CVE-2025-53690 · Sitecore Experience Manager (XM)
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,014 matching vulnerabilities · Page 282 of 781
Sitecore
CVE-2025-53693 · Sitecore Sitecore Experience Manager (XM)
HTML Cache Poisoning through Unsafe Reflections
Microsoft
CVE-2025-54914 · Microsoft Networking
Azure Networking Elevation of Privilege Vulnerability
CVE-2025-55241 · Microsoft Microsoft Entra
Azure Entra ID Elevation of Privilege Vulnerability
CVE-2025-55244 · Microsoft Azure Bot Service
Azure Bot Service Elevation of Privilege Vulnerability
TOTOLINK
mitre
CVE-2025-57052 · mitre
cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote…
CVE-2025-57148 · mitre
phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension v…
CVE-2025-56752 · mitre
A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechan…
argoproj
nanbingxyz
1000projects
CVE-2025-9919 · 1000projects Beauty Parlour Management System
1000projects Beauty Parlour Management System bwdates-reports-details.php sql injection
CVE-2025-9930 · 1000projects Beauty Parlour Management System
1000projects Beauty Parlour Management System contact-us.php sql injection
PHPGurukul
CVE-2025-9933 · PHPGurukul Beauty Parlour Management System
PHPGurukul Beauty Parlour Management System view-appointment.php sql injection
CVE-2025-9932 · PHPGurukul Beauty Parlour Management System
PHPGurukul Beauty Parlour Management System update-image.php sql injection
projectworlds
CVE-2025-9924 · projectworlds Travel Management System
projectworlds Travel Management System enquiry.php sql injection
CVE-2025-9927 · projectworlds Travel Management System
projectworlds Travel Management System viewpackage.php sql injection
CVE-2025-9925 · projectworlds Travel Management System
projectworlds Travel Management System detail.php sql injection
CVE-2025-9926 · projectworlds Travel Management System
projectworlds Travel Management System viewsubcategory.php sql injection
CVE-2025-9928 · projectworlds Travel Management System
projectworlds Travel Management System viewcategory.php sql injection
itsourcecode
CVE-2025-9839 · itsourcecode Student Information Management System
itsourcecode Student Information Management System index.php sql injection
CVE-2025-9840 · itsourcecode Sports Management System
itsourcecode Sports Management System gametype.php sql injection
ScriptAndTools
CVE-2025-9847 · ScriptAndTools Real Estate Management System
ScriptAndTools Real Estate Management System register.php unrestricted upload
kujirahand
dotCMS
xwiki
MarceloTessaro
CVE-2025-58361 · MarceloTessaro promptcraft-forge-studio
Promptcraft Forge Studio's incomplete URL check is vulnerable to XSS via SVG
InspiryThemes
CVE-2024-32444 · InspiryThemes RealHomes
WordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerability
Apache Software Foundation
CVE-2024-43166 · Apache Software Foundation Apache DolphinScheduler
Incorrect Default Permissions vulnerability in Apache DolphinScheduler.
Linux
CVE-2025-38734 · Linux Linux
net/smc: fix UAF on smcsk after smc_listen_out()
CVE-2025-38708 · Linux Linux
drbd: add missing kref_get in handle_write_conflicts
CVE-2025-38724 · Linux Linux
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
CVE-2025-38728 · Linux Linux
smb3: fix for slab out of bounds on mount to ksmbd
ThemeMove
axiomthemes
appRain
CVE-2025-41032 · appRain appRain CMF
SQL injection vulnerability in appRain CMF
CVE-2025-41033 · appRain appRain CMF
SQL injection vulnerability in appRain CMF
CVE-2025-41034 · appRain appRain CMF
SQL injection vulnerability in appRain CMF
CVE-2025-36897 · Google Android
In unknown of cd_CnMsgCodecUserApi.cpp, there is a possible out of bounds write due to a missing bounds check.
CVE-2025-36896 · Google Android
WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-394765106.
CVE-2025-36904 · Google Android
WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396458384.
CVE-2025-36890 · Google Android
Elevation of Privilege
Samsung Mobile
CreedAlly
CVE-2025-58819 · CreedAlly Bulk Featured Image
WordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability
kamleshyadav
CVE-2025-58628 · kamleshyadav Miraculous