Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

9.8

CRITICAL

CVE-2025-7179

A vulnerability classified as critical was found in code-projects Library System 1.0. This vulnerability affects unknown code of the file /add-teacher.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remot...

Affected Products : library_system
Published: Jul. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Injection
9.8

CRITICAL

CVE-2025-7178

A vulnerability classified as critical has been found in code-projects Food Distributor Site 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the a...

Affected Products : food_distributor_site
Published: Jul. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Injection
7.2

HIGH

CVE-2025-7177

A vulnerability was found in PHPGurukul Car Washing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/editcar-washpoint.php. The manipulation of the argument wpid leads to sql inj...

Affected Products : car_washing_management_system
Published: Jul. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Injection
9.8

CRITICAL

CVE-2025-7176

A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file view-medhistory.php. The manipulation of the argument viewid leads to sql inje...

Affected Products : hospital_management_system hospital_management_system hospital_management_system
Published: Jul. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Injection
7.2

HIGH

CVE-2025-7175

A vulnerability was found in code-projects E-Commerce Site 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/users_photo.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to ...

Affected Products : e-commerce_site
Published: Jul. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Authentication
9.8

CRITICAL

CVE-2025-7174

A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file /teacher-issue-book.php. The manipulation of the argument idn leads to sql injection. The attack may be initia...

Affected Products : library_system
Published: Jul. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Injection
9.8

CRITICAL

CVE-2025-7165

A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injec...

Affected Products : cyber_cafe_management_system
Published: Jul. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Injection
9.8

CRITICAL

CVE-2025-7164

A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument Username leads to sql i...

Affected Products : cyber_cafe_management_system
Published: Jul. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Injection
8.8

HIGH

CVE-2025-7149

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/candidates_delete.php. The manipulation of the argument ID leads to sql injection. It is possible...

Affected Products : advanced_online_voting_system
Published: Jul. 07, 2025

Modified: Jul. 08, 2025

Vuln Type: Injection
8.8

HIGH

CVE-2025-7150

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/voters_delete.php. The manipulation of the argument ID leads to sql injection. The attac...

Affected Products : advanced_online_voting_system
Published: Jul. 07, 2025

Modified: Jul. 08, 2025

Vuln Type: Injection
8.8

HIGH

CVE-2025-7151

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/voters_add.php. The manipulation of the argument photo leads to unrestricted upload. The...

Affected Products : advanced_online_voting_system
Published: Jul. 07, 2025

Modified: Jul. 08, 2025

Vuln Type: Authentication
7.5

HIGH

CVE-2025-27484

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products
Published: Apr. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Information Disclosure
7.8

HIGH

CVE-2025-27483

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_1507 windows windows_server_2012_r2
Published: Apr. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Memory Corruption
8.1

HIGH

CVE-2025-27482

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2016 windows_server_2019 windows_server_2022 windows windows_server_2022_23h2 windows_server_23h2 windows_server_2025
Published: Apr. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Information Disclosure
8.8

HIGH

CVE-2025-27481

Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products
Published: Apr. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Memory Corruption
8.8

HIGH

CVE-2025-7152

A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unknown function of the file /admin/candidates_add.php. The manipulation of the argument photo leads to unrestricted upload. It is possibl...

Affected Products : advanced_online_voting_system
Published: Jul. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Authentication
8.1

HIGH

CVE-2025-27480

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows windows_server_2022_23h2 windows_server_23h2 windows_server_2012_r2 windows_server_2025
Published: Apr. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Memory Corruption
7.5

HIGH

CVE-2025-27479

Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows windows_server_2022_23h2 windows_server_23h2 windows_server_2012_r2 windows_server_2025
Published: Apr. 08, 2025

Modified: Jul. 08, 2025
7.0

HIGH

CVE-2025-27478

Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products
Published: Apr. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Memory Corruption
8.8

HIGH

CVE-2025-27477

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products
Published: Apr. 08, 2025

Modified: Jul. 08, 2025

Vuln Type: Memory Corruption

Showing 20 of 293604 Results

1
...
708
709
710
711
712
713
714
...
14681

Browse by Apps

Latest CVE Feed

9.8

9.8

7.2

9.8

7.2

9.8

9.8

9.8

8.8

8.8

8.8

7.5

7.8

8.1

8.8

8.8

8.1

7.5

7.0

8.8

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable