CVEs published January 16, 2025
299 CVEs were published on January 16, 2025: 21 critical, 137 high.
- Published
- 299
- Critical
- 21
- High
- 137
- Medium
- 137
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 20
Most affected products
- librenms · librenms/librenms
- 5
- t2bot matrix-media-repo · github.com/t2bot/matrix-media-repo
- 5
- coder426 Passwords Manager
- 3
- NetVision Information airPASS
- 3
- PMB Services PMB platform
- 3
- Chris Roberts Annie
- 2
- ivobrett Apply with LinkedIn buttons
- 2
- Mattermost
- 2
- _rccoder_ wp_amaps
- 1
- albdesign Simple Project Manager
- 1
Critical 21
- CVE-2025-23922WordPress iSpring Embedder plugin <= 1.0 - CSRF to Arbitrary File Upload vulnerabilityHarsh iSpring Embedder
- CVE-2025-23797WordPress WP Options Editor plugin <= 1.1 - CSRF to Privilege Escalation vulnerabilityMike Selander WP Options Editor
- CVE-2025-0471Unrestricted Upload of File with Dangerous Type vulnerability in PMB platformPMB Services PMB platform
- CVE-2025-0456NetVision Information airPASS - Missing AuthenticationNetVision Information airPASS
- CVE-2025-0455NetVision Information airPASS - SQL injectionNetVision Information airPASS
- CVE-2024-53553An issue in OPEXUS FOIAXPRESS PUBLIC ACCESS LINK v11.1.0 allows attackers to bypass authentication via crafted web requests.
- CVE-2024-57575Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
- CVE-2024-57579Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the limitSpeedUp parameter in the formSetClientState function.
- CVE-2024-57580Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
- CVE-2024-57581Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.
- CVE-2024-57582Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the startIP parameter in the formSetPPTPServer function.
- CVE-2024-57583Tenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the usbName parameter in the formSetSambaConf functi
- CVE-2024-57684An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the D
- CVE-2024-57768JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component validRoleKey?sysRole.key.
- CVE-2025-22904RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.
- CVE-2025-22905RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp.
- CVE-2025-22906RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN.
- CVE-2025-22907RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function.
- CVE-2025-22912RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.
- CVE-2025-22913RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function.
- CVE-2025-22916RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function.
High 137
- CVE-2025-23815WordPress root Cookie plugin <= 1.6 - CSRF to Stored XSS vulnerabilitylinickx root Cookie
- CVE-2025-23793WordPress Auto FTP plugin <= 1.0.1 - CSRF to Stored Cross-Site Scripting vulnerabilityCiprian Turcu Auto FTP
- CVE-2025-23760WordPress Chatter plugin <= 1.0.1 - CSRF to Stored XSS vulnerabilityAlex Volkov Chatter
- CVE-2025-23915WordPress FAT Event Lite plugin <= 1.1 - Authenticated Non-Arbitrary Local File Inclusion vulnerabilityroninwp FAT Event Lite
- CVE-2025-23912WordPress WordPress Custom Sidebar Plugin <= 2.3 - SQL Injection vulnerabilityPhilipp Speck WordPress Custom Sidebar
- CVE-2025-23901WordPress GravatarLocalCache plugin <= 1.1.2 - CSRF to Stored XSS vulnerabilitycybio GravatarLocalCache
- CVE-2025-23913WordPress Google Map Professional Plugin <= 1.0 - SQL Injection vulnerabilitypankajpragma WordPress Google Map Professional
- CVE-2025-23911WordPress Solidres – Hotel booking plugin for WordPress Plugin <= 0.9.4 - SQL Injection vulnerabilitySolidres – Hotel booking plugin
- CVE-2025-23900WordPress Genki Announcement plugin <= 1.4.1 - CSRF to Stored XSS vulnerabilitygenkisan Genki Announcement
- CVE-2025-23902WordPress Error Notification plugin <= 0.2.7 - CSRF to Stored XSS vulnerabilityTaras Dashkevych Error Notification
- CVE-2025-23898WordPress Apply with LinkedIn buttons plugin <= 2.3 - CSRF to Stored XSS vulnerabilityivobrett Apply with LinkedIn buttons
- CVE-2025-23884WordPress Annie plugin <= 2.1.1 - CSRF to Stored XSS vulnerabilityChris Roberts Annie
- CVE-2025-23895WordPress Add RSS plugin <= 1.5 - CSRF to Stored XSS vulnerabilityDan Cameron Add RSS
- CVE-2025-23875WordPress Better Protected Pages plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerabilitymadeglobal Better Protected Pages
- CVE-2025-23880WordPress amr personalise plugin <= 2.10 - CSRF to Stored XSS vulnerabilityanmari amr personalise
- CVE-2025-23872WordPress PayForm plugin <= 2.0 - CSRF to Stored XSS vulnerabilityPayForm
- CVE-2025-23871WordPress LSD Google Maps Embedder plugin <= 1.1 - CSRF to Stored XSS vulnerabilityBas Matthee LSD Google Maps Embedder
- CVE-2025-23870WordPress Copyright Safeguard Footer Notice plugin <= 3.0 - CSRF to Stored Cross Site Request Forgery (CSRF) vulnerabilitywygk Copyright Safeguard Footer Notice
- CVE-2025-23869WordPress CJ Custom Content plugin <= 2.0 - CSRF to Cross-Site Scripting vulnerabilityshibulijack CJ Custom Content
- CVE-2025-23861WordPress Debt Calculator plugin <= 1.0.1 - CSRF to Stored XSS vulnerabilityZack Katz Debt Calculator
- CVE-2025-23848WordPress Hotspots Analytics plugin <= 4.0.12 - CSRF to Stored XSS vulnerabilitydpowney Hotspots Analytics
- CVE-2025-23842WordPress WordPress Gallery Plugin plugin <= 1.4 - CSRF to Stored XSS vulnerabilityNilesh Shiragave WordPress Gallery Plugin
- CVE-2025-23844WordPress Custom Widget Classes plugin <= 1.1 - CSRF to Stored XSS vulnerabilityJamsheer K Custom Widget Classes
- CVE-2025-23828WordPress WordPress Data Guard [Website Security] plugin <= 8 - CSRF to Stored XSS vulnerabilitysindhi WordPress Data Guard
- CVE-2025-23826WordPress Stop Comment Spam plugin <= 0.5.3 - CSRF to Stored XSS vulnerabilitypedjas Stop Comment Spam
- CVE-2025-23823WordPress CNZZ&51LA for WordPress plugin <= 1.0.1 - CSRF to Stored XSS vulnerabilityjprintf CNZZ&51LA for WordPress
- CVE-2025-23821WordPress WP Cookies Alert plugin <= 1.1.1 - CSRF to Stored XSS vulnerabilityaleapp WP Cookies Alert
- CVE-2025-23832WordPress Admin Cleanup plugin <= 1.0.2 - CSRF to Stored XSS vulnerabilityMatt Gibbs Admin Cleanup
- CVE-2025-23820WordPress Content Security Policy Pro plugin <= 1.3.5 - CSRF to Stored XSS vulnerabilitythapa.laxman Content Security Policy Pro
- CVE-2025-23827WordPress Strx Magic Floating Sidebar Maker plugin <= 1.4.1 - CSRF to Stored XSS vulnerabilitystraps Strx Magic Floating Sidebar Maker
- CVE-2025-23818WordPress More Link Modifier plugin <= 1.0.3 - CSRF to Cross-Site Scripting vulnerabilitypyko More Link Modifier
- CVE-2025-23822WordPress Category Custom Fields plugin <= 1.0 - CSRF to Stored XSS vulnerabilityalicornea Category Custom Fields
- CVE-2025-23808WordPress Custom List Table Example Plugin <=1.4.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilityDutch van Andel Custom List Table Example
- CVE-2025-23805WordPress SEOReseller Partner plugin <= 1.3.15 - CSRF to Stored XSS vulnerabilityitamarg SEOReseller Partner
- CVE-2025-23817WordPress MHR-Custom-Anti-Copy plugin <= 2.0 - CSRF to Stored Cross Site Request Forgery (CSRF) vulnerabilitymahadirz MHR-Custom-Anti-Copy
- CVE-2025-23810WordPress Len Slider Plugin <= 2.0.11 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilityIgor Sazonov Len Slider
- CVE-2025-23801WordPress Style Admin Plugin <= 1.4.3 - CSRF to Stored XSS vulnerabilityFuzzGuard Style Admin
- CVE-2025-23804WordPress WP Service Payment Form With Authorize.net Plugin <= 2.6.0 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilityShiv Prakash Tiwari WP Service Payment Form With Authorize.…
- CVE-2025-23800WordPress OrangeBox plugin <= 3.0.0 - CSRF to Stored XSS vulnerabilitynova706 OrangeBox
- CVE-2025-23780WordPress Easy Code Snippets Plugin <= 1.0.2 - SQL Injection vulnerabilityAlpha BPO Easy Code Snippets
- CVE-2025-23779WordPress ResAds Plugin <= 2.0.5 - SQL Injection vulnerabilityweb-mv ResAds
- CVE-2025-23749WordPress mybb Last Topics plugin <= 1.0 - CSRF to Stored XSS vulnerabilityprogpars.net mybb Last Topics
- CVE-2025-23713WordPress Hack me if you can plugin <= 1.2 - CSRF to Stored XSS vulnerabilityartanik Hack me if you can
- CVE-2025-23745WordPress Call me Now plugin <= 1.0.5 - CSRF to Stored XSS vulnerabilityTussendoor B.V. Call me Now
- CVE-2025-23743WordPress Social Analytics plugin <= 0.2 - CSRF to Stored XSS vulnerabilityMartijnScheijbeler Social Analytics
- CVE-2025-23717WordPress Theme My Ontraport Smartform plugin <= 1.2.11 - CSRF to Stored XSS vulnerabilityitmooti Theme My Ontraport Smartform
- CVE-2025-23720WordPress Web Push plugin <= 1.4.0 - CSRF to Stored XSS vulnerabilityMarco Castelluccio Web Push
- CVE-2025-23702WordPress Anonymize Links plugin <= 1.1 - CSRF to Stored XSS vulnerabilitySchalk Burger Anonymize Links
- CVE-2025-23712WordPress Kapost plugin <= 2.2.9 - CSRF to Stored XSS vulnerabilitykapostintegrations Kapost
- CVE-2025-23715WordPress Post & Page Notes plugin <= 0.1.1 - CSRF to Stored XSS vulnerabilityRaymondDesign Post & Page Notes
- CVE-2025-23703WordPress Free MailClient FMC plugin <= 1.0 - CSRF to Stored XSS vulnerabilitycstoltenkamp Free MailClient FMC
- CVE-2025-23710WordPress Flying Twitter Birds plugin <= 1.8 - CSRF to Stored XSS vulnerabilityMayur Sojitra Flying Twitter Birds
- CVE-2025-23708WordPress DF Draggable plugin <= 1.13.2 - CSRF to Stored XSS vulnerabilityDominic Fallows DF Draggable
- CVE-2025-23698WordPress WP Custom Google Search plugin <= 1.0 - CSRF to Stored XSS vulnerabilityivanra10 WP Custom Google Search
- CVE-2025-23694WordPress Shabbos and Yom Tov plugin <= 1.9 - CSRF to Stored XSS vulnerabilityshabboscommerce Shabbos and Yom Tov
- CVE-2025-23699WordPress Event Countdown Timer Plugin by TechMix plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEvent Countdown Timer Plugin by TechMix
- CVE-2025-23692WordPress Slider for Writers plugin <= 1.3 - CSRF to Stored XSS vulnerabilityartanik Slider for Writers
- CVE-2025-23690WordPress Book a Place plugin <= 0.7.1 - CSRF to Stored XSS vulnerabilityArtkanMedia Book a Place
- CVE-2025-23675WordPress Import Users to MailChimp plugin <= 1.0 - CSRF to Stored XSS vulnerabilitySana Ullah Import Users to MailChimp
- CVE-2025-23689WordPress Blogger Image Import plugin <= 2.1 - CSRF to Stored XSS vulnerabilityPoco Blogger Image Import
- CVE-2025-23677WordPress HTTP to HTTPS link changer by Eyga.net plugin <= 0.2.4 - CSRF to Stored XSS vulnerabilityDSmidge HTTP to HTTPS link changer by Eyga.net
- CVE-2025-23673WordPress Email on Publish plugin <= 1.5 - CSRF to Stored XSS vulnerabilitydkukral Email on Publish
- CVE-2025-23693WordPress Secure CAPTCHA plugin <= 1.2 - CSRF to Stored XSS vulnerabilityuosiu Secure CAPTCHA
- CVE-2025-23691WordPress Send to Twitter plugin <= 1.7.2 - CSRF to Stored XSS vulnerabilityBraulio Aquino Send to Twitter
- CVE-2025-23665WordPress RSV GMaps plugin <= 1.5 - CSRF to Stored XSS vulnerabilityRavi Kumar Vanukuru RSV GMaps
- CVE-2025-23661WordPress NV Slider plugin <= 1.6 - CSRF to Stored Cross-Site Scripting vulnerabilityryscript NV Slider
- CVE-2025-23649WordPress Auphonic Importer plugin <= 1.5.1 - CSRF to Stored XSS vulnerabilityKreg Steppe Auphonic Importer
- CVE-2025-23654WordPress Twitter Post plugin <= 0.1 - CSRF to Stored XSS vulnerabilitykrolow Twitter Post
- CVE-2025-23664WordPress Real Seguro Viagem plugin <= 2.0.5 - CSRF to Stored Cross-Site Scripting vulnerabilityReal Seguro Viagem
- CVE-2025-23660WordPress MFPlugin plugin <= 1.3 - CSRF to Cross-Site Scripting vulnerabilitywaltercerrudo MFPlugin
- CVE-2025-23662WordPress WP Panoramio plugin <= 1.5.0 - CSRF to Cross-Site Scripting vulnerabilityryscript WP Panoramio
- CVE-2025-23659WordPress MercadoLibre Integration plugin <= 1.1 - CSRF to Stored Cross-Site Scripting vulnerabilityhernanjh MercadoLibre Integration
- CVE-2025-23640WordPress Rename Author Slug plugin <= 1.2.0 - CSRF to Stored XSS vulnerabilityNazmul Ahsan Rename Author Slug
- CVE-2025-23623WordPress Contact Form 7 – CCAvenue Add-on plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityMahesh Bisen Contact Form 7 – CCAvenue Add-on
- CVE-2025-23627WordPress Comment-Emailer plugin <= 1.0.5 - CSRF to Stored Cross-Site Scripting vulnerabilityfrenchsquared Comment-Emailer
- CVE-2025-23639WordPress MDC YouTube Downloader plugin <= 3.0.0 - CSRF to Stored XSS vulnerabilityNazmul Ahsan MDC YouTube Downloader
- CVE-2025-23573WordPress WP Background Tile plugin <= 1.0 - CSRF to Stored XSS vulnerabilitysammyb WP Background Tile
- CVE-2025-23618WordPress Twitter Shortcode plugin <= 0.9 - CSRF to Stored Cross-Site Scripting vulnerabilitystarise Twitter Shortcode
- CVE-2025-23577WordPress Word Freshener plugin <= 1.3 - CSRF to Stored XSS vulnerabilitySourov Amin Word Freshener
- CVE-2025-23559WordPress MemeOne plugin <= 2.0.5 - CSRF to Stored XSS vulnerabilityStepan Stepasyuk MemeOne
- CVE-2025-23617WordPress Floatbox Plus plugin <= 1.4.4 - CSRF to Stored XSS vulnerabilitycybio Floatbox Plus
- CVE-2025-23567WordPress GDReseller plugin <= 1.6 - CSRF to Stored XSS vulnerabilityTamer Ziady GDReseller
- CVE-2025-23547WordPress LH Login Page plugin <= 2.14 - Reflected Cross Site Scripting (XSS) vulnerabilityshawfactor LH Login Page
- CVE-2025-23569WordPress Shortcode in Comment plugin <= 1.1.1 - CSRF to Stored XSS vulnerabilityKelvin Ng Shortcode in Comment
- CVE-2025-23620WordPress Captchelfie – Captcha by Selfie plugin <= 1.0.7 - Reflected Cross Site Scripting (XSS) vulnerabilitytrof Captchelfie – Captcha by Selfie
- CVE-2025-23572WordPress UpDownUpDown plugin <= 1.1 - CSRF to Stored XSS vulnerabilityDave Konopka UpDownUpDown
- CVE-2025-23557WordPress Find Your Reps plugin <= 1.2 - CSRF to Stored XSS vulnerabilityKathleen Malone Find Your Reps
- CVE-2025-23560WordPress Web Testimonials plugin <= 1.2 - CSRF to Stored XSS vulnerabilityplumwd Web Testimonials
- CVE-2025-23566WordPress Custom Post plugin <= 1.0 - CSRF to Stored XSS vulnerabilitysyedamirhussain91 Custom Post
- CVE-2025-23528WordPress DD Roles plugin <= 4.1 - Privilege Escalation vulnerabilityMosterd3d DD Roles
- CVE-2025-23532WordPress MyAnime Widget plugin <= 1.0 - CSRF to Privilege Escalation vulnerabilityRegios MyAnime Widget
- CVE-2025-23558WordPress Geotagged Media plugin <= 0.3.0 - CSRF to Stored XSS vulnerabilitydigitalfisherman Geotagged Media
- CVE-2025-23537WordPress add custom google tag manager plugin <= 1.0.3 - CSRF to Stored Cross-Site Scripting vulnerabilityקידום ובניית אתרים add custom google tag manager
- CVE-2025-23510WordPress WordPress Logging Service plugin <= 1.5.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityJan Štětina WordPress Logging Service
- CVE-2025-23511WordPress WP-BlackCheck plugin <= 2.7.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityStargazer WP-BlackCheck
- CVE-2025-23530WordPress Custom Post Type Lockdown plugin <= 1.11 - CSRF to Privilege Escalation vulnerabilityyonisink Custom Post Type Lockdown
- CVE-2025-23533WordPress WP Lyrics plugin <= 0.4.1 - CSRF to Stored XSS vulnerabilityzetxek WP Lyrics
- CVE-2025-23513WordPress Bible Embed plugin <= 0.0.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityjd7777 Bible Embed
- CVE-2025-23499WordPress Board Election plugin <= 1.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityPascal Casier Board Election
- CVE-2025-23508WordPress Extra Options – Favicons plugin <= 1.1.0 - CSRF to Stored XSS vulnerabilityOrigoThemes Extra Options – Favicons
- CVE-2025-23501WordPress Cookie Consent & Autoblock for GDPR/CCPA plugin <= 1.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilitySpruceJoy Cookie Consent & Autoblock for GDPR/CCPA
- CVE-2025-23435WordPress Password Protect Plugin for WordPress plugin <= 0.8.1.0 - CSRF to Stored XSS vulnerabilitymarcucci Password Protect Plugin for WordPress
- CVE-2025-23452WordPress EditionGuard for WooCommerce plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEditionGuard for WooCommerce – eBook Sales with DRM
- CVE-2025-23438WordPress WP PT-Viewer plugin <= 2.0.2 - Reflected XSS vulnerabilityVincent Mimoun-Prat WP PT-Viewer
- CVE-2025-23497WordPress Simple Project Manager plugin <= 1.2.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityalbdesign Simple Project Manager
- CVE-2025-23471WordPress ECT Add to Cart Button plugin <= 1.4 - CSRF to Stored XSS vulnerabilityetemplates ECT Add to Cart Button
- CVE-2025-23424WordPress Marquee Style RSS News Ticker plugin <= 3.2.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilitybnovotny Marquee Style RSS News Ticker
- CVE-2025-23426WordPress go Social plugin <= 1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityBinesh Dobhal go Social
- CVE-2025-23453WordPress Stars SMTP Mailer plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerabilityMyriad Solutionz Stars SMTP Mailer
- CVE-2025-23445WordPress Easy Tynt plugin <= 0.2.5.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityscottswezey Easy Tynt
- CVE-2025-23430WordPress Mass Custom Fields Manager plugin <= 1.5 - CSRF to Cross Site Scripting (XSS) vulnerabilityOren Yomtov Mass Custom Fields Manager
- CVE-2025-23455WordPress WP VTiger Synchronization plugin <= 1.1.1 - CSRF to Stored XSS vulnerabilityMaster Software Solutions WP VTiger Synchronization
- CVE-2025-23436WordPress Wp-Scribd-List plugin <= 1.2 - CSRF to XSS vulnerabilitycapa Wp-Scribd-List
- CVE-2025-23442WordPress Shockingly Big IE6 Warning plugin <= 1.6.3 - CSRF to Stored XSS vulnerabilitymschertel Shockingly Big IE6 Warning
- CVE-2025-23456WordPress EmailShroud plugin <= 2.2.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilityOddthinking EmailShroud
- CVE-2025-23476WordPress my-related-posts plugin <= 1.1 - CSRF to Stored XSS vulnerabilityisnowfy my-related-posts
- CVE-2025-23429WordPress Altima Lookbook Free for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerabilityaltima-interactive Altima Lookbook Free for WooCommerce
- CVE-2025-23483WordPress Universal Analytics Injector plugin <= 1.0.3 - CSRF to Stored XSS vulnerabilityhoyce Universal Analytics Injector
- CVE-2025-23463WordPress MD Custom content after or before of post plugin <= 1.0 - CSRF to Stored XSS vulnerabilityMukesh Dak MD Custom content after or before of post
- CVE-2025-23432WordPress AlT Report plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerabilityAlTi5 AlT Report
- CVE-2025-23470WordPress Visit Site Link enhanced plugin <= 1.0 - CSRF to Stored XSS vulnerabilityxavsio4 Visit Site Link enhanced
- CVE-2025-23467WordPress RSS News Scroller plugin <= 2.0.0 - CSRF to Stored XSS vulnerabilityvimal.ghorecha RSS News Scroller
- CVE-2024-55954OpenObserve Improper Authorization Allows Admin User to Remove Root Useropenobserve
- CVE-2024-41746IBM CICS TX cross-site scriptingIBM CICS TX Advanced · IBM CICS TX Standard
- CVE-2025-0472Information exposure vulnerability in PMB platformPMB Services PMB platform
- CVE-2018-25108WAGO: Denial of service in 750-8xx controller due to uncontrolled resource consumptionWAGO 750-8100 · WAGO 750-831 +2
- CVE-2024-12613Passwords Manager <= 1.4.8 - Unauthenticated SQL Injectioncoder426 Passwords Manager
- CVE-2024-12614Passwords Manager <= 1.4.8 - Missing Authorization to Authenticated (Subscriber+) Add Password + Update Encryption Keycoder426 Passwords Manager
- CVE-2025-0457NetVision Information airPASS - OS Command InjectionNetVision Information airPASS
- CVE-2024-46450Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authent
- CVE-2024-54660A JNDI injection issue was discovered in Cloudera JDBC Connector for Hive before 2.6.26 and JDBC Connector for Impala before 2.6.35.
- CVE-2024-55511A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows a local attacker to cause a system crash or potentially
- CVE-2024-57162Campcodes Cybercafe Management System v1.0 is vulnerable to SQL Injection in /ccms/view-user-detail.php.
- CVE-2024-57703Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability.
- CVE-2024-57769JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser.
- CVE-2024-57770JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component apply/save#oaContractApply.id.
- CVE-2024-57775JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid.
Medium, low and unrated 141
- CVE-2024-56144Stored XSS-LibreNMS-Display Name 2 in librenmslibrenms · librenms/librenms
- CVE-2025-23198Stored-XSS-LibreNMS-Display-Name in librenmslibrenms · librenms/librenms
- CVE-2025-23199Stored XSS-LibreNMS-Ports in librenmslibrenms · librenms/librenms
- CVE-2025-23200Stored XSS-LibreNMS-Misc Section in librenmslibrenms · librenms/librenms
- CVE-2025-23201Reflected Cross-site Scripting on error alert in librenmslibrenms · librenms/librenms
- CVE-2025-23907WordPress SOCIAL.NINJA plugin <= 0.2 - Cross Site Scripting (XSS) vulnerabilityclosed SOCIAL.NINJA
- CVE-2025-23764WordPress Copy Move Posts plugin <= 1.6 - Broken Access Control vulnerabilityujjavaljani Copy Move Posts
- CVE-2025-23816WordPress Metaphor Widgets plugin <= 2.4 - Stored Cross Site Scripting (XSS) vulnerabilitymetaphorcreations Metaphor Widgets
- CVE-2025-23761WordPress Woo Tuner plugin <= 0.1.2 - Broken Access Control vulnerabilityAlex Volkov Woo Tuner
- CVE-2025-23957WordPress Sur.ly plugin <= 3.0.3 - Broken Access Control vulnerabilitysurdotly Sur.ly
- CVE-2025-23965WordPress Kopa Nictitate Toolkit plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerabilitykopatheme Kopa Nictitate Toolkit
- CVE-2025-23961WordPress WordPress Graphs & Charts Plugin <= 2.0.8 - Broken Access Control vulnerabilitywptasker WordPress Graphs & Charts
- CVE-2025-23955WordPress Xola plugin <= 1.6 - Broken Access Control vulnerabilityXola
- CVE-2025-23963WordPress Mark Posts plugin <= 2.2.4 - Broken Access Control vulnerabilityflymke Mark Posts
- CVE-2025-23962WordPress Goldstar plugin <= 2.1.1 - Broken Access Control vulnerabilityjjtrabucco Goldstar
- CVE-2025-23954WordPress Salvador – AI Image Generator plugin <= 1.0.11 - Broken Access Control vulnerabilityawcode Salvador – AI Image Generator
- CVE-2025-23939WordPress Image Switcher plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityKHAN-IT Image Switcher
- CVE-2025-23950WordPress EZPlayer plugin <= 1.0.10 - Cross Site Scripting (XSS) vulnerabilityezmarketing EZPlayer
- CVE-2025-23943WordPress PDF.js Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityaruvi PDF.js Shortcode
- CVE-2025-23946WordPress Enhanced YouTube Shortcode plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerabilityLe-Pixel-Solitaire Enhanced YouTube Shortcode
- CVE-2025-23941WordPress MeinTurnierplan.de Widget Viewer plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityMeinTurnierplan.de Widget Viewer
- CVE-2025-23951WordPress Gallery: Hybrid – Advanced Visual Gallery plugin <= 1.4.0.2 - Cross Site Scripting (XSS) vulnerabilityDIVENGINE Gallery: Hybrid – Advanced Visual Gallery
- CVE-2025-23947WordPress WP-Player plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerabilityM.J WP-Player
- CVE-2025-23934WordPress Giveaways and Contests by PromoSimple plugin <= 1.24 - Cross Site Scripting (XSS) vulnerabilitySam Brodie Giveaways and Contests by PromoSimple
- CVE-2025-23940WordPress jupdf pdf viewer plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerabilityhoriyuki Image Switcher
- CVE-2025-23928WordPress Google Org Chart plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityAleksandar Arsovski Google Org Chart
- CVE-2025-23924WordPress WP Photo Sphere plugin <= 3.8 - Cross Site Scripting (XSS) vulnerabilityJeremy WP Photo Sphere
- CVE-2025-23935WordPress Magic Google Maps plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerabilityFengler Magic Google Maps
- CVE-2025-23933WordPress WpF Ultimate Carousel plugin <= 1.0.11 - Stored Cross Site Scripting (XSS) vulnerabilitywpfreeware WpF Ultimate Carousel
- CVE-2025-23930WordPress PayPal Marketing Solutions plugin <= 1.2 - Broken Access Control vulnerabilitypaypalmuse PayPal Marketing Solutions
- CVE-2025-23917WordPress Chamber Dashboard Business Directory Plugin <= 3.3.8 - Broken Access Control vulnerabilityChandrika Guntur, Morgan Kay Chamber Dashboard Business Dir…
- CVE-2025-23925WordPress Feedburner Optin Form plugin <= 0.2.8 - Stored Cross Site Scripting (XSS) vulnerabilityjp2112 Feedburner Optin Form
- CVE-2025-23936WordPress CC Circle Progress Bar plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityHarun R. Rayhan(thecrazycoder) CC Circle Progress Bar
- CVE-2025-23927WordPress Incredible Font Awesome plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerabilitymassimo.serpilli Incredible Font Awesome
- CVE-2025-23929WordPress Email Capture & Lead Generation Plugin <= 1.0.2 - Broken Access Control vulnerabilitywishfulthemes Email Capture & Lead Generation
- CVE-2025-23926WordPress Ajax WP Query Search Filter plugin <= 1.0.7 - Stored Cross Site Scripting (XSS) vulnerabilityTC.K Ajax WP Query Search Filter
- CVE-2025-23916WordPress WP Meetup plugin <= 2.3.0 - Settings Change vulnerabilityNuanced Media WP Meetup
- CVE-2025-23919WordPress Slides & Presentations Plugin <= 0.0.39 - Content Injection vulnerabilityElla Van Durpe Slides & Presentations
- CVE-2025-23909WordPress Compare Ninja plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerabilityCommon Ninja Compare Ninja
- CVE-2025-23908WordPress Pastebin plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilityRami Yushuvaev Pastebin
- CVE-2025-23899WordPress Bookalet plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilityBookalet
- CVE-2025-23897WordPress Apply with LinkedIn buttons plugin <= 2.3 - Cross Site Scripting (XSS) vulnerabilityivobrett Apply with LinkedIn buttons
- CVE-2025-23887WordPress Blog Summary plugin <= 0.1.2 β - Cross Site Scripting (XSS) vulnerabilityscottwallick Blog Summary
- CVE-2025-23891WordPress Yet Another Countdown Plugin plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityVincent Loy Yet Another Countdown
- CVE-2025-23892WordPress Progress Tracker plugin <= 0.9.3 - Cross Site Scripting (XSS) vulnerabilityAlex Furr Progress Tracker
- CVE-2025-23896WordPress Mindmeister Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilitythom4 Mindmeister Shortcode
- CVE-2025-23890WordPress Easy Tweet Embed plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilityTom Ewer Easy Tweet Embed
- CVE-2025-23876WordPress WP krpano plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerabilityNo-Nonsense WP krpano
- CVE-2025-23893WordPress GMap Shortcode plugin <= 2.0 - Cross Site Scripting (XSS) vulnerabilityManny Costales GMap Shortcode
- CVE-2025-23886WordPress Annie plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerabilityChris Roberts Annie
- CVE-2025-23878WordPress Post-to-Post Links plugin <= 4.2 - Cross Site Scripting (XSS) vulnerabilityScott Reilly Post-to-Post Links
- CVE-2025-23873WordPress Category D3 Tree plugin <= 1.1 - Stored Cross Site Scripting (XSS) vulnerabilityAnshi Solutions Category D3 Tree
- CVE-2025-23877WordPress Nite Shortcodes plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerabilitynitethemes Nite Shortcodes
- CVE-2025-23864WordPress WCS QR Code Generator plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerabilityLuke America WCS QR Code Generator
- CVE-2025-23868WordPress Chess Tempo Viewer plugin <= 0.9.5 - Stored Cross Site Scripting (XSS) vulnerabilitymliebelt Chess Tempo Viewer
- CVE-2025-23865WordPress Winning Portfolio plugin <= 1.1 - Stored Cross Site Scripting (XSS) vulnerabilitypressfore Winning Portfolio
- CVE-2025-23863WordPress Rollover Tab plugin <= 1.3.2 - Stored Cross Site Scripting (XSS) vulnerabilitySabaoh Rollover Tab
- CVE-2025-23854WordPress Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com plugin <= 3.3 - Cross Site Scripting (XSS) vulnerabilityyesstreamingdev Shoutcast and Icecast HTML5 Web Radio Playe…
- CVE-2025-23859WordPress Daily Proverb plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerabilityjd7777 Daily Proverb
- CVE-2025-23860WordPress Charity-thermometer plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilitycrea8xion Charity-thermometer
- CVE-2025-23862WordPress Contact Form 7 Anti Spambot plugin <= 1.0.1 - Broken Access Control vulnerabilitySzMake Contact Form 7 Anti Spambot
- CVE-2025-23856WordPress Simple Vertical Timeline plugin <= 0.1 - Cross Site Scripting (XSS) vulnerabilityOdyno Simple Vertical Timeline
- CVE-2025-23830WordPress JB Horizontal Scroller News Ticker plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityjobair JB Horizontal Scroller News Ticker
- CVE-2025-23841WordPress Top Flash Embed plugin <= 0.3.4 - Cross Site Scripting (XSS) vulnerabilityfoo123 Top Flash Embed
- CVE-2025-23831WordPress QR Code Generator plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilitymobstac QR Code Generator
- CVE-2025-23824WordPress FontAwesome.io ShortCodes plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityAlexander Weleczka FontAwesome.io ShortCodes
- CVE-2025-23833WordPress Links/Problem Reporter plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerabilityRaminMT Links/Problem Reporter
- CVE-2025-23825WordPress Easy Shortcode Buttons plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityosuthorpe Easy Shortcode Buttons
- CVE-2025-23807WordPress Spiderpowa Embed PDF plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityjim2212001 Spiderpowa Embed PDF
- CVE-2025-23795WordPress Easy FAQs plugin <= 3.2.1 - Stored Cross Site Scripting (XSS) vulnerabilityghuger Easy FAQs
- CVE-2025-23802WordPress WP-Revive Adserver Plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerabilitySteveSoehl WP-Revive Adserver
- CVE-2025-23796WordPress Easy Portfolio plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerabilityTushar Patel Easy Portfolio
- CVE-2025-23791WordPress Horizontal Line Shortcode Plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerabilitymikakaltoft Horizontal Line Shortcode
- CVE-2025-23794WordPress wp_amaps Plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability_rccoder_ wp_amaps
- CVE-2025-23785WordPress AI Responsive Gallery Album plugin <= 1.4 - Broken Access Control vulnerabilityAugust Infotech AI Responsive Gallery Album
- CVE-2025-23778WordPress User Sync ActiveCampaign plugin <= 1.3.2 - Broken Access Control vulnerabilityPravin Durugkar User Sync ActiveCampaign
- CVE-2025-23777WordPress GDPR Personal Data Reports Plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilitywillowsconsulting GDPR Personal Data Reports
- CVE-2025-23772WordPress imaGenius Plugin <= 1.7 - Stored Cross Site Scripting (XSS) vulnerabilityEugenio Petulla’ imaGenius
- CVE-2025-23775WordPress GMAPS for WPBakery Page Builder Free Plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityWWP GMAPS for WPBakery Page Builder Free
- CVE-2025-23765WordPress W3SPEEDSTER plugin <= 7.33 - Cross Site Request Forgery (CSRF) vulnerabilityW3SPEEDSTER
- CVE-2025-23776WordPress Cache Sniper for Nginx plugin <= 1.0.4.2 - Broken Access Control vulnerabilityekaterir Cache Sniper for Nginx
- CVE-2025-23783WordPress Greek Namedays Widget Plugin <= 20191113 - Cross Site Scripting (XSS) vulnerabilitycarrotbits Greek Namedays Widget From Eortologio.Net
- CVE-2025-23767WordPress Marmoset Viewer plugin <= 1.9.3 - Stored Cross Site Scripting (XSS) vulnerabilityrevoxis Marmoset Viewer
- CVE-2025-23644WordPress QuoteMedia Tools plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityjustin.kuepper QuoteMedia Tools
- CVE-2025-23642WordPress Sidebar-Content from Shortcode plugin <= 2.0 - Cross Site Scripting (XSS) vulnerabilitypflonk Sidebar-Content from Shortcode
- CVE-2025-23641WordPress Powie's pLinks PagePeeker plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerabilityPowieT Powie's pLinks PagePeeker
- CVE-2025-23514WordPress Loginplus plugin <= 1.2 - Broken Access Control vulnerabilitySanjay Prasad Loginplus
- CVE-2025-23434WordPress Easy EU Cookie law plugin <= 1.3.3.1 - Stored Cross Site Scripting (XSS) vulnerabilityviher3 Easy EU Cookie law
- CVE-2025-23444WordPress Scroll Top Advanced plugin <= 2.5 - Stored Cross Site Scripting (XSS) vulnerabilitynasir179125 Scroll Top Advanced
- CVE-2025-23423WordPress SendGrid for WordPress plugin <= 1.4 - Broken Access Control vulnerabilitySmackcoders Inc., SendGrid for WordPress
- CVE-2024-56136/api/v1/jwt/fetch_api_key endpoint can leak if an email address has an account in Zulip serverzulip
- CVE-2024-36402Unauthenticated writes to the media repository allow planting of problematic content in Matrix Media Repot2bot matrix-media-repo · github.com/t2bot/matrix-media-repo
- CVE-2024-36403Denial of service/high operating costs through unauthenticated downloads in Matrix Media Repot2bot matrix-media-repo · github.com/t2bot/matrix-media-repo
- CVE-2024-52602Server-Side Request Forgery (SSRF) on redirects and federation in Matrix Media Repot2bot matrix-media-repo · github.com/t2bot/matrix-media-repo
- CVE-2024-52791Denial of service through memory exhaustion in Matrix Media Repot2bot matrix-media-repo · github.com/t2bot/matrix-media-repo
- CVE-2024-56515Untrusted file formats can be thumbnailed, invoking potentially further untrusted decoders in Matrix Media Repot2bot matrix-media-repo · github.com/t2bot/matrix-media-repo
- CVE-2024-52594Server-Side Request Forgery (SSRF) on redirects and federation in gomatrixserverlibmatrix-org gomatrixserverlib · github.com/matrix-org/gomatr…
- CVE-2025-20630Mobile crash via object that can't be cast to String in Attachment FieldMattermost
- CVE-2025-20621Webapp crash via object that can't be cast to String in Attachment FieldMattermost · github.com/mattermost/mattermost-server +3
- CVE-2024-37181Time-of-check time-of-use race condition in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to Intel(R) Neural Compressor software
- CVE-2025-20072Mobile crash via improper validation of proto style in attachmentsMattermost
- CVE-2025-0518Unchecked sscanf return value which leads to memory data leakFFmpeg
- CVE-2025-0473Incomplete Cleanup vulnerability in PMB platformPMB Services PMB platform
- CVE-2024-12427Multi Step Form <= 1.7.23 - Missing Authorization to Unauthenticated Limited File Uploadmondula2016 Multi Step Form
- CVE-2024-12615Passwords Manager <= 1.4.8 - Authenticated (Subscriber+) SQL Injectioncoder426 Passwords Manager
- CVE-2024-13355Admin and Customer Messages After Order for WooCommerce <= 13.2 - Authenticated (Subscriber+) Limited File Upload to Cross-Site Scriptingnmedia Admin and Customer Messages After Order for WooComme…
- CVE-2024-13387WP Responsive Tabs <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingfahadmahmood WP Responsive Tabs
- CVE-2024-50563A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud vFortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2024-48885A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1Fortinet FortiVoice · Fortinet FortiRecorder +1
- CVE-2024-45331A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzFortinet FortiAnalyzer Cloud · Fortinet FortiManager +1
- CVE-2024-12226In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in cleOctopus Deploy Kubernetes Worker or Kubernetes Agent
- CVE-2024-10789WP User Profile Avatar <= 1.0.5 - Cross-Site Request Forgery to Settings Updatewpeventmanager WP User Profile Avatar
- CVE-2024-11452Chamber Dashboard Business Directory <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scriptinggwendydd Chamber Dashboard Business Directory
- CVE-2024-10970Motors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Titlestylemix Motors – Car Dealership & Classified Listings Plug…
- CVE-2025-0170DWT - Directory & Listing WordPress Theme <= 3.3.3 - Reflected Cross-Site Scriptingscriptsbundle DWT - Directory & Listing WordPress Theme
- CVE-2024-40513An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function.
- CVE-2024-40514Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name
- CVE-2024-48460An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and passtabby-ssh
- CVE-2024-50633A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted PCERN Indico · indico
- CVE-2024-5715907FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html.
- CVE-2024-5716007FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html.
- CVE-2024-5716107FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html
- CVE-2024-57577Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
- CVE-2024-57578Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function.
- CVE-2024-5761107FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId.
- CVE-2024-57676An access control issue in the component form2WlanBasicSetup.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers
- CVE-2024-57677An access control issue in the component form2Wan.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the
- CVE-2024-57678An access control issue in the component form2WlAc.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the
- CVE-2024-57679An access control issue in the component form2RepeaterSetup.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers t
- CVE-2024-57680An access control issue in the component form2PortriggerRule.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers
- CVE-2024-57681An access control issue in the component form2alg.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the
- CVE-2024-57682An information disclosure vulnerability in the component d_status.asp of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attac
- CVE-2024-57683An access control issue in the component websURLFilterAddDel of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to s
- CVE-2024-57704Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability.
- CVE-2024-57771A cross-site scripting (XSS) vulnerability in the common/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execu
- CVE-2024-57772A cross-site scripting (XSS) vulnerability in the /bumph/getDraftListPage?type interface of JFinalOA before v2025.01.01 allows attackers to
- CVE-2024-57773A cross-site scripting (XSS) vulnerability in the openSelectManyUserPage?orgid interface of JFinalOA before v2025.01.01 allows attackers to
- CVE-2024-57774A cross-site scripting (XSS) vulnerability in the getBusinessUploadListPage?busid interface of JFinalOA before v2025.01.01 allows attackers
- CVE-2024-57776A cross-site scripting (XSS) vulnerability in the /apply/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execu
- CVE-2024-57784An issue in the component /php/script_uploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a directory traversal.
- CVE-2024-57785Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amc_uploads.php.