快速搜索提示：
按厂商查询（如：microsoft）|
按产品查询（如：microsoft sql_server）
漏洞列表 353262
| CVE ID | 标题 | 严重程度 | CVSS | 发布时间 | 受影响产品 | 数据源 | 操作 |
|---|---|---|---|---|---|---|---|
| CVE-2025-13423 |
Campcodes Retro Basketball Shoes Online Store admin_product.php unrestricted upload
|
MEDIUM | 5.1 | 2025-11-19 |
Campcodes Retro Basketball Shoes Online Store
campcodes retro_basketball_shoes_online_store
|
CVE NVD | |
| CVE-2025-13422 |
freeprojectscodes Sports Club Management System change_s_pwd.php sql injection
|
MEDIUM | 6.9 | 2025-11-19 |
freeprojectscodes Sports Club Management System
darkseid sports_club_management_system
|
CVE NVD | |
| CVE-2025-13421 |
itsourcecode Human Resource Management System NoticeStore.php sql injection
|
MEDIUM | 6.9 | 2025-11-19 |
itsourcecode Human Resource Management System
angeljudesuarez human_resource_management_system
|
CVE NVD | |
| CVE-2025-13420 |
itsourcecode Human Resource Management System EventStore.php sql injection
|
MEDIUM | 6.9 | 2025-11-19 |
itsourcecode Human Resource Management System
angeljudesuarez human_resource_management_system
|
CVE NVD | |
| CVE-2025-13415 |
icret EasyImages SVG Image upload.php cross site scripting
|
MEDIUM | 5.1 | 2025-11-19 |
icret EasyImages
icret EasyImages
+6个
|
CVE NVD | |
| CVE-2025-11001 |
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
|
HIGH | 7.0 | 2025-11-19 |
7-Zip 7-Zip
7-zip 7-zip
|
CVE NVD | |
| CVE-2025-11884 |
Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB
|
LOW | 2.3 | 2025-11-19 |
OpenText™ uCMDB
|
CVE NVD | |
| CVE-2025-13412 |
Campcodes Retro Basketball Shoes Online Store admin_running.php cross site scripting
|
MEDIUM | 4.8 | 2025-11-19 |
Campcodes Retro Basketball Shoes Online Store
campcodes retro_basketball_shoes_online_store
|
CVE NVD | |
| CVE-2025-13147 |
External Service Interaction (DNS)
|
MEDIUM | 5.3 | 2025-11-19 |
Progress MOVEit Transfer
progress moveit_transfer
|
CVE NVD | |
| CVE-2025-47914 |
Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent
|
MEDIUM | 5.3 | 2025-11-19 |
golang.org/x/crypto golang.org/x/crypto/ssh/agent
golang crypto
|
CVE NVD | |
| CVE-2025-58181 |
Unbounded memory consumption in golang.org/x/crypto/ssh
|
MEDIUM | 5.3 | 2025-11-19 |
golang.org/x/crypto golang.org/x/crypto/ssh
golang crypto
|
CVE NVD | |
| CVE-2025-13411 |
Campcodes Retro Basketball Shoes Online Store admin_football.php unrestricted upload
|
MEDIUM | 5.1 | 2025-11-19 |
Campcodes Retro Basketball Shoes Online Store
campcodes retro_basketball_shoes_online_store
|
CVE NVD | |
| CVE-2025-13410 |
Campcodes Retro Basketball Shoes Online Store receipt.php sql injection
|
MEDIUM | 6.9 | 2025-11-19 |
Campcodes Retro Basketball Shoes Online Store
campcodes retro_basketball_shoes_online_store
|
CVE NVD | |
| CVE-2025-36371 |
IBM i 安全漏洞
|
MEDIUM | 6.5 | 2025-11-19 |
IBM i
IBM i
+8个
|
CVE NVD +1 | |
| CVE-2025-65103 |
OpenSTAManager has an authenticated SQL Injection vulnerability in API via 'display' parameter
|
HIGH | 8.8 | 2025-11-19 |
devcode-it openstamanager
|
CVE NVD | |
| CVE-2025-65094 |
WBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation (IDOR)
|
HIGH | 8.7 | 2025-11-19 |
WBCE WBCE_CMS
wbce wbce_cms
|
CVE NVD | |
| CVE-2025-65100 |
Security Snapshot May Use Unintended Timestamp When Only ISAR_APT_SNAPSHOT_DATE Is Set
|
MEDIUM | 6.9 | 2025-11-19 |
ilbers isar
|
CVE NVD | |
| CVE-2025-64759 |
Homarr is Vulnerable to Stored Cross-Site Scripting (XSS) and Possible Privilege Escalation via Malicious SVG Upload
|
HIGH | 8.1 | 2025-11-19 |
homarr-labs homarr
|
CVE NVD | |
| CVE-2025-13316 |
Hard-coded encryption keys in Twonky Server
|
HIGH | 8.2 | 2025-11-19 |
Lynxtechnology Twonky Server
lynxtechnology twonky_server
|
CVE NVD | |
| CVE-2025-13315 |
Unauthenticated log access in Twonky Server
|
CRITICAL | 9.3 | 2025-11-19 |
Lynxtechnology Twonky Server
lynxtechnology twonky_server
|
CVE NVD |