | NONE | — | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_function_name() While the API contract in docs does… |