Archive
6 August 2025
Vulnerabilities first published on this day (UTC), newest first.
217 results · Feed
-
Medium 5.3
An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt.
-
Low 3.2
jsrsasign v11.1.0 was discovered to contain weak encryption. NOTE: this issue has been disputed by a third party who be…
-
High 7.0
poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that ke…
-
Critical 9.8
An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either by default, common, or …
-
Medium 5.3
In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a …
-
Medium 6.5
Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery (SSRF) in the /api_vedo/video/p…
-
Medium 6.5
Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high priv…
-
Medium 6.5
In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the a…
-
Medium 6.5
A path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary filesystem…
-
Medium 6.5
A local file inclusion (LFI) vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read …
-
Medium 6.1
A Cross-site scripting (XSS) vulnerability in /api_vedo/ in Vedo Suite version 2024.17 allows remote attackers to injec…
-
High 7.6
Cross-site scripting (XSS) vulnerability in Zone Bitaqati thru 3.4.0.
-
High 8.2
An unrestricted file upload vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to write …
-
High 7.5
Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Datab…
-
High 8.6
Insecure Data Storage of credentials has been found in /api_vedo/configuration/config.yml file in Vedo Suite version 20…
-
High 7.5CVE-2025-51040 Public exploit
Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html en…
-
Medium 6.1
A reflected cross-site scripting (XSS) vulnerability in Sage DPW 2024_12_004 and earlier allows attackers to execute ar…