CVE Database

117275+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2025-4912
5.4 MEDIUM

A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of …

May 19, 2025
CVE-2025-4911
7.3 HIGH

A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/view-foreigner-ticket.php. The …

May 19, 2025
CVE-2025-2892
6.4 MEDIUM

The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to Stored Cross-Site Scripting …

May 19, 2025
CVE-2025-4910
7.3 HIGH

A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the file …

May 19, 2025
CVE-2025-4909
7.3 HIGH

A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of …

May 19, 2025
CVE-2025-4908
7.3 HIGH

A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1. This affects an unknown part of the file /expense-datewise-reports-detailed.php. The …

May 19, 2025
CVE-2025-4907
7.3 HIGH

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality …

May 19, 2025
CVE-2025-4906
7.3 HIGH

A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. …

May 19, 2025
CVE-2025-4905
5.3 MEDIUM

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function load_qc_pickl of the file basestation3/QC.py. The …

May 19, 2025
CVE-2025-23167
6.5 MEDIUM

A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, …

May 19, 2025
CVE-2025-23166
7.5 HIGH

The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations …

May 19, 2025
CVE-2025-23165
3.7 LOW

In Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in `uv_fs_s.file`: a UTF-16 path buffer is allocated but subsequently overwritten when …

May 19, 2025
CVE-2025-23164
4.4 MEDIUM

A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to maintain …

May 19, 2025
CVE-2025-23123
10.0 CRITICAL

A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the …

May 19, 2025
CVE-2025-23122

Rejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2025-23165.

May 19, 2025
CVE-2025-4904
5.3 MEDIUM

A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. This vulnerability affects the function sub_41F0FC of the file /H5/webgl.data. The …

May 19, 2025
CVE-2025-4903
5.3 MEDIUM

A vulnerability, which was classified as critical, was found in D-Link DI-7003GV2 24.04.18D1 R(68125). This affects the function sub_41F4F0 of the file /H5/webgl.asp?tggl_port=0&remote_management=0&http_passwd=game&exec_service=admin-restart. The manipulation …

May 19, 2025
CVE-2025-4902
5.3 MEDIUM

A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this issue is the function sub_48F4F0 of the …

May 19, 2025
CVE-2025-4901
4.3 MEDIUM

A vulnerability classified as problematic was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this vulnerability is the function sub_41E304 of the file /H5/state_view.data of …

May 19, 2025
CVE-2025-4900
7.3 HIGH

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/payment.php. The …

May 18, 2025
CVE-2025-4899
7.3 HIGH

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the …

May 18, 2025
CVE-2025-4898
5.4 MEDIUM

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects the function unlink of the …

May 18, 2025
CVE-2025-4897
8.8 HIGH

A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the …

May 18, 2025
CVE-2025-4896
8.8 HIGH

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/UserCongratulationsExec. The …

May 18, 2025
CVE-2025-4895
7.3 HIGH

A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file …

May 18, 2025
CVE-2025-4894
3.7 LOW

A vulnerability classified as problematic was found in calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15. This vulnerability affects the function gen_rsa_keys of the file common/crypto.py. The manipulation …

May 18, 2025
CVE-2025-4893
6.3 MEDIUM

A vulnerability classified as critical has been found in jammy928 CoinExchange_CryptoExchange_Java up to 8adf508b996020d3efbeeb2473d7235bd01436fa. This affects the function uploadLocalImage of the file /CoinExchange_CryptoExchange_Java-master/00_framework/core/src/main/java/com/bizzan/bitrade/util/UploadFileUtil.java of the …

May 18, 2025
CVE-2025-4892
5.3 MEDIUM

A vulnerability was found in code-projects Police Station Management System 1.0. It has been declared as critical. Affected by this vulnerability is the function criminal::remove …

May 18, 2025
CVE-2025-4891
5.3 MEDIUM

A vulnerability was found in code-projects Police Station Management System 1.0. It has been classified as critical. Affected is the function criminal::display of the file …

May 18, 2025
CVE-2025-4890
5.3 MEDIUM

A vulnerability was found in code-projects Tourism Management System 1.0 and classified as critical. This issue affects the function LoginUser of the component Login User. …

May 18, 2025
CVE-2025-4889
5.3 MEDIUM

A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User …

May 18, 2025
CVE-2025-4888
5.3 MEDIUM

A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. This affects the function medicineType::take_order of the component Add Order …

May 18, 2025
CVE-2025-4887
4.3 MEDIUM

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Student Clearance System 1.0. Affected by this issue is some unknown functionality. …

May 18, 2025
CVE-2025-4886
7.3 HIGH

A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file …

May 18, 2025
CVE-2025-4885
7.3 HIGH

A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/product_add.php. The …

May 18, 2025
CVE-2025-4884
7.3 HIGH

A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file …

May 18, 2025
CVE-2025-4883
7.2 HIGH

A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been declared as critical. This vulnerability affects the function ctxz_asp of the file /ctxz.asp of …

May 18, 2025
CVE-2025-48219
3.5 LOW

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS (IP Multimedia Subsystem) call and then reading …

May 18, 2025
CVE-2025-4882
7.3 HIGH

A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/team_update.php. …

May 18, 2025
CVE-2025-4881
7.3 HIGH

A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file …

May 18, 2025
CVE-2025-4880
7.3 HIGH

A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file …

May 18, 2025
CVE-2025-4875
7.3 HIGH

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgot-password.php. …

May 18, 2025
CVE-2025-4874
7.3 HIGH

A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file …

May 18, 2025
CVE-2025-4873
7.3 HIGH

A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file …

May 18, 2025
CVE-2025-4872
7.3 HIGH

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component CCC Command Handler. …

May 18, 2025
CVE-2025-4871
7.3 HIGH

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST …

May 18, 2025
CVE-2025-4870
7.3 HIGH

A vulnerability classified as critical was found in itsourcecode Restaurant Management System 1.0. This vulnerability affects unknown code of the file /admin/menu_save.php. The manipulation of …

May 18, 2025
CVE-2025-4869
7.3 HIGH

A vulnerability classified as critical has been found in itsourcecode Restaurant Management System 1.0. This affects an unknown part of the file /admin/member_update.php. The manipulation …

May 18, 2025
CVE-2025-4868
6.3 MEDIUM

A vulnerability was found in merikbest ecommerce-spring-reactjs up to 464e610bb11cc2619cf6ce8212ccc2d1fd4277fd. It has been rated as critical. Affected by this issue is some unknown functionality of …

May 18, 2025
CVE-2025-4867
6.5 MEDIUM

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file …

May 18, 2025

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.