Medium - CVE-2025-2757 - A vulnerability classified as critical was...
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_PARSE_STRING_IN_QUOTATION of the file...
Medium - CVE-2025-2109 - The WP Compress – Instant Performance & Speed...
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.30.15 via the init() function....
NA - CVE-2024-10037 - A vulnerability exists in the RTU500 web server...
A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU application if a specially crafted message sequence is executed on a WebSocket...
NA - CVE-2024-11499 - A vulnerability exists in RTU500 IEC...
A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restart. The vulnerability can be triggered...
NA - CVE-2024-12169 - A vulnerability exists in RTU500 IEC...
A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker performing a specific attack sequence to restart the affected...
NA - CVE-2025-1445 - A vulnerability exists in RTU IEC 61850 client...
A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing...
NA - CVE-2025-27631 - The TRMTracker web application is vulnerable to...
The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code into a query and execute remote commands that can read and update data on the...
NA - CVE-2025-27632 - A Host Header Injection vulnerability in...
A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value in an HTTP request to leverage multiple attack vectors, including defacing...
NA - CVE-2025-27633 - The TRMTracker web application is vulnerable to...
The TRMTracker web application is vulnerable to reflected Cross-site scripting attack. The application allows client-side code injection that might be used to compromise the confidentiality and...