NA - CVE-2025-2994 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14(408). This affects an unknown part of the file /goform/qossetting of the component Web Management Interface....
NA - CVE-2025-3022 - Os command injection vulnerability in...
Os command injection vulnerability in e-solutions e-management. This vulnerability allows an attacker to execute arbitrary commands on the server via the ‘client’ parameter in the...
NA - CVE-2025-29266 - Unraid 7.0.0 before 7.0.1 allows remote users...
Unraid 7.0.0 before 7.0.1 allows remote users to access the Unraid WebGUI and web console as root without authentication if a container is running in Host networking mode with Use Tailscale enabled.
Medium - CVE-2025-2995 - A vulnerability has been found in Tenda FH1202...
A vulnerability has been found in Tenda FH1202 1.2.0.14(408) and classified as critical. This vulnerability affects unknown code of the file /goform/SysToolChangePwd of the component Web Management...
Medium - CVE-2025-2996 - A vulnerability was found in Tenda FH1202...
A vulnerability was found in Tenda FH1202 1.2.0.14(408) and classified as critical. This issue affects some unknown processing of the file /goform/SysToolDDNS of the component Web Management...
NA - CVE-2025-31526 - Improper Neutralization of Special Elements...
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eleopard Behance Portfolio Manager allows SQL Injection. This issue affects Behance...
NA - CVE-2025-31527 - Server-Side Request Forgery (SSRF)...
Server-Side Request Forgery (SSRF) vulnerability in Kishan WP Link Preview allows Server Side Request Forgery. This issue affects WP Link Preview: from n/a through 1.4.1.
NA - CVE-2025-31528 - Missing Authorization vulnerability in wokamoto...
Missing Authorization vulnerability in wokamoto StaticPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects StaticPress: from n/a through 0.4.5.
NA - CVE-2025-31529 - Missing Authorization vulnerability in Rashid...
Missing Authorization vulnerability in Rashid Slider Path for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Slider Path for Elementor: from...