| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-2708 | zhijiantianya ruoyi-vue-pro Backend File Upload Interface upload path traversal | zhijiantianya | ruoyi-vue-pro | Medium | 5.4 | 2025-03-24 19:31:04 | Deep Dive |
| CVE-2025-2707 | zhijiantianya ruoyi-vue-pro Front-End Store Interface upload path traversal | zhijiantianya | ruoyi-vue-pro | Medium | 5.4 | 2025-03-24 19:00:06 | Deep Dive |
| CVE-2025-30591 | WordPress Music Press Pro plugin <= 1.4.6 Broken Access Control Vulnerability | tuyennv | Music Press Pro | Medium | 5.3 | 2025-03-24 13:47:16 | Deep Dive |
| CVE-2025-30583 | WordPress Pro Rank Tracker plugin <= 1.0.0 - CSRF to Stored XSS Vulnerability | ProRankTracker | Pro Rank Tracker | High | 7.1 | 2025-03-24 13:47:11 | Deep Dive |
| CVE-2025-2480 | Santesoft Sante DICOM Viewer Pro Out-of-bounds Write | Santesoft | Sante DICOM Viewer Pro | High | 7.8 | 2025-03-20 16:49:08 | Deep Dive |
| CVE-2024-12563 | s2Member Pro <= 250214 - Authenticated (Contributor+) Local File Inclusion to Remote Code Execution via Shortcode | WP Sharks | s2Member Pro | High | 8.8 | 2025-03-18 20:21:45 | Deep Dive |
| CVE-2025-1528 | Search and filter pro <= 2.5.19 - Missing Authorization to Authenticated (Subscriber+) Post Meta Exposure | Search & Filter | Search & Filter Pro | Medium | 4.3 | 2025-03-14 04:22:33 | Deep Dive |
| CVE-2024-26290 | Authenticated Remote Command Injection affecting Avid NEXIS | Avid | Avid NEXIS E-series | 中危 | - | 2025-03-12 19:45:09 | Deep Dive |
| CVE-2025-28900 | WordPress TabGarb Pro plugin <= 2.6 - CSRF to Stored XSS vulnerability | webgarb | TabGarb Pro | High | 7.1 | 2025-03-11 21:00:52 | Deep Dive |
| CVE-2024-56182 | Siemens SIMATIC 缓冲区错误漏洞 | Siemens | SIMATIC Field PG M5 | High | 8.2 | 2025-03-11 09:48:05 | Deep Dive |
| CVE-2024-56181 | Siemens SIMATIC 缓冲区错误漏洞 | Siemens | SIMATIC Field PG M5 | High | 8.2 | 2025-03-11 09:48:04 | Deep Dive |
| CVE-2025-2122 | Thinkware Car Dashcam F800 Pro Connection denial of service | Thinkware | Car Dashcam F800 Pro | Low | 3.1 | 2025-03-09 13:31:05 | Deep Dive |
| CVE-2025-2121 | Thinkware Car Dashcam F800 Pro File Storage access control | Thinkware | Car Dashcam F800 Pro | Medium | 6.3 | 2025-03-09 11:00:07 | Deep Dive |
| CVE-2025-2120 | Thinkware Car Dashcam F800 Pro Configuration File hostapd.conf cleartext storage in a file or on disk | Thinkware | Car Dashcam F800 Pro | Low | 2.1 | 2025-03-09 10:31:04 | Deep Dive |
| CVE-2025-2119 | Thinkware Car Dashcam F800 Pro Device Registration default credentials | Thinkware | Car Dashcam F800 Pro | Low | 2.0 | 2025-03-09 09:00:11 | Deep Dive |
| CVE-2024-11087 | miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 - Authentication Bypass | cyberlord92 | miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) | High | 8.1 | 2025-03-08 07:04:55 | Deep Dive |
| CVE-2024-53694 | QVPN Device Client, Qsync, Qfinder Pro | QNAP Systems Inc. | QVPN Device Client for Mac | 高危 | - | 2025-03-07 16:13:36 | Deep Dive |
| CVE-2025-27604 | XWiki Confluence Migrator Pro's homepage is public | xwikisas | application-confluence-migrator-pro | High | 7.5 | 2025-03-07 16:11:32 | Deep Dive |
| CVE-2025-27603 | XWiki Confluence Migrator Pro allows Remote Code Execution via unescaped translations | xwikisas | application-confluence-migrator-pro | Critical | 9.1 | 2025-03-07 16:06:40 | Deep Dive |
| CVE-2025-2040 | zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine | zhijiantianya | ruoyi-vue-pro | Medium | 6.3 | 2025-03-06 20:00:12 | Deep Dive |