Archive
2 August 2025
Vulnerabilities first published on this day (UTC), newest first.
18 results · Clear filters · Feed
-
High 7.3
code-projects Intern Membership Management System delete_student.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /admin/delete_student.php. The manipulation of the argument ID leads to sql inje…
-
High 7.3
code-projects Intern Membership Management System edit_student_query.php sql injection
A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerability affects unknown code of the file /admin/edit_student_query.php. The manipulation of the argument ID leads to sql injection. The attac…
-
High 7.8
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause a stack b…
-
High 7.8
NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious…
-
High 7.0
NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that ca…
-
High 7.0
NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to es…
-
High 7.1
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index va…
-
High 7.3
NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could…
-
High 7.8
NVIDIA Installer for Windows contains a vulnerability where an attacker may be able to escalate privileges. A successfu…
-
High 7.3CVE-2025-8471 Public exploit
projectworlds Online Admission System adminlogin.php sql injection
A vulnerability, which was classified as critical, has been found in projectworlds Online Admission System 1.0. This issue affects some unknown processing of the file /adminlogin.php. The manipulation of the argument a_id leads to sql injection. The attack ma…
-
High 7.3
SourceCodester Online Hotel Reservation System deleteroom.php sql injection
A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /admin/deleteroom.php. The manipulation of the argument ID leads to sql injection. The attack can be in…
-
High 7.3
SourceCodester Online Hotel Reservation System deletegallery.php sql injection
A vulnerability classified as critical has been found in SourceCodester Online Hotel Reservation System 1.0. This affects an unknown part of the file /admin/deletegallery.php. The manipulation of the argument ID leads to sql injection. It is possible to initi…
-
High 7.3
code-projects Wazifa System reset.php sql injection
A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /controllers/reset.php. The manipulation of the argument email leads to sql injection. The attack may…
-
High 7.3
code-projects Wazifa System regcontrol.php sql injection
A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /controllers/regcontrol.php. The manipulation of the argument Username leads to sql injectio…
-
High 7.3
code-projects Online Farm System forgot_passfarmer.php sql injection
A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /forgot_passfarmer.php. The manipulation of the argument email leads to sql injection. It is possible to launch …
-
High 8.8
SEO Metrics <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
The SEO Metrics plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks in both the seo_metrics_handle_connect_button_click() AJAX handler and the seo_metrics_handle_custom_endpoint() function in all versions up to, and …
-
High 8.8
CVE-2025-6076
Partner Software's Partner Software application and Partner Web application do not sanitize files uploaded on the "reports" tab, allowing an authenticated attacker to upload a malicious file and compromise the device. By default, the software runs as SYSTEM, …
-
High 8.1
OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race …