Browse CVEs

CRITICAL 9.8 CVE-2025-66848 JD Cloud NAS routers AX1800 (4.3.1.r4308 and earlier), AX3000 (4.3.1.r4318 and earlier), AX6600 (4.5.1.r4533 and earlier), BE6500 (4.4.1.r4308 and ea… Ax1800 Firmware after 4.5.1.r4533 Fix from $2,3002025-12-30 HIGH 7.2 CVE-2025-14509 The Lucky Wheel for WooCommerce – Spin a Sale plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.1.13. … Mitigation only Fix from $1,9502025-12-30 MEDIUM 5.4 CVE-2025-15221 A flaw has been found in SohuTV CacheCloud up to 3.2.0. This vulnerability affects the function index of the file src/main/java/com/sohu/cache/web/co… Cachecloud after 3.2 Fix from $1,6002025-12-30 MEDIUM 6.1 CVE-2025-15220 A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This affects the function init of the file src/main/java/com/sohu/cache/web/controller… Cachecloud after 3.2 Fix from $1,6002025-12-30 MEDIUM 5.4 CVE-2025-15219 A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doMachineList/doPodList of the fi… Cachecloud after 3.2 Fix from $1,6002025-12-30 MEDIUM 5.4 CVE-2025-15201 A flaw has been found in SohuTV CacheCloud up to 3.2.0. The impacted element is the function redirectNoPower of the file src/main/java/com/sohu/cache… Cachecloud after 3.2 Fix from $1,6002025-12-29 HIGH 7.2 CVE-2025-13592 The Advanced Ads plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.0.14 via the 'change-ad__content' sh… Mitigation only Fix from $1,9502025-12-29 CRITICAL 9.9 CVE-2025-68897 Improper Control of Generation of Code ('Code Injection') vulnerability in Mohammad I. Okfie IF AS Shortcode if-as-shortcode allows Code Injection.Th… Mitigation only Fix from $2,3002025-12-29 MEDIUM 5.4 CVE-2025-15174 A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this vulnerability is the function doAppAuditList of the fil… Cachecloud after 3.2 Fix from $1,6002025-12-29 MEDIUM 5.4 CVE-2025-15175 A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appCommandAnalysis of the file src/ma… Cachecloud after 3.2 Fix from $1,6002025-12-29 MEDIUM 5.4 CVE-2025-15173 A weakness has been identified in SohuTV CacheCloud up to 3.2.0. Affected is the function advancedAnalysis of the file src/main/java/com/sohu/cache/w… Cachecloud after 3.2 Fix from $1,6002025-12-29 MEDIUM 5.4 CVE-2025-15172 A security flaw has been discovered in SohuTV CacheCloud up to 3.2.0. This impacts the function preview of the file src/main/java/com/sohu/cache/web/… Cachecloud after 3.2 Fix from $1,6002025-12-29 MEDIUM 5.4 CVE-2025-15171 A vulnerability was identified in SohuTV CacheCloud up to 3.2.0. This affects the function index of the file src/main/java/com/sohu/cache/web/control… Cachecloud after 3.2 Fix from $1,6002025-12-29 MEDIUM 6.1 CVE-2025-15170 A security vulnerability has been detected in Advaya Softech GEMS ERP Portal up to 2.1. This affects an unknown part of the file /home.jsp?isError=tr… Gems Erp Portal after 2.1 Fix from $1,6002025-12-29 HIGH 7.2 CVE-2025-15148 A flaw has been found in CmsEasy up to 7.7.7. Affected is the function savetemp_action in the library /lib/admin/template_admin.php of the component … Cmseasy after 7.7.7.0 Fix from $1,9502025-12-28 MEDIUM 6.1 CVE-2025-15145 A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of the file src/main/java/com/sohu… Cachecloud after 3.2 Fix from $1,6002025-12-28 MEDIUM 6.1 CVE-2025-15144 A weakness has been identified in dayrui XunRuiCMS up to 4.7.1. The impacted element is the function dr_show_error/dr_exit_msg of the file /dayrui/Fc… Xunruicms after 4.7.1 Fix from $1,6002025-12-28 MEDIUM 6.3 CVE-2025-15129 A flaw has been found in ChenJinchuang Lin-CMS-TP5 up to 0.3.3. This vulnerability affects the function Upload of the file application/lib/file/Local… Mitigation only Fix from $1,6002025-12-28 CRITICAL 9.8 CVE-2025-54322EPSS 15% Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and… Sxzos after 2025-12-26 Fix from $2,3002025-12-27 CRITICAL 9.8 CVE-2025-68952 Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution (RCE) vulnerability has been identified in Eigent. This vulnera… Eigent Mitigation only Fix from $2,3002025-12-27 MEDIUM 6.1 CVE-2025-15094 A weakness has been identified in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414. The impacted element is the function userLogin of … Flycms after 2019-12-20 Fix from $1,6002025-12-26 MEDIUM 6.1 CVE-2025-15093 A security flaw has been discovered in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414. The affected element is an unknown function o… Flycms after 2019-12-20 Fix from $1,6002025-12-26 CRITICAL 9.8 CVE-2025-13773 The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, … Mitigation only Fix from $2,3002025-12-24 MEDIUM 5.4 CVE-2025-15052 A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of the file /profile.php. Perfo… Student Information System No fix yet Fix from $1,6002025-12-24 HIGH 7.8 CVE-2025-14928 Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exe… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14926 Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14927 Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 8.8 CVE-2021-47735 CMSimple 5.4 contains an authenticated remote code execution vulnerability that allows logged-in attackers to inject malicious PHP code into template… Cmsimple No fix yet Fix from $1,9502025-12-23 HIGH 7.2 CVE-2021-47736 CMSimple_XH 1.7.4 contains an authenticated remote code execution vulnerability in the content editing functionality that allows administrative users… Cmsimple Xh No fix yet Fix from $1,9502025-12-23 HIGH 8.8 CVE-2025-65817 LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in start_app.sh. Smart Connect Indoor Ip Camera Firmware No fix yet Fix from $1,9502025-12-22