快速搜索提示:
按厂商查询(如:microsoft)|
按产品查询(如:microsoft sql_server)
漏洞列表 353262
| CVE ID | 标题 | 严重程度 | CVSS | 发布时间 | 受影响产品 | 数据源 | 操作 |
|---|---|---|---|---|---|---|---|
| CVE-2025-12025 |
YouTube Subscribe <= 3.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Title and Channel ID
|
MEDIUM | 4.4 | 2025-11-25 |
mahabubs YouTube Subscribe
|
CVE NVD | |
| CVE-2025-13386 |
Social Images Widget <= 2.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Deletion
|
MEDIUM | 5.3 | 2025-11-25 |
lyrathemes Social Images Widget
|
CVE NVD | |
| CVE-2025-12525 |
Locker Content <= 1.0.0 - Unauthenticated Information Exposure
|
MEDIUM | 5.3 | 2025-11-25 |
appglut Locker Content
|
CVE NVD | |
| CVE-2025-13389 |
Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated Information Disclosure
|
MEDIUM | 5.3 | 2025-11-25 |
nmedia Admin and Customer Messages After Order for WooCommerce: OrderConvo
|
CVE NVD | |
| CVE-2025-13376 |
ProjectList <= 0.3.0 - Authenticated (Editor+) Arbitrary File Upload
|
HIGH | 7.2 | 2025-11-25 |
ov3rkll ProjectList
|
CVE NVD | |
| CVE-2025-12040 |
Wishlist for WooCommerce <= 1.0.9 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
|
MEDIUM | 6.5 | 2025-11-25 |
themehunk Wishlist for WooCommerce
|
CVE NVD | |
| CVE-2025-12586 |
Conditional Maintenance Mode for WordPress <= 1.0.0 - Cross-Site Request Forgery
|
MEDIUM | 4.3 | 2025-11-25 |
evolurise Conditionnal Maintenance Mode for WordPress
|
CVE NVD | |
| CVE-2025-13452 |
Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated User Impersonation in Order Messages
|
MEDIUM | 4.3 | 2025-11-25 |
nmedia Admin and Customer Messages After Order for WooCommerce: OrderConvo
|
CVE NVD | |
| CVE-2025-12032 |
ZWeb - Social Mobile <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
|
MEDIUM | 4.4 | 2025-11-25 |
vithanhlam Zweb Social Mobile – Ứng Dụng Nút Gọi Mobile
|
CVE NVD | |
| CVE-2025-13383 |
Job Board by BestWebSoft <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via $_GET Array Storage
|
MEDIUM | 6.1 | 2025-11-25 |
bestweblayout Job Board by BestWebSoft
|
CVE NVD | |
| CVE-2025-13414 |
Chamber Dashboard Business Directory <= 3.3.11 - Missing Authorization to Unauthenticated Business Information Export
|
MEDIUM | 5.3 | 2025-11-25 |
gwendydd Chamber Dashboard Business Directory
|
CVE NVD | |
| CVE-2025-12043 |
Autochat Automatic Conversation <= 1.1.9 - Missing Authorization to Unauthenticated Settings Update
|
MEDIUM | 5.3 | 2025-11-25 |
autochat Autochat Automatic Conversation
|
CVE NVD | |
| CVE-2025-59365 |
A stack buffer overflow vulnerability has been identified in certain router models. An authenticated...
|
MEDIUM | 6.9 | 2025-11-25 |
ASUS Router
ASUS Router
+1个
|
CVE NVD | |
| CVE-2025-59366 |
An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an ...
|
CRITICAL | 9.2 | 2025-11-25 |
ASUS Router
ASUS Router
+1个
|
CVE NVD | |
| CVE-2025-64693 |
Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerabili...
|
CRITICAL | 9.3 | 2025-11-25 |
Intercom, Inc. Security Point (Windows) of MaLion
Intercom, Inc. Security Point (Windows) of MaLionCloud
|
CVE NVD | |
| CVE-2025-62691 |
Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerabil...
|
CRITICAL | 9.3 | 2025-11-25 |
Intercom, Inc. Security Point (Windows) of MaLion
Intercom, Inc. Security Point (Windows) of MaLionCloud
|
CVE NVD | |
| CVE-2025-59485 |
Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4....
|
MEDIUM | 4.8 | 2025-11-25 |
Intercom, Inc. Security Point (Windows) of MaLion
|
CVE NVD | |
| CVE-2025-12742 |
Remote Code Execution in Looker via Teradata JDBC Driver
|
HIGH | 7.5 | 2025-11-25 |
Google Cloud Looker
|
CVE NVD | |
| CVE-2025-13644 |
MongoDB may be susceptible to Invariant Failure due to batched delete
|
HIGH | 7.1 | 2025-11-25 |
MongoDB Inc. MongoDB Server
mongodb mongodb
+1个
|
CVE NVD | |
| CVE-2025-13643 |
MongoDB Server may allow queries to be terminated by unauthorized users
|
LOW | 2.3 | 2025-11-25 |
MongoDB Inc. MongoDB Server
mongodb mongodb
+1个
|
CVE NVD |