Low - CVE-2025-2974 - A vulnerability has been found in CodeCanyon...
A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the file /contract of the component Contracts. The...
Low - CVE-2025-2975 - A vulnerability was found in GFI KerioConnect...
A vulnerability was found in GFI KerioConnect 10.0.6 and classified as problematic. This issue affects some unknown processing of the file Settings/Email/Signature/EditHtmlSource of the component...
Critical - CVE-2025-3011 - SOOP-CLM from PiExtract has a SQL Injection...
SOOP-CLM from PiExtract has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
NA - CVE-2025-3013 - Insecure Direct Object References (IDOR) in...
Insecure Direct Object References (IDOR) in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or...
NA - CVE-2025-3014 - Insecure Direct Object References (IDOR) in...
Insecure Direct Object References (IDOR) in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.
NA - CVE-2025-24517 - Use of client-side authentication issue exists...
Use of client-side authentication issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, a remote attacker may obtain the product login password without...
NA - CVE-2025-24852 - Storing passwords in a recoverable format issue...
Storing passwords in a recoverable format issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, an attacker who can access the microSD card used on the...
NA - CVE-2025-25211 - Weak password requirements issue exists in...
Weak password requirements issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login.
NA - CVE-2025-26689 - Direct request ('Forced Browsing')...
Direct request ('Forced Browsing') issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If a remote attacker sends a specially crafted HTTP request to the product, the product...
Low - CVE-2025-2976 - A vulnerability was found in GFI KerioConnect...
A vulnerability was found in GFI KerioConnect 10.0.6. It has been classified as problematic. Affected is an unknown function of the component File Upload. The manipulation leads to cross site...