Medium - CVE-2025-5937 - The MicroPayments – Fans Paysite: Paid Creator...
The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.0....
Low - CVE-2025-6816 - A vulnerability classified as problematic was...
A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5O__fsinfo_encode of the file /src/H5Ofsinfo.c. The manipulation leads to heap-based...
Low - CVE-2025-6817 - A vulnerability, which was classified as...
A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5C__load_entry of the file /src/H5Centry.c. The manipulation leads to resource...
High - CVE-2025-1991 - IBM Informix Dynamic Server 12.10,14.10,...
IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets.
NA - CVE-2023-28902 - An integer underflow in the image processing...
An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause denial-of-service of the infotainment system. The...
NA - CVE-2023-28903 - An integer overflow in the image processing...
An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a denial-of-service of the infotainment system.
NA - CVE-2023-28904 - A logic flaw leading to a RAM buffer overflow...
A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attacker with physical access to the MIB3 ECU to bypass firmware signature...
NA - CVE-2023-28905 - A heap buffer overflow in the image processing...
A heap buffer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker to execute arbitrary code on it. The vulnerability was originally discovered in Skoda Superb...
NA - CVE-2023-28906 - A command injection in the networking service...
A command injection in the networking service of the MIB3 infotainment allows an attacker already presenting in the system to escalate privileges and obtain administrative access to the system. The...
NA - CVE-2023-28907 - There is no memory isolation between CPU cores...
There is no memory isolation between CPU cores of the MIB3 infotainment. This fact allows an attacker with access to the main operating system to compromise the CPU core responsible for CAN message...