| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-36057 | IBM Cognos Analytics Mobile (iOS) authentication bypass | IBM | Cognos Analytics Mobile | Medium | 5.2 | 2025-07-21 18:10:32 | Deep Dive |
| CVE-2025-36062 | IBM Cognos Analytics Mobile (iOS) information disclosure | IBM | Cognos Analytics Mobile | Medium | 5.9 | 2025-07-21 18:09:19 | Deep Dive |
| CVE-2025-36106 | IBM Cognos Analytics Mobile (iOS) information disclosure | IBM | Cognos Analytics Mobile | Medium | 6.5 | 2025-07-21 18:08:10 | Deep Dive |
| CVE-2025-36107 | IBM Cognos Analytics Mobile (iOS) information disclosure | IBM | Cognos Analytics Mobile | Medium | 5.9 | 2025-07-21 18:07:13 | Deep Dive |
| CVE-2025-34104 | Piwik Authenticated RCE via Custom Plugin Upload | Piwik (now Matomo) | Web Analytics Platform | - | - | 2025-07-15 13:06:51 | Deep Dive |
| CVE-2024-39752 | IBM Analytics Content Hub file upload | IBM | Analytics Content Hub | Medium | 6.8 | 2025-07-10 14:15:19 | Deep Dive |
| CVE-2024-38327 | IBM Analytics Content Hub information disclosure | IBM | Analytics Content Hub | Medium | 6.8 | 2025-07-10 14:14:41 | Deep Dive |
| CVE-2025-36090 | IBM Analytics Content Hub information disclosure | IBM | Analytics Content Hub | Medium | 4.3 | 2025-07-10 14:12:56 | Deep Dive |
| CVE-2024-37524 | IBM Analytics Content Hub information disclosure | IBM | Analytics Content Hub | Medium | 5.3 | 2025-07-10 14:12:18 | Deep Dive |
| CVE-2024-52900 | IBM Cognos Analytics cross-site scripting | IBM | Cognos Analytics | Medium | 6.4 | 2025-06-28 00:59:24 | Deep Dive |
| CVE-2025-6201 | Pixel Manager for WooCommerce (PRO) <= 1.49.0 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode | alekv | Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing | Medium | 6.4 | 2025-06-19 02:10:37 | Deep Dive |
| CVE-2025-49864 | WordPress AFS Analytics plugin <= 4.21 - Broken Access Control Vulnerability | AFS Analytics | AFS Analytics | Medium | 5.3 | 2025-06-17 15:01:18 | Deep Dive |
| CVE-2025-49200 | Unencrypted backup contains sensitive information | SICK AG | SICK Field Analytics | Medium | 6.5 | 2025-06-12 14:27:58 | Deep Dive |
| CVE-2025-49199 | Backup files can be modified and uploaded | SICK AG | SICK Field Analytics | High | 8.8 | 2025-06-12 14:26:33 | Deep Dive |
| CVE-2025-49196 | Deprecated TLS version supported | SICK AG | SICK Field Analytics | Medium | 6.5 | 2025-06-12 14:20:53 | Deep Dive |
| CVE-2025-49193 | Missing HTTP Security Headers | SICK AG | Field Analytics | Medium | 4.2 | 2025-06-12 14:15:07 | Deep Dive |
| CVE-2025-49192 | Clickjacking | SICK AG | SICK Field Analytics | Medium | 4.3 | 2025-06-12 14:12:12 | Deep Dive |
| CVE-2025-49191 | Dashboards and iFrames can link malicious web content | SICK AG | SICK Field Analytics | Medium | 4.8 | 2025-06-12 14:08:03 | Deep Dive |
| CVE-2025-49190 | Server-Side Request Forgery | SICK AG | SICK Field Analytics | Medium | 4.3 | 2025-06-12 14:06:00 | Deep Dive |
| CVE-2025-49188 | Sensitive Data in URL | SICK AG | SICK Field Analytics | Medium | 5.3 | 2025-06-12 14:02:37 | Deep Dive |