Skip to main content
CVE-2025-4468 May 09, 07:16 MEDIUM POC This Month

A vulnerability was found in SourceCodester Online Student Clearance System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload Online Student Clearance System Senior Walter
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.4%
CVE-2025-4457 May 09, 04:16 MEDIUM POC This Month

A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Car Rental Project Projectworlds
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4456 May 09, 04:16 MEDIUM POC This Month

A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Car Rental Project Projectworlds
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4492 May 09, 22:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Food Ordering System Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4491 May 09, 21:15 MEDIUM POC This Month

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Food Ordering System Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4490 May 09, 21:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Food Ordering System Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4489 May 09, 21:15 MEDIUM POC This Month

A vulnerability was found in Campcodes Online Food Ordering System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Food Ordering System Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4488 May 09, 20:15 MEDIUM POC This Month

A vulnerability was found in itsourcecode Gym Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Gym Management System Admerc
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4487 May 09, 20:15 MEDIUM POC This Month

A vulnerability was found in itsourcecode Gym Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Gym Management System Admerc
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4486 May 09, 20:15 MEDIUM POC This Month

A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical.php?action=delete_plan. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Gym Management System Admerc
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4485 May 09, 19:16 MEDIUM POC This Month

A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Gym Management System Admerc
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4481 May 09, 17:15 MEDIUM POC This Month

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Apartment Visitor Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4467 May 09, 07:16 MEDIUM POC This Month

A vulnerability was found in SourceCodester Online Student Clearance System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Student Clearance System Senior Walter
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4466 May 09, 06:15 MEDIUM POC This Month

A vulnerability was found in itsourcecode Gym Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Gym Management System Admerc
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4465 May 09, 06:15 MEDIUM POC This Month

A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Gym Management System Admerc
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4464 May 09, 06:15 MEDIUM POC This Month

A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Gym Management System Admerc
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4463 May 09, 05:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Gym Management System Admerc
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-28201 May 09, 16:15 MEDIUM POC This Month

An issue in Victure RX1800 EN_V1.0.0_r12_110933 allows physically proximate attackers to execute arbitrary code or gain root access. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass RCE Rx1800 Firmware Govicture
NVD
CVSS 3.1
6.8
EPSS
0.2%
CVE-2025-0549 May 09, 17:15 MEDIUM POC This Month

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.3 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Authentication Bypass Gitlab
NVD
CVSS 3.1
6.8
EPSS
0.1%
CVE-2025-4459 May 09, 04:16 MEDIUM POC This Month

A vulnerability was found in code-projects Patient Record Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Patient Record Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-4458 May 09, 04:16 MEDIUM POC This Month

A vulnerability was found in code-projects Patient Record Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Patient Record Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-4460 May 09, 04:16 MEDIUM POC This Month

A vulnerability classified as problematic has been found in TOTOLINK N150RT 3.4.0-B20190525. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS N150rt Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.2%
CVE-2025-4470 May 09, 07:16 MEDIUM POC This Month

A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Student Clearance System Senior Walter
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.2%
CVE-2025-4469 May 09, 07:16 MEDIUM POC This Month

A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Student Clearance System Senior Walter
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.2%
CVE-2025-4480 May 09, 17:15 MEDIUM POC This Month

A vulnerability was found in code-projects Simple College Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Simple College Management System Fabian
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4472 May 09, 08:15 MEDIUM POC This Month

A vulnerability was found in code-projects Departmental Store Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Departmental Store Management System Fabian
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4375 May 09, 06:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Sparx Systems Pro Cloud Server allows Cross-Site Request Forgery to perform Session Hijacking. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CSRF
NVD
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4382 May 09, 12:15 MEDIUM PATCH This Month

A flaw was found in systems utilizing LUKS-encrypted disks with GRUB configured for TPM-based auto-decryption. Rated medium severity (CVSS 5.9), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass
NVD VulDB
CVSS 3.1
5.9
EPSS
0.1%
CVE-2025-4443 May 09, 00:15 MEDIUM This Month

A vulnerability was found in D-Link DIR-605L 2.13B01. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection D-Link Dir 605l Firmware
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
1.7%
CVE-2025-37842 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-qspi: use devm function instead of driver remove Driver use devm APIs to manage clk/irq/resources and register the spi. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Linux Red Hat Linux Kernel Suse
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37855 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Guard Possible Null Pointer Dereference [WHY] In some situations, dc->res_pool may be null. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Denial Of Service Linux Null Pointer Dereference Red Hat Amd +2
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37889 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat platform_max as control value This reverts commit 9bdd10d57a88 ("ASoC: ops: Shift tested values in. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Linux Debian Red Hat Debian Linux +2
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37871 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sc_count directly if fail to queue dl_recall A deadlock warning occurred when invoking nfs4_put_stid following a. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Linux Debian Debian Linux
NVD VulDB
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37844 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: cifs: avoid NULL pointer dereference in dbg call cifs_server_dbg() implies server to be non-NULL so move call under condition to. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Denial Of Service Linux Null Pointer Dereference Debian Red Hat +3
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37887 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result If the FW doesn't support the PDS_CORE_CMD_FW_CONTROL command the. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Use of Uninitialized Resource vulnerability could allow attackers to access uninitialized memory causing crashes or information disclosure.

Denial Of Service Linux
NVD VulDB
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37886 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: pds_core: make wait_context part of q_info Make the wait_context a full part of the q_info struct rather than a stack variable that. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Linux Null Pointer Dereference
NVD VulDB
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37853 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: debugfs hang_hws skip GPU with MES debugfs hang_hws is used by GPU reset test with HWS, for MES this crash the kernel. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Linux Null Pointer Dereference Red Hat Linux Kernel +1
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37862 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidff_find_fields This function triggered a null pointer dereference if used to search. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Denial Of Service Linux Null Pointer Dereference Debian Red Hat +3
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37864 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: net: dsa: clean up FDB, MDB, VLAN entries on unbind As explained in many places such as commit b117e1e8a86d ("net: dsa: delete. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Linux
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37859 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: page_pool: avoid infinite loop to schedule delayed worker We noticed the kworker in page_pool_release_retry() was waken up. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Denial Of Service Linux Debian Red Hat Debian Linux +2
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37883 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Add check for get_zeroed_page() Add check for the return value of get_zeroed_page() in sclp_console_init() to prevent. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Linux Null Pointer Dereference Debian Red Hat +3
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37852 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() Add error handling to propagate. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Linux Null Pointer Dereference Debian Red Hat +3
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37856 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: btrfs: harden block_group::bg_list against list_del() races As far as I can tell, these calls of list_del_init() on bg_list cannot. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Linux
NVD VulDB
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37843 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Avoid unnecessary device replacement check Hot-removal of nested PCI hotplug ports suffers from a long-standing race. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Linux Red Hat Linux Kernel Suse
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-37876 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS When testing a special config: CONFIG_NETFS_SUPPORTS=y CONFIG_PROC_FS=n The. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Linux Null Pointer Dereference
NVD VulDB
CVSS 3.1
5.5
EPSS
0.0%
CVE-2025-37873 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted tx_prod to be free running but missed masking it. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Denial Of Service Linux
NVD VulDB
CVSS 3.1
5.5
EPSS
0.0%
CVE-2025-37870 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: prevent hang on link training fail [Why] When link training fails, the phy clock will be disabled. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Linux Red Hat Amd Linux Kernel +1
NVD
CVSS 3.1
5.5
EPSS
0.0%
CVE-2025-37857 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix array overflow in st_setup() Change the array size to follow parms size instead of a fixed value. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

Buffer Overflow Linux Integer Overflow Debian Red Hat +3
NVD
CVSS 3.1
5.5
EPSS
0.0%
CVE-2025-37841 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: pm: cpupower: bench: Prevent NULL dereference on malloc failure If malloc returns NULL due to low memory, 'config' pointer can be. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Linux Null Pointer Dereference Debian Red Hat +3
NVD
CVSS 3.1
5.5
EPSS
0.0%
CVE-2025-37884 May 09, 07:16 MEDIUM PATCH This Month

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock between rcu_tasks_trace and event_mutex. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Linux Debian Red Hat Debian Linux +2
NVD
CVSS 3.1
5.5
EPSS
0.0%
Page 1 of 2 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy