Search
Search Results (310859 CVEs found)
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2025-10783 | 2025-09-22 | 7.3 High | ||
A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add_subject.php. Executing manipulation of the argument subject_code can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be exploited. | ||||
CVE-2024-2769 | 1 Campcodes | 1 Complete Online Beauty Parlor Management System | 2025-09-21 | 6.3 Medium |
A vulnerability was detected in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname/email results in sql injection. The attack may be launched remotely. The exploit is now public and may be used. | ||||
CVE-2025-10688 | 2 Mayurik, Sourcecodester | 2 Pet Grooming Management Software, Pet Grooming Management Software | 2025-09-21 | 7.3 High |
A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/operation/paid.php. This manipulation of the argument inv_no/insta_amt causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. | ||||
CVE-2024-10246 | 2025-09-20 | N/A | ||
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | ||||
CVE-2025-26503 | 1 Windriver | 1 Vxworks | 2025-09-20 | 6.7 Medium |
A crafted system call argument can cause memory corruption. | ||||
CVE-2025-6198 | 1 Supermicro | 1 Mbd-x13sem-f | 2025-09-20 | 6.4 Medium |
There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a specially crafted image. | ||||
CVE-2025-7937 | 1 Supermicro | 1 Mbd-x12stw | 2025-09-20 | 6.6 Medium |
There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW . An attacker can update the system firmware with a specially crafted image. | ||||
CVE-2025-10035 | 1 Fortra | 1 Goanywhere Managed File Transfer | 2025-09-20 | 10 Critical |
A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection. | ||||
CVE-2025-59220 | 1 Microsoft | 7 Windows, Windows 10, Windows 11 and 4 more | 2025-09-20 | 7 High |
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. | ||||
CVE-2025-59216 | 1 Microsoft | 4 Windows, Windows 11, Windows Server and 1 more | 2025-09-20 | 7 High |
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | ||||
CVE-2025-59215 | 1 Microsoft | 5 Graphics Component, Windows, Windows 11 and 2 more | 2025-09-20 | 7 High |
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | ||||
CVE-2025-59720 | 2025-09-20 | N/A | ||
Not used | ||||
CVE-2025-59721 | 2025-09-20 | N/A | ||
Not used | ||||
CVE-2025-59722 | 2025-09-20 | N/A | ||
Not used | ||||
CVE-2025-59723 | 2025-09-20 | N/A | ||
Not used | ||||
CVE-2025-59724 | 2025-09-20 | N/A | ||
Not used | ||||
CVE-2025-59725 | 2025-09-20 | N/A | ||
Not used | ||||
CVE-2025-59726 | 2025-09-20 | N/A | ||
Not used | ||||
CVE-2025-59727 | 2025-09-20 | N/A | ||
Not used | ||||
CVE-2025-56706 | 1 Edimax | 2 Br-6473ax, Br-6473ax Firmware | 2025-09-19 | 8 High |
Edimax BR-6473AX v1.0.28 was discovered to contain a remote code execution (RCE) vulnerability via the Object parameter in the openwrt_getConfig function. |