6.1

CVSS3.1

CVE-2025-32970 - org.xwiki.platform:xwiki-platform-wysiwyg-api Open Redirect vulnerability

XWiki is a generic wiki platform. In versions starting from 13.5-rc-1 to before 15.10.13, from 16.0.0-rc-1 to before 16.4.4, and from 16.5.0-rc-1 to before 16.8.0, an open redirect vulnerability in the HTML conversion request filter allows attackers to construct URLs on an XWiki instance that redir…

πŸ“… Published: April 30, 2025, 2:54 p.m. πŸ”„ Last Modified: May 13, 2025, 3:13 p.m.

5.3

CVSS4.0

CVE-2025-4122 - Netgear JWNR2000v2 sub_435E04 command injection

A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been rated as critical. Affected by this issue is the function sub_435E04. The manipulation of the argument host leads to command injection. The attack may be launched remotely. The vendor was contacted early about this disclosure but…

πŸ“… Published: April 30, 2025, 2:31 p.m. πŸ”„ Last Modified: May 12, 2025, 7:43 p.m.

5.3

CVSS4.0

CVE-2025-4121 - Netgear JWNR2000v2 cmd_wireless command injection

A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been declared as critical. Affected by this vulnerability is the function cmd_wireless. The manipulation of the argument host leads to command injection. The attack can be launched remotely. The vendor was contacted early about this d…

πŸ“… Published: April 30, 2025, 2 p.m. πŸ”„ Last Modified: May 13, 2025, 8:28 p.m.

8.7

CVSS4.0

CVE-2025-4120 - Netgear JWNR2000v2 sub_4238E8 buffer overflow

A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been classified as critical. Affected is the function sub_4238E8. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but d…

πŸ“… Published: April 30, 2025, 2 p.m. πŸ”„ Last Modified: May 13, 2025, 8:28 p.m.

6.9

CVSS4.0

CVE-2025-4119 - Weitong Mall Product Statistics queryTotal access control

A vulnerability classified as critical was found in Weitong Mall 1.0.0. This vulnerability affects unknown code of the file /queryTotal of the component Product Statistics Handler. The manipulation of the argument isDelete with the input 1 leads to improper access controls. The attack can be initia…

πŸ“… Published: April 30, 2025, 1:31 p.m. πŸ”„ Last Modified: May 16, 2025, 4:40 p.m.

6.9

CVSS4.0

CVE-2025-4118 - Weitong Mall Product History historyList access control

A vulnerability classified as critical has been found in Weitong Mall 1.0.0. This affects an unknown part of the file /historyList of the component Product History Handler. The manipulation of the argument isDelete with the input 1 leads to improper access controls. It is possible to initiate the a…

πŸ“… Published: April 30, 2025, 1:31 p.m. πŸ”„ Last Modified: May 16, 2025, 4:44 p.m.

5.1

CVSS4.0

CVE-2025-4117 - Netgear JWNR2000v2 sub_41A914 buffer overflow

A vulnerability, which was classified as critical, was found in Netgear JWNR2000v2 1.0.0.11. This affects the function sub_41A914. The manipulation of the argument host leads to buffer overflow. The vendor was contacted early about this disclosure but did not respond in any way.

πŸ“… Published: April 30, 2025, 1 p.m. πŸ”„ Last Modified: May 16, 2025, 6:27 p.m.

8.4

CVSS4.0

CVE-2025-3395 -

Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0.

πŸ“… Published: April 30, 2025, 12:40 p.m. πŸ”„ Last Modified: May 28, 2025, 6:26 p.m.

8.5

CVSS4.0

CVE-2025-3394 - Vulnerability in user management of Automation Builder

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0.

πŸ“… Published: April 30, 2025, 12:34 p.m. πŸ”„ Last Modified: May 28, 2025, 6:26 p.m.

8.7

CVSS4.0

CVE-2025-4116 - Netgear JWNR2000v2 get_cur_lang_ver buffer overflow

A vulnerability, which was classified as critical, has been found in Netgear JWNR2000v2 1.0.0.11. Affected by this issue is the function get_cur_lang_ver. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this d…

πŸ“… Published: April 30, 2025, 12:31 p.m. πŸ”„ Last Modified: May 16, 2025, 4:53 p.m.
Total resulsts: 349182
Page 5626 of 34,919
Β« previous page Β» next page
Filters