Daily insights into the world's most dangerous security vulnerabilities
CVE-2025-5910 is a critical buffer overflow vulnerability affecting the Totolink EX1200T firmware versions up to 4.1.2cu.5232_B20210713, with a CVSS score of 8.8, indicating a high severity level. Thi...
CVE-2025-5911 represents a critical buffer overflow vulnerability in the Totolink EX1200T firmware, specifically affecting versions up to 4.1.2cu.5232_B20210713. With a CVSS score of 8.8, this vulnera...
CVE-2025-4387 is a critical vulnerability affecting the Abandoned Cart Pro for WooCommerce plugin, which allows authenticated attackers to upload arbitrary files due to inadequate file type validation...
CVE-2025-4601 represents a significant privilege escalation vulnerability in the "RH - Real Estate WordPress Theme," affecting all versions up to and including 4.4.0. With a CVSS score of 8.8, the vul...
CVE-2025-5912 is a critical buffer overflow vulnerability identified in the D-Link DIR-632 firmware (version FW103B08). With a CVSS score of 8.8, this vulnerability poses a significant risk as it allo...
CVE-2025-5934 is a critical buffer overflow vulnerability affecting the Netgear EX3700 firmware versions prior to 1.0.0.88, with a CVSS score of 8.8, indicating high severity. This vulnerability allow...
CVE-2025-27818 represents a critical remote code execution (RCE) vulnerability in Apache Kafka, with a CVSS score of 8.8, indicating high severity. The vulnerability arises from improper handling of S...
CVE-2025-42983 represents a critical security vulnerability within SAP Business Warehouse and SAP Plug-In Basis, allowing authenticated attackers to drop arbitrary database tables. With a CVSS score o...
CVE-2025-23192 represents a significant security vulnerability within SAP BusinessObjects Business Intelligence (BI Workspace), allowing unauthenticated attackers to inject and execute malicious scrip...
CVE-2025-42977 represents a critical path traversal vulnerability within SAP NetWeaver Visual Composer, classified with a CVSS score of 7.6/10.0. This vulnerability arises from insufficient validation...