Vulnerability index

Browse CVEs

6,044 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Code InjectionCWE-94 × clear
Ax1800 Firmware CRITICAL 9.8
CVE-2025-66848

JD Cloud NAS routers AX1800 (4.3.1.r4308 and earlier), AX3000 (4.3.1.r4318 and earlier), AX6600 (4.5.1.r4533 and earlier), BE6500 (4.4.1.r4308 and ea…

Fix: after 4.5.1.r4533
Fix from $2,300 2025-12-30
Unclassified HIGH 7.2
CVE-2025-14509

The Lucky Wheel for WooCommerce – Spin a Sale plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.1.13. …

Mitigation only
Fix from $1,950 2025-12-30
Cachecloud MEDIUM 5.4
CVE-2025-15221

A flaw has been found in SohuTV CacheCloud up to 3.2.0. This vulnerability affects the function index of the file src/main/java/com/sohu/cache/web/co…

Fix: after 3.2
Fix from $1,600 2025-12-30
Cachecloud MEDIUM 6.1
CVE-2025-15220

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This affects the function init of the file src/main/java/com/sohu/cache/web/controller…

Fix: after 3.2
Fix from $1,600 2025-12-30
Cachecloud MEDIUM 5.4
CVE-2025-15219

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doMachineList/doPodList of the fi…

Fix: after 3.2
Fix from $1,600 2025-12-30
Cachecloud MEDIUM 5.4
CVE-2025-15201

A flaw has been found in SohuTV CacheCloud up to 3.2.0. The impacted element is the function redirectNoPower of the file src/main/java/com/sohu/cache…

Fix: after 3.2
Fix from $1,600 2025-12-29
Unclassified HIGH 7.2
CVE-2025-13592

The Advanced Ads plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.0.14 via the 'change-ad__content' sh…

Mitigation only
Fix from $1,950 2025-12-29
Unclassified CRITICAL 9.9
CVE-2025-68897

Improper Control of Generation of Code ('Code Injection') vulnerability in Mohammad I. Okfie IF AS Shortcode if-as-shortcode allows Code Injection.Th…

Mitigation only
Fix from $2,300 2025-12-29
Cachecloud MEDIUM 5.4
CVE-2025-15174

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this vulnerability is the function doAppAuditList of the fil…

Fix: after 3.2
Fix from $1,600 2025-12-29
Cachecloud MEDIUM 5.4
CVE-2025-15175

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appCommandAnalysis of the file src/ma…

Fix: after 3.2
Fix from $1,600 2025-12-29
Cachecloud MEDIUM 5.4
CVE-2025-15173

A weakness has been identified in SohuTV CacheCloud up to 3.2.0. Affected is the function advancedAnalysis of the file src/main/java/com/sohu/cache/w…

Fix: after 3.2
Fix from $1,600 2025-12-29
Cachecloud MEDIUM 5.4
CVE-2025-15172

A security flaw has been discovered in SohuTV CacheCloud up to 3.2.0. This impacts the function preview of the file src/main/java/com/sohu/cache/web/…

Fix: after 3.2
Fix from $1,600 2025-12-29
Cachecloud MEDIUM 5.4
CVE-2025-15171

A vulnerability was identified in SohuTV CacheCloud up to 3.2.0. This affects the function index of the file src/main/java/com/sohu/cache/web/control…

Fix: after 3.2
Fix from $1,600 2025-12-29
Gems Erp Portal MEDIUM 6.1
CVE-2025-15170

A security vulnerability has been detected in Advaya Softech GEMS ERP Portal up to 2.1. This affects an unknown part of the file /home.jsp?isError=tr…

Fix: after 2.1
Fix from $1,600 2025-12-29
Cmseasy HIGH 7.2
CVE-2025-15148

A flaw has been found in CmsEasy up to 7.7.7. Affected is the function savetemp_action in the library /lib/admin/template_admin.php of the component …

Fix: after 7.7.7.0
Fix from $1,950 2025-12-28
Cachecloud MEDIUM 6.1
CVE-2025-15145

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of the file src/main/java/com/sohu…

Fix: after 3.2
Fix from $1,600 2025-12-28
Xunruicms MEDIUM 6.1
CVE-2025-15144

A weakness has been identified in dayrui XunRuiCMS up to 4.7.1. The impacted element is the function dr_show_error/dr_exit_msg of the file /dayrui/Fc…

Fix: after 4.7.1
Fix from $1,600 2025-12-28
Unclassified MEDIUM 6.3
CVE-2025-15129

A flaw has been found in ChenJinchuang Lin-CMS-TP5 up to 0.3.3. This vulnerability affects the function Upload of the file application/lib/file/Local…

Mitigation only
Fix from $1,600 2025-12-28
Sxzos CRITICAL 9.8
CVE-2025-54322EPSS 15%

Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and…

Fix: after 2025-12-26
Fix from $2,300 2025-12-27
Eigent CRITICAL 9.8
CVE-2025-68952

Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution (RCE) vulnerability has been identified in Eigent. This vulnera…

Mitigation only
Fix from $2,300 2025-12-27
Flycms MEDIUM 6.1
CVE-2025-15094

A weakness has been identified in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414. The impacted element is the function userLogin of …

Fix: after 2019-12-20
Fix from $1,600 2025-12-26
Flycms MEDIUM 6.1
CVE-2025-15093

A security flaw has been discovered in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414. The affected element is an unknown function o…

Fix: after 2019-12-20
Fix from $1,600 2025-12-26
Unclassified CRITICAL 9.8
CVE-2025-13773

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, …

Mitigation only
Fix from $2,300 2025-12-24
Student Information System MEDIUM 5.4
CVE-2025-15052

A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of the file /profile.php. Perfo…

No fix yet
Fix from $1,600 2025-12-24
Transformers HIGH 7.8
CVE-2025-14928

Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exe…

Mitigation only
Fix from $1,950 2025-12-23
Transformers HIGH 7.8
CVE-2025-14926

Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut…

Mitigation only
Fix from $1,950 2025-12-23
Transformers HIGH 7.8
CVE-2025-14927

Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec…

Mitigation only
Fix from $1,950 2025-12-23
Cmsimple HIGH 8.8
CVE-2021-47735

CMSimple 5.4 contains an authenticated remote code execution vulnerability that allows logged-in attackers to inject malicious PHP code into template…

No fix yet
Fix from $1,950 2025-12-23
Cmsimple Xh HIGH 7.2
CVE-2021-47736

CMSimple_XH 1.7.4 contains an authenticated remote code execution vulnerability in the content editing functionality that allows administrative users…

No fix yet
Fix from $1,950 2025-12-23
Smart Connect Indoor Ip Camera Firmware HIGH 8.8
CVE-2025-65817

LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in start_app.sh.

No fix yet
Fix from $1,950 2025-12-22