CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-27301

Description: Deserialization of Untrusted Data vulnerability in Nazmul Hasan Robin NHR Options Table Manager allows Object Injection. This issue affects NHR Options Table Manager: from n/a through 1.1.2.

CVSS: HIGH (7.2)

EPSS Score: 0.06%

Source: CVE
February 24th, 2025 (5 months ago)

CVE-2025-27300

Description: Deserialization of Untrusted Data vulnerability in giuliopanda ADFO allows Object Injection. This issue affects ADFO: from n/a through 1.9.1.

CVSS: HIGH (7.2)

EPSS Score: 0.06%

Source: CVE
February 24th, 2025 (5 months ago)

CVE-2025-27298

Description: Cross-Site Request Forgery (CSRF) vulnerability in cmstactics WP Video Posts allows OS Command Injection. This issue affects WP Video Posts: from n/a through 3.5.1.

CVSS: HIGH (8.3)

EPSS Score: 0.05%

Source: CVE
February 24th, 2025 (5 months ago)

CVE-2025-27297

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in guelben Bravo Search & Replace allows Blind SQL Injection. This issue affects Bravo Search & Replace: from n/a through 1.0.

CVSS: HIGH (7.6)

EPSS Score: 0.04%

Source: CVE
February 24th, 2025 (5 months ago)

CVE-2025-27296

Description: Missing Authorization vulnerability in revenueflex Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue: from n/a through 1.5.

CVSS: HIGH (7.2)

EPSS Score: 0.06%

Source: CVE
February 24th, 2025 (5 months ago)

CVE-2025-27277

Description: Cross-Site Request Forgery (CSRF) vulnerability in tiefpunkt Add Linked Images To Gallery allows Cross Site Request Forgery. This issue affects Add Linked Images To Gallery: from n/a through 1.4.

CVSS: HIGH (7.1)

EPSS Score: 0.02%

Source: CVE
February 24th, 2025 (5 months ago)

CVE-2025-27276

Description: Cross-Site Request Forgery (CSRF) vulnerability in lizeipe Photo Gallery ( Responsive ) allows Privilege Escalation. This issue affects Photo Gallery ( Responsive ): from n/a through 4.0.

CVSS: HIGH (8.8)

EPSS Score: 0.02%

Source: CVE
February 24th, 2025 (5 months ago)

CVE-2025-27272

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in vinagecko VG PostCarousel allows PHP Local File Inclusion. This issue affects VG PostCarousel: from n/a through 1.1.

CVSS: HIGH (7.5)

EPSS Score: 0.12%

Source: CVE
February 24th, 2025 (5 months ago)

CVE-2024-12918

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Health4All allows SQL Injection.This issue affects Health4All: before 10.01.2025.

CVSS: HIGH (8.8)

EPSS Score: 0.04%

Source: CVE
February 24th, 2025 (5 months ago)

CVE-2024-12917

Description: Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse.This issue affects Health4All: before 10.01.2025.

CVSS: HIGH (8.3)

EPSS Score: 0.06%

Source: CVE
February 24th, 2025 (5 months ago)