CVEs from 2025

8,829 normalized CVEs published or assigned in this year.

Total
8,829
critical
critical 1,320
high
high 1,978
medium
medium 1,981
low
low 202
% Critical
15.0%
% with KEV
2.1%
% with exploit
2.8%

Top products

  • i-educar 80
  • office_long_term_servicing_channel 35
  • office 34
  • best_salon_management_system 33
  • apartment_management_system 30
  • gcp 29
  • inventory_management_system 28
  • online_learning_management_system 21
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2025-8256 critical 9.8 9.8 10mo ago A vulnerability classified as critical has been found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/product.php. The manipulation of the argument ima…
CVE-2025-8255 critical 9.8 9.8 10mo ago A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /register.php. The manipulation of the argum…
CVE-2025-8254 critical 9.8 9.8 10mo ago A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /view_parcel.php. The manipulation of the a…
CVE-2025-8253 critical 9.8 9.8 10mo ago A vulnerability was found in code-projects Exam Form Submission 1.0. It has been classified as critical. This affects an unknown part of the file /admin/delete_s6.php. The manipulation of the argumen…
CVE-2025-8252 critical 9.8 9.8 10mo ago A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete_s5.php. The manipulation…
CVE-2025-8251 critical 9.8 9.8 10mo ago A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_s4.php. The m…
CVE-2025-8250 critical 9.8 9.8 10mo ago A vulnerability, which was classified as critical, was found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/update_s4.php. The manipulation of the argum…
CVE-2025-8249 critical 9.8 9.8 10mo ago A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/update_s3.php. The manipulat…
CVE-2025-8248 critical 9.8 9.8 10mo ago A vulnerability classified as critical was found in code-projects Online Ordering System 1.0. This vulnerability affects unknown code of the file /signup.php. The manipulation of the argument firstna…
CVE-2025-8241 critical 9.8 9.8 10mo ago A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. This affects an unknown part of the file /report.php. The manipulation of the argument…
CVE-2025-8240 critical 9.8 9.8 10mo ago A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /user/dashboard.php. The …
CVE-2025-8239 critical 9.8 9.8 10mo ago A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the arg…
CVE-2025-8238 critical 9.8 9.8 10mo ago A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/update_s2.php. The manipulation of the argument cre…
CVE-2025-8237 critical 9.8 9.8 10mo ago A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/update_s1.php. The manipulation of th…
CVE-2025-8236 critical 9.8 9.8 10mo ago A vulnerability was found in code-projects Online Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit_product.php. The manipulation …
CVE-2025-8235 critical 9.8 9.8 10mo ago A vulnerability was found in code-projects Online Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/product.php. The manipulation of the argumen…
CVE-2025-8234 critical 9.8 9.8 10mo ago A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete_member.php. The manipu…
CVE-2025-8233 critical 9.8 9.8 10mo ago A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/user.php. The mani…
CVE-2025-8232 critical 9.8 9.8 10mo ago A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/delete_user.php. The manipulation of the a…
CVE-2025-8227 critical 9.8 9.8 10mo ago A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /collect/getArticle. The manipu…
CVE-2025-8226 critical 9.8 9.8 10mo ago A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been classified as problematic. Affected is an unknown function of the file /sysApp/find. The manipulation of the argument access…
CVE-2025-8203 critical 9.8 9.8 10mo ago A vulnerability classified as critical has been found in Jingmen Zeyou Large File Upload Control up to 6.3. Affected is an unknown function of the file /index.jsp. The manipulation of the argument ID…
CVE-2025-8185 critical 9.8 9.8 10mo ago A vulnerability was found in 1000 Projects ABC Courier Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /getbyid.php. The manipulation of the arg…
CVE-2025-8179 critical 9.8 9.8 10mo ago A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/change…
CVE-2025-8173 critical 9.8 9.8 10mo ago A vulnerability has been found in 1000 Projects ABC Courier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /Add_reciver.php. …
CVE-2025-8166 critical 9.8 9.8 10mo ago A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Requ…
CVE-2025-8125 critical 9.8 9.8 11mo ago A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /system/role/authUser/allocatedList. The man…
CVE-2025-7950 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Public Chat Room 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the ar…
CVE-2025-7933 critical 9.8 9.8 11mo ago A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/settings_update.php of the component Setting H…
CVE-2025-7930 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /members/add_members.ph…
CVE-2025-7929 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /members/edit_Members.php. The manipulation of t…
CVE-2025-7928 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Church Donation System 1.0 and classified as critical. This issue affects some unknown processing of the file /members/edit_user.php. The manipulation of th…
CVE-2025-7915 critical 9.8 9.8 11mo ago A vulnerability was found in Chanjet CRM 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mail/mailinactive.php of the component Login Page. The manip…
CVE-2025-7894 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, has been found in Onyx up to 0.29.1. This issue affects the function generate_simple_sql of the file backend/onyx/agents/agent_search/kb_search/node…
CVE-2025-7888 critical 9.8 9.8 11mo ago A vulnerability was found in TDuckCloud tduck-platform 5.1 and classified as critical. This issue affects the function UserFormDataMapper of the file src/main/java/com/tduck/cloud/form/mapper/UserFor…
CVE-2025-7879 critical 9.8 9.8 11mo ago A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file mobileupload.jsp. The manipulati…
CVE-2025-7877 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, has been found in Metasoft 美特软件 MetaCRM up to 6.4.2. This issue affects some unknown processing of the file sendfile.jsp. The manipulation of the ar…
CVE-2025-7876 critical 9.8 9.8 11mo ago A vulnerability classified as critical was found in Metasoft 美特软件 MetaCRM up to 6.4.2. This vulnerability affects the function AnalyzeParam of the file download.jsp. The manipulation of the argument …
CVE-2025-7873 critical 9.8 9.8 11mo ago A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file mcc_login.jsp. The manipulatio…
CVE-2025-7862 critical 9.8 9.8 11mo ago A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this vulnerability is the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the com…
CVE-2025-7861 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, was found in code-projects Church Donation System 1.0. Affected is an unknown function of the file /members/search.php. The manipulation of the argu…
CVE-2025-7860 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0. This issue affects some unknown processing of the file /members/login_admin.php. The man…
CVE-2025-7859 critical 9.8 9.8 11mo ago A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/update_password_admin.php. The manipulation …
CVE-2025-7838 critical 9.8 9.8 11mo ago A vulnerability has been found in Campcodes Online Movie Theater Seat Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/manage_seat.php. Th…
CVE-2025-7833 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0. This issue affects some unknown processing of the file /members/giving.php. The manipula…
CVE-2025-7832 critical 9.8 9.8 11mo ago A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/offering.php. The manipulation of the argume…
CVE-2025-7831 critical 9.8 9.8 11mo ago A vulnerability classified as critical has been found in code-projects Church Donation System 1.0. This affects an unknown part of the file /members/Tithes.php. The manipulation of the argument trcod…
CVE-2025-7830 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Church Donation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /reg.php. The manipulation of th…
CVE-2025-7829 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipul…
CVE-2025-7824 critical 9.8 9.8 11mo ago A vulnerability was found in Jinher OA 1.1. It has been rated as problematic. This issue affects some unknown processing of the file XmlHttp.aspx. The manipulation leads to xml external entity refere…
CVE-2025-7823 critical 9.8 9.8 11mo ago A vulnerability was found in Jinher OA 1.2. It has been declared as problematic. This vulnerability affects unknown code of the file ProjectScheduleDelete.aspx. The manipulation leads to xml external…
CVE-2025-7814 critical 9.8 9.8 11mo ago A vulnerability classified as critical was found in code-projects Food Ordering Review System 1.0. This vulnerability affects unknown code of the file /pages/signup_function.php. The manipulation of …
CVE-2025-7765 critical 9.8 9.8 11mo ago A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addmanagerclinic…
CVE-2025-7764 critical 9.8 9.8 11mo ago A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /admin/deletedoctorclinic.php. The manipulati…
CVE-2025-7757 critical 9.8 9.8 11mo ago A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit-property.php. The manipulation of t…
CVE-2025-7753 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adddoctor.php. The manipulation o…
CVE-2025-7752 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletedoctor.php. …
CVE-2025-7751 critical 9.8 9.8 11mo ago A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addclin…
CVE-2025-7750 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /admin/adddoctorclinic.php. The manipu…
CVE-2025-7749 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown processing of the file /admin/getmanagerregio…
CVE-2025-28982 critical 9.8 9.8 11mo ago Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThimPress WP Pipes allows SQL Injection. This issue affects WP Pipes: from n/a through 1.4.3.
CVE-2025-7627 critical 9.8 9.8 11mo ago A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and classified as critical. Affected by this issue is the function fileUpload of the file /…
CVE-2025-7612 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Mobile Shop 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument email le…
CVE-2025-7611 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Wedding Reservation 1.0. It has been classified as critical. This affects an unknown part of the file /global.php. The manipulation of the argument lu leads…
CVE-2025-7610 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Electricity Billing System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/change_password.php. The m…
CVE-2025-7609 critical 9.8 9.8 11mo ago A vulnerability has been found in code-projects Simple Shopping Cart 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipula…
CVE-2025-7608 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, was found in code-projects Simple Shopping Cart 1.0. Affected is an unknown function of the file /userlogin.php. The manipulation of the argument us…
CVE-2025-7607 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, has been found in code-projects Simple Shopping Cart 1.0. This issue affects some unknown processing of the file /Customers/save_order.php. The mani…
CVE-2025-7606 critical 9.8 9.8 11mo ago A vulnerability classified as critical has been found in code-projects AVL Rooms 1.0. This affects an unknown part of the file /city.php. The manipulation of the argument city leads to sql injection.…
CVE-2025-7605 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects AVL Rooms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argumen…
CVE-2025-7604 critical 9.8 9.8 11mo ago A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user-login.php. The m…
CVE-2025-7595 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Job Diary 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /view-cad.php. The manipulation of the argument ID lead…
CVE-2025-7594 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Job Diary 1.0. It has been classified as critical. This affects an unknown part of the file /view-emp.php. The manipulation of the argument ID leads to sql …
CVE-2025-7593 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Job Diary 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view-all.php. The manipulation of the argument I…
CVE-2025-7587 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cover.php. The manip…
CVE-2025-7547 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0. This affects the function save_movie of the file /admin/admin_class.php. Th…
CVE-2025-7542 critical 9.8 9.8 11mo ago A vulnerability was found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/us…
CVE-2025-7541 critical 9.8 9.8 11mo ago A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /get_town.php.…
CVE-2025-7540 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /getclinic.php. The manipulation of th…
CVE-2025-7539 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown processing of the file /getdoctordaybooking.p…
CVE-2025-7538 critical 9.8 9.8 11mo ago A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/product_update.php. The manipulation of the ar…
CVE-2025-7537 critical 9.8 9.8 11mo ago A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/product_update.php. The manipulation of the argument…
CVE-2025-7536 critical 9.8 9.8 11mo ago A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/receipt_credit.php. The m…
CVE-2025-7535 critical 9.8 9.8 11mo ago A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/reprint_cash.php…
CVE-2025-7534 critical 9.8 9.8 11mo ago A vulnerability was found in PHPGurukul Student Result Management System 2.0. It has been classified as critical. Affected is an unknown function of the file /notice-details.php of the component GET …
CVE-2025-7533 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Job Diary 1.0 and classified as critical. This issue affects some unknown processing of the file /view-details.php. The manipulation of the argument job_id …
CVE-2025-7523 critical 9.8 9.8 11mo ago A vulnerability was found in Jinher OA 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /c6/Jhsoft.Web.message/ToolBar/DelTemp.aspx. The manipulatio…
CVE-2025-7521 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13. Affected is an unknown function of the file /admin/index.php. The manipulation of th…
CVE-2025-7517 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown processing of the file /getDay.php. The manip…
CVE-2025-7516 critical 9.8 9.8 11mo ago A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. This vulnerability affects unknown code of the file /cancelbookingpatient.php. The manipulatio…
CVE-2025-7515 critical 9.8 9.8 11mo ago A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. This affects an unknown part of the file /ulocateus.php. The manipulation of the argument…
CVE-2025-7514 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Modern Bag 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/contact-list.php. The manipulation of…
CVE-2025-7513 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Modern Bag 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/slideupdate.php. The manipul…
CVE-2025-7512 critical 9.8 9.8 11mo ago A vulnerability was found in code-projects Modern Bag 1.0. It has been classified as critical. Affected is an unknown function of the file /contact-back.php. The manipulation of the argument contact-…
CVE-2025-7510 critical 9.8 9.8 11mo ago A vulnerability has been found in code-projects Modern Bag 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/productadd_back.php. The manipulation of the argu…
CVE-2025-7509 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, was found in code-projects Modern Bag 1.0. This affects an unknown part of the file /admin/slide.php. The manipulation of the argument idSlide leads…
CVE-2025-7508 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, has been found in code-projects Modern Bag 1.0. Affected by this issue is some unknown functionality of the file /admin/product-update.php. The mani…
CVE-2025-7483 critical 9.8 9.8 11mo ago A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been rated as critical. This issue affects some unknown processing of the file /users/forgot-password.php. The m…
CVE-2025-7480 critical 9.8 9.8 11mo ago A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality of the file /users/signup.php. The mani…
CVE-2025-7478 critical 9.8 9.8 11mo ago A vulnerability, which was classified as critical, was found in code-projects Modern Bag 1.0. Affected is an unknown function of the file /admin/category-list.php. The manipulation of the argument id…