NA - CVE-2025-24335 - Nokia Single RAN baseband software versions...
Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP contain a SOAP message input validation flaw, which in theory could potentially be used for causing resource exhaustion in...
NA - CVE-2025-27021 - The misconfiguration in the sudoers...
The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem command line tool....
NA - CVE-2025-27022 - Path traversal in WebGUI HTTP endpoint in...
Path traversal in WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests. Details: Lack or insufficient validation of...
Medium - CVE-2024-13451 - The Contact Form by Bit Form: Multi Step Form,...
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Sensitive Information Exposure in...
NA - CVE-2025-27023 - Lack or insufficent input validation in WebGUI...
Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated users to read all OS files via crafted CLI commands. Details: The web interface...
NA - CVE-2025-27024 - Unrestricted access to OS file system in SFTP...
Unrestricted access to OS file system in SFTP service in Infinera G42 version R6.1.3 allows remote authenticated users to read/write OS files via SFTP connections. Details: Account members of...
NA - CVE-2025-27025 - The target device exposes a service on a...
The target device exposes a service on a specific TCP port with a configured endpoint. The access to that endpoint is granted using a Basic Authentication method. The endpoint accepts also the...
Medium - CVE-2025-2330 - The All-in-One Addons for Elementor – WidgetKit...
The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button+modal' widget in all versions up to, and...
High - CVE-2025-4946 - The Vikinger theme for WordPress is vulnerable...
The Vikinger theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the vikinger_delete_activity_media_ajax() function in all versions up to, and...
NA - CVE-2025-39362 - Missing Authorization vulnerability in Mollie...
Missing Authorization vulnerability in Mollie Mollie Payments for WooCommerce.This issue affects Mollie Payments for WooCommerce: from n/a through 8.0.2.