Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2025-65945 Vulnerability in auth0 (CVE-2025-65945)
vulnerability in auth0 (CVE-2025-65945). Data can be tampered with by attackers.
CVE-2025-40243 Vulnerability in c (CVE-2025-40243)
vulnerability in c (CVE-2025-40243). Successful exploitation can lead to full system takeover.
CVE-2025-40261 Vulnerability in c (CVE-2025-40261)
vulnerability in c (CVE-2025-40261). Successful exploitation can lead to full system takeover.
CVE-2025-40257 Vulnerability in Kernel (CVE-2025-40257)
vulnerability in Kernel (CVE-2025-40257). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.10.247, 5.15.197, 6.1.159, 6.6.118, 6.12.60, 6.17.10` or later.
CVE-2025-40258 Vulnerability in c (CVE-2025-40258)
vulnerability in c (CVE-2025-40258). Successful exploitation can lead to full system takeover.
CVE-2025-40251 Vulnerability in c (CVE-2025-40251)
vulnerability in c (CVE-2025-40251). Successful exploitation can lead to full system takeover. Exploitable via ``rate_leaf_parent_set``.
CVE-2025-40214 Vulnerability in c (CVE-2025-40214)
vulnerability in c (CVE-2025-40214). Successful exploitation can lead to full system takeover.
CVE-2025-66412 Cross-Site Scripting (XSS) in @angular/compiler (CVE-2025-66412)
cross-site scripting in @angular/compiler (CVE-2025-66412). Risk of unauthorized operations or information disclosure. Exploitable via ``attributeName``.
CVE-2025-65622 Cross-Site Scripting (XSS) in snipeitapp (CVE-2025-65622)
cross-site scripting in snipeitapp (CVE-2025-65622). Risk of unauthorized operations or information disclosure.
CVE-2025-65621 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2025-65621)
cross-site scripting in privilege-escalation (CVE-2025-65621). Risk of unauthorized operations or information disclosure.
CVE-2025-34297 Vulnerability in c (CVE-2025-34297)
vulnerability in c (CVE-2025-34297). Risk of unauthorized operations or information disclosure.
CVE-2025-66035 Vulnerability in @angular/common (CVE-2025-66035)
vulnerability in @angular/common (CVE-2025-66035). Risk of unauthorized operations or information disclosure. Exploitable via ``POST``. Mitigation: upgrade to `19.2.16` or later.
CVE-2025-61167 SQL Injection in sqli (CVE-2025-61167)
SQL injection in sqli (CVE-2025-61167). Risk of unauthorized operations or information disclosure.
CVE-2025-61168 Unsafe Deserialization in sigb (CVE-2025-61168)
vulnerability in sigb (CVE-2025-61168). Successful exploitation can lead to full system takeover.
CVE-2025-64047 OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.
CVE-2025-64048 Cross-Site Scripting (XSS) in yccms (CVE-2025-64048)
cross-site scripting in yccms (CVE-2025-64048). Risk of unauthorized operations or information disclosure.
CVE-2025-63892 Cross-Site Scripting (XSS) in remyandrade (CVE-2025-63892)
cross-site scripting in remyandrade (CVE-2025-63892). Successful exploitation can lead to full system takeover.
CVE-2025-63748 Unrestricted File Upload in testmanagement (CVE-2025-63748)
vulnerability in testmanagement (CVE-2025-63748). Successful exploitation can lead to full system takeover.
CVE-2025-64046 OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.
CVE-2025-64308 Vulnerability in CVE-2025-64308 (CVE-2025-64308)
vulnerability in CVE-2025-64308 (CVE-2025-64308). Confidential information can be exposed externally.
CVE-2025-40196 Vulnerability in c (CVE-2025-40196)
vulnerability in c (CVE-2025-40196). Risk of unauthorized operations or information disclosure.
CVE-2025-40205 Vulnerability in c (CVE-2025-40205)
vulnerability in c (CVE-2025-40205). Successful exploitation can lead to full system takeover.
CVE-2025-40201 Vulnerability in c (CVE-2025-40201)
vulnerability in c (CVE-2025-40201). Successful exploitation can lead to full system takeover.
CVE-2025-40186 Vulnerability in c (CVE-2025-40186)
vulnerability in c (CVE-2025-40186). Successful exploitation can lead to full system takeover.
CVE-2025-40166 Vulnerability in c (CVE-2025-40166)
vulnerability in c (CVE-2025-40166). Successful exploitation can lead to full system takeover.
CVE-2025-40165 Vulnerability in c (CVE-2025-40165)
vulnerability in c (CVE-2025-40165). Successful exploitation can lead to full system takeover.
CVE-2025-40163 Vulnerability in c (CVE-2025-40163)
vulnerability in c (CVE-2025-40163). Risk of unauthorized operations or information disclosure.
CVE-2025-40164 Vulnerability in c (CVE-2025-40164)
vulnerability in c (CVE-2025-40164). Risk of unauthorized operations or information disclosure.
CVE-2025-40129 Vulnerability in c (CVE-2025-40129)
vulnerability in c (CVE-2025-40129). Risk of unauthorized operations or information disclosure.
CVE-2025-40118 Vulnerability in c (CVE-2025-40118)
vulnerability in c (CVE-2025-40118). Successful exploitation can lead to full system takeover.
CVE-2025-63397 Vulnerability in oneflow (CVE-2025-63397)
vulnerability in oneflow (CVE-2025-63397). Risk of unauthorized operations or information disclosure.
CVE-2025-0987 Vulnerability in c (CVE-2025-0987)
vulnerability in c (CVE-2025-0987). Confidential information can be exposed externally.
CVE-2025-6075 Vulnerability in CVE-2025-6075 (CVE-2025-6075)
vulnerability in CVE-2025-6075 (CVE-2025-6075). Risk of unauthorized operations or information disclosure.
CVE-2025-60898 SSRF (Server-Side Request Forgery) in c (CVE-2025-60898)
SSRF in c (CVE-2025-60898). Risk of unauthorized operations or information disclosure.
CVE-2025-56399 Code Injection in laravel (CVE-2025-56399)
code injection in laravel (CVE-2025-56399). Successful exploitation can lead to full system takeover.
CVE-2025-40064 Vulnerability in c (CVE-2025-40064)
vulnerability in c (CVE-2025-40064). Successful exploitation can lead to full system takeover.
CVE-2025-40046 Vulnerability in c (CVE-2025-40046)
vulnerability in c (CVE-2025-40046). Risk of unauthorized operations or information disclosure.
CVE-2025-40054 Vulnerability in c (CVE-2025-40054)
vulnerability in c (CVE-2025-40054). Successful exploitation can lead to full system takeover.
CVE-2025-40044 Vulnerability in c (CVE-2025-40044)
vulnerability in c (CVE-2025-40044). Successful exploitation can lead to full system takeover.
CVE-2025-40027 Vulnerability in c (CVE-2025-40027)
vulnerability in c (CVE-2025-40027). Successful exploitation can lead to full system takeover.
CVE-2025-40025 Vulnerability in c (CVE-2025-40025)
vulnerability in c (CVE-2025-40025). Successful exploitation can lead to full system takeover.
CVE-2025-40026 Vulnerability in c (CVE-2025-40026)
vulnerability in c (CVE-2025-40026). Risk of unauthorized operations or information disclosure.
CVE-2025-40082 Out-of-Bounds Read in c (CVE-2025-40082)
vulnerability in c (CVE-2025-40082). Confidential information can be exposed externally.
CVE-2025-40070 Vulnerability in c (CVE-2025-40070)
vulnerability in c (CVE-2025-40070). Risk of unauthorized operations or information disclosure.
CVE-2025-40040 Vulnerability in c (CVE-2025-40040)
vulnerability in c (CVE-2025-40040). Successful exploitation can lead to full system takeover. Exploitable via ``VM_MERGEABLE``.
CVE-2025-34292 Unsafe Deserialization in deserialization (CVE-2025-34292)
vulnerability in deserialization (CVE-2025-34292). Risk of unauthorized operations or information disclosure. Exploitable via ``formkit_memory_recovery``.
CVE-2025-40022 Vulnerability in c (CVE-2025-40022)
vulnerability in c (CVE-2025-40022). Risk of unauthorized operations or information disclosure.
CVE-2025-54236 KEV [KEV] Vulnerability in Adobe commerce (CVE-2025-54236)
vulnerability in Adobe commerce (CVE-2025-54236). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2025-60837 Cross-Site Scripting (XSS) in mingsoft (CVE-2025-60837)
cross-site scripting in mingsoft (CVE-2025-60837). Risk of unauthorized operations or information disclosure.
CVE-2022-49662 Vulnerability in c (CVE-2022-49662)
vulnerability in c (CVE-2022-49662). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →