Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2025-40306 |
|
Vulnerability in c (CVE-2025-40306)
vulnerability in c (CVE-2025-40306). Successful exploitation can lead to full system takeover. Exploitable via ``key``.
|
| CVE-2025-40320 |
|
Vulnerability in Kernel (CVE-2025-40320)
vulnerability in Kernel (CVE-2025-40320). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.6.117, 6.12.58, 6.17.8` or later.
|
| CVE-2025-40273 |
|
Vulnerability in c (CVE-2025-40273)
vulnerability in c (CVE-2025-40273). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40274 |
|
Vulnerability in c (CVE-2025-40274)
vulnerability in c (CVE-2025-40274). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40282 |
|
Vulnerability in c (CVE-2025-40282)
vulnerability in c (CVE-2025-40282). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40281 |
|
Vulnerability in c (CVE-2025-40281)
vulnerability in c (CVE-2025-40281). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40280 |
|
Vulnerability in c (CVE-2025-40280)
vulnerability in c (CVE-2025-40280). Successful exploitation can lead to full system takeover.
|
| CVE-2025-6946 |
|
Cross-Site Scripting (XSS) in watchguard (CVE-2025-6946)
cross-site scripting in watchguard (CVE-2025-6946). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-65945 |
|
Vulnerability in auth0 (CVE-2025-65945)
vulnerability in auth0 (CVE-2025-65945). Data can be tampered with by attackers.
|
| CVE-2025-40243 |
|
Vulnerability in c (CVE-2025-40243)
vulnerability in c (CVE-2025-40243). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40261 |
|
Vulnerability in c (CVE-2025-40261)
vulnerability in c (CVE-2025-40261). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40257 |
|
Vulnerability in Kernel (CVE-2025-40257)
vulnerability in Kernel (CVE-2025-40257). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.10.247, 5.15.197, 6.1.159, 6.6.118, 6.12.60, 6.17.10` or later.
|
| CVE-2025-40258 |
|
Vulnerability in c (CVE-2025-40258)
vulnerability in c (CVE-2025-40258). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40251 |
|
Vulnerability in c (CVE-2025-40251)
vulnerability in c (CVE-2025-40251). Successful exploitation can lead to full system takeover. Exploitable via ``rate_leaf_parent_set``.
|
| CVE-2025-40214 |
|
Vulnerability in c (CVE-2025-40214)
vulnerability in c (CVE-2025-40214). Successful exploitation can lead to full system takeover.
|
| CVE-2025-66412 |
|
Cross-Site Scripting (XSS) in @angular/compiler (CVE-2025-66412)
cross-site scripting in @angular/compiler (CVE-2025-66412). Risk of unauthorized operations or information disclosure. Exploitable via ``attributeName``.
|
| CVE-2025-65622 |
|
Cross-Site Scripting (XSS) in snipeitapp (CVE-2025-65622)
cross-site scripting in snipeitapp (CVE-2025-65622). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-65621 |
|
Cross-Site Scripting (XSS) in privilege-escalation (CVE-2025-65621)
cross-site scripting in privilege-escalation (CVE-2025-65621). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-34297 |
|
Vulnerability in c (CVE-2025-34297)
vulnerability in c (CVE-2025-34297). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-66035 |
|
Vulnerability in @angular/common (CVE-2025-66035)
vulnerability in @angular/common (CVE-2025-66035). Risk of unauthorized operations or information disclosure. Exploitable via ``POST``. Mitigation: upgrade to `19.2.16` or later.
|
| CVE-2025-61167 |
|
SQL Injection in sqli (CVE-2025-61167)
SQL injection in sqli (CVE-2025-61167). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-61168 |
|
Unsafe Deserialization in sigb (CVE-2025-61168)
vulnerability in sigb (CVE-2025-61168). Successful exploitation can lead to full system takeover.
|
| CVE-2025-64047 |
|
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.
|
| CVE-2025-64048 |
|
Cross-Site Scripting (XSS) in yccms (CVE-2025-64048)
cross-site scripting in yccms (CVE-2025-64048). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-63892 |
|
Cross-Site Scripting (XSS) in remyandrade (CVE-2025-63892)
cross-site scripting in remyandrade (CVE-2025-63892). Successful exploitation can lead to full system takeover.
|
| CVE-2025-63748 |
|
Unrestricted File Upload in testmanagement (CVE-2025-63748)
vulnerability in testmanagement (CVE-2025-63748). Successful exploitation can lead to full system takeover.
|
| CVE-2025-64046 |
|
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.
|
| CVE-2025-64308 |
|
Vulnerability in CVE-2025-64308 (CVE-2025-64308)
vulnerability in CVE-2025-64308 (CVE-2025-64308). Confidential information can be exposed externally.
|
| CVE-2025-40196 |
|
Vulnerability in c (CVE-2025-40196)
vulnerability in c (CVE-2025-40196). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40205 |
|
Vulnerability in c (CVE-2025-40205)
vulnerability in c (CVE-2025-40205). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40201 |
|
Vulnerability in c (CVE-2025-40201)
vulnerability in c (CVE-2025-40201). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40186 |
|
Vulnerability in c (CVE-2025-40186)
vulnerability in c (CVE-2025-40186). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40166 |
|
Vulnerability in c (CVE-2025-40166)
vulnerability in c (CVE-2025-40166). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40165 |
|
Vulnerability in c (CVE-2025-40165)
vulnerability in c (CVE-2025-40165). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40163 |
|
Vulnerability in c (CVE-2025-40163)
vulnerability in c (CVE-2025-40163). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40164 |
|
Vulnerability in c (CVE-2025-40164)
vulnerability in c (CVE-2025-40164). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40129 |
|
Vulnerability in c (CVE-2025-40129)
vulnerability in c (CVE-2025-40129). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40118 |
|
Vulnerability in c (CVE-2025-40118)
vulnerability in c (CVE-2025-40118). Successful exploitation can lead to full system takeover.
|
| CVE-2025-63397 |
|
Vulnerability in oneflow (CVE-2025-63397)
vulnerability in oneflow (CVE-2025-63397). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-0987 |
|
Vulnerability in c (CVE-2025-0987)
vulnerability in c (CVE-2025-0987). Confidential information can be exposed externally.
|
| CVE-2025-6075 |
|
Vulnerability in CVE-2025-6075 (CVE-2025-6075)
vulnerability in CVE-2025-6075 (CVE-2025-6075). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-60898 |
|
SSRF (Server-Side Request Forgery) in c (CVE-2025-60898)
SSRF in c (CVE-2025-60898). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-56399 |
|
Code Injection in laravel (CVE-2025-56399)
code injection in laravel (CVE-2025-56399). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40064 |
|
Vulnerability in c (CVE-2025-40064)
vulnerability in c (CVE-2025-40064). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40046 |
|
Vulnerability in c (CVE-2025-40046)
vulnerability in c (CVE-2025-40046). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40054 |
|
Vulnerability in c (CVE-2025-40054)
vulnerability in c (CVE-2025-40054). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40044 |
|
Vulnerability in c (CVE-2025-40044)
vulnerability in c (CVE-2025-40044). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40027 |
|
Vulnerability in c (CVE-2025-40027)
vulnerability in c (CVE-2025-40027). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40025 |
|
Vulnerability in c (CVE-2025-40025)
vulnerability in c (CVE-2025-40025). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40026 |
|
Vulnerability in c (CVE-2025-40026)
vulnerability in c (CVE-2025-40026). Risk of unauthorized operations or information disclosure.
|