Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (318725 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-12913 2 Codeprojects, Fabian 2 Responsive Hotel Site, Responsive Hotel Site 2025-11-17 4.7 Medium
A flaw has been found in code-projects Responsive Hotel Site 1.0. This affects an unknown part of the file /admin/roomdel.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
CVE-2025-12932 2 Janobe, Sourcecodester 2 Baby Care System, Baby Care System 2025-11-17 4.7 Medium
A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. This manipulation of the argument msgid causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-12933 2 Janobe, Sourcecodester 2 Baby Care System, Baby Care System 2025-11-17 6.3 Medium
A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcome. Such manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
CVE-2025-12938 1 Projectworlds 1 Online Admission System 2025-11-17 7.3 High
A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /process_login.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
CVE-2025-12939 2 Janobe, Sourcecodester 2 Interview Management System, Interview Management System 2025-11-17 6.3 Medium
A security flaw has been discovered in SourceCodester Interview Management System up to 1.0. Affected by this issue is some unknown functionality of the file /addCandidate.php. The manipulation of the argument candName results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be exploited.
CVE-2025-13012 1 Mozilla 2 Firefox, Firefox Esr 2025-11-17 7.5 High
Race condition in the Graphics component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, and Firefox ESR < 115.30.
CVE-2025-13013 1 Mozilla 2 Firefox, Firefox Esr 2025-11-17 6.1 Medium
Mitigation bypass in the DOM: Core & HTML component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, and Firefox ESR < 115.30.
CVE-2025-13014 1 Mozilla 2 Firefox, Firefox Esr 2025-11-17 8.8 High
Use-after-free in the Audio/Video component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, and Firefox ESR < 115.30.
CVE-2025-13015 1 Mozilla 2 Firefox, Firefox Esr 2025-11-17 3.4 Low
Spoofing issue in Firefox. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, and Firefox ESR < 115.30.
CVE-2025-13016 1 Mozilla 2 Firefox, Firefox Esr 2025-11-17 7.5 High
Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5.
CVE-2025-13017 1 Mozilla 2 Firefox, Firefox Esr 2025-11-17 8.1 High
Same-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5.
CVE-2025-13018 1 Mozilla 2 Firefox, Firefox Esr 2025-11-17 8.1 High
Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5.
CVE-2025-13019 1 Mozilla 2 Firefox, Firefox Esr 2025-11-17 8.1 High
Same-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5.
CVE-2025-13020 1 Mozilla 2 Firefox, Firefox Esr 2025-11-17 8.8 High
Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5.
CVE-2025-13021 1 Mozilla 1 Firefox 2025-11-17 9.8 Critical
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145.
CVE-2025-13022 1 Mozilla 1 Firefox 2025-11-17 9.8 Critical
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145.
CVE-2025-13023 1 Mozilla 1 Firefox 2025-11-17 9.8 Critical
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145.
CVE-2025-13024 1 Mozilla 1 Firefox 2025-11-17 9.8 Critical
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 145.
CVE-2025-13025 1 Mozilla 1 Firefox 2025-11-17 7.5 High
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145.
CVE-2025-13026 1 Mozilla 1 Firefox 2025-11-17 9.8 Critical
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145.