Browse CVEs

HIGH 8.6 CVE-2025-20146 A vulnerability in the Layer 3 multicast feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact Hi… Ios Xr Mitigation only Fix from $1,9502025-03-12 HIGH 8.6 CVE-2025-20142 A vulnerability in the IPv4 access control list (ACL) feature and quality of service (QoS) policy feature of Cisco IOS XR Software for Cisco ASR 9000… Ios Xr Mitigation only Fix from $1,9502025-03-12 MEDIUM 6.7 CVE-2025-27493 A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). A… Sipass Integrated Ac5102 \(acc G2\) Firmware 6.4.9+ Fix from $1,6002025-03-11 HIGH 7.2 CVE-2025-27494 A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). A… Sipass Integrated Ac5102 \(acc G2\) Firmware 6.4.9+ Fix from $1,9502025-03-11 HIGH 7.5 CVE-2025-26702 Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.04. Goldendb 6.1.03.05+ Fix from $1,9502025-03-11 HIGH 7.2 CVE-2025-2043 A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown processing of the file /admin#theme… Pb Cms Mitigation only Fix from $1,9502025-03-06 MEDIUM 6.3 CVE-2024-38311 Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 th… Traffic Server 9.2.9 / 10.0.4+ Fix from $1,6002025-03-06 CRITICAL 9.3 CVE-2025-27517 Volt is an elegantly crafted functional API for Livewire. Malicious, user-crafted request payloads could potentially lead to remote code execution wi… Mitigation only Fix from $2,3002025-03-05 HIGH 7.8 CVE-2025-1080 LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice… Debian Linux 24.8.5.1 / 25.2.1.1+ Fix from $1,9502025-03-04 MEDIUM 6.3 CVE-2025-0958 The Ultimate WordPress Auction Plugin plugin for WordPress is vulnerable to unauthorized access to functionality in all versions up to, and including… Ultimate Auction 4.3.0+ Fix from $1,6002025-03-04 MEDIUM 5.5 CVE-2024-58044 Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability. Emui No fix yet Fix from $1,6002025-03-04 HIGH 8.8 CVE-2024-53029 Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine. Qam8255p Firmware Mitigation only Fix from $1,9502025-03-03 HIGH 7.8 CVE-2024-53030 Memory corruption while processing input message passed from FE driver. Msm8996au Firmware No fix yet Fix from $1,9502025-03-03 HIGH 7.8 CVE-2024-53031 Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine. Srv1l Firmware No fix yet Fix from $1,9502025-03-03 HIGH 7.8 CVE-2024-53012 Memory corruption may occur due to improper input validation in clock device. Qam8255p Firmware No fix yet Fix from $1,9502025-03-03 HIGH 7.8 CVE-2024-53022 Memory corruption may occur during communication between primary and guest VM. Qam8255p Firmware No fix yet Fix from $1,9502025-03-03 MEDIUM 6.5 CVE-2025-0764 The wpForo Forum plugin for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'update' method of the 'Member… Wpforo Forum 2.4.2+ Fix from $1,6002025-02-28 CRITICAL 9.8 CVE-2024-36047 Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation. Nios 8.6.4+ Fix from $2,3002025-02-27 HIGH 7.8 CVE-2025-0514 Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditio… Libreoffice 24.8.5.1+ Fix from $1,9502025-02-25 CRITICAL 9.8 CVE-2025-1556 A vulnerability, which was classified as problematic, has been found in westboy CicadasCMS 1.0. This issue affects some unknown processing of the fil… Cicadascms No fix yet Fix from $2,3002025-02-22 MEDIUM 5.3 CVE-2024-13798 The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to unauthorized order creation in all versions up to, and includi… Comboblocks 2.3.6+ Fix from $1,6002025-02-22 HIGH 7.5 CVE-2024-13681 The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_admin_get_oembed' function in… Uncode 2.9.1.7+ Fix from $1,9502025-02-18 MEDIUM 6.5 CVE-2024-13691 The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_recordMedia' function in all … Uncode 2.9.1.7+ Fix from $1,6002025-02-18 HIGH 8.6 CVE-2025-0422 An authenticated user in the "bestinformed Web" application can execute commands on the underlying server running the application. (Remote Code Execu… Mitigation only Fix from $1,9502025-02-18 MEDIUM 5.3 CVE-2025-0423 In the "bestinformed Web" application, some user input was not properly sanitized. This leads to multiple unauthenticated stored cross-site scripting… Mitigation only Fix from $1,6002025-02-18 MEDIUM 5.1 CVE-2025-0424 In the "bestinformed Web" application, some user input was not properly sanitized. This leads to multiple authenticated stored cross-site scripting v… Mitigation only Fix from $1,6002025-02-18 MEDIUM 6.1 CVE-2025-0178 An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host … Fireware 12.5.13 / 12.11.1+ Fix from $1,6002025-02-14 MEDIUM 6.5 CVE-2025-0815 CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious ICMPV6 packets are sent to th… No fix yet Fix from $1,6002025-02-13 MEDIUM 6.5 CVE-2025-0816 CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious IPV6 packets are sent to the … Mitigation only Fix from $1,6002025-02-13 MEDIUM 5.3 CVE-2025-0814 CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network services running on the product when malicio… Mitigation only Fix from $1,6002025-02-13