Archive
6 June 2025
Vulnerabilities first published on this day (UTC), newest first.
208 results · Clear filters · Feed
-
Medium 5.3
Modern Events Calendar <= 7.21.9 - Information Exposure
The Modern Events Calendar Lite plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 7.21.9. This is due improper or insufficient validation of the id property when exporting calendars. This makes it possible for un…
-
Medium 5.1
The wallet has an authentication bypass vulnerability that allows access to specific pages.
-
Medium 4.8
SystemUI component protection settings vulnerability
SystemUI has an incorrect component protection setting, which allows access to specific information.
-
Medium 4.3
SoluçõesCoop iSoluçõesWEB Profile Information Update up.upload.php path traversal
A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250516. It has been classified as problematic. This affects an unknown part of the file /sys/up.upload.php of the component Profile Information Update. The manipulation of the argument nomeArquivo…
-
Medium 4.3
IBM Verify Identity Access Digital Credentials denial of service
IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request.
-
Medium 4.3
IBM Verify Identity Access Digital Credentials information disclosure
IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
-
Medium 5.9
IBM Security Verify Governance information disclosure
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
-
Medium 4.1
Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through …