| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2019-25655 | Device Monitoring Studio 8.10.00.8925 Denial of Service | hdd | Device Monitoring Studio | Medium | 6.2 | 2026-03-30 11:02:28 | Deep Dive |
| CVE-2026-32680 | RATOC RAID Monitoring Manager for Windows 安全漏洞 | RATOC Systems, Inc. | RATOC RAID Monitoring Manager for Windows | - | - | 2026-03-26 06:55:19 | Deep Dive |
| CVE-2026-28760 | RATOC RAID Monitoring Manager for Windows 代码问题漏洞 | RATOC Systems, Inc. | RATOC RAID Monitoring Manager for Windows | - | - | 2026-03-26 06:54:59 | Deep Dive |
| CVE-2026-4536 | Acrel Environmental Monitoring Cloud Platform unrestricted upload | Acrel | Environmental Monitoring Cloud Platform | High | 7.3 | 2026-03-22 04:02:11 | Deep Dive |
| CVE-2026-32771 | Monitoring is vulnerable to Archive Slip due to missing checks in sanitization | ctfer-io | monitoring | 中危 | - | 2026-03-20 00:29:24 | Deep Dive |
| CVE-2026-32720 | Improper Access Control in github.com/ctfer-io/monitoring | ctfer-io | monitoring | - | - | 2026-03-13 21:27:53 | Deep Dive |
| CVE-2026-32362 | WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.3 - Broken Access Control vulnerability | activity-log.com | WP Sessions Time Monitoring Full Automatic | 中危 | - | 2026-03-13 11:42:05 | Deep Dive |
| CVE-2025-11739 | Schneider Electric EcoStruxure Power Monitoring Expert和Schneider Electric EcoStruxure Power Operation（Schneider Electric EPO） 代码问题漏洞 | Schneider Electric | EcoStruxure™ Power Monitoring Expert (PME) | - | - | 2026-03-10 12:25:15 | Deep Dive |
| CVE-2026-3046 | itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile_old.php sql injection | itsourcecode | E-Logbook with Health Monitoring System for COVID-19 | High | 7.3 | 2026-02-24 00:32:08 | Deep Dive |
| CVE-2026-2620 | Huace Monitoring and Early Warning System ProjectRole.aspx sql injection | Huace | Monitoring and Early Warning System | High | 7.3 | 2026-02-17 19:02:06 | Deep Dive |
| CVE-2025-15029 | An unauthenticated user is able to introduce SQL Injection using the Awie export module | Centreon | Infra Monitoring | Critical | 9.8 | 2026-01-05 14:34:03 | Deep Dive |
| CVE-2025-15026 | Unauthenticated configuration import allows administrative account creation using AWIE component | Centreon | Infra Monitoring | Critical | 9.8 | 2026-01-05 14:31:34 | Deep Dive |
| CVE-2025-12511 | A user with elevated privileges can inject XSS in the DSM Administration’s Extensions configuration page | Centreon | Infra Monitoring | Medium | 6.8 | 2026-01-05 14:05:53 | Deep Dive |
| CVE-2025-12513 | A user with elevated privileges can inject XSS in the Hosts configuration parameters page | Centreon | Infra Monitoring | Medium | 6.8 | 2026-01-05 13:43:43 | Deep Dive |
| CVE-2025-12519 | Information disclosure on Administration parameters API endpoint | Centreon | Infra Monitoring | Medium | 5.3 | 2026-01-05 10:15:09 | Deep Dive |
| CVE-2025-13056 | A user with elevated privileges can inject XSS in the Administration ACL Menus configuration page | Centreon | Infra Monitoring | Medium | 6.8 | 2026-01-05 10:10:36 | Deep Dive |
| CVE-2025-5965 | RCE via the backup feature available only to user with high privilege | Centreon | Infra Monitoring | High | 7.2 | 2026-01-05 10:06:05 | Deep Dive |
| CVE-2025-54890 | A user with elevated privileges can inject XSS in the Hostgroups configuration page | Centreon | Infra Monitoring | Medium | 6.8 | 2025-12-22 11:07:28 | Deep Dive |
| CVE-2025-12514 | A user with elevated privileges is able to introduce a SQL Injection using the Open-tickets Notification rules configuration parameters | Centreon | Infra Monitoring - Open-tickets | High | 7.2 | 2025-12-22 10:59:18 | Deep Dive |
| CVE-2025-8460 | A user with elevated privileges can inject XSS in the Notification rules configuration page | Centreon | Infra Monitoring | Medium | 6.8 | 2025-12-22 10:55:59 | Deep Dive |