CVE Database

54420+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2025-6911
6.3 MEDIUM

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability affects unknown code of the file /manage-subjects.php. …

Jun 30, 2025
CVE-2025-2895
5.4 MEDIUM

IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, 2.3.4.1, and 2.3.4.1 iFix1 is vulnerable to HTML injection. A remote attacker could inject …

Jun 30, 2025
CVE-2023-47310
6.5 MEDIUM

A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute packets.

Jun 30, 2025
CVE-2025-6910
6.3 MEDIUM

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been classified as critical. This affects an unknown part of the file /session.php. …

Jun 30, 2025
CVE-2025-6909
6.3 MEDIUM

A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality …

Jun 30, 2025
CVE-2025-6908
6.3 MEDIUM

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file …

Jun 30, 2025
CVE-2025-4407
6.7 MEDIUM

Insufficient Session Expiration vulnerability in ABB Lite Panel Pro.This issue affects Lite Panel Pro: through 1.0.1.

Jun 30, 2025
CVE-2025-41439
6.1 MEDIUM

A reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help Documentation of RICOH Streamline NX. If this vulnerability is exploited, an arbitrary …

Jun 30, 2025
CVE-2025-6900
6.3 MEDIUM

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation …

Jun 30, 2025
CVE-2025-6899
6.3 MEDIUM

A vulnerability, which was classified as critical, was found in D-Link DI-7300G+ and DI-8200G 17.12.20A1/19.12.25A1. This affects an unknown part of the file msp_info.htm. The …

Jun 30, 2025
CVE-2025-40734
6.1 MEDIUM

Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through …

Jun 30, 2025
CVE-2025-40733
6.1 MEDIUM

Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through …

Jun 30, 2025
CVE-2025-6898
6.3 MEDIUM

A vulnerability, which was classified as critical, has been found in D-Link DI-7300G+ 19.12.25A1. Affected by this issue is some unknown functionality of the file …

Jun 30, 2025
CVE-2025-6897
5.5 MEDIUM

A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpd_debug.asp. The manipulation …

Jun 30, 2025
CVE-2025-38090
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/rio_cm.c: prevent possible heap overwrite In riocm_cdev_ioctl(RIO_CM_CHAN_SEND) -> cm_chan_msg_send() -> riocm_ch_send() cm_chan_msg_send() checks that userspace …

Jun 30, 2025
CVE-2025-38089
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tianshuo han reported a remotely-triggerable …

Jun 30, 2025
CVE-2025-6896
6.3 MEDIUM

A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of the file wget_test.asp. The manipulation of the …

Jun 30, 2025
CVE-2025-6890
6.3 MEDIUM

A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file …

Jun 30, 2025
CVE-2025-5730
4.3 MEDIUM

The Contact Form Plugin WordPress plugin before 1.1.29 does not sanitise and escape some of its settings, which could allow high privilege users such as …

Jun 30, 2025
CVE-2025-3745
6.3 MEDIUM

The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may …

Jun 30, 2025
CVE-2025-6884
6.3 MEDIUM

A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the file …

Jun 30, 2025
CVE-2025-6883
6.3 MEDIUM

A vulnerability classified as critical was found in code-projects Staff Audit System 1.0. This vulnerability affects unknown code of the file /update_index.php. The manipulation of …

Jun 30, 2025
CVE-2025-6880
6.3 MEDIUM

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit-tax.php. The …

Jun 30, 2025
CVE-2025-6879
6.3 MEDIUM

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the …

Jun 30, 2025
CVE-2025-6878
6.3 MEDIUM

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file …

Jun 30, 2025
CVE-2025-6877
6.3 MEDIUM

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file …

Jun 30, 2025
CVE-2025-6876
6.3 MEDIUM

A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the …

Jun 29, 2025
CVE-2025-6875
6.3 MEDIUM

A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of …

Jun 29, 2025
CVE-2025-6874
6.3 MEDIUM

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/add_subscribe.php. …

Jun 29, 2025
CVE-2025-6873
4.7 MEDIUM

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Company Website 1.0. This issue affects some unknown processing of the file …

Jun 29, 2025
CVE-2025-6872
4.7 MEDIUM

A vulnerability classified as critical was found in SourceCodester Simple Company Website 1.0. This vulnerability affects unknown code of the file /classes/SystemSettings.php?f=update_settings. The manipulation of …

Jun 29, 2025
CVE-2025-6870
4.7 MEDIUM

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of …

Jun 29, 2025
CVE-2025-6869
4.7 MEDIUM

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of …

Jun 29, 2025
CVE-2025-24292
6.8 MEDIUM

A misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate to Enterprise WiFi or VPN Server (l2tp and OpenVPN) using a …

Jun 29, 2025
CVE-2025-6868
4.7 MEDIUM

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/clients/manage.php. …

Jun 29, 2025
CVE-2025-6867
4.7 MEDIUM

A vulnerability was found in SourceCodester Simple Company Website 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/services/manage.php. The …

Jun 29, 2025
CVE-2025-6866
4.3 MEDIUM

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forum_downloadfile.php. The manipulation …

Jun 29, 2025
CVE-2025-6865
4.3 MEDIUM

A vulnerability, which was classified as problematic, was found in DaiCuo up to 1.3.13. This affects an unknown part of the file /admin.php/addon/index. The manipulation …

Jun 29, 2025
CVE-2025-6864
4.3 MEDIUM

A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2. Affected by this issue is some unknown functionality of the …

Jun 29, 2025
CVE-2025-6862
6.3 MEDIUM

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit_plan.php. The …

Jun 29, 2025
CVE-2025-6861
6.3 MEDIUM

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the …

Jun 29, 2025
CVE-2025-6860
6.3 MEDIUM

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file …

Jun 29, 2025
CVE-2025-6859
6.3 MEDIUM

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file …

Jun 29, 2025
CVE-2024-24915
6.1 MEDIUM

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.

Jun 29, 2025
CVE-2025-6855
5.5 MEDIUM

A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file …

Jun 29, 2025
CVE-2025-6854
4.3 MEDIUM

A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This vulnerability affects unknown code of the file /v1/files?purpose=assistants. The manipulation leads …

Jun 29, 2025
CVE-2025-6853
6.3 MEDIUM

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file /knowledge_base/upload_temp_docs of the …

Jun 29, 2025
CVE-2025-6850
6.3 MEDIUM

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file …

Jun 29, 2025
CVE-2025-6848
6.3 MEDIUM

A vulnerability, which was classified as critical, has been found in code-projects Simple Forum 1.0. This issue affects some unknown processing of the file /forum1.php. …

Jun 29, 2025
CVE-2025-6847
6.3 MEDIUM

A vulnerability classified as critical was found in code-projects Simple Forum 1.0. This vulnerability affects unknown code of the file /forum_edit.php. The manipulation of the …

Jun 29, 2025

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.