|
cve-2025-6068
|
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting |
MEDIUM
|
6.4
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-59719
|
- |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
|
|
cve-2025-59718
|
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2025-12-16 |
|
cve-2025-59689
|
Libraesva Email Security Gateway Command Injection Vulnerability |
MEDIUM
|
6.1
|
N/A
|
cvelistv5 |
2025-09-29 |
|
cve-2025-59474
|
jenkins: Missing permission check allows obtaining agent names |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-06-28 |
|
cve-2025-59374
|
ASUS Live Update Embedded Malicious Code Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-12-17 |
|
cve-2025-59287
|
Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-10-24 |
|
cve-2025-59230
|
Microsoft Windows Improper Access Control Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-10-14 |
|
cve-2025-58360
|
OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-11 |
|
cve-2025-5821
|
CVE-2025-5821 |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
|
|
cve-2025-58034
|
Fortinet FortiWeb OS Command Injection Vulnerability |
MEDIUM
|
6.7
|
N/A
|
cvelistv5 |
2025-11-18 |
|
cve-2025-57819
|
Sangoma FreePBX Authentication Bypass Vulnerability |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2025-08-29 |
|
cve-2025-5777
|
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2025-07-10 |
|
cve-2025-5605
|
Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure |
MEDIUM
|
4.3
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-5571
|
CVE-2025-5571 |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
|
|
cve-2025-55583
|
CVE-2025-55583 |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
|
|
cve-2025-55346
|
Unintended dynamic code execution leads to remote code execution by network attackers |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-55190
|
SUSE CVE CVE-2025-55190 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2025-09-11 |
|
cve-2025-55182
|
Meta React Server Components Remote Code Execution Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2025-12-05 |
|
cve-2025-55177
|
Meta Platforms WhatsApp Incorrect Authorization Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-09-02 |
|
cve-2025-55161
|
CVE-2025-55161 |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
|
|
cve-2025-54948
|
Trend Micro Apex One OS Command Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-08-18 |
|
cve-2025-54782
|
@nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-54313
|
Prettier eslint-config-prettier Embedded Malicious Code Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2025-54309
|
CrushFTP Unprotected Alternate Channel Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-07-22 |
|
cve-2025-54254
|
Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-54253
|
Adobe Experience Manager Forms Code Execution Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-10-15 |
|
cve-2025-54236
|
Adobe Commerce and Magento Improper Input Validation Vulnerability |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2025-10-24 |
|
cve-2025-5419
|
SUSE CVE CVE-2025-5419 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2026-05-27 |
|
cve-2025-54123
|
SUSE CVE CVE-2025-54123 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2025-09-19 |
ndaal KEV