CVEs published March 11, 2025
332 CVEs were published on March 11, 2025: 7 critical, 166 high. 10 are now in CISA KEV.
- Published
- 332
- Critical
- 7
- High
- 166
- Medium
- 147
- Low
- 12
- Unrated
- 0
- Now in CISA KEV
- 10
- Fix available
- 112
Most affected products
- Microsoft Windows
- 33
- Ashlar-Vellum Cobalt
- 12
- Adobe Acrobat Reader
- 9
- Adobe InDesign Desktop
- 9
- Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- 8
- Adobe Substance3D - Sampler
- 7
- Siemens SCALANCE LPE9403
- 7
- Adobe Illustrator
- 6
- aitangbao springboot-manager
- 6
- ZTE GoldenDB
- 6
Critical 7
- CVE-2025-28915WordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerabilityTheme Egg ThemeEgg ToolKit
- CVE-2025-24201An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.Apple Safari · Apple iOS and iPadOS +4
- CVE-2024-54085Redfish Authentication BypassAMI MegaRAC-SPx
- CVE-2025-27494A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < VSiemens SiPass integrated AC5102 · Siemens SiPass integrate…
- CVE-2024-56336A vulnerability has been identified in SINAMICS S200 (All versions with serial number beginning with SZVS8, SZVS9, SZVS0 or SZVSN and the FSSiemens SINAMICS S200
- CVE-2025-1661HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusionrealmag777 HUSKY – Products Filter Professional for WooComm…
- CVE-2025-26701An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova.Percona Monitoring and Management
High 166
- CVE-2025-2233Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass VulnerabilitySamsung SmartThings
- CVE-2025-27792Opal vulnerable to CSRF protection bypassobiba opal
- CVE-2025-27101Broken Access Control in Opal filesystem's copy functionality exposes all user dataobiba opal
- CVE-2025-1707Review Schema <= 2.2.4 - Authenticated (Contributor+) Local File Inclusion via Post Metatechlabpro1 Review Schema – Review & Structure Data Schema…
- CVE-2025-28933WordPress MaxA/B plugin <= 2.2.2 - CSRF to Stored XSS vulnerabilitymaxfoundry MaxA/B
- CVE-2025-28932WordPress Insert Code plugin <= 2.4 - CSRF to Stored XSS vulnerabilityBCS Website Solutions Insert Code
- CVE-2025-28931WordPress WordPress Hashtags plugin <= 0.3.2 - CSRF to Stored XSS vulnerabilityDevriX Hashtags
- CVE-2025-28925WordPress WATI Chat and Notification plugin <= 1.1.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityHieu Nguyen WATI Chat and Notification
- CVE-2025-28923WordPress No Disposable Email plugin <= 2.5.1 - CSRF to Stored XSS vulnerabilityphilippe No Disposable Email
- CVE-2025-28922WordPress Go To Top plugin <= 0.0.8 - CSRF to Stored XSS vulnerabilityTerence D. Go To Top
- CVE-2025-28905WordPress Featured Posts Grid plugin <= 1.7 - CSRF to Stored XSS vulnerabilityChaser324 Featured Posts Grid
- CVE-2025-28901WordPress Members page only for logged in users plugin <= 1.4.2 - CSRF to Stored XSS vulnerabilityNaren Members page only for logged in users
- CVE-2025-28900WordPress TabGarb Pro plugin <= 2.6 - CSRF to Stored XSS vulnerabilitywebgarb TabGarb Pro
- CVE-2025-28897WordPress Domain Theme plugin <= 1.3 - CSRF to Stored XSS vulnerabilitySteveorevo Domain Theme
- CVE-2025-28895WordPress Custom top bar plugin <= 2.1 - Cross Site Request Forgery (CSRF) vulnerabilitySuman Biswas Custom top bar
- CVE-2025-28894WordPress List of Posts from each Category plugin for WordPress plugin <= 2.0 - CSRF to Stored XSS vulnerabilityfrucomerci List of Posts from each Category plugin for Word…
- CVE-2025-28892WordPress FTP Sync plugin <= 1.1.6 - CSRF to Stored XSS vulnerabilitya2rocklobster FTP Sync
- CVE-2025-28891WordPress price-calc plugin <= 0.6.3 - CSRF to Stored XSS vulnerabilityjazzigor price-calc
- CVE-2025-28883WordPress WP Compare Tables plugin <= 1.0.5 - CSRF to Stored XSS vulnerabilityMartin WP Compare Tables
- CVE-2025-28861WordPress WP jQuery Persian Datepicker plugin <= 0.1.0 - CSRF to Stored XSS vulnerabilitybhzad WP jQuery Persian Datepicker
- CVE-2025-28860WordPress Google News Editors Picks Feed Generator plugin <= 2.1 - CSRF to Stored XSS vulnerabilityPPDPurveyor Google News Editors Picks Feed Generator
- CVE-2025-28857WordPress Rankchecker.io Integration plugin <= 1.0.9 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityRankchecker.io Integration
- CVE-2025-2023Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2025-2022Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2025-2021Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2025-2020Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2025-2019Ashlar-Vellum Cobalt VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2025-2018Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2025-2017Ashlar-Vellum Cobalt CO File Parsing Buffer Overflow Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2025-2016Ashlar-Vellum Cobalt VC6 File Parsing Type Confusion Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2025-2015Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2025-2014Ashlar-Vellum Cobalt VS File Parsing Use of Uninitialized Variable Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2025-2013Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2025-2012Ashlar-Vellum Cobalt VS File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2025-27181Substance3D - Modeler | Use After Free (CWE-416)Adobe Substance3D - Modeler
- CVE-2025-27173Substance3D - Modeler | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Modeler
- CVE-2025-23360NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write.NVIDIA NeMo Framework
- CVE-2025-23242NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue.NVIDIA Riva
- CVE-2025-27773SimpleSAMLphp SAML2 library has incorrect signature verification for HTTP-Redirect bindingsimplesamlphp saml2 · simplesamlphp/saml2 +1
- CVE-2025-27158Acrobat Reader | Access of Uninitialized Pointer (CWE-824)Adobe Acrobat Reader
- CVE-2025-27161Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat Reader
- CVE-2025-27174Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat Reader
- CVE-2025-27162Acrobat Reader | Access of Uninitialized Pointer (CWE-824)Adobe Acrobat Reader
- CVE-2025-27160Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat Reader
- CVE-2025-27159Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat Reader
- CVE-2025-27169Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator
- CVE-2025-27167Illustrator | Untrusted Search Path (CWE-426)Adobe Illustrator
- CVE-2025-27168Illustrator | Stack-based Buffer Overflow (CWE-121)Adobe Illustrator
- CVE-2025-27166InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2025-27175InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2025-27177InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2025-27178InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2025-24453InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2025-24452InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2025-27171InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2025-24444Substance3D - Sampler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Sampler
- CVE-2025-24443Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Sampler
- CVE-2025-24441Substance3D - Sampler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Sampler
- CVE-2025-24445Substance3D - Sampler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Sampler
- CVE-2025-24442Substance3D - Sampler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Sampler
- CVE-2025-24439Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Sampler
- CVE-2025-24440Substance3D - Sampler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Sampler
- CVE-2025-24451Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2025-24450Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2025-27440Zoom Apps - Heap-based Buffer OverflowZoom Communications Zoom Workplace Apps
- CVE-2025-27439Zoom Apps - Buffer UnderflowZoom Communications Zoom Workplace Apps
- CVE-2025-0151Zoom Apps - Use After FreeZoom Communications Zoom Workplace Apps
- CVE-2025-0150Zoom Workplace Apps for iOS - Incorrect Behavior OrderZoom Communications Zoom Workplace Apps for iOS
- CVE-2025-26645Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop · Micro…
- CVE-2025-26633Microsoft Management Console Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-26631Visual Studio Code Elevation of Privilege VulnerabilityMicrosoft Visual Studio Code
- CVE-2025-26630Microsoft Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2025-26629Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-26627Azure Arc Installer Elevation of Privilege VulnerabilityMicrosoft Azure ARC
- CVE-2025-24049Azure Command Line Integration (CLI) Elevation of Privilege VulnerabilityMicrosoft Azure CLI
- CVE-2025-24994Microsoft Windows Cross Device Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24993Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-24985Windows Fast FAT File System Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-24983Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24084Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-24076Microsoft Windows Cross Device Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24075Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-24072Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24067Kernel Streaming Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24066Kernel Streaming Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24064Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-24061Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-24059Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24056Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-24051Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-24050Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24048Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24046Kernel Streaming Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24045Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2025-25008Windows Server Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2025-25003Visual Studio Elevation of Privilege VulnerabilityMicrosoft Visual Studio
- CVE-2025-24998Visual Studio Elevation of Privilege VulnerabilityMicrosoft Visual Studio
- CVE-2025-24995Kernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21180Windows exFAT File System Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-24083Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-24082Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-24081Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-24080Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-24079Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2025-24078Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2025-24077Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-24070ASP.NET Core and Visual Studio Elevation of Privilege VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio +13
- CVE-2025-24057Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-24043WinDbg Remote Code Execution VulnerabilityMicrosoft WinDbg · dotnet-sos +2
- CVE-2025-24044Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24035Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-26634Windows Core Messaging Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2024-9157Privilege Escalation Vulnerability in CxUIUSvc serviceSynaptics Audio Driver
- CVE-2025-21169Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Designer
- CVE-2025-27172Substance3D - Designer | Out-of-bounds Write (CWE-787)Adobe Substance3D - Designer
- CVE-2025-22213[20250301] - Core - Malicious file uploads via Media ManagerJoomla! Project Joomla! CMS
- CVE-2023-37933An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC GUI version 7.4.0Fortinet FortiADC
- CVE-2024-55590Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet ForFortinet FortiIsolator
- CVE-2024-45324A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, veFortinet FortiPAM · Fortinet FortiWeb +3
- CVE-2023-48790A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and befFortinet FortiNDR
- CVE-2024-52961An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0, FoFortinet FortiSandbox
- CVE-2024-45328An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute Fortinet FortiSandbox
- CVE-2023-40723An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6.0 through 6.6.3 and Fortinet FortiSIEM
- CVE-2025-27403Ratify Azure authentication providers can leak authentication tokens to non-Azure container registriesratify-project ratify · github.com/ratify-project/ratify +1
- CVE-2025-22454Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their Ivanti Secure Access Client
- CVE-2024-54084SMM Arbitrary Write via TOCTOU VulnerabilityAMI AptioV
- CVE-2025-22369Mennekes smart/premium charges systems, Arbitrary file download using ReadFile endpointMennekes Smart / Premium charging stations
- CVE-2025-22366Mennekes smart/premium charges systems, Command injection in firmware upgradeMennekes Smart / Premium charging stations
- CVE-2025-22368Mennekes smart/premium charges systems, Command injection in sCU firmware updateMennekes Smart / Premium charging stations
- CVE-2025-22367Mennekes smart/premium charges systems, Command injection in time settingMennekes Smart / Premium charging stations
- CVE-2025-27363An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parseFreeType
- CVE-2025-27493A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < VSiemens SiPass integrated AC5102 · Siemens SiPass integrate…
- CVE-2025-27438A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2025-27396A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0).Siemens SCALANCE LPE9403
- CVE-2025-27395A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0).Siemens SCALANCE LPE9403
- CVE-2025-27394A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0).Siemens SCALANCE LPE9403
- CVE-2025-27393A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0).Siemens SCALANCE LPE9403
- CVE-2025-27392A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0).Siemens SCALANCE LPE9403
- CVE-2025-23402A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2025-23401A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2025-23400A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2025-23399A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2025-23398A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2025-23397A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2025-23396A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versiSiemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2024-56182A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21Siemens SIMATIC Field PG M5 · Siemens SIMATIC Field PG… +28
- CVE-2024-56181A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32ASiemens SIMATIC Field PG M5 · Siemens SIMATIC IPC BX-21A +27
- CVE-2025-1550Arbitrary Code Execution via Crafted Keras Config for Model LoadingGoogle Keras · keras
- CVE-2025-2190The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks.TECNO com.transsnet.store
- CVE-2024-13864Countdown Timer <= 1.0 - Reflected XSSCountdown Timer
- CVE-2024-13862S3Bubble Media Streaming <= 8.0 - Reflected XSSS3Bubble Media Streaming
- CVE-2024-13836WP Login Control <= 2.0.0 - Reflected XSSWP Login Control
- CVE-2024-13574XV Random Quotes <= 1.40 - Reflected XSSXV Random Quotes
- CVE-2025-2169WPCS – WordPress Currency Switcher Professional <= 1.2.0.4 - Unauthenticated Arbitrary Shortcode Executionrealmag777 WPCS – WordPress Currency Switcher Professional
- CVE-2024-12010A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.Zyxel AX7501-B1 firmware
- CVE-2024-12009A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and eZyxel EX5601-T1 firmware
- CVE-2024-11253A post-authentication command injection vulnerability in the "DNSServer” parameter of the diagnostic function in the Zyxel VMG8825-T50K firmZyxel VMG8825-T50K firmware
- CVE-2025-27434Cross-Site Scripting (XSS) vulnerability in SAP Commerce (Swagger UI)SAP_SE SAP Commerce
- CVE-2025-26661Missing Authorization check in SAP NetWeaver (ABAP Class Builder)SAP_SE SAP NetWeaver
- CVE-2024-51319A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remot
- CVE-2024-51321In Zucchetti Ad Hoc Infinity 2.4, an improper check on the m_cURL parameter allows an attacker to redirect the victim to an attacker-control
- CVE-2025-25680LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuya_ipc_direct_connect function of the anyka_ipc proc
- CVE-2025-25748A CSRF vulnerability in the gestione_utenti.php endpoint of HotelDruid 3.0.7 allows attackers to perform unauthorized actions (e.g., modifyi
- CVE-2025-25749An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the lack of enforcement of password strength poli
- CVE-2025-25928A Cross-Site Request Forgery (CSRF) in the component /admin/users/user.form of Openmrs 2.4.3 Build 0ff0ed allows attackers to execute arbitr
- CVE-2025-27912An issue was discovered in Datalust Seq before 2024.3.13545.Datalust Seq
Medium, low and unrated 159
- CVE-2025-2215Doufox s=doudou path traversalDoufox
- CVE-2025-2214Microweber Settings index.php cross site scriptingMicroweber · microweber/microweber
- CVE-2025-2213Castlenet CBW383G2N Wireless Menu wlanPrimaryNetwork.asp cross site scriptingCastlenet CBW383G2N
- CVE-2025-2212Castlenet CBW383G2N RgSwInfo.asp cross site scriptingCastlenet CBW383G2N
- CVE-2025-2211aitangbao springboot-manager add cross site scriptingaitangbao springboot-manager
- CVE-2025-2210aitangbao springboot-manager add cross site scriptingaitangbao springboot-manager
- CVE-2025-2209aitangbao springboot-manager add cross site scriptingaitangbao springboot-manager
- CVE-2025-28868WordPress ZipList Recipe plugin <= 3.1 - Cross Site Request Forgery (CSRF) vulnerabilityZipList Recipe
- CVE-2025-28943WordPress DP ALTerminator - Missing ALT manager Plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerabilitymylo2h2s DP ALTerminator - Missing ALT manager
- CVE-2025-28941WordPress SPAM-BYBYE Plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerabilityohtan Spam Byebye
- CVE-2025-28940WordPress Back To Top Plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerabilityarkapravamajumder Back To Top
- CVE-2025-28938WordPress WP Performance Pack plugin <= 2.5.3 - Broken Access Control vulnerabilityBjoern WP Performance Pack
- CVE-2025-28937WordPress Lava Ajax Search plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerabilitylavacode Lava Ajax Search
- CVE-2025-28936WordPress Lunar plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilitysakurapixel Lunar
- CVE-2025-28930WordPress List Mixcloud plugin <= 1.4 - Cross Site Scripting (XSS) vulnerabilityRodolphe MOULIN List Mixcloud
- CVE-2025-28929WordPress Tabbed Login Widget plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilityVivek Marakana Tabbed Login Widget
- CVE-2025-28927WordPress Display Template Name plugin <= 1.7.1 - Cross Site Request Forgery (CSRF) vulnerabilityA. Chappard Display Template Name
- CVE-2025-28926WordPress Post Read Time plugin <= 1.2.6 - Stored Cross Site Scripting (XSS) vulnerabilitypopeating Post Read Time
- CVE-2025-28920WordPress Responsive Google Map plugin <= 3.1.5 - Broken Access Control vulnerabilityJogesh Responsive Google Map
- CVE-2025-28919WordPress Easy Image Display plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerabilityShellbot Easy Image Display
- CVE-2025-28918WordPress Featured Image Thumbnail Grid plugin <= 6.8 - Cross Site Scripting (XSS) vulnerabilityA. Jones Featured Image Thumbnail Grid
- CVE-2025-28914WordPress wordpress login form to anywhere plugin <= 0.2 - Cross Site Scripting (XSS) vulnerabilityAjay Sharma wordpress login form to anywhere
- CVE-2025-28913WordPress WP Add Active Class To Menu Item plugin <=1.0 - Cross Site Request Forgery (CSRF) vulnerabilityAftab Ali Muni WP Add Active Class To Menu Item
- CVE-2025-28912WordPress Custom Dashboard Page plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerabilityMuntasir Rahman Custom Dashboard Page
- CVE-2025-28910WordPress WP Hide Admin Bar plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerabilityRavinder Khurana WP Hide Admin Bar
- CVE-2025-28909WordPress WP No-Bot Question plugin <= 0.1.7 - Cross Site Request Forgery (CSRF) vulnerabilityedwardw WP No-Bot Question
- CVE-2025-28908WordPress pipDisqus plugin <= 1.6 - Cross Site Scripting (XSS) vulnerabilitypipdig pipDisqus
- CVE-2025-28907WordPress WP Last Modified plugin <= 0.1 - Cross Site Scripting (XSS) vulnerabilityRahul Arora WP Last Modified
- CVE-2025-28906WordPress Skitter Slideshow plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerabilityThiago S.F. Skitter Slideshow
- CVE-2025-28902WordPress Contact Form 7 Select Box Editor Button plugin <= 0.6 - Cross Site Request Forgery (CSRF) vulnerabilityBenjamin Pick Contact Form 7 Select Box Editor Button
- CVE-2025-28896WordPress AS English Admin plugin <= 1.0.0 - Open Redirection vulnerabilityAkshar Soft Solutions AS English Admin
- CVE-2025-28887WordPress Plugins Last Updated Column plugin <= 0.1.3 - Cross Site Request Forgery (CSRF) vulnerabilityFastmover Plugins Last Updated Column
- CVE-2025-28886WordPress REST API TO MiniProgram plugin <= 5.1.2 - Cross Site Request Forgery (CSRF) vulnerabilityxjb REST API TO MiniProgram
- CVE-2025-28884WordPress WP Bulk Post Duplicator plugin <= 1.2 - Cross Site Request Forgery (CSRF) vulnerabilityRajesh Kumar WP Bulk Post Duplicator
- CVE-2025-28881WordPress Mobile Themes plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerabilitymg12 Mobile Themes
- CVE-2025-28879WordPress Bee Layer Slider plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityaumsrini Bee Layer Slider
- CVE-2025-28878WordPress Awesome Surveys plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerabilityWill Brubaker Awesome Surveys
- CVE-2025-28876WordPress Skrill Official plugin <= 1.0.66 - Cross Site Request Forgery (CSRF) vulnerabilitySkrill_Team Skrill Official
- CVE-2025-28875WordPress BP Email Assign Templates By shanebp plugin <= 1.6 - Cross-Site Scripting vulnerabilityshanebp BP Email Assign Templates
- CVE-2025-28874WordPress BP Email Assign Templates By shanebp plugin <= 1.7 - Arbitrary Content Deletion vulnerabilityshanebp BP Email Assign Templates
- CVE-2025-28872WordPress Block Spam By Math Reloaded plugin <= 2.2.4 - Broken Access Control vulnerabilityjwpegram Block Spam By Math Reloaded
- CVE-2025-28871WordPress Block Spam By Math Reloaded plugin <= 2.2.4 - Cross Site Scripting (XSS) vulnerabilityjwpegram Block Spam By Math Reloaded
- CVE-2025-28870WordPress amoCRM WebForm plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityamoCRM WebForm
- CVE-2025-28867WordPress Frontpage category filter plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerabilitystesvis Frontpage category filter
- CVE-2025-28866WordPress Login Logger plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerabilitysmerriman Login Logger
- CVE-2025-28864WordPress Builder for Contact Form 7 by Webconstruct plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerabilityplanetstudio Builder for Contact Form 7 by Webconstruct
- CVE-2025-28863WordPress Delete Original Image plugin <= 0.4 - Cross Site Request Forgery (CSRF) vulnerabilityCarlos Minatti Delete Original Image
- CVE-2025-28862WordPress Comment Date and Gravatar remover plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerabilityVenugopal Comment Date and Gravatar remover
- CVE-2025-28859WordPress Maintenance Notice plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerabilityCodeVibrant Maintenance Notice
- CVE-2025-28856WordPress W3Counter Free Real-Time Web Stats plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerabilitydangrossman W3Counter Free Real-Time Web Stats
- CVE-2025-0900PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityPDF-XChange Editor
- CVE-2025-2208aitangbao springboot-manager Filename upload cross site scriptingaitangbao springboot-manager
- CVE-2025-21170Substance3D - Modeler | NULL Pointer Dereference (CWE-476)Adobe Substance3D - Modeler
- CVE-2025-27180Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2025-2207aitangbao springboot-manager dept cross site scriptingaitangbao springboot-manager
- CVE-2025-2206aitangbao springboot-manager permission cross site scriptingaitangbao springboot-manager
- CVE-2025-23243NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue.NVIDIA Riva
- CVE-2025-27789Inefficient RexExp complexity in generated code with .replace when transpiling named capturing groupsbabel · @babel/helpers +3
- CVE-2025-27591A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/Meta Platforms below · below
- CVE-2025-24431Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat Reader
- CVE-2025-27164Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat Reader
- CVE-2025-27163Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat Reader
- CVE-2025-27170Illustrator | NULL Pointer Dereference (CWE-476)Adobe Illustrator
- CVE-2025-24449Illustrator | Out-of-bounds Read (CWE-125)Adobe Illustrator
- CVE-2025-24448Illustrator | Out-of-bounds Read (CWE-125)Adobe Illustrator
- CVE-2025-27176InDesign Desktop | NULL Pointer Dereference (CWE-476)Adobe InDesign Desktop
- CVE-2025-27179InDesign Desktop | NULL Pointer Dereference (CWE-476)Adobe InDesign Desktop
- CVE-2025-0149Zoom Apps - Insufficient Verification of Data AuthenticityZoom Communications Zoom Apps
- CVE-2025-24992Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-24991Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-24984Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-24071Microsoft Windows File Explorer Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-24055Windows USB Video Class System Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-24054NTLM Hash Disclosure Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-21199Azure Agent Installer for Backup and Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Agent for Backup · Microsoft Azure Agent fo…
- CVE-2025-21247MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-24997DirectX Graphics Kernel File Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-24996NTLM Hash Disclosure Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-24988Windows USB Video Class System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24987Windows USB Video Class System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24986Azure Promptflow Remote Code Execution VulnerabilityMicrosoft Azure promptflow-core · Microsoft Azure prompt… +2
- CVE-2024-56338IBM Sterling B2B Integrator cross-site scriptingIBM Sterling B2B Integrator Standard Edition
- CVE-2025-27617Pimcore Vulnerable to SQL Injection in getRelationFilterConditionpimcore · pimcore/pimcore
- CVE-2025-27602Umbraco Allows a Restricted Editor User to Delete Media Item or Access Unauthorized ContentUmbraco-CMS · Umbraco.Cms.Web.Backoffice
- CVE-2025-27601Umbraco Allows Improper API Access Control to Low-Privilege Users to Data Type FunctionalityUmbraco-CMS · Umbraco.Cms.Api.Management
- CVE-2024-33501Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Fortinet FortiAnalyzer veFortinet FortiManager
- CVE-2024-54026An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0 through 4.4.6, FortiSFortinet FortiSandbox
- CVE-2024-32123Multiple improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager, FortiAnalyzer Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2024-54018Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox before 4.4.5 allows a prFortinet FortiSandbox
- CVE-2024-52960A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0, 4.4.0 through 4.4.6 and beFortinet FortiSandbox
- CVE-2024-46663A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged aFortinet FortiMail
- CVE-2024-55592An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 Fortinet FortiSIEM
- CVE-2023-42784An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 aFortinet FortiWeb
- CVE-2024-55597A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiWeb versions 7.0.0 through 7.6.0 allows atFortinet FortiWeb
- CVE-2025-2196MRCMS org.marker.mushroom.controller.FileController upload.do upload cross site scriptingMRCMS
- CVE-2025-22370Mennekes smart/premium charges systems, SQL Injection in web configuration interfaceMennekes Smart / Premium charging stations
- CVE-2025-2195MRCMS org.marker.mushroom.controller.FileController rename.do rename cross site scriptingMRCMS
- CVE-2025-2194MRCMS org.marker.mushroom.controller.FileController list.do list cross site scriptingMRCMS
- CVE-2025-2193MRCMS org.marker.mushroom.controller.FileController delete.do delete path traversalMRCMS
- CVE-2025-2192Stoque Zeev.it Login Page server-side request forgeryStoque Zeev.it
- CVE-2025-2191Claro A7600-A1 Ping6 Diagnóstico form2pingv6.cgi cross site scriptingClaro A7600-A1
- CVE-2025-2189Information Disclosure Vulnerability in Tinxy Smart DevicesMogify Infotech Tinxy Wi-Fi Lock Controller v1 RF · Mogi… +4
- CVE-2025-27398A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0).Siemens SCALANCE LPE9403
- CVE-2025-27397A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0).Siemens SCALANCE LPE9403
- CVE-2025-25267A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (AllSiemens Tecnomatix Plant Simulation
- CVE-2025-25266A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (AllSiemens Tecnomatix Plant Simulation
- CVE-2025-23384A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2.1), RUGGEDCOM RM1224 LTE(4G) NASiemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +19
- CVE-2024-52285A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.8), SiPass integrated ACC-AP (All versions < VSiemens SiPass integrated AC5102 · Siemens SiPass integrate…
- CVE-2025-2177libzvbi search.c vbi_search_new integer overflowlibzvbi
- CVE-2025-2176libzvbi io-sim.c vbi_capture_sim_load_caption integer overflowlibzvbi
- CVE-2025-1434XSS in AREAL SAS Topkapi Vision Webserv2AREAL SAS Topkapi Vision Webserv2
- CVE-2024-13228Qubely – Advanced Gutenberg Blocks <= 1.8.13 - Authenticated (Contributor+) Sensitive Information Exposure via qubely_get_contentthemeum Qubely – Advanced Gutenberg Blocks
- CVE-2025-26702Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from 6.1.03 through 6.1.ZTE GoldenDB
- CVE-2025-2175libzvbi _vbi_strndup_iconv integer overflowlibzvbi
- CVE-2025-26703Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1ZTE GoldenDB
- CVE-2025-26704Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1ZTE GoldenDB
- CVE-2025-26705Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1ZTE GoldenDB
- CVE-2025-26706Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1ZTE GoldenDB
- CVE-2025-2174libzvbi conv.c vbi_strndup_iconv_ucs2 integer overflowlibzvbi
- CVE-2025-2173libzvbi conv.c vbi_strndup_iconv_ucs2 uninitialized pointerlibzvbi
- CVE-2025-0629Coronavirus (COVID-19) Notice Message <= 1.1.2 - Admin+ Stored XSSCoronavirus (COVID-19) Notice Message
- CVE-2024-13853SEO Tools <= 4.0.7 - Reflected XSSSEO Tools
- CVE-2024-13615Social Media Plugin by Social Snap <= 1.3.6 - Admin+ Stored XSSSocial Share Buttons, Social Sharing Icons, Click to Tweet…
- CVE-2024-13580XV Random Quotes <= 1.40 - Settings Reset via CSRFXV Random Quotes
- CVE-2024-13413ProductDyno <= 1.0.24 - Reflected Cross-Site Scripting via 'res' Parameterfrazahmed ProductDyno
- CVE-2024-13436Appsero Helper <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scriptingwedevs Appsero Helper
- CVE-2025-26707Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1ZTE GoldenDB
- CVE-2024-22340IBM Common Cryptographic Architecture information disclosureIBM Common Cryptographic Architecture · IBM 4769 Developers…
- CVE-2024-41760IBM Common Cryptographic Architecture information disclosureIBM Common Cryptographic Architecture · IBM 4769 Developers…
- CVE-2024-49823IBM Common Cryptographic Architecture denial of serviceIBM Common Cryptographic Architecture · IBM 4769 Developers…
- CVE-2025-27436Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)SAP_SE SAP S/4HANA
- CVE-2025-27433Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)SAP_SE SAP S/4HANA
- CVE-2025-27432Missing Authorization check in SAP Electronic Invoicing for Brazil (eDocument Cockpit)SAP_SE SAP Electronic Invoicing for Brazil
- CVE-2025-27431Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server JavaSAP_SE SAP NetWeaver Application Server Java
- CVE-2025-27430Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)SAP_SE SAP CRM and SAP S/4HANA
- CVE-2025-26660Broken Access Control in SAP Fiori apps (Posting Library)SAP_SE SAP Fiori apps
- CVE-2025-26659Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)SAP_SE SAP NetWeaver Application Server ABAP
- CVE-2025-26658Broken Authentication in SAP Business One (Service Layer)SAP_SE SAP Business One
- CVE-2025-26656Missing Authorization check in S/4HANA (Manage Purchasing Info Records)SAP_SE S/4HANA
- CVE-2025-26655Missing Authorization check in SAP JIT(Outbound)SAP_SE SAP Just In Time
- CVE-2025-25245Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)SAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2025-25244Missing Authorization Check in SAP Business Warehouse (Process Chains)SAP_SE SAP Business Warehouse
- CVE-2025-25242Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAPSAP_SE SAP NetWeaver Application Server ABAP
- CVE-2025-23194Missing Authentication check in SAP NetWeaver Enterprise Portal (OBN component)SAP_SE SAP NetWeaver Enterprise Portal
- CVE-2025-23188Missing Authorization check in SAP S/4HANA (RBD)SAP_SE SAP S/4HANA
- CVE-2025-23185Information Disclosure in SAP Business Objects Business Intelligence PlatformSAP_SE SAP Business Objects Business Intelligence Platform
- CVE-2025-0071Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication ManagerSAP_SE SAP Web Dispatcher and Internet Communication Manager
- CVE-2025-0062Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)SAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2021-37787The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnerability via a HTTP POS
- CVE-2024-28607The ip-utils package through 2.4.0 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as glolibrasean IP-Utils
- CVE-2024-51320Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via th
- CVE-2024-51322Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via th
- CVE-2024-58102An issue was discovered in Datalust Seq before 2024.3.13545.Datalust Seq
- CVE-2025-25747Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and obtain sensitive info
- CVE-2025-25925A stored cross-scripting (XSS) vulnerability in Openmrs v2.4.3 Build 0ff0ed allows attackers to execute arbitrary web scripts or HTML via in
- CVE-2025-25927A Cross-Site Request Forgery (CSRF) in Openmrs 2.4.3 Build 0ff0ed allows attackers to execute arbitrary operations via a crafted GET request
- CVE-2025-25929A reflected cross-site scripting (XSS) vulnerability in the component /legacyui/quickReportServlet of Openmrs 2.4.3 Build 0ff0ed allows atta
- CVE-2025-27893In Archer Platform 6 through 6.14.00202.10024, an authenticated user with record creation privileges can manipulate immutable fields, such aArcher
- CVE-2025-27911An issue was discovered in Datalust Seq before 2024.3.13545.Datalust Seq