CVE-2025-27301 |
Description: Deserialization of Untrusted Data vulnerability in Nazmul Hasan Robin NHR Options Table Manager allows Object Injection. This issue affects NHR Options Table Manager: from n/a through 1.1.2.
CVSS: HIGH (7.2) EPSS Score: 0.06%
February 24th, 2025 (5 months ago)
|
CVE-2025-27300 |
Description: Deserialization of Untrusted Data vulnerability in giuliopanda ADFO allows Object Injection. This issue affects ADFO: from n/a through 1.9.1.
CVSS: HIGH (7.2) EPSS Score: 0.06%
February 24th, 2025 (5 months ago)
|
CVE-2025-27298 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in cmstactics WP Video Posts allows OS Command Injection. This issue affects WP Video Posts: from n/a through 3.5.1.
CVSS: HIGH (8.3) EPSS Score: 0.05%
February 24th, 2025 (5 months ago)
|
CVE-2025-27297 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in guelben Bravo Search & Replace allows Blind SQL Injection. This issue affects Bravo Search & Replace: from n/a through 1.0.
CVSS: HIGH (7.6) EPSS Score: 0.04%
February 24th, 2025 (5 months ago)
|
CVE-2025-27296 |
Description: Missing Authorization vulnerability in revenueflex Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue: from n/a through 1.5.
CVSS: HIGH (7.2) EPSS Score: 0.06%
February 24th, 2025 (5 months ago)
|
CVE-2025-27277 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in tiefpunkt Add Linked Images To Gallery allows Cross Site Request Forgery. This issue affects Add Linked Images To Gallery: from n/a through 1.4.
CVSS: HIGH (7.1) EPSS Score: 0.02%
February 24th, 2025 (5 months ago)
|
CVE-2025-27276 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in lizeipe Photo Gallery ( Responsive ) allows Privilege Escalation. This issue affects Photo Gallery ( Responsive ): from n/a through 4.0.
CVSS: HIGH (8.8) EPSS Score: 0.02%
February 24th, 2025 (5 months ago)
|
CVE-2025-27272 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in vinagecko VG PostCarousel allows PHP Local File Inclusion. This issue affects VG PostCarousel: from n/a through 1.1.
CVSS: HIGH (7.5) EPSS Score: 0.12%
February 24th, 2025 (5 months ago)
|
CVE-2024-12918 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Health4All allows SQL Injection.This issue affects Health4All: before 10.01.2025.
CVSS: HIGH (8.8) EPSS Score: 0.04%
February 24th, 2025 (5 months ago)
|
CVE-2024-12917 |
Description: Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse.This issue affects Health4All: before 10.01.2025.
CVSS: HIGH (8.3) EPSS Score: 0.06%
February 24th, 2025 (5 months ago)
|