VYPR

CVEs

413,993 total · page 2438 of 8,280

  • CVE-2025-7944MedJul 21, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was found in PHPGurukul Taxi Stand Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /search.php. The manipulation of the argument searchdata leads to cross site scripting. It is possible to initiate the attack…

  • CVE-2025-7943MedJul 21, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/search-autoortaxi.php. The manipulation of the argument searchdata leads to cross site scripting. The…

  • CVE-2025-7486MedJul 21, 2025
    risk 0.22cvss 4.4epss 0.00

    The Ebook Store plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Order Details in all versions up to, and including, 5.8012 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…

  • CVE-2025-7942LowJul 21, 2025
    risk 0.23cvss 3.5epss 0.00

    A vulnerability has been found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting.…

  • CVE-2025-7941LowJul 21, 2025
    risk 0.23cvss 3.5epss 0.00

    A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the…

  • CVE-2025-7940MedJul 21, 2025
    risk 0.34cvss 5.3epss 0.00

    A vulnerability was found in Genshin Albedo Cat House App 1.0.2 on Android. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.house.auscat. The manipulation leads to improper…

  • CVE-2025-7939MedJul 21, 2025
    risk 0.41cvss 6.3epss 0.00

    A vulnerability was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0. It has been classified as critical. Affected is the function addGoods of the file GoodsController.java. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely.

  • CVE-2025-54134MedJul 21, 2025
    risk 0.35cvss 6.5epss 0.00

    HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.8 and below, the HAX CMS NodeJS application crashes when an authenticated attacker provides an API request lacking required URL parameters. This vulnerability affects the…

  • CVE-2025-54129MedJul 21, 2025
    risk 0.28cvss 4.3epss 0.00

    HAXiam is a packaging wrapper for HAXcms which allows anyone to spawn their own microsite management platform. In versions 11.0.4 and below, the application returns a 200 response when requesting the data of a valid user and a 404 response when requesting the data of an invalid…

  • CVE-2025-54128MedJul 21, 2025
    risk 0.33cvss 6.1epss 0.00

    HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.7 and below, the NodeJS version of HAX CMS has a disabled Content Security Policy (CSP). This configuration is insecure for a production application because it does not protect…

  • CVE-2025-54127CriJul 21, 2025
    risk 0.64cvss 9.8epss 0.00

    HAXcms with nodejs backend allows users to start the server in any HAXsite or HAXcms instance. In versions 11.0.6 and below, the NodeJS version of HAXcms uses an insecure default configuration designed for local development. The default configuration does not perform…

  • CVE-2025-54122CriJul 21, 2025
    risk 0.58cvss 10.0epss 0.01

    Manager-io/Manager is accounting software. A critical unauthenticated full read Server-Side Request Forgery (SSRF) vulnerability has been identified in the proxy handler component of both manager Desktop and Server edition versions up to and including 25.7.18.2519. This…

  • CVE-2025-53832HigJul 21, 2025
    risk 0.43cvss 7.5epss 0.11

    Lara Translate MCP Server is a Model Context Protocol (MCP) Server for Lara Translate API. Versions 0.0.11 and below contain a command injection vulnerability which exists in the @translated/lara-mcp MCP Server. The vulnerability is caused by the unsanitized use of input…

  • CVE-2025-53528HigJul 21, 2025
    risk 0.42cvss 7.6epss 0.00

    Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions before 5.4.3, the version parameter of the "/docs" endpoint is vulnerable to a Reflected XSS (Cross-Site Scripting) attack. This XSS would notably allow an attacker to…

  • CVE-2025-7938MedJul 21, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0 and classified as critical. This issue affects the function updateGoods of the file GoodsController.java. The manipulation leads to authorization bypass. The attack may be initiated remotely. The…

  • CVE-2025-7936MedJul 21, 2025
    risk 0.41cvss 6.3epss 0.00

    A vulnerability has been found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a and classified as critical. Affected by this vulnerability is the function queryPage of the file com/platform/controller/ScheduleJobLogController.java. The manipulation of…

  • CVE-2025-7325HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7324HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7323HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7322HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7321HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7320HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7319HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7318HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7317HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7316HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7315HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7314HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7313HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7312HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7311HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7310HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7309HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7308HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7307HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7306HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7305HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7304HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7303HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7302HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7301HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7300HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7299HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7298HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7297HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7296HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7295HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7294HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7293HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7292HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…