Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2025-50485 |
|
Vulnerability in phpgurukul (CVE-2025-50485)
vulnerability in phpgurukul (CVE-2025-50485). Confidential information can be exposed externally.
|
| CVE-2025-50486 |
|
Vulnerability in phpgurukul (CVE-2025-50486)
vulnerability in phpgurukul (CVE-2025-50486). Confidential information can be exposed externally.
|
| CVE-2025-50484 |
|
Vulnerability in phpgurukul (CVE-2025-50484)
vulnerability in phpgurukul (CVE-2025-50484). Confidential information can be exposed externally.
|
| CVE-2025-50487 |
|
Vulnerability in phpgurukul (CVE-2025-50487)
vulnerability in phpgurukul (CVE-2025-50487). Confidential information can be exposed externally.
|
| CVE-2025-50491 |
|
Vulnerability in phpgurukul (CVE-2025-50491)
vulnerability in phpgurukul (CVE-2025-50491). Confidential information can be exposed externally.
|
| CVE-2025-50492 |
|
Vulnerability in phpgurukul (CVE-2025-50492)
vulnerability in phpgurukul (CVE-2025-50492). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50488 |
|
Vulnerability in phpgurukul (CVE-2025-50488)
vulnerability in phpgurukul (CVE-2025-50488). Confidential information can be exposed externally.
|
| CVE-2025-50489 |
|
Vulnerability in phpgurukul (CVE-2025-50489)
vulnerability in phpgurukul (CVE-2025-50489). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50490 |
|
Vulnerability in phpgurukul (CVE-2025-50490)
vulnerability in phpgurukul (CVE-2025-50490). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50493 |
|
Vulnerability in phpgurukul (CVE-2025-50493)
vulnerability in phpgurukul (CVE-2025-50493). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50494 |
|
Vulnerability in phpgurukul (CVE-2025-50494)
vulnerability in phpgurukul (CVE-2025-50494). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-4056 |
|
Code Injection in dos (CVE-2025-4056)
code injection in dos (CVE-2025-4056). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-2533 KEV |
|
[KEV] Cross-Site Request Forgery (CSRF) in Papercut ngmf (CVE-2023-2533)
vulnerability in Papercut ngmf (CVE-2023-2533). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-20337 KEV |
|
[KEV] Vulnerability in Cisco identity-services-engine (CVE-2025-20337)
vulnerability in Cisco identity-services-engine (CVE-2025-20337). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-20281 KEV |
|
[KEV] Vulnerability in Cisco identity-services-engine (CVE-2025-20281)
vulnerability in Cisco identity-services-engine (CVE-2025-20281). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-44608 |
|
SQL Injection in sqli (CVE-2025-44608)
SQL injection in sqli (CVE-2025-44608). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-15044 |
|
Code Injection in deserialization (CVE-2016-15044)
code injection in deserialization (CVE-2016-15044). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-46171 |
|
Vulnerability in vbulletin (CVE-2025-46171)
vulnerability in vbulletin (CVE-2025-46171). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-46099 |
|
Unrestricted File Upload in pluck-cms (CVE-2025-46099)
vulnerability in pluck-cms (CVE-2025-46099). Successful exploitation can lead to full system takeover.
|
| CVE-2025-49706 KEV |
|
[KEV] Authentication Bypass in Microsoft sharepoint (CVE-2025-49706)
authentication bypass in Microsoft sharepoint (CVE-2025-49706). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-49704 KEV |
|
[KEV] Code Injection in Microsoft sharepoint (CVE-2025-49704)
code injection in Microsoft sharepoint (CVE-2025-49704). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-6558 KEV |
|
[KEV] Vulnerability in Google chromium (CVE-2025-6558)
vulnerability in Google chromium (CVE-2025-6558). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2025-2775 KEV |
|
[KEV] XXE (XML External Entity) in sysaid (CVE-2025-2775)
vulnerability in sysaid (CVE-2025-2775). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-2776 KEV |
|
[KEV] XXE (XML External Entity) in sysaid (CVE-2025-2776)
vulnerability in sysaid (CVE-2025-2776). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-54309 KEV |
|
[KEV] Vulnerability in crushftp (CVE-2025-54309)
vulnerability in crushftp (CVE-2025-54309). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-53770 KEV |
|
[KEV] Unsafe Deserialization in Microsoft sharepoint (CVE-2025-53770)
vulnerability in Microsoft sharepoint (CVE-2025-53770). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2025-25257 KEV |
|
[KEV] SQL Injection in Fortinet fortiweb (CVE-2025-25257)
SQL injection in Fortinet fortiweb (CVE-2025-25257). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-53816 |
|
Vulnerability in dos (CVE-2025-53816)
vulnerability in dos (CVE-2025-53816). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-34126 |
|
Path Traversal in path-traversal (CVE-2025-34126)
path traversal in path-traversal (CVE-2025-34126). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-6965 |
|
Vulnerability in SQLitePCLRaw.lib.e_sqlite3 (CVE-2025-6965)
vulnerability in SQLitePCLRaw.lib.e_sqlite3 (CVE-2025-6965). Successful exploitation can lead to full system takeover.
|
| CVE-2025-51655 |
|
SQL Injection in sqli (CVE-2025-51655)
SQL injection in sqli (CVE-2025-51655). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-51656 |
|
SQL Injection in sqli (CVE-2025-51656)
SQL injection in sqli (CVE-2025-51656). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-51657 |
|
SQL Injection in sqli (CVE-2025-51657)
SQL injection in sqli (CVE-2025-51657). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-51658 |
|
SQL Injection in sqli (CVE-2025-51658)
SQL injection in sqli (CVE-2025-51658). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-51659 |
|
SQL Injection in sqli (CVE-2025-51659)
SQL injection in sqli (CVE-2025-51659). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-51660 |
|
SQL Injection in sqli (CVE-2025-51660)
SQL injection in sqli (CVE-2025-51660). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-51652 |
|
SQL Injection in sqli (CVE-2025-51652)
SQL injection in sqli (CVE-2025-51652). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-51653 |
|
SQL Injection in sqli (CVE-2025-51653)
SQL injection in sqli (CVE-2025-51653). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-51654 |
|
SQL Injection in sqli (CVE-2025-51654)
SQL injection in sqli (CVE-2025-51654). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-47812 KEV |
|
[KEV] Vulnerability in Wing ftp server wing-ftp-server (CVE-2025-47812)
vulnerability in Wing ftp server wing-ftp-server (CVE-2025-47812). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-5777 KEV |
|
[KEV] Out-of-Bounds Read in Citrix netscaler-adc-and-gateway (CVE-2025-5777)
vulnerability in Citrix netscaler-adc-and-gateway (CVE-2025-5777). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2025-49702 |
|
Vulnerability in microsoft (CVE-2025-49702)
vulnerability in microsoft (CVE-2025-49702). Successful exploitation can lead to full system takeover.
|
| CVE-2025-49697 |
|
Vulnerability in microsoft (CVE-2025-49697)
vulnerability in microsoft (CVE-2025-49697). Successful exploitation can lead to full system takeover.
|
| CVE-2025-49695 |
|
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
|
| CVE-2025-49696 |
|
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
|
| CVE-2024-55599 |
|
Vulnerability in fortinet (CVE-2024-55599)
vulnerability in fortinet (CVE-2024-55599). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-10033 KEV |
|
[KEV] Command Injection in php (CVE-2016-10033)
command injection in php (CVE-2016-10033). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2019-9621 KEV |
|
[KEV] SSRF (Server-Side Request Forgery) in Synacor zimbra-collaboration-suite-zcs (CVE-2019-9621)
SSRF in Synacor zimbra-collaboration-suite-zcs (CVE-2019-9621). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2019-5418 KEV |
|
[KEV] Path Traversal in rails (CVE-2019-5418)
path traversal in rails (CVE-2019-5418). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2014-3931 KEV |
|
[KEV] Buffer Overflow in Looking glass looking-glass (CVE-2014-3931)
vulnerability in Looking glass looking-glass (CVE-2014-3931). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|