6.4

CVSS3.1

CVE-2025-4585 - IRM Newsroom <= 1.2.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmflat' Sho…

The IRM Newsroom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irmflat' shortcode in all versions up to, and including, 1.2.17 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attac…

📅 Published: June 13, 2025, 1:47 a.m. 🔄 Last Modified: July 3, 2025, 5:49 p.m.

7.1

CVSS3.1

CVE-2025-47959 - Visual Studio Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code over a network.

📅 Published: June 13, 2025, 1:10 a.m. 🔄 Last Modified: Feb. 20, 2026, 4:01 p.m.

7.5

CVSS3.1

CVE-2025-28381 -

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.

📅 Published: June 13, 2025, midnight 🔄 Last Modified: Oct. 27, 2025, 4:15 p.m.

9.8

CVSS3.1

CVE-2025-45984 -

Blink routers BL-WR9000 V2.4.9, BL-AC1900 V1.0.2, BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 V1.0.5, BL-LTE300 V1.2.3, BL-F1200_AT1 V1.0.0, BL-X26_AC8 V1.2.8, BLAC450M_AE4 V4.0.0 and BL-X26_DA3 V1.2.7 were discovered to contain a command injection vulnerability via the routepwd parameter in the sub_45B238 fu…

📅 Published: June 13, 2025, midnight 🔄 Last Modified: July 10, 2025, 12:15 p.m.

9.8

CVSS3.1

CVE-2025-45987 -

Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bs_SetDNSInfo …

📅 Published: June 13, 2025, midnight 🔄 Last Modified: July 10, 2025, 12:16 p.m.

9.8

CVSS3.1

CVE-2025-45986 -

Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 werediscovered to contain a command injection vulnerability via the mac parameter in the bs_SetMacBlack function.

📅 Published: June 13, 2025, midnight 🔄 Last Modified: July 23, 2025, 8:32 p.m.

9.8

CVSS3.1

CVE-2025-28388 -

OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.

📅 Published: June 13, 2025, midnight 🔄 Last Modified: Oct. 27, 2025, 4:15 p.m.

9.8

CVSS3.1

CVE-2025-45985 -

Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bs_SetSSIDHide function.

📅 Published: June 13, 2025, midnight 🔄 Last Modified: July 10, 2025, 12:15 p.m.

9.8

CVSS3.1

CVE-2025-45988 -

Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bs_SetCmd function.

📅 Published: June 13, 2025, midnight 🔄 Last Modified: July 10, 2025, 12:16 p.m.

9.8

CVSS3.1

CVE-2025-28389 -

Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.

📅 Published: June 13, 2025, midnight 🔄 Last Modified: June 24, 2025, 9:51 a.m.
Total resulsts: 343168
Page 4437 of 34,317
« previous page » next page
Filters