High - CVE-2025-6212 - The Ultra Addons for Contact Form 7 plugin for...
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Database module in versions 3.5.11 to 3.5.19 due to insufficient input sanitization and...
NA - CVE-2025-3722 - A path traversal vulnerability in System...
A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post requests to System Information...
NA - CVE-2025-3771 - Vulnerability allows local user to write...
Vulnerability allows local user to write registry backup files into another location set by the user by creating junction symlink in System Information Reporter.
NA - CVE-2025-3773 - A sensitive information exposure vulnerability...
A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract sensitive information stored in a...
Critical - CVE-2025-6561 - Certain hybrid DVR models ((HBF-09KD and...
Certain hybrid DVR models ((HBF-09KD and HBF-16NK)) from Hunt Electronic have an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to directly access a...
High - CVE-2025-6562 - Certain hybrid DVR models (HBF-09KD and...
Certain hybrid DVR models (HBF-09KD and HBF-16NK) from Hunt Electronic have an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary OS commands...