| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-36174 | Hig | 0.52 | 8.0 | 0.00 | Aug 24, 2025 | IBM Integrated Analytics System 1.0.0.0 through 1.0.30.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened. | ||
| CVE-2025-36157 | Cri | 0.64 | 9.8 | 0.01 | Aug 24, 2025 | IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions. | ||
| CVE-2025-9363 | Hig | 0.57 | 8.8 | 0.05 | Aug 23, 2025 | A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function portTriggerManageRule of the file /goform/portTriggerManageRule. The manipulation of the argument… | ||
| CVE-2025-9362 | Med | 0.41 | 6.3 | 0.01 | Aug 23, 2025 | A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function urlFilterManageRule of the file /goform/urlFilterManageRule. Executing manipulation of the argument… | ||
| CVE-2025-9361 | Hig | 0.57 | 8.8 | 0.01 | Aug 23, 2025 | A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The affected element is the function ipRangeBlockManageRule of the file /goform/ipRangeBlockManageRule. Performing manipulation of… | ||
| CVE-2025-9360 | Hig | 0.57 | 8.8 | 0.01 | Aug 23, 2025 | A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Impacted is the function accessControlAdd of the file /goform/accessControlAdd. Such manipulation of the argument… | ||
| CVE-2025-9359 | Hig | 0.57 | 8.8 | 0.01 | Aug 23, 2025 | A weakness has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function RP_checkCredentialsByBBS of the file /goform/RP_checkCredentialsByBBS. This manipulation of the… | ||
| CVE-2025-9358 | Hig | 0.57 | 8.8 | 0.01 | Aug 23, 2025 | A security flaw has been discovered in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This vulnerability affects the function setSysAdm of the file /goform/setSysAdm. The manipulation of the argument admpasshint… | ||
| CVE-2025-5821 | Cri | 0.64 | 9.8 | 0.01 | Aug 23, 2025 | The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly logging in a user with the data that was previously verified through the facebook_ajax_login_callback() function.… | ||
| CVE-2025-5352 | Cri | 0.62 | 9.6 | 0.01 | Aug 23, 2025 | A critical stored Cross-Site Scripting (XSS) vulnerability exists in the Analytics component of lunary-ai/lunary versions up to 1.9.23, where the NEXT_PUBLIC_CUSTOM_SCRIPT environment variable is directly injected into the DOM using dangerouslySetInnerHTML without any… | ||
| CVE-2025-5060 | Hig | 0.53 | 8.1 | 0.00 | Aug 23, 2025 | The Bravis User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.1. This is due to the plugin not properly logging a user in with the data that was previously verified through the facebook_ajax_login_callback(). This makes it… | ||
| CVE-2025-9357 | Hig | 0.57 | 8.8 | 0.01 | Aug 23, 2025 | A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function langSwitchByBBS of the file /goform/langSwitchByBBS. The manipulation of the argument langSelectionOnly… | ||
| CVE-2025-7813 | Hig | 0.40 | 7.2 | 0.00 | Aug 23, 2025 | The Events Calendar, Event Booking, Registrations and Event Tickets – Eventin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.37 via the proxy_image function. This makes it possible for unauthenticated attackers to… | ||
| CVE-2025-9131 | Med | 0.35 | 6.4 | 0.00 | Aug 23, 2025 | The Ogulo – 360° Tour plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slug’ parameter in all versions up to, and including, 1.0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,… | ||
| CVE-2025-9048 | Hig | 0.53 | 8.1 | 0.01 | Aug 23, 2025 | The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the del_img_ajax_call() function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with… | ||
| CVE-2025-8062 | Med | 0.42 | 6.4 | 0.00 | Aug 23, 2025 | The WS Theme Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ws_weather shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible… | ||
| CVE-2025-7957 | Med | 0.42 | 6.4 | 0.00 | Aug 23, 2025 | The ShortcodeHub plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author_link_target’ parameter in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated… | ||
| CVE-2025-7842 | Med | 0.28 | 4.3 | 0.00 | Aug 23, 2025 | The Silencesoft RSS Reader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.6. This is due to missing or incorrect nonce validation on the 'sil_rss_edit_page' page. This makes it possible for unauthenticated attackers to… | ||
| CVE-2025-7841 | Med | 0.28 | 4.3 | 0.00 | Aug 23, 2025 | The Sertifier Certificate & Badge Maker for WordPress – Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.19. This is due to missing or incorrect nonce validation on the 'sertifier_settings' page. This makes it… | ||
| CVE-2025-7839 | Med | 0.28 | 4.3 | 0.00 | Aug 23, 2025 | The Restore Permanently delete Post or Page Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the rp_dpo_dpa_ajax_dp_delete_data() function. This makes it… | ||
| CVE-2025-7828 | Med | 0.28 | 4.3 | 0.00 | Aug 23, 2025 | The WP Filter & Combine RSS Feeds plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the post_listing_page() function in all versions up to, and including, 0.4. This makes it possible for authenticated attackers, with… | ||
| CVE-2025-7827 | Med | 0.28 | 4.3 | 0.00 | Aug 23, 2025 | The Ni WooCommerce Customer Product Report plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ni_woocpr_action() function in all versions up to, and including, 1.2.4. This makes it possible for authenticated… | ||
| CVE-2025-7821 | Med | 0.34 | 5.3 | 0.00 | Aug 23, 2025 | The WC Plus plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pluswc_logo_favicon_logo_base' AJAX action in all versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to update… | ||
| CVE-2025-7642 | Cri | 0.64 | 9.8 | 0.00 | Aug 23, 2025 | The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7.0 to 1.1.9. This is due to the plugin not properly verifying a user's identity prior to logging them in as an admin through the simplerwc_woocommerce_order_created() function. This… | ||
| CVE-2025-43766 | Cri | 0.57 | 9.8 | 0.00 | Aug 23, 2025 | The Liferay Portal 7.4.0 through 7.3.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows the upload of unrestricted files in the style books component that are processed… | ||
| CVE-2025-43765 | Med | 0.33 | 6.1 | 0.00 | Aug 23, 2025 | A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.13 and 7.4 GA through update 92 allows an remote non-authenticated attacker… | ||
| CVE-2025-43764 | Med | 0.35 | 6.5 | 0.00 | Aug 23, 2025 | Self-ReDoS (Regular expression Denial of Service) exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1… | ||
| CVE-2025-43767 | Med | 0.33 | 6.1 | 0.00 | Aug 23, 2025 | Open Redirect vulnerability in /c/portal/edit_info_item parameter redirect in Liferay Portal 7.4.3.86 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 update 86 through update 92 allows an attacker… | ||
| CVE-2025-58043 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-58042 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-58041 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-58040 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-58039 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-58038 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-58037 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-58036 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-58035 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-43769 | Med | 0.33 | 6.1 | 0.00 | Aug 23, 2025 | Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote attackers to execute arbitrary web script… | ||
| CVE-2025-43768 | Hig | 0.43 | 7.7 | 0.00 | Aug 23, 2025 | Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows authenticated users without any permissions to access sensitive… | ||
| CVE-2025-24469 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-24468 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-22864 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-22863 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-22861 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-22860 | — | 0.00 | — | — | Aug 23, 2025 | Rejected reason: Not used | ||
| CVE-2025-43770 | Med | 0.33 | 6.1 | 0.00 | Aug 23, 2025 | A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows an… | ||
| CVE-2025-8193 | — | 0.00 | — | — | Aug 22, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | ||
| CVE-2025-9356 | Hig | 0.57 | 8.8 | 0.01 | Aug 22, 2025 | A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this issue is the function inboundFilterAdd of the file /goform/inboundFilterAdd. Executing manipulation of the… | ||
| CVE-2025-9355 | Hig | 0.57 | 8.8 | 0.01 | Aug 22, 2025 | A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this vulnerability is the function scheduleAdd of the file /goform/scheduleAdd. Performing manipulation of the argument… | ||
| CVE-2025-55455 | Low | 0.23 | 3.5 | 0.00 | Aug 22, 2025 | DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext. |
- risk 0.52cvss 8.0epss 0.00
IBM Integrated Analytics System 1.0.0.0 through 1.0.30.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.
- risk 0.64cvss 9.8epss 0.01
IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.
- risk 0.57cvss 8.8epss 0.05
A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function portTriggerManageRule of the file /goform/portTriggerManageRule. The manipulation of the argument…
- risk 0.41cvss 6.3epss 0.01
A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function urlFilterManageRule of the file /goform/urlFilterManageRule. Executing manipulation of the argument…
- risk 0.57cvss 8.8epss 0.01
A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The affected element is the function ipRangeBlockManageRule of the file /goform/ipRangeBlockManageRule. Performing manipulation of…
- risk 0.57cvss 8.8epss 0.01
A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Impacted is the function accessControlAdd of the file /goform/accessControlAdd. Such manipulation of the argument…
- risk 0.57cvss 8.8epss 0.01
A weakness has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function RP_checkCredentialsByBBS of the file /goform/RP_checkCredentialsByBBS. This manipulation of the…
- risk 0.57cvss 8.8epss 0.01
A security flaw has been discovered in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This vulnerability affects the function setSysAdm of the file /goform/setSysAdm. The manipulation of the argument admpasshint…
- risk 0.64cvss 9.8epss 0.01
The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly logging in a user with the data that was previously verified through the facebook_ajax_login_callback() function.…
- risk 0.62cvss 9.6epss 0.01
A critical stored Cross-Site Scripting (XSS) vulnerability exists in the Analytics component of lunary-ai/lunary versions up to 1.9.23, where the NEXT_PUBLIC_CUSTOM_SCRIPT environment variable is directly injected into the DOM using dangerouslySetInnerHTML without any…
- risk 0.53cvss 8.1epss 0.00
The Bravis User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.1. This is due to the plugin not properly logging a user in with the data that was previously verified through the facebook_ajax_login_callback(). This makes it…
- risk 0.57cvss 8.8epss 0.01
A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function langSwitchByBBS of the file /goform/langSwitchByBBS. The manipulation of the argument langSelectionOnly…
- risk 0.40cvss 7.2epss 0.00
The Events Calendar, Event Booking, Registrations and Event Tickets – Eventin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.37 via the proxy_image function. This makes it possible for unauthenticated attackers to…
- risk 0.35cvss 6.4epss 0.00
The Ogulo – 360° Tour plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slug’ parameter in all versions up to, and including, 1.0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
- risk 0.53cvss 8.1epss 0.01
The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the del_img_ajax_call() function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with…
- risk 0.42cvss 6.4epss 0.00
The WS Theme Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ws_weather shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible…
- risk 0.42cvss 6.4epss 0.00
The ShortcodeHub plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author_link_target’ parameter in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
- risk 0.28cvss 4.3epss 0.00
The Silencesoft RSS Reader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.6. This is due to missing or incorrect nonce validation on the 'sil_rss_edit_page' page. This makes it possible for unauthenticated attackers to…
- risk 0.28cvss 4.3epss 0.00
The Sertifier Certificate & Badge Maker for WordPress – Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.19. This is due to missing or incorrect nonce validation on the 'sertifier_settings' page. This makes it…
- risk 0.28cvss 4.3epss 0.00
The Restore Permanently delete Post or Page Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the rp_dpo_dpa_ajax_dp_delete_data() function. This makes it…
- risk 0.28cvss 4.3epss 0.00
The WP Filter & Combine RSS Feeds plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the post_listing_page() function in all versions up to, and including, 0.4. This makes it possible for authenticated attackers, with…
- risk 0.28cvss 4.3epss 0.00
The Ni WooCommerce Customer Product Report plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ni_woocpr_action() function in all versions up to, and including, 1.2.4. This makes it possible for authenticated…
- risk 0.34cvss 5.3epss 0.00
The WC Plus plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pluswc_logo_favicon_logo_base' AJAX action in all versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to update…
- risk 0.64cvss 9.8epss 0.00
The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7.0 to 1.1.9. This is due to the plugin not properly verifying a user's identity prior to logging them in as an admin through the simplerwc_woocommerce_order_created() function. This…
- risk 0.57cvss 9.8epss 0.00
The Liferay Portal 7.4.0 through 7.3.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows the upload of unrestricted files in the style books component that are processed…
- risk 0.33cvss 6.1epss 0.00
A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.13 and 7.4 GA through update 92 allows an remote non-authenticated attacker…
- risk 0.35cvss 6.5epss 0.00
Self-ReDoS (Regular expression Denial of Service) exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1…
- risk 0.33cvss 6.1epss 0.00
Open Redirect vulnerability in /c/portal/edit_info_item parameter redirect in Liferay Portal 7.4.3.86 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 update 86 through update 92 allows an attacker…
- CVE-2025-58043Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- CVE-2025-58042Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- CVE-2025-58041Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- CVE-2025-58040Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- CVE-2025-58039Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- CVE-2025-58038Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- CVE-2025-58037Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- CVE-2025-58036Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- CVE-2025-58035Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- risk 0.33cvss 6.1epss 0.00
Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote attackers to execute arbitrary web script…
- risk 0.43cvss 7.7epss 0.00
Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows authenticated users without any permissions to access sensitive…
- CVE-2025-24469Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- CVE-2025-24468Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- CVE-2025-22864Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- CVE-2025-22863Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- CVE-2025-22861Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- CVE-2025-22860Aug 23, 2025risk 0.00cvss —epss —
Rejected reason: Not used
- risk 0.33cvss 6.1epss 0.00
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows an…
- CVE-2025-8193Aug 22, 2025risk 0.00cvss —epss —
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- risk 0.57cvss 8.8epss 0.01
A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this issue is the function inboundFilterAdd of the file /goform/inboundFilterAdd. Executing manipulation of the…
- risk 0.57cvss 8.8epss 0.01
A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this vulnerability is the function scheduleAdd of the file /goform/scheduleAdd. Performing manipulation of the argument…
- risk 0.23cvss 3.5epss 0.00
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext.