İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2025: sömürülen ve yeni ciddi CVE kayıtları

195 kayıt · 10 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 2

  • CVE-2025-53521
    68Bu hafta

    BigIP APM Vulnerability

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %2

    f5 · big-ip access policy manager15 Eki 2025

  • CVE-2025-60013
    18İzleyin

    F5OS-A FIPS HSM password vulnerability

    OrtaCVSS 4,6Kavram kanıtıEPSS %0

    f5 · f5os-a15 Eki 2025

  • CVE-2025-9548
    27İzleyin

    A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    lenovo · power management driver15 Eki 2025

  • CVE-2025-10576
    34İzleyin

    Sound Research SECOMNService Escalation of Privilege

    YüksekCVSS 8,5Kavram kanıtıEPSS %0

    hp, inc. · sound research15 Eki 2025

  • CVE-2025-11832
    40Planlayın

    APIs Lack Rate Limiting

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    azure-access · blu-ic2 firmware15 Eki 2025

  • CVE-2025-22381
    32İzleyin

    Aggie 2.6.1 has a Host Header injection vulnerability in the forgot password functionality, allowing an attacker to reset a user's password.

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    16 Eki 2025

  • CVE-2025-61922
    36İzleyin

    PrestaShop Checkout allows customer account takeover via email

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    prestashop · prestashop checkout16 Eki 2025

  • CVE-2025-62411
    23İzleyin

    Stored XSS in Alert Transport name field in LibreNMS

    OrtaCVSS 4,8İstismar yokEPSS %12

    librenms · librenms16 Eki 2025

  • CVE-2025-11492
    30İzleyin

    HTTP Configuration and Encryption in Transit

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    connectwise · automate16 Eki 2025

  • CVE-2025-62506
    32İzleyin

    MinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    minio · minio16 Eki 2025

  • CVE-2025-56218
    39İzleyin

    An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    ascertia · signinghub17 Eki 2025

  • CVE-2025-56221
    39İzleyin

    A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    ascertia · signinghub17 Eki 2025

  • CVE-2025-62168
    49Planlayın

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    YüksekCVSS 7,5Kavram kanıtıEPSS %63

    squid-cache · squid17 Eki 2025

  • CVE-2025-34282
    28İzleyin

    ThingsBoard < v4.2.1 SVG Image SSRF

    OrtaCVSS 6,9Kavram kanıtıEPSS %1

    thingsboard · thingsboard17 Eki 2025

  • CVE-2025-11391
    39İzleyin

    PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    themeisle · ppom – product addons & custom fields for woocommerce18 Eki 2025

  • CVE-2025-11926
    17İzleyin

    Related Posts Lite <= 1.12 - Authenticated (Admin+) Stored Cross-Site Scripting

    OrtaCVSS 4,4Kavram kanıtıEPSS %0

    wpdreams · related posts lite18 Eki 2025

  • CVE-2025-61932
    68Bu hafta

    Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests,

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %2

    motex · lanscope endpoint manager20 Eki 2025

  • CVE-2025-56219
    28İzleyin

    Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting.

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    ascertia · signinghub20 Eki 2025

  • CVE-2025-56223
    30İzleyin

    A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS)

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    ascertia · signinghub20 Eki 2025

  • CVE-2025-56224
    32İzleyin

    A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification vi

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    ascertia · signinghub20 Eki 2025

  • CVE-2025-61454
    24İzleyin

    A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpoint.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    20 Eki 2025

  • CVE-2025-61455
    39İzleyin

    SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the signup.inc.php endpoint.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    20 Eki 2025

  • CVE-2025-54957
    39İzleyin

    An issue was discovered in Dolby UDC 4.5 through 4.13.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    20 Eki 2025

  • CVE-2025-61456
    24İzleyin

    A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    20 Eki 2025

  • CVE-2025-57738
    35İzleyin

    Apache Syncope: Remote Code Execution by delegated administrators

    YüksekCVSS 7,2İstismar yokEPSS %23

    apache · syncope20 Eki 2025

  • CVE-2025-61301
    30İzleyin

    Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 (commit 52e4b43, on 2025-05-17) allows attackers who can subm

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    20 Eki 2025

  • CVE-2025-61303
    39İzleyin

    Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a vulnerability in its Windows beha

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    20 Eki 2025

  • CVE-2025-62429
    28İzleyin

    ClipBucket v5 executes arbitrary PHP code

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    oxygenz · clipbucket20 Eki 2025

  • CVE-2025-62522
    24İzleyin

    vite allows server.fs.deny bypass via backslash on Windows

    OrtaCVSS 6,0Kavram kanıtıEPSS %1

    vitejs · vite20 Eki 2025

  • CVE-2025-9428
    43Planlayın

    Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL Injection via the key update api.

    YüksekCVSS 8,8İstismar yokEPSS %27

    zohocorp · manageengine analytics plus21 Eki 2025

  • CVE-2025-60751
    31İzleyin

    GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    21 Eki 2025

  • CVE-2025-60500
    28İzleyin

    QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypass file type restricti

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    qdocs · smart school21 Eki 2025

  • CVE-2025-60344
    37İzleyin

    A path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate inpu

    YüksekCVSS 8,6İstismar yokEPSS %10

    d-link · dsr-15021 Eki 2025

  • CVE-2025-56799
    26İzleyin

    Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folde

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    reolink · reolink21 Eki 2025

  • CVE-2025-56800
    20İzleyin

    Reolink desktop application 8.18.12 contains a vulnerability in its local authentication mechanism.

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    reolink · reolink21 Eki 2025

  • CVE-2025-56801
    20İzleyin

    The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB encryption implement

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    reolink · reolink21 Eki 2025

  • CVE-2025-56802
    20İzleyin

    The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files allowing attackers

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    reolink · reolink21 Eki 2025

  • CVE-2025-62518
    32İzleyin

    astral-tokio-tar Vulnerable to PAX Header Desynchronization

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    astral-sh · tokio-tar21 Eki 2025

  • CVE-2025-53051
    10İzleyin

    Vulnerability in the RDBMS Functional Index component of Oracle Database Server.

    DüşükCVSS 2,7Kavram kanıtıEPSS %0

    oracle · database server21 Eki 2025

  • CVE-2025-53072
    39İzleyin

    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    oracle · marketing21 Eki 2025

  • CVE-2025-61757
    96Hemen

    Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %88

    oracle · identity manager21 Eki 2025

  • CVE-2025-62641
    32İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    oracle · vm virtualbox21 Eki 2025

  • CVE-2024-58274
    39İzleyin

    Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /

    YüksekCVSS 8,3İstismar yokEPSS %19

    hikvision · csmp isecure center22 Eki 2025

  • CVE-2025-11750
    21İzleyin

    User Enumeration via Distinct Error Messages in langgenius/dify-web

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    langgenius · dify22 Eki 2025

  • CVE-2025-11844
    21İzleyin

    XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    huggingface · smolagents22 Eki 2025

  • CVE-2025-8848
    21İzleyin

    HTML Injection in Accept-Language Header in danny-avila/librechat

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    librechat · librechat22 Eki 2025

  • CVE-2025-49901
    39İzleyin

    WordPress Simple Link Directory plugin < 14.8.1 - Broken Authentication vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    quantumcloud · simple link directory22 Eki 2025

  • CVE-2025-62023
    36İzleyin

    WordPress s2Member plugin <= 250905 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,0Kavram kanıtıEPSS %0

    cristián lávaque · s2member22 Eki 2025

  • CVE-2025-40778
    34İzleyin

    Cache poisoning attacks with unsolicited RRs

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    isc · bind 922 Eki 2025

  • CVE-2025-8677
    33İzleyin

    Resource exhaustion via malformed DNSKEY handling

    YüksekCVSS 7,5İstismar yokEPSS %10

    isc · bind 922 Eki 2025

  • CVE-2025-62613
    27İzleyin

    VDO.Ninja Reflected XSS Vulnerability in control.html

    OrtaCVSS 6,9Kavram kanıtıEPSS %1

    steveseguin · vdo.ninja22 Eki 2025

  • CVE-2025-60852
    26İzleyin

    A CSV Injection vulnerability existed in Instant Developer Foundation versions prior to 25.0.9600.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    23 Eki 2025

  • CVE-2025-6978
    32İzleyin

    Diagnostics command injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %13

    arista networks · arista edge threat management - arista next generation firewall23 Eki 2025

  • CVE-2025-6980
    30İzleyin

    Captive Portal can expose sensitive information

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    arista networks · arista edge threat management - arista next generation firewall23 Eki 2025

  • CVE-2025-10874
    22İzleyin

    Orbit Fox < 3.0.2 - Author+ Server-Side Request Forgery

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    unknown · orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more24 Eki 2025

  • CVE-2025-5350
    19İzleyin

    SSRF and Reflected XSS Vulnerability in Deprecated Try-It Feature of Multiple WSO2 Products

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    wso2 · api control plane24 Eki 2025

  • CVE-2025-5605
    21İzleyin

    Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    wso2 · api control plane24 Eki 2025

  • CVE-2025-6440
    49Planlayın

    WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %33

    jma plugins · woocommerce designer pro24 Eki 2025

  • CVE-2025-12028
    35İzleyin

    IndieAuth <= 4.5.4 - Cross-Site Request Forgery to Account Takeover via Stolen OAuth Tokens

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    indieweb · indieauth24 Eki 2025

  • CVE-2025-40019
    0İzleyin

    crypto: essiv - Check ssize for decryption and in-place encryption

    Kavram kanıtıEPSS %0

    linux · linux24 Eki 2025

  • CVE-2025-12055
    31İzleyin

    Unauthenticated Local File Disclosure in MPDV Mikrolab MIP 2 / FEDRA 2 / HYDRA X Manufacturing Execution System

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    mpdv mikrolab gmbh · mip 227 Eki 2025

  • CVE-2023-49440
    35İzleyin

    AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    27 Eki 2025

  • CVE-2025-60424
    30İzleyin

    A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication v

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    nagios · fusion27 Eki 2025

  • CVE-2025-60425
    34İzleyin

    Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enab

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    nagios · fusion27 Eki 2025

  • CVE-2025-60791
    24İzleyin

    Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory.

    OrtaCVSS 6,2Kavram kanıtıEPSS %0

    27 Eki 2025

  • CVE-2025-27222
    35İzleyin

    TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files.

    YüksekCVSS 8,6Kavram kanıtıEPSS %2

    rocketsoftware · trufusion enterprise27 Eki 2025

  • CVE-2025-27223
    31İzleyin

    TRUfusion Enterprise through 7.10.4.0 exposes the encrypted COOKIEID as an authentication mechanism for some endpoints such as /trufusionPor

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    rocketsoftware · trufusion enterprise27 Eki 2025

  • CVE-2025-27225
    36İzleyin

    TRUfusion Enterprise through 7.10.4.0 exposes the /trufusionPortal/jsp/internal_admin_contact_login.jsp endpoint to unauthenticated users.

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    rocketsoftware · trufusion enterprise27 Eki 2025

  • CVE-2025-41067
    34İzleyin

    Reachable Assertion vulnerability in Open5GS

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    open5gs · open5gs27 Eki 2025

  • CVE-2025-55752
    49Planlayın

    Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled

    YüksekCVSS 7,5Kavram kanıtıEPSS %64

    apache · tomcat27 Eki 2025

  • CVE-2025-55754
    41Planlayın

    Apache Tomcat: console manipulation via escape sequences in log messages

    KritikCVSS 9,6İstismar yokEPSS %10

    apache · tomcat27 Eki 2025

  • CVE-2025-53533
    20İzleyin

    Pi-hole Admin Interface vulnerable to cross-site scripting via malformed URL path on 404 error page

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    pi-hole · web interface27 Eki 2025

  • CVE-2025-62725
    39İzleyin

    Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations

    YüksekCVSS 8,9İstismar yokEPSS %13

    docker · compose27 Eki 2025

  • CVE-2025-41090
    30İzleyin

    Improper Access Control in CCN-CERT microCLAUDIA

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    ccn-cert · microclaudia28 Eki 2025

  • CVE-2025-34311
    38İzleyin

    IPFire < v2.29 Command Injection via Proxy Report Creation

    YüksekCVSS 8,7İstismar yokEPSS %13

    ipfire · ipfire28 Eki 2025

  • CVE-2025-40040
    22İzleyin

    mm/ksm: fix flag-dropping behavior in ksm_madvise

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    linux · linux kernel28 Eki 2025

  • CVE-2025-56399
    35İzleyin

    alexusmai laravel-file-manager 3.3.1 and before allows an authenticated attacker to achieve Remote Code Execution (RCE) through a crafted fi

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    28 Eki 2025

  • CVE-2025-60349
    30İzleyin

    An issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via sending IOCTL code 0x22E044 to the pxscan.sy

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    28 Eki 2025

  • CVE-2025-61155
    22İzleyin

    The GameDriverX64.sys kernel-mode anti-cheat driver (v7.23.4.7 and earlier) contains an access control vulnerability in one of its IOCTL han

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    28 Eki 2025

  • CVE-2025-60800
    30İzleyin

    Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive informa

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    jishenghua · jsherp28 Eki 2025

  • CVE-2025-62368
    40Planlayın

    Taiga Authenticated Remote Code Execution

    KritikCVSS 9,0SilahlaştırılmışEPSS %1

    taigaio · taiga-back28 Eki 2025

  • CVE-2025-62727
    30İzleyin

    Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    kludex · starlette28 Eki 2025

  • CVE-2025-64095
    53Planlayın

    DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite

    KritikCVSS 9,8Kavram kanıtıEPSS %46

    dnnsoftware · dotnetnuke28 Eki 2025

  • CVE-2025-60595
    32İzleyin

    SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution.

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    29 Eki 2025

  • CVE-2025-61156
    31İzleyin

    Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arb

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    29 Eki 2025

  • CVE-2025-11201
    47Planlayın

    MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %26

    lfprojects · mlflow29 Eki 2025

  • CVE-2025-11203
    14İzleyin

    LiteLLM Information health API_KEY Information Disclosure Vulnerability

    DüşükCVSS 3,5Kavram kanıtıEPSS %0

    litellm · litellm29 Eki 2025

  • CVE-2025-11627
    26İzleyin

    Site Checkup AI Troubleshooting with Wizard and Tips for Each Issue <= 1.47 - Unauthenticated Log File Poisoning

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    sminozzi · site checkup debug ai troubleshooting with wizard and tips for each issue30 Eki 2025

  • CVE-2025-63298
    32İzleyin

    A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/manage_website.php c

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    mayurik · pet grooming management software30 Eki 2025

  • CVE-2025-62726
    35İzleyin

    n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    n8n · n8n30 Eki 2025

  • CVE-2025-52665
    52Planlayın

    A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, t

    KritikCVSS 10,0Kavram kanıtıEPSS %41

    ui · unifi access31 Eki 2025

  • CVE-2025-8489
    60Bu hafta

    King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation

    KritikCVSS 9,8SilahlaştırılmışEPSS %9

    kingaddons · king addons for elementor – 4,000+ ready elementor sections, 650+ templates, 70+ free widgets for elementor31 Eki 2025

  • CVE-2025-10897
    35İzleyin

    WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read

    YüksekCVSS 8,6Kavram kanıtıEPSS %1

    jma plugins · woocommerce designer pro31 Eki 2025

  • CVE-2025-60749
    31İzleyin

    DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchup_webhelper.exe.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    31 Eki 2025

  • CVE-2025-59501
    20İzleyin

    Microsoft Configuration Manager Spoofing Vulnerability

    OrtaCVSS 4,8Kavram kanıtıEPSS %3

    microsoft · configuration manager 240331 Eki 2025