Vulnerabilidades CVE

A continuación la lista de las últimas vulnerabilidades publicadas por el instituto NIST:

Borrar filtros
CVE ID Publicado Severidad CVSS Descripción
CVE-2025-9084 2025-09-15 LOW 3.1 Mattermost versions 10.5.x
CVE-2025-9072 2025-09-15 HIGH 7.6 Mattermost versions 10.10.x
CVE-2025-10442 2025-09-15 MEDIUM 6.3 A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command…
CVE-2025-10441 2025-09-15 MEDIUM 6.3 A vulnerability was found in D-Link DI-8100G, DI-8200G and DI-8003G 17.12.20A1/19.12.10A1. Affected by this issue is the function sub_433F7C of the file version_upgrade.asp of the component jhttpd. The…
CVE-2025-9078 2025-09-15 MEDIUM 4.3 Mattermost versions 10.8.x
CVE-2025-9076 2025-09-15 MEDIUM 6.5 Mattermost versions 10.10.x
CVE-2025-10440 2025-09-15 MEDIUM 6.3 A vulnerability has been found in D-Link DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003 and DI-8003G 16.07.26A1/17.12.20A1/19.12.10A1. Affected by this vulnerability is the function sub_4621DC of the file usb_paswd.asp of…
CVE-2025-10436 2025-09-15 HIGH 7.3 A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/sup_searchfrm.php?action=edit. This manipulation of the…
CVE-2025-10435 2025-09-15 HIGH 7.3 A security flaw has been discovered in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust_edit1.php. The manipulation of…
CVE-2025-10434 2025-09-15 LOW 2.4 A vulnerability was identified in IbuyuCMS up to 2.6.3. Impacted is an unknown function of the file /admin/article.php?a=mod of the component Add Article Page. The manipulation of the…
CVE-2025-41713 2025-09-15 MEDIUM 6.5 During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined…
CVE-2025-10433 2025-09-15 MEDIUM 6.3 A vulnerability was determined in 1Panel-dev MaxKB up to 2.0.2/2.1.0. This issue affects some unknown processing of the file /admin/api/workspace/default/tool/debug. Executing manipulation of the argument code can lead…
CVE-2025-10432 2025-09-15 CRITICAL 9.8 A vulnerability was found in Tenda AC1206 15.03.06.23. This vulnerability affects the function check_param_changed of the file /goform/AdvSetMacMtuWa of the component HTTP Request Handler. Performing manipulation of the…
CVE-2025-10431 2025-09-15 MEDIUM 6.3 A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/ajax_represent.php. Such manipulation of the argument ID leads…
CVE-2025-10430 2025-09-15 MEDIUM 6.3 A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/barcode.php. This manipulation of the…
CVE-2025-59378 2025-09-15 MEDIUM 5.7 In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the privileges of…
CVE-2025-10453 2025-09-15 MEDIUM 5.3 O'View MapServer developed by PilotGaea Technologies has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to probe internal network.
CVE-2025-10429 2025-09-15 MEDIUM 6.3 A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax_product.php. The manipulation of the argument…
CVE-2025-10428 2025-09-15 MEDIUM 6.3 A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/seo_setting.php of the component Setting Handler. The…
CVE-2025-10427 2025-09-15 MEDIUM 6.3 A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/operation/user.php. Executing manipulation of the argument website_image can…
CVE-2025-10426 2025-09-15 HIGH 7.3 A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username…
CVE-2025-10425 2025-09-15 HIGH 7.3 A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is an unknown function of the file /admin/controller/student_controller.php. Such manipulation…
CVE-2025-10424 2025-09-15 HIGH 7.3 A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/faculty_controller.php. This manipulation…
CVE-2025-10423 2025-09-15 LOW 3.7 A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The manipulation results in guessable captcha. The attack can be executed remotely.…
CVE-2025-59375 2025-09-15 HIGH 7.5 libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
CVE-2025-10452 2025-09-15 CRITICAL 9.8 Statistical Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents with high-level privileges.
CVE-2025-10422 2025-09-15 MEDIUM 4.3 A vulnerability has been found in newbee-mall up to 613a662adf1da7623ec34459bc83e3c1b12d8ce7. This issue affects the function paySuccess of the file /paySuccess of the component Order Status Handler. The manipulation…
CVE-2025-10421 2025-09-15 MEDIUM 6.3 A flaw has been found in SourceCodester Student Grading System 1.0. This vulnerability affects unknown code of the file /update_account.php. Executing manipulation of the argument ID can lead…
CVE-2025-10420 2025-09-15 MEDIUM 6.3 A vulnerability was detected in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /form137.php. Performing manipulation of the argument ID results in sql…
CVE-2025-10419 2025-09-15 MEDIUM 6.3 A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /del_promote.php. Such manipulation of the…
CVE-2025-10418 2025-09-15 MEDIUM 6.3 A weakness has been identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_students.php. This manipulation of the argument…
CVE-2025-10417 2025-09-15 HIGH 7.3 A security flaw has been discovered in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=delete_product. The manipulation of the argument…
CVE-2025-10416 2025-09-15 HIGH 7.3 A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=delete_supplier. The manipulation of the argument ID leads…
CVE-2025-59364 2025-09-14 MEDIUM 5.3 The express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body.
CVE-2025-10415 2025-09-14 HIGH 7.3 A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=save_supplier. Executing manipulation of the argument ID can…
CVE-2025-10414 2025-09-14 HIGH 7.3 A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_customer. Performing manipulation of the argument…
CVE-2025-10413 2025-09-14 HIGH 7.3 A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=delete_customer. Such manipulation of the…
CVE-2025-10411 2025-09-14 MEDIUM 4.3 A vulnerability was detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /stc-log-keeper/check_profile.php of the component POST…
CVE-2025-10410 2025-09-14 MEDIUM 6.3 A security vulnerability has been detected in SourceCodester Link Status Checker 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument proxy leads…
CVE-2025-10409 2025-09-14 MEDIUM 6.3 A weakness has been identified in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /rms.php?page=users. Executing manipulation of the argument fname can lead…
CVE-2025-10408 2025-09-14 MEDIUM 6.3 A security flaw has been discovered in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /edit_user.php. Performing manipulation of the…
CVE-2025-10407 2025-09-14 MEDIUM 6.3 A vulnerability was identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_user.php. Such manipulation of the argument ID…
CVE-2025-10405 2025-09-14 HIGH 7.3 A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown function of the file /listbaptism.php. This manipulation of the argument bapt_id causes sql…
CVE-2025-10404 2025-09-14 HIGH 7.3 A vulnerability was found in itsourcecode Baptism Information Management System 1.0. This impacts an unknown function of the file /rptbaptismal.php. The manipulation of the argument ID results in…
CVE-2025-10403 2025-09-14 HIGH 7.3 A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/view-enquiry.php. The manipulation of the argument viewid leads…
CVE-2023-53212 2025-09-15 N/A 0.0 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-6051 2025-09-14 MEDIUM 5.3 A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the `normalize_numbers()` method of the `EnglishNormalizer` class. This vulnerability affects…
CVE-2025-10402 2025-09-14 HIGH 7.3 A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/readenq.php. Executing manipulation of the argument…
CVE-2025-10401 2025-09-14 MEDIUM 6.3 A vulnerability was detected in D-Link DIR-823x up to 250416. The affected element is an unknown function of the file /goform/diag_ping. Performing manipulation of the argument target_addr results…
CVE-2025-10400 2025-09-14 MEDIUM 6.3 A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticket_id…
« Anterior Página 468 de 3936 Siguiente »