CVE Database

145766+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2025-24004
5.2 MEDIUM

A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a …

Jul 8, 2025
CVE-2025-24003
8.2 HIGH

An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of …

Jul 8, 2025
CVE-2025-24002
5.3 MEDIUM

An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service …

Jul 8, 2025
CVE-2025-7327
8.8 HIGH

The Widget for Google Reviews plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.15 via the layout parameter. …

Jul 8, 2025
CVE-2025-7165
7.3 HIGH

A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the …

Jul 8, 2025
CVE-2025-7164
7.3 HIGH

A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of …

Jul 8, 2025
CVE-2025-7163
6.3 MEDIUM

A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/add-animals.php. The …

Jul 8, 2025
CVE-2025-7162
6.3 MEDIUM

A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the file …

Jul 8, 2025
CVE-2025-5957
5.3 MEDIUM

The Guest Support – Complete customer support ticket system for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing …

Jul 8, 2025
CVE-2025-5537
6.4 MEDIUM

The Lightbox & Modal Popup WordPress Plugin – FooBox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alternative texts in all versions …

Jul 8, 2025
CVE-2025-7161
6.3 MEDIUM

A vulnerability classified as critical was found in PHPGurukul Zoo Management System 2.1. This vulnerability affects unknown code of the file /admin/add-normal-ticket.php. The manipulation of …

Jul 8, 2025
CVE-2025-7160
7.3 HIGH

A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. This affects an unknown part of the file /admin/index.php. The manipulation …

Jul 8, 2025
CVE-2025-7159
6.3 MEDIUM

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. Affected by this issue is some unknown functionality of …

Jul 8, 2025
CVE-2025-7158
6.3 MEDIUM

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of …

Jul 8, 2025
CVE-2025-7157
7.3 HIGH

A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. …

Jul 8, 2025
CVE-2025-6244
6.4 MEDIUM

The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the via `Calendar` And …

Jul 8, 2025
CVE-2025-5570
5.4 MEDIUM

The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' parameter in all versions up to, and including, …

Jul 8, 2025
CVE-2025-53617

Rejected reason: Not used

Jul 8, 2025
CVE-2025-53616

Rejected reason: Not used

Jul 8, 2025
CVE-2025-53615

Rejected reason: Not used

Jul 8, 2025
CVE-2025-53614

Rejected reason: Not used

Jul 8, 2025
CVE-2025-53613

Rejected reason: Not used

Jul 8, 2025
CVE-2025-53612

Rejected reason: Not used

Jul 8, 2025
CVE-2025-53611

Rejected reason: Not used

Jul 8, 2025
CVE-2025-53610

Rejected reason: Not used

Jul 8, 2025
CVE-2025-20695
6.5 MEDIUM

In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional …

Jul 8, 2025
CVE-2025-20694
6.5 MEDIUM

In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional …

Jul 8, 2025
CVE-2025-20693
6.5 MEDIUM

In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information …

Jul 8, 2025
CVE-2025-20692
5.5 MEDIUM

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure …

Jul 8, 2025
CVE-2025-20691
5.5 MEDIUM

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure …

Jul 8, 2025
CVE-2025-20690
5.5 MEDIUM

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure …

Jul 8, 2025
CVE-2025-20689
5.5 MEDIUM

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure …

Jul 8, 2025
CVE-2025-20688
5.5 MEDIUM

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure …

Jul 8, 2025
CVE-2025-20687
5.5 MEDIUM

In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service …

Jul 8, 2025
CVE-2025-20686
8.8 HIGH

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code …

Jul 8, 2025
CVE-2025-20685
8.8 HIGH

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code …

Jul 8, 2025
CVE-2025-20684
9.8 CRITICAL

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of …

Jul 8, 2025
CVE-2025-20683
9.8 CRITICAL

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of …

Jul 8, 2025
CVE-2025-20682
9.8 CRITICAL

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of …

Jul 8, 2025
CVE-2025-20681
9.8 CRITICAL

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of …

Jul 8, 2025
CVE-2025-20680
9.8 CRITICAL

In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege …

Jul 8, 2025
CVE-2025-7156
6.3 MEDIUM

A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the function execute of the file /v1/chat/completions. The manipulation …

Jul 8, 2025
CVE-2025-7146
7.5 HIGH

The iPublish System developed by Jhenggao has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to read arbitrary system file.

Jul 8, 2025
CVE-2025-7155
7.3 HIGH

A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard …

Jul 8, 2025
CVE-2025-7154
6.3 MEDIUM

A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216. Affected by this issue is the function sub_41A0F8 of the file …

Jul 8, 2025
CVE-2025-43001
6.9 MEDIUM

SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting …

Jul 8, 2025
CVE-2025-42992
6.9 MEDIUM

SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical …

Jul 8, 2025
CVE-2025-42986
4.3 MEDIUM

Due to a missing authorization check in an obsolete RFC enabled function module in SAP BASIS, an authenticated low-privileged attacker could call a Remote Function …

Jul 8, 2025
CVE-2025-42985
6.1 MEDIUM

Due to insufficient sanitization in the SAP BusinessObjects Content Administrator Workbench, attackers could craft malicious URLs and execute scripts in a victim�s browser. This could …

Jul 8, 2025
CVE-2025-42981
6.1 MEDIUM

Due to an open redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft a URL link embedding a malicious script at …

Jul 8, 2025

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.