CVE Database

150016+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2024-58127
8.4 HIGH

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

Apr 7, 2025
CVE-2024-58126
8.4 HIGH

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

Apr 7, 2025
CVE-2024-58125
8.4 HIGH

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

Apr 7, 2025
CVE-2024-58124
8.4 HIGH

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

Apr 7, 2025
CVE-2024-58116
4.0 MEDIUM

Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

Apr 7, 2025
CVE-2024-58115
4.0 MEDIUM

Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

Apr 7, 2025
CVE-2024-58113
5.3 MEDIUM

Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability.

Apr 7, 2025
CVE-2024-58112
7.5 HIGH

Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

Apr 7, 2025
CVE-2024-58111
7.5 HIGH

Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

Apr 7, 2025
CVE-2024-58110
4.6 MEDIUM

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.

Apr 7, 2025
CVE-2024-58109
4.6 MEDIUM

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.

Apr 7, 2025
CVE-2024-58108
4.6 MEDIUM

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.

Apr 7, 2025
CVE-2024-58107
7.5 HIGH

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.

Apr 7, 2025
CVE-2024-58106
4.6 MEDIUM

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.

Apr 7, 2025
CVE-2025-3333
7.3 HIGH

A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of …

Apr 7, 2025
CVE-2025-3332
7.3 HIGH

A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /admin/menu_save.php. …

Apr 7, 2025
CVE-2025-3331
7.3 HIGH

A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. This issue affects some unknown processing of the …

Apr 7, 2025
CVE-2025-27534
3.3 LOW

in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.

Apr 7, 2025
CVE-2025-25057
3.3 LOW

in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.

Apr 7, 2025
CVE-2025-24304
3.3 LOW

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds write.

Apr 7, 2025
CVE-2025-22851
6.5 MEDIUM

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow.

Apr 7, 2025
CVE-2025-22842
3.3 LOW

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

Apr 7, 2025
CVE-2025-22452
3.3 LOW

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

Apr 7, 2025
CVE-2025-20102
3.3 LOW

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

Apr 7, 2025
CVE-2025-3330
7.3 HIGH

A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. This vulnerability affects unknown code of the file /reservation_save.php. The manipulation …

Apr 7, 2025
CVE-2025-3329
3.1 LOW

A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3.2/15.0.0.8. This affects an unknown part of the component Restaurant Order …

Apr 7, 2025
CVE-2025-3328
8.8 HIGH

A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. The manipulation …

Apr 7, 2025
CVE-2025-3327
3.5 LOW

A vulnerability was found in iteaj iboot 物联网网关 1.1.3 and classified as problematic. This issue affects some unknown processing of the file /common/upload/batch of the …

Apr 7, 2025
CVE-2025-3326
3.5 LOW

A vulnerability has been found in iteaj iboot 物联网网关 1.1.3 and classified as problematic. This vulnerability affects unknown code of the file /common/upload of the …

Apr 7, 2025
CVE-2025-3325
4.3 MEDIUM

A vulnerability, which was classified as problematic, was found in iteaj iboot 物联网网关 1.1.3. This affects an unknown part of the file /core/admin/pwd of the …

Apr 6, 2025
CVE-2025-3324
6.3 MEDIUM

A vulnerability, which was classified as critical, has been found in godcheese/code-projects Nimrod 0.8. Affected by this issue is some unknown functionality of the file …

Apr 6, 2025
CVE-2025-3323
6.3 MEDIUM

A vulnerability classified as critical was found in godcheese/code-projects Nimrod 0.8. Affected by this vulnerability is the function searchAllByName of the file ViewMenuCategoryRestController.java. The manipulation …

Apr 6, 2025
CVE-2025-32013
7.5 HIGH

LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits' LNURL authentication handling functionality. When processing …

Apr 6, 2025
CVE-2025-31492

mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to …

Apr 6, 2025
CVE-2025-31488

Plain Craft Launcher (PCL) is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are …

Apr 6, 2025
CVE-2025-2260
7.5 HIGH

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause a denial of service by specially crafted packets. …

Apr 6, 2025
CVE-2025-2259
7.5 HIGH

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of …

Apr 6, 2025
CVE-2025-2258
7.5 HIGH

In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent …

Apr 6, 2025
CVE-2025-3318
6.3 MEDIUM

A vulnerability classified as critical was found in Kenj_Frog 肯尼基蛙 company-financial-management 公司财务管理系统 1.0. Affected by this vulnerability is the function page of the file src/main/java/com/controller/ShangpinleixingController.java. …

Apr 6, 2025
CVE-2025-3317
4.3 MEDIUM

A vulnerability classified as problematic has been found in fumiao opencms up to a0fafa5cff58719e9b27c2a2eec204cc165ce14f. Affected is an unknown function of the file opencms-dev/src/main/webapp/view/admin/document/dataPage.jsp. The manipulation …

Apr 6, 2025
CVE-2025-3316
7.3 HIGH

A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the …

Apr 6, 2025
CVE-2025-3315
7.3 HIGH

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the …

Apr 6, 2025
CVE-2025-3314
7.3 HIGH

A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of …

Apr 6, 2025
CVE-2025-3313
7.3 HIGH

A vulnerability, which was classified as critical, was found in PHPGurukul Men Salon Management System 1.0. Affected is an unknown function of the file /admin/add-customer.php. …

Apr 6, 2025
CVE-2025-3312
7.3 HIGH

A vulnerability, which was classified as critical, has been found in PHPGurukul Men Salon Management System 1.0. This issue affects some unknown processing of the …

Apr 6, 2025
CVE-2025-3311
7.3 HIGH

A vulnerability classified as critical was found in PHPGurukul Men Salon Management System 1.0. This vulnerability affects unknown code of the file /admin/about-us.php. The manipulation …

Apr 6, 2025
CVE-2025-32370
7.2 HIGH

Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uploads; however, because .zip is processed through TryZipProviderSafe, there is …

Apr 6, 2025
CVE-2025-3310
7.3 HIGH

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the file /admin/delete.php. The …

Apr 6, 2025
CVE-2025-3309
7.3 HIGH

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality …

Apr 6, 2025
CVE-2025-32369
6.4 MEDIUM

Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certain interactions with the media library file upload feature.

Apr 6, 2025

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.