Vulnerability index

Browse CVEs

6,053 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Code InjectionCWE-94 × clear
Forestblog MEDIUM 5.4
CVE-2025-3005

A vulnerability was found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this issue is some unknown functionality of …

Fix: 2025-03-21+
Fix from $1,600 2025-03-31
Forestblog MEDIUM 5.4
CVE-2025-3004

A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functi…

Fix: 2025-03-21+
Fix from $1,600 2025-03-31
Wcms MEDIUM 5.4
CVE-2025-2979

A vulnerability classified as problematic has been found in WCMS 11. This affects an unknown part of the file /index.php?anonymous/setregister of the…

No fix yet
Fix from $1,600 2025-03-31
Kerio Connect MEDIUM 5.4
CVE-2025-2976

A vulnerability was found in GFI KerioConnect 10.0.6. It has been classified as problematic. Affected is an unknown function of the component File Up…

No fix yet
Fix from $1,600 2025-03-31
Kerio Connect MEDIUM 5.4
CVE-2025-2977

A vulnerability was found in GFI KerioConnect 10.0.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality…

No fix yet
Fix from $1,600 2025-03-31
Perfex Crm MEDIUM 5.4
CVE-2025-2974

A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the fil…

Fix: after 3.2.1
Fix from $1,600 2025-03-31
Kerio Connect MEDIUM 5.4
CVE-2025-2975

A vulnerability was found in GFI KerioConnect 10.0.6 and classified as problematic. This issue affects some unknown processing of the file Settings/E…

No fix yet
Fix from $1,600 2025-03-31
Unclassified HIGH 7.3
CVE-2025-2803

The So-Called Air Quotes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.1. This is due t…

Mitigation only
Fix from $1,950 2025-03-29
Unclassified MEDIUM 6.5
CVE-2024-13557

The Shortcodes by United Themes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.1.6. This…

Mitigation only
Fix from $1,600 2025-03-29
Foxcms CRITICAL 9.8
CVE-2025-29306EPSS 46%

An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.

Fix: 1.2+
Fix from $2,300 2025-03-27
Kylin HIGH 7.2
CVE-2025-30067

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin. If an attacker gets access to Kylin's system or project adm…

Fix: 5.0.2+
Fix from $1,950 2025-03-27
GitLab MEDIUM 6.5
CVE-2025-2867

An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.…

Fix: 17.8.6 / 17.9.3+
Fix from $1,600 2025-03-27
Business Hub HIGH 8.8
CVE-2025-2787

KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects the ingress-nginx component.…

Fix: 1.10.4 / 1.11.4+
Fix from $1,950 2025-03-26
Appsmith CRITICAL 9.8
CVE-2024-55964EPSS 6%

An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command executio…

Fix: 1.52+
Fix from $2,300 2025-03-26
Tlr 2005ksh Firmware CRITICAL 9.8
CVE-2025-26003

Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized command execution vulnerability when requesting the admin.cgi parameter with setAutorest.

Mitigation only
Fix from $2,300 2025-03-26
Unclassified MEDIUM 6.8
CVE-2024-41643

An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component.

Mitigation only
Fix from $1,600 2025-03-26
Unclassified CRITICAL 9.9
CVE-2025-28893

Improper Control of Generation of Code ('Code Injection') vulnerability in Govind Visual Text Editor visual-text-editor allows Remote Code Inclusion.…

Mitigation only
Fix from $2,300 2025-03-26
Fprime CRITICAL 9.8
CVE-2024-55028

A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file.

No fix yet
Fix from $2,300 2025-03-25
Unclassified CRITICAL 9.8
CVE-2024-48818

An issue in IIT Bombay, Mumbai, India Bodhitree of cs101 version allows a remote attacker to execute arbitrary code.

No fix yet
Fix from $2,300 2025-03-25
Unclassified CRITICAL 9.2
CVE-2024-45480

An improper control of generation of code ('Code Injection') vulnerability in the AprolCreateReport component of B&R APROL <4.4-00P5 may allow an una…

Mitigation only
Fix from $2,300 2025-03-25
Ufida Erp Nc MEDIUM 6.1
CVE-2025-2712

A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality…

No fix yet
Fix from $1,600 2025-03-24
Ufida Erp Nc MEDIUM 6.1
CVE-2025-2710

A vulnerability was found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This issue affects some unknown processing of the file /menu.jsp.…

No fix yet
Fix from $1,600 2025-03-24
Ufida Erp Nc MEDIUM 6.1
CVE-2025-2711

A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been classified as problematic. Affected is an unknown function of the file /help/systop…

No fix yet
Fix from $1,600 2025-03-24
Ufida Erp Nc MEDIUM 6.1
CVE-2025-2709

A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This vulnerability affects unknown code of the file /login.j…

No fix yet
Fix from $1,600 2025-03-24
Dante3 MEDIUM 5.4
CVE-2025-2700

A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert …

Fix: after 0.4.4
Fix from $1,600 2025-03-24
Contenttools MEDIUM 5.4
CVE-2025-2699

A vulnerability was found in GetmeUK ContentTools up to 1.6.16. It has been rated as problematic. Affected by this issue is some unknown functionalit…

Fix: after 1.6.16
Fix from $1,600 2025-03-24
Payroll Management System MEDIUM 5.4
CVE-2025-2673

A vulnerability classified as problematic has been found in code-projects Payroll Management System 1.0. Affected is an unknown function of the file …

No fix yet
Fix from $1,600 2025-03-24
Edge Chromium MEDIUM 6.5
CVE-2025-29806

No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Fix: 129.0.2792.52+
Fix from $1,600 2025-03-23
Medical Card Generation System MEDIUM 6.1
CVE-2025-2650

A vulnerability, which was classified as problematic, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknow…

No fix yet
Fix from $1,600 2025-03-23
Art Gallery Management System MEDIUM 6.1
CVE-2025-2645

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as problematic. Affected is an unknown function of …

No fix yet
Fix from $1,600 2025-03-23