Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2025-0419 Cross-Site Scripting (XSS) in CVE-2025-0419 (CVE-2025-0419)
cross-site scripting in CVE-2025-0419 (CVE-2025-0419). Risk of unauthorized operations or information disclosure.
CVE-2025-57631 SQL Injection in sqli (CVE-2025-57631)
SQL injection in sqli (CVE-2025-57631). Successful exploitation can lead to full system takeover.
CVE-2025-56562 Vulnerability in dos (CVE-2025-56562)
vulnerability in dos (CVE-2025-56562). Risk of unauthorized operations or information disclosure.
CVE-2024-12796 Cross-Site Scripting (XSS) in CVE-2024-12796 (CVE-2024-12796)
cross-site scripting in CVE-2024-12796 (CVE-2024-12796). Risk of unauthorized operations or information disclosure.
CVE-2024-12913 SQL Injection in sqli (CVE-2024-12913)
SQL injection in sqli (CVE-2024-12913). Successful exploitation can lead to full system takeover.
CVE-2025-6575 Cross-Site Scripting (XSS) in dolusoft (CVE-2025-6575)
cross-site scripting in dolusoft (CVE-2025-6575). Risk of unauthorized operations or information disclosure.
CVE-2025-57145 Cross-Site Scripting (XSS) in phpgurukul (CVE-2025-57145)
cross-site scripting in phpgurukul (CVE-2025-57145). Risk of unauthorized operations or information disclosure.
CVE-2025-56289 Cross-Site Scripting (XSS) in fabian (CVE-2025-56289)
cross-site scripting in fabian (CVE-2025-56289). Risk of unauthorized operations or information disclosure.
CVE-2025-56293 Cross-Site Scripting (XSS) in fabian (CVE-2025-56293)
cross-site scripting in fabian (CVE-2025-56293). Risk of unauthorized operations or information disclosure.
CVE-2024-13149 SQL Injection in sqli (CVE-2024-13149)
SQL injection in sqli (CVE-2024-13149). Successful exploitation can lead to full system takeover.
CVE-2024-13174 SQL Injection in sqli (CVE-2024-13174)
SQL injection in sqli (CVE-2024-13174). Confidential information can be exposed externally.
CVE-2025-8276 Vulnerability in CVE-2025-8276 (CVE-2025-8276)
vulnerability in CVE-2025-8276 (CVE-2025-8276). Risk of unauthorized operations or information disclosure.
CVE-2025-7744 SQL Injection in sqli (CVE-2025-7744)
SQL injection in sqli (CVE-2025-7744). Successful exploitation can lead to full system takeover.
CVE-2025-7743 Vulnerability in privilege-escalation (CVE-2025-7743)
vulnerability in privilege-escalation (CVE-2025-7743). Successful exploitation can lead to full system takeover.
CVE-2025-4688 SQL Injection in sqli (CVE-2025-4688)
SQL injection in sqli (CVE-2025-4688). Successful exploitation can lead to full system takeover.
CVE-2025-2404 Cross-Site Scripting (XSS) in CVE-2025-2404 (CVE-2025-2404)
cross-site scripting in CVE-2025-2404 (CVE-2025-2404). Risk of unauthorized operations or information disclosure.
CVE-2025-6999 Vulnerability in CVE-2025-6999 (CVE-2025-6999)
vulnerability in CVE-2025-6999 (CVE-2025-6999). Risk of unauthorized operations or information disclosure.
CVE-2025-50892 Privilege Escalation in privilege-escalation (CVE-2025-50892)
vulnerability in privilege-escalation (CVE-2025-50892). Successful exploitation can lead to full system takeover.
CVE-2025-34177 Cross-Site Scripting (XSS) in pfsense (CVE-2025-34177)
cross-site scripting in pfsense (CVE-2025-34177). Risk of unauthorized operations or information disclosure.
CVE-2025-34178 Cross-Site Scripting (XSS) in pfsense (CVE-2025-34178)
cross-site scripting in pfsense (CVE-2025-34178). Risk of unauthorized operations or information disclosure.
CVE-2025-34176 Path Traversal in path-traversal (CVE-2025-34176)
path traversal in path-traversal (CVE-2025-34176). Risk of unauthorized operations or information disclosure.
CVE-2025-34175 Cross-Site Scripting (XSS) in pfsense (CVE-2025-34175)
cross-site scripting in pfsense (CVE-2025-34175). Risk of unauthorized operations or information disclosure.
CVE-2025-34173 Path Traversal in path-traversal (CVE-2025-34173)
path traversal in path-traversal (CVE-2025-34173). Risk of unauthorized operations or information disclosure.
CVE-2025-34172 Cross-Site Scripting (XSS) in pfsense (CVE-2025-34172)
cross-site scripting in pfsense (CVE-2025-34172). Risk of unauthorized operations or information disclosure.
CVE-2025-52277 Cross-Site Scripting (XSS) in yeswiki (CVE-2025-52277)
cross-site scripting in yeswiki (CVE-2025-52277). Risk of unauthorized operations or information disclosure.
CVE-2025-40798 Out-of-Bounds Read in dos (CVE-2025-40798)
vulnerability in dos (CVE-2025-40798). Risk of unauthorized operations or information disclosure.
CVE-2025-40795 Vulnerability in dos (CVE-2025-40795)
vulnerability in dos (CVE-2025-40795). Successful exploitation can lead to full system takeover.
CVE-2025-40796 Out-of-Bounds Read in dos (CVE-2025-40796)
vulnerability in dos (CVE-2025-40796). Risk of unauthorized operations or information disclosure.
CVE-2025-40797 Out-of-Bounds Read in dos (CVE-2025-40797)
vulnerability in dos (CVE-2025-40797). Risk of unauthorized operations or information disclosure.
CVE-2025-55849 SQL Injection in sqli (CVE-2025-55849)
SQL injection in sqli (CVE-2025-55849). Successful exploitation can lead to full system takeover.
CVE-2025-52161 Cross-Site Scripting (XSS) in scholl (CVE-2025-52161)
cross-site scripting in scholl (CVE-2025-52161). Successful exploitation can lead to full system takeover.
CVE-2025-58375 SQL Injection in sqli (CVE-2025-58375)
SQL injection in sqli (CVE-2025-58375). Confidential information can be exposed externally.
CVE-2025-8695 Cross-Site Scripting (XSS) in CVE-2025-8695 (CVE-2025-8695)
cross-site scripting in CVE-2025-8695 (CVE-2025-8695). Risk of unauthorized operations or information disclosure.
CVE-2025-2417 Vulnerability in CVE-2025-2417 (CVE-2025-2417)
vulnerability in CVE-2025-2417 (CVE-2025-2417). Confidential information can be exposed externally.
CVE-2025-2411 Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano...
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano...
CVE-2024-13073 Cross-Site Scripting (XSS) in CVE-2024-13073 (CVE-2024-13073)
cross-site scripting in CVE-2024-13073 (CVE-2024-13073). Risk of unauthorized operations or information disclosure.
CVE-2024-13071 Cross-Site Scripting (XSS) in CVE-2024-13071 (CVE-2024-13071)
cross-site scripting in CVE-2024-13071 (CVE-2024-13071). Risk of unauthorized operations or information disclosure.
CVE-2025-2416 Vulnerability in CVE-2025-2416 (CVE-2025-2416)
vulnerability in CVE-2025-2416 (CVE-2025-2416). Confidential information can be exposed externally.
CVE-2025-0878 Cross-Site Scripting (XSS) in CVE-2025-0878 (CVE-2025-0878)
cross-site scripting in CVE-2025-0878 (CVE-2025-0878). Risk of unauthorized operations or information disclosure.
CVE-2025-1740 Vulnerability in CVE-2025-1740 (CVE-2025-1740)
vulnerability in CVE-2025-1740 (CVE-2025-1740). Successful exploitation can lead to full system takeover.
CVE-2024-13064 Cross-Site Scripting (XSS) in CVE-2024-13064 (CVE-2024-13064)
cross-site scripting in CVE-2024-13064 (CVE-2024-13064). Risk of unauthorized operations or information disclosure.
CVE-2025-7039 Path Traversal in path-traversal (CVE-2025-7039)
path traversal in path-traversal (CVE-2025-7039). Risk of unauthorized operations or information disclosure.
CVE-2025-9784 Vulnerability in io.undertow:undertow-core (CVE-2025-9784)
vulnerability in io.undertow:undertow-core (CVE-2025-9784). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.20.Final` or later.
CVE-2025-2413 Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor...
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor...
CVE-2024-12974 Cross-Site Scripting (XSS) in CVE-2024-12974 (CVE-2024-12974)
cross-site scripting in CVE-2024-12974 (CVE-2024-12974). Risk of unauthorized operations or information disclosure.
CVE-2024-12972 Cross-Site Scripting (XSS) in CVE-2024-12972 (CVE-2024-12972)
cross-site scripting in CVE-2024-12972 (CVE-2024-12972). Risk of unauthorized operations or information disclosure.
CVE-2025-0610 Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request...
Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request...
CVE-2025-2412 Vulnerability in CVE-2025-2412 (CVE-2025-2412)
vulnerability in CVE-2025-2412 (CVE-2025-2412). Confidential information can be exposed externally.
CVE-2025-57819 KEV [KEV] SQL Injection in Sangoma freepbx (CVE-2025-57819)
SQL injection in Sangoma freepbx (CVE-2025-57819). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-8067 Out-of-Bounds Read in privilege-escalation (CVE-2025-8067)
vulnerability in privilege-escalation (CVE-2025-8067). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →