Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2025-0419 |
|
Cross-Site Scripting (XSS) in CVE-2025-0419 (CVE-2025-0419)
cross-site scripting in CVE-2025-0419 (CVE-2025-0419). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-57631 |
|
SQL Injection in sqli (CVE-2025-57631)
SQL injection in sqli (CVE-2025-57631). Successful exploitation can lead to full system takeover.
|
| CVE-2025-56562 |
|
Vulnerability in dos (CVE-2025-56562)
vulnerability in dos (CVE-2025-56562). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-12796 |
|
Cross-Site Scripting (XSS) in CVE-2024-12796 (CVE-2024-12796)
cross-site scripting in CVE-2024-12796 (CVE-2024-12796). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-12913 |
|
SQL Injection in sqli (CVE-2024-12913)
SQL injection in sqli (CVE-2024-12913). Successful exploitation can lead to full system takeover.
|
| CVE-2025-6575 |
|
Cross-Site Scripting (XSS) in dolusoft (CVE-2025-6575)
cross-site scripting in dolusoft (CVE-2025-6575). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-57145 |
|
Cross-Site Scripting (XSS) in phpgurukul (CVE-2025-57145)
cross-site scripting in phpgurukul (CVE-2025-57145). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-56289 |
|
Cross-Site Scripting (XSS) in fabian (CVE-2025-56289)
cross-site scripting in fabian (CVE-2025-56289). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-56293 |
|
Cross-Site Scripting (XSS) in fabian (CVE-2025-56293)
cross-site scripting in fabian (CVE-2025-56293). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-13149 |
|
SQL Injection in sqli (CVE-2024-13149)
SQL injection in sqli (CVE-2024-13149). Successful exploitation can lead to full system takeover.
|
| CVE-2024-13174 |
|
SQL Injection in sqli (CVE-2024-13174)
SQL injection in sqli (CVE-2024-13174). Confidential information can be exposed externally.
|
| CVE-2025-8276 |
|
Vulnerability in CVE-2025-8276 (CVE-2025-8276)
vulnerability in CVE-2025-8276 (CVE-2025-8276). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-7744 |
|
SQL Injection in sqli (CVE-2025-7744)
SQL injection in sqli (CVE-2025-7744). Successful exploitation can lead to full system takeover.
|
| CVE-2025-7743 |
|
Vulnerability in privilege-escalation (CVE-2025-7743)
vulnerability in privilege-escalation (CVE-2025-7743). Successful exploitation can lead to full system takeover.
|
| CVE-2025-4688 |
|
SQL Injection in sqli (CVE-2025-4688)
SQL injection in sqli (CVE-2025-4688). Successful exploitation can lead to full system takeover.
|
| CVE-2025-2404 |
|
Cross-Site Scripting (XSS) in CVE-2025-2404 (CVE-2025-2404)
cross-site scripting in CVE-2025-2404 (CVE-2025-2404). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-6999 |
|
Vulnerability in CVE-2025-6999 (CVE-2025-6999)
vulnerability in CVE-2025-6999 (CVE-2025-6999). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50892 |
|
Privilege Escalation in privilege-escalation (CVE-2025-50892)
vulnerability in privilege-escalation (CVE-2025-50892). Successful exploitation can lead to full system takeover.
|
| CVE-2025-34177 |
|
Cross-Site Scripting (XSS) in pfsense (CVE-2025-34177)
cross-site scripting in pfsense (CVE-2025-34177). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-34178 |
|
Cross-Site Scripting (XSS) in pfsense (CVE-2025-34178)
cross-site scripting in pfsense (CVE-2025-34178). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-34176 |
|
Path Traversal in path-traversal (CVE-2025-34176)
path traversal in path-traversal (CVE-2025-34176). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-34175 |
|
Cross-Site Scripting (XSS) in pfsense (CVE-2025-34175)
cross-site scripting in pfsense (CVE-2025-34175). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-34173 |
|
Path Traversal in path-traversal (CVE-2025-34173)
path traversal in path-traversal (CVE-2025-34173). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-34172 |
|
Cross-Site Scripting (XSS) in pfsense (CVE-2025-34172)
cross-site scripting in pfsense (CVE-2025-34172). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-52277 |
|
Cross-Site Scripting (XSS) in yeswiki (CVE-2025-52277)
cross-site scripting in yeswiki (CVE-2025-52277). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40798 |
|
Out-of-Bounds Read in dos (CVE-2025-40798)
vulnerability in dos (CVE-2025-40798). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40795 |
|
Vulnerability in dos (CVE-2025-40795)
vulnerability in dos (CVE-2025-40795). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40796 |
|
Out-of-Bounds Read in dos (CVE-2025-40796)
vulnerability in dos (CVE-2025-40796). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40797 |
|
Out-of-Bounds Read in dos (CVE-2025-40797)
vulnerability in dos (CVE-2025-40797). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-55849 |
|
SQL Injection in sqli (CVE-2025-55849)
SQL injection in sqli (CVE-2025-55849). Successful exploitation can lead to full system takeover.
|
| CVE-2025-52161 |
|
Cross-Site Scripting (XSS) in scholl (CVE-2025-52161)
cross-site scripting in scholl (CVE-2025-52161). Successful exploitation can lead to full system takeover.
|
| CVE-2025-58375 |
|
SQL Injection in sqli (CVE-2025-58375)
SQL injection in sqli (CVE-2025-58375). Confidential information can be exposed externally.
|
| CVE-2025-8695 |
|
Cross-Site Scripting (XSS) in CVE-2025-8695 (CVE-2025-8695)
cross-site scripting in CVE-2025-8695 (CVE-2025-8695). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-2417 |
|
Vulnerability in CVE-2025-2417 (CVE-2025-2417)
vulnerability in CVE-2025-2417 (CVE-2025-2417). Confidential information can be exposed externally.
|
| CVE-2025-2411 |
|
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano...
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano...
|
| CVE-2024-13073 |
|
Cross-Site Scripting (XSS) in CVE-2024-13073 (CVE-2024-13073)
cross-site scripting in CVE-2024-13073 (CVE-2024-13073). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-13071 |
|
Cross-Site Scripting (XSS) in CVE-2024-13071 (CVE-2024-13071)
cross-site scripting in CVE-2024-13071 (CVE-2024-13071). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-2416 |
|
Vulnerability in CVE-2025-2416 (CVE-2025-2416)
vulnerability in CVE-2025-2416 (CVE-2025-2416). Confidential information can be exposed externally.
|
| CVE-2025-0878 |
|
Cross-Site Scripting (XSS) in CVE-2025-0878 (CVE-2025-0878)
cross-site scripting in CVE-2025-0878 (CVE-2025-0878). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-1740 |
|
Vulnerability in CVE-2025-1740 (CVE-2025-1740)
vulnerability in CVE-2025-1740 (CVE-2025-1740). Successful exploitation can lead to full system takeover.
|
| CVE-2024-13064 |
|
Cross-Site Scripting (XSS) in CVE-2024-13064 (CVE-2024-13064)
cross-site scripting in CVE-2024-13064 (CVE-2024-13064). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-7039 |
|
Path Traversal in path-traversal (CVE-2025-7039)
path traversal in path-traversal (CVE-2025-7039). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-9784 |
|
Vulnerability in io.undertow:undertow-core (CVE-2025-9784)
vulnerability in io.undertow:undertow-core (CVE-2025-9784). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.20.Final` or later.
|
| CVE-2025-2413 |
|
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor...
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor...
|
| CVE-2024-12974 |
|
Cross-Site Scripting (XSS) in CVE-2024-12974 (CVE-2024-12974)
cross-site scripting in CVE-2024-12974 (CVE-2024-12974). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-12972 |
|
Cross-Site Scripting (XSS) in CVE-2024-12972 (CVE-2024-12972)
cross-site scripting in CVE-2024-12972 (CVE-2024-12972). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-0610 |
|
Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request...
Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request...
|
| CVE-2025-2412 |
|
Vulnerability in CVE-2025-2412 (CVE-2025-2412)
vulnerability in CVE-2025-2412 (CVE-2025-2412). Confidential information can be exposed externally.
|
| CVE-2025-57819 KEV |
|
[KEV] SQL Injection in Sangoma freepbx (CVE-2025-57819)
SQL injection in Sangoma freepbx (CVE-2025-57819). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2025-8067 |
|
Out-of-Bounds Read in privilege-escalation (CVE-2025-8067)
vulnerability in privilege-escalation (CVE-2025-8067). Risk of unauthorized operations or information disclosure.
|