Medium - CVE-2025-2348 - A vulnerability was found in IROAD Dash Cam FX2...
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been classified as problematic. Affected is an unknown function of the file /mnt/extsd/event/ of the component HTTP/RTSP. The...
Low - CVE-2025-2349 - A vulnerability was found in IROAD Dash Cam FX2...
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/passwd of the...
Medium - CVE-2025-2350 - A vulnerability was found in IROAD Dash Cam FX2...
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been rated as critical. Affected by this issue is some unknown functionality of the file /action/upload_file. The manipulation...
High - CVE-2025-2351 - A vulnerability classified as critical was...
A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The...
Low - CVE-2025-2352 - A vulnerability, which was classified as...
A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/indexConfigs/save of the component...
High - CVE-2025-1653 - The Directory Listings WordPress plugin –...
The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.7. This is due to the...
High - CVE-2025-1657 - The Directory Listings WordPress plugin –...
The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to unauthorized modification of data and PHP Object Injection due to a missing capability check on the...
Medium - CVE-2024-12336 - The WC Affiliate – A Complete WooCommerce...
The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'export_all_data'...
Medium - CVE-2024-13847 - The Portfolio and Projects plugin for WordPress...
The Portfolio and Projects plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.5.3 due to insufficient input sanitization...
High - CVE-2025-1667 - The School Management System – WPSchoolPress...
The School Management System – WPSchoolPress plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wpsp_UpdateTeacher() function in all versions up to,...