CVEs published August 14, 2025
310 CVEs were published on August 14, 2025: 22 critical, 102 high. 2 are now in CISA KEV.
- Published
- 310
- Critical
- 22
- High
- 102
- Medium
- 182
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 43
Most affected products
- Cisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- 16
- itsourcecode Online Tour and Travel Management System
- 11
- Cisco Firepower Management Center
- 7
- SourceCodester COVID 19 Testing Management System
- 6
- 1000 Projects Sales Management System
- 5
- Apache Software Foundation Apache Superset · apache-superset
- 4
- Netskope Client
- 4
- Bosch Rexroth AG ctrlX OS - Setup
- 3
- Campcodes Online Flight Booking Management System
- 3
- Cisco Firepower Threat Defense Software
- 3
Critical 22
- CVE-2025-20265Cisco Secure Firewall Management Center Software Radius Remote Code Execution VulnerabilityCisco Firepower Management Center
- CVE-2025-8875Insecure Deserialization VulnerabilityN-able N-central
- CVE-2025-8876Command Injection VulnerabilityN-able N-central
- CVE-2025-7353Rockwell Automation ControlLogix® Ethernet Remote Code Execution VulnerabilityRockwell Automation 1756-EN2T/D · Rockwell Automation 17… +3
- CVE-2025-54707WordPress MDTF Plugin <= 1.3.3.7 - SQL Injection VulnerabilityRealMag777 MDTF
- CVE-2025-54693WordPress Form Block Plugin <= 1.5.5 - Arbitrary File Upload Vulnerabilityepiphyt Form Block
- CVE-2025-54686WordPress Exertio Theme <= 1.3.2 - PHP Object Injection Vulnerabilityscriptsbundle Exertio
- CVE-2025-54678WordPress Easy Form Builder Plugin <= 3.8.15 - SQL Injection Vulnerabilityhassantafreshi Easy Form Builder
- CVE-2025-54669WordPress MapSVG Plugin < 8.7.4 - SQL Injection VulnerabilityRomanCode MapSVG
- CVE-2025-24775WordPress Forms <= 2.9.0 - Arbitrary File Upload VulnerabilityMade I.T. Forms
- CVE-2025-25174WordPress BeeTeam368 Extensions Plugin <= 1.9.4 - Local File Inclusion VulnerabilityBeeTeam368 Extensions
- CVE-2025-48293WordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerabilityDylan Kuhn Geo Mashup
- CVE-2025-49059WordPress CleverReach® WP Plugin <= 1.5.20 - SQL Injection VulnerabilityCleverReach® WP
- CVE-2025-49887WordPress Product XML Feed Manager for WooCommerce Plugin <= 2.9.3 - Remote Code Execution (RCE) VulnerabilityWPFactory Product XML Feed Manager for WooCommerce
- CVE-2025-52720WordPress Super Store Finder Plugin <= 7.5 - SQL Injection Vulnerabilityhighwarden Super Store Finder
- CVE-2025-8943Unsupervised OS command execution leads to remote code execution by unauthenticated network attackersflowise
- CVE-2025-8047Multiple Plugins from itayamar - Supply Chain Compromisedisable-right-click-powered-by-pixterme · pixter-image-digi…
- CVE-2025-55346Unintended dynamic code execution leads to remote code execution by network attackersflowise
- CVE-2025-27845In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid authentication request results in exposing a JWT secret
- CVE-2025-43983KuWFi CPF908-CP5 WEB5.0_LCD_20210125 devices have multiple unauthenticated access control vulnerabilities within goform/goform_set_cmd_proce
- CVE-2025-43984An issue was discovered on KuWFi GC111 devices (Hardware Version: CPE-LM321_V3.2, Software Version: GC111-GL-LM321_V3.0_20191211).
- CVE-2025-50518A use-after-free vulnerability exists in the coap_delete_pdu_lkd function within coap_pdu.c of the libcoap library.
High 102
- CVE-2025-8980Tenda G1 Firmware Update check_upload_file data authenticityTenda G1
- CVE-2025-8979Tenda AC15 Firmware Update check_fw data authenticityTenda AC15
- CVE-2025-8978D-Link DIR-619L boa FirmwareUpgrade data authenticityD-Link DIR-619L
- CVE-2025-52765WordPress NetInsight Analytics Implementation Plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) Vulnerabilitylisensee NetInsight Analytics Implementation Plugin
- CVE-2025-52797WordPress StoryMap Plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerabilityjosepsitjar StoryMap
- CVE-2025-53575WordPress Primer MyData for Woocommerce Plugin <= 4.2.5 - Cross Site Request Forgery (CSRF) Vulnerabilityprimersoftware Primer MyData for Woocommerce
- CVE-2025-53587WordPress Findgo Theme <= 1.3.57 - Cross Site Request Forgery (CSRF) VulnerabilityApusTheme Findgo
- CVE-2025-55708WordPress Quiz And Survey Master Plugin <= 10.2.4 - SQL Injection VulnerabilityExpressTech Systems Quiz And Survey Master
- CVE-2025-55192HomeAssistant-Tapo-Control Code Injection Vulnerability in issues.yml WorkflowJurajNyiri HomeAssistant-Tapo-Control
- CVE-2025-55195@std/toml Prototype Pollution in Node.js and Browserdenoland std
- CVE-2025-20263Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20253Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20251Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense Software Authenticated Arbitrary File DeletionCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20244Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20243Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20239A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive SecuCisco IOS · Cisco Adaptive Security Appliance (ASA) Soft… +1
- CVE-2025-20222Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Buffer VulnerabilityCisco Firepower Threat Defense Software
- CVE-2025-20217Cisco Firepower Threat Defense Intrusion Detection Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2025-20148Cisco Secure Firewall Management Center HTML Injection VulnerabilityCisco Firepower Management Center
- CVE-2025-20136Cisco Adaptive Security Appliance and Firepower Threat Defense Software Network Address Translation DNS Inspection Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20127Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 3100 and 4200 Series TLS Cipher Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20133Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20134Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL/TLS Certificate Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-54867Youki Symlink Following Vulnerabilityyouki-dev youki · youki
- CVE-2025-40758A vulnerability has been identified in Mendix SAML (Mendix 10.12 compatible) (All versions < V4.0.3), Mendix SAML (Mendix 10.21 compatible) Siemens Mendix SAML
- CVE-2025-7971Studio 5000 Logix Designer® – Arbitrary Code Execution VulnerabilityRockwell Automation Studio 5000 Logix Designer®
- CVE-2025-7972Rockwell Automation FactoryTalk® Linx Network Browser Security Bypass VulnerabilityRockwell Automation FactoryTalk® Linx
- CVE-2025-9042Rockwell Automation FLEX 5000 I/O - Module FaultRockwell Automation FLEX 5000 I/O
- CVE-2025-9041Rockwell Automation FLEX 5000 I/O - Module FaultRockwell Automation FLEX 5000 I/O
- CVE-2025-7973Rockwell Automation FactoryTalk® ViewPoint Privilege Escalation VulnerabilityRockwell Automation FactoryTalk® ViewPoint
- CVE-2025-7773Rockwell Automation ArmorBlock 5000 I/O – Web Server VulnerabilitiesRockwell Automation 5032-CFGB16M12P5DR · Rockwell Automa… +1
- CVE-2025-7774Rockwell Automation ArmorBlock 5000 I/O – Web Server VulnerabilitiesRockwell Automation 5032-CFGB16M12P5DR · Rockwell Automa… +1
- CVE-2025-9036Rockwell Automation FactoryTalk® Action Manager v1.0.0 Runtime VulnerabilityRockwell Automation FactoryTalk® Action Manager
- CVE-2025-8715PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target serverPostgreSQL
- CVE-2025-8714PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql clientPostgreSQL
- CVE-2025-8958Tenda TX3 fast_setting_wifi_set stack-based overflowTenda TX3
- CVE-2025-54701WordPress Unicamp Theme <= 2.6.3 - Local File Inclusion VulnerabilityThemeMove Unicamp
- CVE-2025-54700WordPress Makeaholic Theme <= 1.8.4 - Local File Inclusion VulnerabilityThemeMove Makeaholic
- CVE-2025-54697WordPress Kadence WooCommerce Email Designer Plugin <= 1.5.16 - Privilege Escalation VulnerabilityStellarWP Kadence WooCommerce Email Designer
- CVE-2025-54692WordPress Membership For WooCommerce Plugin <= 2.9.0 - Broken Access Control VulnerabilityWP Swings Membership For WooCommerce
- CVE-2025-54690WordPress Xinterio Theme <= 4.2 - Local File Inclusion VulnerabilitythemeStek Xinterio
- CVE-2025-54689WordPress Urna Theme <= 2.5.7 - Local File Inclusion Vulnerabilitythembay Urna
- CVE-2025-54679WordPress Neon Channel Product Customizer Free Plugin <= 2.0 - Arbitrary Content Deletion Vulnerabilityvertim Neon Channel Product Customizer Free
- CVE-2025-3703WordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerabilitywipeoutmedia CSS & JavaScript Toolbox
- CVE-2025-24766WordPress News Magazine X <= 1.2.35 - Local File Inclusion Vulnerabilitywproyal News Magazine X
- CVE-2025-25172WordPress VidMov <= 1.9.4 - Local File Inclusion Vulnerabilitybeeteam368 VidMov
- CVE-2025-28975WordPress Alike - WordPress Custom Post Comparison <= 3.0.1 - Cross Site Scripting (XSS) Vulnerabilityredqteam Alike - WordPress Custom Post Comparison
- CVE-2025-28979WordPress WP Pipes <= 1.4.3 - Local File Inclusion VulnerabilityThimPress WP Pipes
- CVE-2025-28999WordPress WooCommerce Shop Page Builder <= 2.27.7 - Cross Site Scripting (XSS) VulnerabilityZoomIt WooCommerce Shop Page Builder
- CVE-2025-29014WordPress FoodMenu <= 1.20 - Cross Site Scripting (XSS) VulnerabilityZoomIt FoodMenu
- CVE-2025-30626WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1 - Cross Site Scripting (XSS) VulnerabilityLambertGroup Multimedia Playlist Slider Addon for WPBakery…
- CVE-2025-30635WordPress IDonatePro <= 2.1.9 - Local File Inclusion VulnerabilityThemeAtelier IDonatePro
- CVE-2025-30639WordPress IDonatePro Plugin <= 2.1.9 - Broken Access Control VulnerabilityThemeAtelier IDonatePro
- CVE-2025-30998WordPress WP Links Page plugin <= 4.9.6 - SQL Injection vulnerabilityRico Macchi WP Links Page
- CVE-2025-31007WordPress Billplz Addon for Contact Form 7 Plugin <= 1.2.0 - Cross Site Scripting (XSS) VulnerabilityAlvind Billplz Addon for Contact Form
- CVE-2025-31425WordPress WP Lead Capturing Pages plugin < 2.6 - Arbitrary Content Deletion vulnerabilitykamleshyadav WP Lead Capturing Pages
- CVE-2025-32288WordPress RT-Theme 18 | Extensions plugin <= 2.4 - Local File Inclusion Vulnerabilitystmcan RT-Theme 18 | Extensions
- CVE-2025-39510WordPress Pinterest Automatic Pin plugin < 4.19.0 - SQL Injection vulnerabilityValvePress Pinterest Automatic Pin
- CVE-2025-47536WordPress Content Egg plugin <= 7.0.0 - PHP Object Injection Vulnerabilitykeywordrush Content Egg
- CVE-2025-47689WordPress Video Blogster Lite plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityjohnh10 Video Blogster Lite
- CVE-2025-48332WordPress Gutenberg Blocks <= 3.3.1 - Local File Inclusion VulnerabilityPublishPress Gutenberg Blocks
- CVE-2025-49033WordPress ProfileGrid plugin <= 5.9.5.3 - SQL Injection vulnerabilityMetagauss ProfileGrid
- CVE-2025-49036WordPress Premium Addons for KingComposer Plugin <= 1.1.1 - Local File Inclusion Vulnerabilityoctagonwebstudio Premium Addons for KingComposer
- CVE-2025-49037WordPress Authentication and xmlrpc log writer plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerabilityFederico Rota Authentication and xmlrpc log writer
- CVE-2025-49038WordPress WP Dynamic Links plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilitySoflyy WP Dynamic Links
- CVE-2025-49044WordPress Simple Poll plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerabilitytosend.it Simple Poll
- CVE-2025-49054WordPress Time Sheets plugin <= 2.1.3 - Reflected Cross Site Scripting (XSS) vulnerabilitymrdenny Time Sheets
- CVE-2025-49056WordPress 多说社会化评论框 Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerabilityshen2 多说社会化评论框
- CVE-2025-49057WordPress WP Voting Plugin <= 1.8 - Cross Site Scripting (XSS) VulnerabilityKo Min WP Voting
- CVE-2025-49058WordPress SoundSt SEO Search plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerabilitySound Strategies SoundSt SEO Search
- CVE-2025-49062WordPress WP-jScrollPane plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilitycornfeed WP-jScrollPane
- CVE-2025-49063WordPress BaiduXZH Submit(百度熊掌号) plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerabilityi3geek BaiduXZH Submit
- CVE-2025-49064WordPress User Language Switch plugin <= 1.6.10 - Reflected Cross Site Scripting (XSS) vulnerabilityWebilop User Language Switch
- CVE-2025-49065WordPress Visit Counter Plugin <= 1.0 - Cross Site Scripting (XSS) VulnerabilityBestiaDurmiente Visit Counter
- CVE-2025-49264WordPress Cloud SAML SSO - Single Sign On Login <= 1.0.18 - Local File Inclusion VulnerabilityCloud Infrastructure Services Cloud SAML SSO - Single Sign…
- CVE-2025-49267WordPress Frontend Admin by DynamiApps plugin <= 3.28.3 - SQL Injection vulnerabilityShabti Kaplan Frontend Admin by DynamiApps
- CVE-2025-49271WordPress GravityWP - Merge Tags <= 1.4.4 - Local File Inclusion VulnerabilityGravityWP - Merge Tags
- CVE-2025-49869WordPress Eventin Plugin <= 4.0.31 - PHP Object Injection VulnerabilityArraytics Eventin
- CVE-2025-52716WordPress WP REST Cache <= 2025.1.0 - Local File Inclusion VulnerabilityAcato WP REST Cache
- CVE-2025-52728WordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion VulnerabilityWebCodingPlace Responsive Posts Carousel Pro
- CVE-2025-52731WordPress WordPress Event Manager, Event Calendar and Booking Plugin Plugin <= 4.0.24 - Arbitrary Content Deletion Vulnerabilitythemefunction WordPress Event Manager, Event Calendar and B…
- CVE-2025-52732WordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion VulnerabilityRealMag777 GMap Targeting
- CVE-2025-52775WordPress Project Cost Calculator Plugin <= 1.0.0 - Broken Access Control VulnerabilityRonik@UnlimitedWP Project Cost Calculator
- CVE-2025-52785WordPress SMM API plugin <= 6.0.31 - Broken Access Control vulnerabilitysoftnwords SMM API
- CVE-2025-52788WordPress CaptionPix <= 1.8 - Cross Site Scripting (XSS) VulnerabilityRussell Jamieson CaptionPix
- CVE-2025-52800WordPress The E-Commerce ERP <= 2.1.1.3 - Broken Access Control VulnerabilityUnity Business Technology Pty The E-Commerce ERP
- CVE-2025-52801WordPress TheBooking Plugin <= 1.4.4 - Broken Access Control VulnerabilityVonStroheim TheBooking
- CVE-2025-52806WordPress JobSearch Plugin < 3.0.8 - Local File Inclusion Vulnerabilityeyecix JobSearch
- CVE-2025-52820WordPress WooCommerce Point Of Sale (POS) <= 1.4 - SQL Injection Vulnerabilityinfosoftplugin WooCommerce Point Of Sale
- CVE-2025-52823WordPress Cube Portfolio Plugin <= 1.16.8 - SQL Injection Vulnerabilityovatheme Cube Portfolio
- CVE-2025-48862Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted whenBosch Rexroth AG ctrlX OS - Setup
- CVE-2025-48860A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated (low privileged) attacker to gain remoteBosch Rexroth AG ctrlX OS - Setup
- CVE-2025-54472Apache bRPC: Redis Parser Remote Denial of ServiceApache Software Foundation Apache bRPC
- CVE-2025-27388Arbitrary URL Loading in WebView Leading to Token Leakage RiskOPPO HEALTH APP
- CVE-2025-8949D-Link DIR-825 httpd ping_response.cgi get_ping_app_stat stack-based overflowD-Link DIR-825
- CVE-2025-8940Tenda AC20 saveParentControlInfo strcpy buffer overflowTenda AC20
- CVE-2025-8939Tenda AC20 WifiGuestSet buffer overflowTenda AC20
- CVE-2024-7402Netskope Client Configuration Tampering with Local MITMNetskope Client
- CVE-2023-43692An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later).
- CVE-2024-53945The KuWFi 4G AC900 LTE router 1.0.13 is vulnerable to command injection on the HTTP API endpoints /goform/formMultiApnSetting and /goform/at
- CVE-2024-53946The KuWFi 4G LTE AC900 router 1.0.13 is vulnerable to Cross-Site Request Forgery (CSRF) on its web management interface.
- CVE-2025-51986An issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12 allowing attackers to reach an infinite lo
Medium, low and unrated 186
- CVE-2025-8989SourceCodester COVID 19 Testing Management System edit-phlebotomist.php sql injectionSourceCodester COVID 19 Testing Management System
- CVE-2025-8988SourceCodester COVID 19 Testing Management System bwdates-report-result.php sql injectionSourceCodester COVID 19 Testing Management System
- CVE-2025-8987SourceCodester COVID 19 Testing Management System test-details.php sql injectionSourceCodester COVID 19 Testing Management System
- CVE-2025-31987HCL Connections Docs is vulnerable to a Denial of Service (DoS) attackHCL Software Connections Docs
- CVE-2025-8986SourceCodester COVID 19 Testing Management System search-report-result.php sql injectionSourceCodester COVID 19 Testing Management System
- CVE-2025-8985SourceCodester COVID 19 Testing Management System profile.php sql injectionSourceCodester COVID 19 Testing Management System
- CVE-2025-8984itsourcecode Online Tour and Travel Management System expense_category.php sql injectionitsourcecode Online Tour and Travel Management System
- CVE-2025-8983itsourcecode Online Tour and Travel Management System expense.php sql injectionitsourcecode Online Tour and Travel Management System
- CVE-2025-8982itsourcecode Online Tour and Travel Management System currency.php sql injectionitsourcecode Online Tour and Travel Management System
- CVE-2025-8981itsourcecode Online Tour and Travel Management System payment.php sql injectionitsourcecode Online Tour and Travel Management System
- CVE-2025-8976givanz Vvveb Endpoint post cross site scriptinggivanz Vvveb
- CVE-2025-8975givanz Vvveb edit.tpl cross site scriptinggivanz Vvveb
- CVE-2025-52767WordPress NetInsight Analytics Implementation Plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) Vulnerabilitylisensee NetInsight Analytics Implementation Plugin
- CVE-2025-52769WordPress flexo-social-gallery Plugin <= 1.0006 - Cross Site Request Forgery (CSRF) Vulnerabilityflexostudio flexo-social-gallery
- CVE-2025-52771WordPress Video Expander Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerabilitybcupham Video Expander
- CVE-2025-53219WordPress WP-Database-Optimizer-Tools Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerabilitypl4g4 WP-Database-Optimizer-Tools
- CVE-2025-53221WordPress CodeablePress plugin <= 1.0.2 - Broken Access Control vulnerabilityCodeablePress
- CVE-2025-53241WordPress Simplified plugin <= 1.0.11 - Server Side Request Forgery (SSRF) vulnerabilitykodeshpa Simplified
- CVE-2025-53249WordPress Build App Online Plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) Vulnerabilityhakeemnala Build App Online
- CVE-2025-53330WordPress WP Rentals theme <= 3.16.1 - Cross Site Scripting (XSS) vulnerabilityWpEstate WP Rentals
- CVE-2025-53341WordPress Stratus theme <= 4.2.5 - Broken Access Control vulnerabilityPixel Makers Creative App, SaaS & Software Startup Tech The…
- CVE-2025-53342WordPress Modernize Theme <= 3.4.0 - Cross Site Scripting (XSS) VulnerabilityGoodLayers Modernize
- CVE-2025-53343WordPress Modernize Theme <= 3.4.0 - Broken Access Control VulnerabilityGoodLayers Modernize
- CVE-2025-53347WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) VulnerabilityLaborator Kalium
- CVE-2025-53581WordPress RSS Feed Pro Plugin <= 1.1.8 - Cross Site Scripting (XSS) Vulnerabilityartiosmedia RSS Feed Pro
- CVE-2025-53582WordPress WordLift Plugin <= 3.54.5 - Cross Site Scripting (XSS) VulnerabilityWordLift
- CVE-2025-54054WordPress 12 Step Meeting List Plugin <= 3.18.3 - Cross Site Scripting (XSS) VulnerabilityAA Web Servant 12 Step Meeting List
- CVE-2025-54708WordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) VulnerabilitybPlugins B Blocks
- CVE-2025-54712WordPress Easy Elementor Addons Plugin <= 2.2.7 - Broken Access Control Vulnerabilityhashthemes Easy Elementor Addons
- CVE-2025-54715WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download VulnerabilityDmitry V. (CEO of "UKR Solution") Barcode Scanner with Inve…
- CVE-2025-54717WordPress WP Membership Plugin <= 1.6.3 - Settings Change Vulnerabilitye-plugins WP Membership
- CVE-2025-54727WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Scripting (XSS) VulnerabilityCreativeMindsSolutions CM On Demand Search And Replace
- CVE-2025-54728WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) VulnerabilityCreativeMindsSolutions CM On Demand Search And Replace
- CVE-2025-54729WordPress Webba Booking Plugin <= 6.0.5 - Cross Site Scripting (XSS) VulnerabilityWebba Appointment Booking Webba Booking
- CVE-2025-54730WordPress Embedder for Google Reviews Plugin <= 1.7.3 - Broken Access Control VulnerabilityPARETO Digital Embedder for Google Reviews
- CVE-2025-54732WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) VulnerabilityShahjada WPDM – Premium Packages
- CVE-2025-54736WordPress Savoy Theme <= 3.0.8 - Sensitive Data Exposure VulnerabilityNordicMade Savoy
- CVE-2025-54739WordPress Nexter Blocks Plugin <= 4.5.4 - Broken Access Control VulnerabilityPOSIMYTH Nexter Blocks
- CVE-2025-54740WordPress Print My Blog Plugin <= 3.27.9 - Cross Site Scripting (XSS) VulnerabilityMichael Nelson Print My Blog
- CVE-2025-54746WordPress Shortcode Redirect Plugin <= 1.0.02 - Cross Site Scripting (XSS) Vulnerabilitycartpauj Shortcode Redirect
- CVE-2025-54747WordPress Templatera Plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerabilitywpbakery Templatera
- CVE-2025-54749WordPress JetProductGallery Plugin <= 2.2.0.2 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetProductGallery
- CVE-2025-55709WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) VulnerabilityVisual Composer Website Builder
- CVE-2025-55710WordPress TaxoPress Plugin <= 3.37.2 - Sensitive Data Exposure VulnerabilitySteve Burge TaxoPress
- CVE-2025-55711WordPress WP Table Builder Plugin <= 2.0.12 - Cross Site Scripting (XSS) VulnerabilityWP Table Builder
- CVE-2025-55712WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 6.3.13 - Broken Access Control VulnerabilityPOSIMYTH The Plus Addons for Elementor Page Builder Lite
- CVE-2025-55713WordPress Blocksy Theme <= 2.1.6 - Cross Site Scripting (XSS) Vulnerabilitycreativethemeshq Blocksy
- CVE-2025-55714WordPress JetElements For Elementor Plugin <= 2.7.9 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetElements For Elementor
- CVE-2025-55716WordPress WP Statistics Plugin <= 14.15 - Broken Access Control VulnerabilityVeronaLabs WP Statistics
- CVE-2025-21110Dell Data Lakehouse, versions prior to 1.5.0.0, contains an Execution with Unnecessary Privileges vulnerability.Dell Data Lakehouse
- CVE-2025-8974linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentialslinlinjava litemall
- CVE-2025-8973SourceCodester Cashier Queuing System Actions.php sql injectionSourceCodester Cashier Queuing System
- CVE-2025-8972itsourcecode Online Tour and Travel Management System page-login.php sql injectionitsourcecode Online Tour and Travel Management System
- CVE-2024-37945WordPress WPBITS Addons For Elementor plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilityWPBITS Addons For Elementor Page Builder
- CVE-2025-8971itsourcecode Online Tour and Travel Management System travellers.php sql injectionitsourcecode Online Tour and Travel Management System
- CVE-2025-8970itsourcecode Online Tour and Travel Management System booking.php sql injectionitsourcecode Online Tour and Travel Management System
- CVE-2025-20220A vulnerability in the CLI of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) SoftwareCisco Firepower Management Center · Cisco Firepower Threat…
- CVE-2025-8969itsourcecode Online Tour and Travel Management System approve_user.php sql injectionitsourcecode Online Tour and Travel Management System
- CVE-2025-8968itsourcecode Online Tour and Travel Management System disapprove_user.php sql injectionitsourcecode Online Tour and Travel Management System
- CVE-2025-20306Cisco Secure Firewall Management Center Software Command Injection VulnerabilityCisco Firepower Management Center
- CVE-2025-20302Cisco Secure Firewall Management Center Software Authorization Bypass VulnerabilityCisco Firepower Management Center
- CVE-2025-20301Cisco Secure Firewall Management Center Software Authorization Bypass VulnerabilityCisco Firepower Management Center
- CVE-2025-20268Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass VulnerabilityCisco Firepower Threat Defense Software
- CVE-2025-20254A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software anCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20252A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software anCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20237A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software Cisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20238A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software Cisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20225A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive SecuCisco IOS · Cisco Adaptive Security Appliance (ASA) Soft… +1
- CVE-2025-20235Cisco Secure Firewall Management Center Software Cross-Site Scripting VulnerabilityCisco Firepower Management Center
- CVE-2025-20224A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software anCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20219Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Access Control Bypass VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-20218Cisco Secure Firepower Management Center Software XPATH Injection VulnerabilityCisco Firepower Management Center
- CVE-2025-20135Cisco Adaptive Security Appliance and Firepower Threat Defense Software DHCP Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2025-9043The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploitSeagate Toolkit
- CVE-2025-9039Information Disclosure in Amazon ECS Container AgentAmazon ECS · github.com/aws/amazon-ecs-agent
- CVE-2025-8967itsourcecode Online Tour and Travel Management System packages.php sql injectionitsourcecode Online Tour and Travel Management System
- CVE-2025-54389AIDE improper output neutralization vulnerabilityaide
- CVE-2025-54409AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS)aide
- CVE-2025-33142IBM WebSphere Application Server information disclosureIBM WebSphere Application Server
- CVE-2025-36047IBM WebSphere Application Server Liberty denial of serviceIBM WebSphere Application Server Liberty
- CVE-2025-8966itsourcecode Online Tour and Travel Management System tax.php sql injectionitsourcecode Online Tour and Travel Management System
- CVE-2025-8965linlinjava litemall Endpoint AdminStorageController.java create unrestricted uploadlinlinjava litemall
- CVE-2025-53631flaskBlog XSS Vulnerability in postContentDogukanUrker flaskBlog
- CVE-2025-8964code-projects Hostel Management System Login hostel_manage.exe improper authenticationcode-projects Hostel Management System
- CVE-2025-36613SupportAssist for Home PCs versions 4.6.3 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain(s) an Incorrect PriDell SupportAssist for Home PCs
- CVE-2025-36612SupportAssist for Business PCs, version(s) 4.5.3 and prior, contain(s) an Incorrect Privilege Assignment vulnerability.Dell SupportAssist for Business PCs
- CVE-2025-38738SupportAssist for Home PCs Installer exe version(s) 4.8.2.29006 and prior, contain(s) an Incorrect Privilege Assignment vulnerability in theDell SupportAssist for Home PCs
- CVE-2025-8962code-projects Hostel Management System Login Form hostel_manage.exe stack-based overflowcode-projects Hostel Management System
- CVE-2025-38745Dell OpenManage Enterprise, versions 3.10, 4.0, 4.1, and 4.2, contains an Insertion of Sensitive Information into Log File vulnerability in Dell OpenManage Enterprise
- CVE-2025-26484Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability.Dell CloudLink
- CVE-2025-36581Dell PowerEdge Platform version(s) 14G AMD BIOS v1.25.0 and prior, contain(s) an Access of Memory Location After End of Buffer vulnerabilityDell PowerEdge
- CVE-2025-55675Apache Superset: Incorrect datasource authorization on REST APIApache Software Foundation Apache Superset · apache-superset
- CVE-2025-55674Apache Superset: Improper SQL authorisation, parse not checking for specific engine functionsApache Software Foundation Apache Superset · apache-superset
- CVE-2025-55672Apache Superset: Stored XSS on charts metadataApache Software Foundation Apache Superset · apache-superset
- CVE-2025-55673Apache Superset: Metadata exposure in embedded chartsApache Software Foundation Apache Superset · apache-superset
- CVE-2025-8963jeecgboot JimuReport Data Large Screen Template testConnection deserializationjeecgboot JimuReport
- CVE-2025-8713PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child tablePostgreSQL
- CVE-2025-8961LibTIFF tiffcrop tiffcrop.c main memory corruptionLibTIFF
- CVE-2025-8960Campcodes Online Flight Booking Management System save_airlines.php sql injectionCampcodes Online Flight Booking Management System
- CVE-2025-54706WordPress Magical Posts Display Plugin plugin <= 1.2.52 - Cross Site Scripting (XSS) VulnerabilityNoor Alam Magical Posts Display
- CVE-2025-54705WordPress WpEvently plugin <= 4.4.6 - Broken Access Control vulnerabilitymagepeopleteam WpEvently
- CVE-2025-54704WordPress Easy Elementor Addons plugin <= 2.2.6 - Cross Site Scripting (XSS) Vulnerabilityhashthemes Easy Elementor Addons
- CVE-2025-54703WordPress Integrate Google Drive plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) vulnerabilityprinceahmed Integrate Google Drive
- CVE-2025-54702WordPress Ebook Store Plugin plugin <= 5.8013 - Cross Site Request Forgery (CSRF) Vulnerabilitymotov.net Ebook Store
- CVE-2025-54699WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) VulnerabilityMasteriyo - LMS
- CVE-2025-54698WordPress Classified Listing Plugin plugin <= 5.0.0 - Content Injection VulnerabilityRadiusTheme Classified Listing
- CVE-2025-54696WordPress WPFunnels plugin <= 3.5.26 - Cross Site Scripting (XSS) vulnerabilityWPFunnels
- CVE-2025-54695WordPress HT Mega Plugin plugin <= 2.9.0 - Broken Access Control VulnerabilityDevItems HT Mega
- CVE-2025-54694WordPress Button Block Plugin plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) VulnerabilitybPlugins Button Block
- CVE-2025-54691WordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) VulnerabilityStylemix Motors
- CVE-2025-54688WordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetEngine
- CVE-2025-54687WordPress JetTabs Plugin plugin <= 2.2.9.1 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetTabs
- CVE-2025-54685WordPress SureDash Plugin <= 1.1.0 - Sensitive Data Exposure VulnerabilityBrainstorm Force SureDash
- CVE-2025-54684WordPress Integration for Contact Form 7 and Constant Contact Plugin plugin <= 1.1.7 - Cross Site Scripting (XSS) VulnerabilityCRM Perks Integration for Contact Form 7 and Constant Conta…
- CVE-2025-54683WordPress WP Modal Popup with Cookie Integration Plugin plugin <= 2.4 - Cross Site Scripting (XSS) VulnerabilityAstoundify WP Modal Popup with Cookie Integration
- CVE-2025-54682WordPress Connector for Gravity Forms and Google Sheets Plugin plugin <= 1.2.4 - Cross Site Request Forgery (CSRF) VulnerabilityCRM Perks Connector for Gravity Forms and Google Sheets
- CVE-2025-54681WordPress Connector for Gravity Forms and Google Sheets Plugin plugin <= 1.2.4 - Open Redirection VulnerabilityCRM Perks Connector for Gravity Forms and Google Sheets
- CVE-2025-54680WordPress Blogger Buzz Theme theme <= 1.2.6 - Cross Site Scripting (XSS) Vulnerabilitysparklewpthemes Blogger Buzz
- CVE-2025-54676WordPress Online Booking & Scheduling Calendar for by vcita Plugin plugin <= 4.5.3 - Cross Site Scripting (XSS) VulnerabilityOnline Booking & Scheduling Calendar for WordPress by vcita
- CVE-2025-54675WordPress YITH WooCommerce Popup Plugin plugin <= 1.48.0 - Cross Site Request Forgery (CSRF) VulnerabilityYITHEMES YITH WooCommerce Popup
- CVE-2025-54674WordPress Product Configurator for WooCommerce Plugin plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) Vulnerabilitymklacroix Product Configurator for WooCommerce
- CVE-2025-54673WordPress Chartify plugin <= 3.5.3 - Cross Site Request Forgery (CSRF) vulnerabilityAys Pro Chartify
- CVE-2025-54672WordPress Photo Engine Plugin plugin <= 6.4.3 - Cross Site Request Forgery (CSRF) VulnerabilityJordy Meow Photo Engine
- CVE-2025-54671WordPress oik plugin <= 4.15.2 - Cross Site Request Forgery (CSRF) vulnerabilitybobbingwide oik
- CVE-2025-54668WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) VulnerabilitySaad Iqbal myCred
- CVE-2025-54667WordPress myCred plugin <= 2.9.4.3 - Race Condition VulnerabilitySaad Iqbal myCred
- CVE-2025-28962WordPress Advanced Google Universal Analytics plugin <= 1.0.3 - Broken Access Control to Sensitive Data Exposure vulnerabilitystefanoai Advanced Google Universal Analytics
- CVE-2025-28987WordPress PressForward <= 5.9.4 - Server Side Request Forgery (SSRF) vulnerabilityPressForward
- CVE-2025-30993WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.7 - Broken Access Control VulnerabilityVillaTheme Thank You Page Customizer for WooCommerce
- CVE-2025-39483WordPress Eventer plugin < 3.9.9.1 - Content Injection vulnerabilityimithemes Eventer
- CVE-2025-47610WordPress WooCommerce Fortnox Integration <= 4.5.6 - Cross Site Scripting (XSS) VulnerabilityWetail WooCommerce Fortnox Integration
- CVE-2025-49047WordPress DigitalOcean Spaces Sync plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerabilitykeeross DigitalOcean Spaces Sync
- CVE-2025-49048WordPress Inspectlet – User Session Recording and Heatmaps plugin <= 2.0 - Cross Site Scripting (XSS) vulnerabilityInspectlet – User Session Recording and Heatmaps
- CVE-2025-49051WordPress Hide Text Shortcode plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilitybiscia7 Hide Text Shortcode
- CVE-2025-49052WordPress Netease Music plugin <= 3.2.1 - Broken Access Control vulnerabilityDariolee Netease Music
- CVE-2025-49053WordPress WP Airdrop Manager plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilitykadesthemes WP Airdrop Manager
- CVE-2025-49061WordPress Porn Videos Embed plugin <= 0.9.1 - Cross Site Scripting (XSS) vulnerabilityperteus Porn Videos Embed
- CVE-2025-49433WordPress Supermalink <= 1.1 - Cross Site Scripting (XSS) VulnerabilityThanhD Supermalink
- CVE-2025-49437WordPress WP LOL Rotation <= 1.0 - Cross Site Scripting (XSS) Vulnerabilityworstguy WP LOL Rotation
- CVE-2025-50029WordPress AI Tools <= 4.0.7 - Arbitrary Content Deletion VulnerabilityAshish AI Tools
- CVE-2025-50031WordPress DB Backup <= 6.0 - Broken Access Control Vulnerabilitysyedamirhussain91 DB Backup
- CVE-2025-50040WordPress CF7 Spreadsheets Plugin <= 2.3.2 - Cross Site Scripting (XSS) Vulnerabilitymoshensky CF7 Spreadsheets
- CVE-2025-52712WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal VulnerabilityPost and Page Builder by BoldGrid
- CVE-2025-52721WordPress Global Gallery Plugin <= 9.2.3 - Broken Access Control VulnerabilityLCweb Global Gallery
- CVE-2025-52730WordPress WordPress Event Manager, Event Calendar and Booking Plugin Plugin <= 4.0.24 - Cross Site Scripting (XSS) Vulnerabilitythemefunction WordPress Event Manager, Event Calendar and B…
- CVE-2025-8957Campcodes Online Flight Booking Management System flights.php sql injectionCampcodes Online Flight Booking Management System
- CVE-2025-8956D-Link DIR‑818L ssdpcgi cgibin getenv command injectionD-Link DIR‑818L
- CVE-2025-7761Reflected XSS in Lepszy BIPAkcess-Net Lepszy BIP
- CVE-2025-8955PHPGurukul Hospital Management System edit-doctor.php sql injectionPHPGurukul Hospital Management System
- CVE-2025-48861A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract inBosch Rexroth AG ctrlX OS - Setup
- CVE-2025-8954PHPGurukul Hospital Management System doctor-specilization.php sql injectionPHPGurukul Hospital Management System
- CVE-2025-8953SourceCodester COVID 19 Testing Management System check_availability.php sql injectionSourceCodester COVID 19 Testing Management System
- CVE-2025-5998PPWP < 1.9.11 - Subscriber+ Access Bypass via REST APIPPWP – Password Protect Pages
- CVE-2025-8952Campcodes Online Flight Booking Management System Login ajax.php sql injectionCampcodes Online Flight Booking Management System
- CVE-2025-8951PHPGurukul Teachers Record Management System search.php sql injectionPHPGurukul Teachers Record Management System
- CVE-2025-8950Campcodes Online Recruitment Management System index.php sql injectionCampcodes Online Recruitment Management System
- CVE-2025-8948projectworlds Visitor Management System front.php sql injectionprojectworlds Visitor Management System
- CVE-2025-8947projectworlds Visitor Management System query_data.php sql injectionprojectworlds Visitor Management System
- CVE-2025-8946projectworlds Online Notes Sharing Platform login.php sql injectionprojectworlds Online Notes Sharing Platform
- CVE-2025-8046Injection Guard < 1.2.8 - Reflected XSS via $_SERVER['REQUEST_URI']Injection Guard
- CVE-2025-7808WP Shopify < 1.5.4 - Reflected XSSWP Shopify
- CVE-2025-6790QSM < 10.2.3 - Template Creation via CSRFQuiz and Survey Master
- CVE-2025-3414Structured Content < 1.7.0 - Contributor Stored XSSStructured Content (JSON-LD) #wpsc
- CVE-2025-8938TOTOLINK N350R Telnet Service formSysTel backdoorTOTOLINK N350R
- CVE-2025-5942Heap Overflow in Netskope Endpoint DLP DriverNetskope Client
- CVE-2025-0309Netskope Client Local Elevation of PrivilegesNetskope Client
- CVE-2025-5941Out-of-Bounds Read Vulnerability in Netskope ClientNetskope Client
- CVE-2025-8937TOTOLINK N350R formSysCmd command injectionTOTOLINK N350R
- CVE-2025-89361000 Projects Sales Management System dordupdate.php sql injection1000 Projects Sales Management System
- CVE-2025-89351000 Projects Sales Management System custcmp.php sql injection1000 Projects Sales Management System
- CVE-2025-89341000 Projects Sales Management System sales.php cross site scripting1000 Projects Sales Management System
- CVE-2025-89331000 Projects Sales Management System sales.php cross site scripting1000 Projects Sales Management System
- CVE-2025-89321000 Projects Sales Management System sales.php sql injection1000 Projects Sales Management System
- CVE-2025-8931code-projects Medical Store Management System ChangePassword.java sql injectioncode-projects Medical Store Management System
- CVE-2025-8930code-projects Medical Store Management System Update Company UpdateCompany.java sql injectioncode-projects Medical Store Management System
- CVE-2023-43683An issue was discovered in Malwarebytes 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later).
- CVE-2023-43687An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later).
- CVE-2023-43694An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before (and Nebula 2020-10-21 and later).
- CVE-2025-27846In ESPEC North America Web Controller 3 before 3.3.8, an attacker with physical access can gain elevated privileges because GRUB and the BIO
- CVE-2025-27847In ESPEC North America Web Controller 3 before 3.3.8, /api/v4/auth/ users session privileges are not revoked on logout.
- CVE-2025-50515An issue was discovered in phome Empirebak 2010 in ebak2008/upload/class/config.php allowing attackers to execute arbitrary code when the co
- CVE-2025-50817A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py.
- CVE-2025-50861The Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible wit
- CVE-2025-50862The Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB
- CVE-2025-51965OURPHP thru 8.6.1 is vulnerable to Cross-Site Scripting (XSS) via the "Name" field of the "Complete Profile" functionality under the "My Use
- CVE-2025-52335EyouCMS 1.7.3 is vulnerale to Cross Site Scripting (XSS) in index.php, which can be exploited to obtain sensitive information.