Low-severity CVEs (page 44)
Page 44 of 100 — low-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3297 | Low | 3.5 | 2025-04-05 | A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes… |
CVE-2025-3253 | Low | 3.5 | 2025-04-04 | A vulnerability was found in xujiangfei admintwo 1.0 and classified as problematic. This issue affects some unknown processing of the file /ztree/insertTree. T… |
CVE-2025-3252 | Low | 3.5 | 2025-04-04 | A vulnerability has been found in xujiangfei admintwo 1.0 and classified as problematic. This vulnerability affects unknown code of the file /resource/add. The… |
CVE-2025-3251 | Low | 3.5 | 2025-04-04 | A vulnerability, which was classified as problematic, was found in xujiangfei admintwo 1.0. This affects an unknown part of the file /user/updateSet. The manip… |
CVE-2025-3219 | Low | 3.5 | 2025-04-04 | A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/pr… |
CVE-2024-42208 | Low | 3.5 | 2025-04-04 | HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, cau… |
CVE-2025-3198 | Low | 3.3 | 2025-04-04 | A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file… |
CVE-2025-32054 | Low | 3.3 | 2025-04-03 | In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file |
CVE-2025-3160 | Low | 3.3 | 2025-04-03 | A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::SceneCo… |
CVE-2025-3157 | Low | 2.4 | 2025-04-03 | A vulnerability was found in Intelbras WRN 150 1.0.15_pt_ITB01. It has been rated as problematic. This issue affects some unknown processing of the component W… |
CVE-2025-3152 | Low | 3.5 | 2025-04-03 | A vulnerability classified as problematic has been found in caipeichao ThinkOX 1.0. This affects an unknown part of the file /ThinkOX-master/index.php?s=/Weibo… |
CVE-2025-3149 | Low | 2.4 | 2025-04-03 | A vulnerability was found in itning Student Homework Management System up to 1.2.7. It has been classified as problematic. Affected is an unknown function of t… |
CVE-2025-3148 | Low | 3.3 | 2025-04-03 | A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the compon… |
CVE-2025-3145 | Low | 3.3 | 2025-04-03 | A vulnerability, which was classified as problematic, has been found in MindSpore 2.5.0. Affected by this issue is the function mindspore.numpy.fft.rfft2. The… |
CVE-2025-3144 | Low | 3.3 | 2025-04-03 | A vulnerability classified as problematic was found in MindSpore 2.5.0. Affected by this vulnerability is the function mindspore.numpy.fft.hfftn. The manipulat… |
CVE-2025-3136 | Low | 3.3 | 2025-04-03 | A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_dele… |
CVE-2025-29991 | Low | 2.2 | 2025-04-03 | Yubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol Two implementation. It uses the signature length from CTAP PIN/… |
CVE-2025-3122 | Low | 3.1 | 2025-04-02 | A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36. Affected by this vulnerability is the function BinaryReaderInterp::BeginFunctio… |
CVE-2025-3121 | Low | 3.3 | 2025-04-02 | A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. The manipulation lead… |
CVE-2024-42325 | Low | 3.5 | 2025-04-02 | Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc. |
CVE-2024-36469 | Low | 3.1 | 2025-04-02 | Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one. |
CVE-2025-3082 | Low | 3.1 | 2025-04-01 | A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. T… |
CVE-2025-30469 | Low | 2.4 | 2025-03-31 | This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may… |
CVE-2025-24193 | Low | 2.4 | 2025-03-31 | This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked devi… |
CVE-2024-40864 | Low | 2.7 | 2025-03-31 | The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ve… |
CVE-2025-3036 | Low | 2.4 | 2025-03-31 | A vulnerability, which was classified as problematic, was found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a… |
CVE-2025-3010 | Low | 3.3 | 2025-03-31 | A vulnerability, which was classified as problematic, has been found in Khronos Group glslang 15.1.0. Affected by this issue is the function glslang::TIntermed… |
CVE-2025-3005 | Low | 3.5 | 2025-03-31 | A vulnerability was found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this issue is some unknown functionality of the compon… |
CVE-2025-3004 | Low | 3.5 | 2025-03-31 | A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-30369 | Low | 2.7 | 2025-03-31 | Zulip is an open-source team collaboration tool. The API for deleting an organization custom profile field is supposed to be restricted to organization adminis… |
CVE-2025-30368 | Low | 2.7 | 2025-03-31 | Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to be restricted to organization administrators, but i… |
CVE-2025-27149 | Low | 2.7 | 2025-03-31 | Zulip server provides an open-source team chat that helps teams stay productive and focused. Prior to 10.0, the data export to organization administrators feat… |
CVE-2025-2981 | Low | 3.5 | 2025-03-31 | A vulnerability, which was classified as problematic, has been found in Legrand SMS PowerView 1.x. This issue affects some unknown processing. The manipulation… |
CVE-2025-2980 | Low | 3.5 | 2025-03-31 | A vulnerability classified as problematic was found in Legrand SMS PowerView 1.x. This vulnerability affects unknown code. The manipulation of the argument red… |
CVE-2025-2979 | Low | 2.4 | 2025-03-31 | A vulnerability classified as problematic has been found in WCMS 11. This affects an unknown part of the file /index.php?anonymous/setregister of the component… |
CVE-2025-2977 | Low | 3.5 | 2025-03-31 | A vulnerability was found in GFI KerioConnect 10.0.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the co… |
CVE-2025-2976 | Low | 3.5 | 2025-03-31 | A vulnerability was found in GFI KerioConnect 10.0.6. It has been classified as problematic. Affected is an unknown function of the component File Upload. The… |
CVE-2025-2975 | Low | 3.5 | 2025-03-31 | A vulnerability was found in GFI KerioConnect 10.0.6 and classified as problematic. This issue affects some unknown processing of the file Settings/Email/Signa… |
CVE-2025-2974 | Low | 3.5 | 2025-03-31 | A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the file /contrac… |
CVE-2025-2954 | Low | 3.3 | 2025-03-30 | A vulnerability, which was classified as problematic, was found in mannaandpoem OpenManus up to 2025.3.13. This affects the function execute of the file app/to… |
CVE-2025-2953 | Low | 3.3 | 2025-03-30 | A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. Th… |
CVE-2024-55895 | Low | 2.7 | 2025-03-29 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the… |
CVE-2025-1217 | Low | 3.1 | 2025-03-29 | In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obt… |
CVE-2025-2926 | Low | 3.3 | 2025-03-28 | A vulnerability was found in HDF5 up to 1.14.6 and classified as problematic. This issue affects the function H5O__cache_chk_serialize of the file src/H5Ocache… |
CVE-2025-2925 | Low | 3.3 | 2025-03-28 | A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MM_realloc of the file src/H5MM.c… |
CVE-2025-2924 | Low | 3.3 | 2025-03-28 | A vulnerability, which was classified as problematic, was found in HDF5 up to 1.14.6. This affects the function H5HL__fl_deserialize of the file src/H5HLcache… |
CVE-2025-2923 | Low | 3.3 | 2025-03-28 | A vulnerability, which was classified as problematic, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5F_addr_encode_len of the fi… |
CVE-2025-2922 | Low | 2.0 | 2025-03-28 | A vulnerability classified as problematic was found in Netis WF-2404 1.1.124EN. Affected by this vulnerability is an unknown functionality of the component Bus… |
CVE-2025-2920 | Low | 2.0 | 2025-03-28 | A vulnerability was found in Netis WF-2404 1.1.124EN. It has been rated as problematic. This issue affects some unknown processing of the file /еtc/passwd. The… |
CVE-2025-2915 | Low | 3.3 | 2025-03-28 | A vulnerability classified as problematic was found in HDF5 up to 1.14.6. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. T… |
CVE-2025-2914 | Low | 3.3 | 2025-03-28 | A vulnerability classified as problematic has been found in HDF5 up to 1.14.6. This affects the function H5FS__sinfo_Srialize_Sct_cb of the file src/H5FScache… |
CVE-2025-2913 | Low | 3.3 | 2025-03-28 | A vulnerability was found in HDF5 up to 1.14.6. It has been rated as critical. Affected by this issue is the function H5FL__blk_gc_list of the file src/H5FL.c… |
CVE-2025-2912 | Low | 3.3 | 2025-03-28 | A vulnerability was found in HDF5 up to 1.14.6. It has been declared as problematic. Affected by this vulnerability is the function H5O_msg_flush of the file s… |
CVE-2025-27726 | Low | 2.1 | 2025-03-28 | Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file download process of the USB storage file-sharing functi… |
CVE-2025-27574 | Low | 3.6 | 2025-03-28 | Cross-site scripting vulnerability exists in the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploi… |
CVE-2025-2878 | Low | 2.4 | 2025-03-27 | A vulnerability was found in Kentico CMS up to 13.0.178. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the… |
CVE-2024-55070 | Low | 3.1 | 2025-03-27 | A Broken Object Level Authorization vulnerability in the component /households/permissions of hay-kot mealie v2.2.0 allows group managers to edit their own per… |
CVE-2025-2849 | Low | 3.3 | 2025-03-27 | A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::un_DT_INIT of the file src/p_lx_el… |
CVE-2024-9773 | Low | 3.7 | 2025-03-27 | An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions start… |
CVE-2025-31141 | Low | 2.7 | 2025-03-27 | In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page |
CVE-2025-30877 | Low | 2.7 | 2025-03-27 | Missing Authorization vulnerability in fatcatapps Quiz Cat quiz-cat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-20233 | Low | 2.5 | 2025-03-26 | In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the `chmod` and `makedirs` Python functions in a way that resulted in… |
CVE-2025-31160 | Low | 2.9 | 2025-03-26 | atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other impact by… |
CVE-2025-30351 | Low | 3.5 | 2025-03-26 | Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 10.10.0 and prior to version 11.5.0, a suspended user can… |
CVE-2025-2528 | Low | 3.6 | 2025-03-26 | Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a configuration dif… |
CVE-2025-1911 | Low | 2.7 | 2025-03-26 | The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient f… |
CVE-2024-12683 | Low | 3.5 | 2025-03-26 | The Smart Maintenance Mode WordPress plugin before 1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admi… |
CVE-2025-1452 | Low | 3.5 | 2025-03-25 | The Favorites WordPress plugin before 2.3.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2025-0717 | Low | 3.5 | 2025-03-25 | To exploit the vulnerability, it is necessary: |
CVE-2024-13123 | Low | 3.5 | 2025-03-25 | The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Sto… |
CVE-2024-13122 | Low | 3.5 | 2025-03-25 | The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Sto… |
CVE-2024-12769 | Low | 3.5 | 2025-03-25 | The Simple Banner WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to per… |
CVE-2024-10560 | Low | 3.5 | 2025-03-25 | The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its settings, which could allow high privilege users such as admi… |
CVE-2024-10554 | Low | 3.5 | 2025-03-25 | The WordPress WP-Advanced-Search WordPress plugin before 3.3.9.3 does not sanitise and escape some of its settings, which could allow high privilege users such… |
CVE-2025-2716 | Low | 2.7 | 2025-03-24 | A vulnerability classified as problematic was found in China Mobile P22g-CIac 1.0.00.488. This vulnerability affects unknown code of the component Samba Path H… |
CVE-2025-2715 | Low | 3.5 | 2025-03-24 | A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatch_Inv… |
CVE-2025-30163 | Low | 3.4 | 2025-03-24 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Node based network policies (`fromNodes` and `toNodes`) will incorre… |
CVE-2025-30162 | Low | 3.2 | 2025-03-24 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who use Gateway API for Ingress for some services a… |
CVE-2025-2700 | Low | 3.5 | 2025-03-24 | A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handl… |
CVE-2025-2699 | Low | 3.5 | 2025-03-24 | A vulnerability was found in GetmeUK ContentTools up to 1.6.16. It has been rated as problematic. Affected by this issue is some unknown functionality of the c… |
CVE-2025-1203 | Low | 3.5 | 2025-03-24 | The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which could allow high privi… |
CVE-2025-1062 | Low | 3.5 | 2025-03-24 | The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which could allow high privi… |
CVE-2024-13124 | Low | 3.5 | 2025-03-24 | The Photo Gallery by 10Web WordPress plugin before 1.8.33 does not sanitise and escape some of its settings, which could allow high privilege users such as ad… |
CVE-2024-10558 | Low | 3.5 | 2025-03-24 | The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its settings, which could allow high privilege users such as admi… |
CVE-2025-2673 | Low | 3.5 | 2025-03-24 | A vulnerability classified as problematic has been found in code-projects Payroll Management System 1.0. Affected is an unknown function of the file /home_empl… |
CVE-2025-2650 | Low | 3.5 | 2025-03-23 | A vulnerability, which was classified as problematic, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processi… |
CVE-2025-2645 | Low | 3.5 | 2025-03-23 | A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /… |
CVE-2025-2623 | Low | 3.5 | 2025-03-22 | A vulnerability was found in westboy CicadasCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2025-2617 | Low | 2.4 | 2025-03-22 | A vulnerability classified as problematic was found in yangyouwang 杨有旺 crud 简约后台管理系统 1.0.0. Affected by this vulnerability is an unknown functionality of the c… |
CVE-2025-1972 | Low | 2.7 | 2025-03-22 | The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_l… |
CVE-2025-2616 | Low | 2.4 | 2025-03-22 | A vulnerability classified as problematic has been found in yangyouwang 杨有旺 crud 简约后台管理系统 1.0.0. Affected is an unknown function of the component Role Manageme… |
CVE-2025-2590 | Low | 2.4 | 2025-03-21 | A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecrui… |
CVE-2025-2588 | Low | 3.3 | 2025-03-21 | A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function re_case_expand of the file src/… |
CVE-2025-27715 | Low | 3.3 | 2025-03-21 | Mattermost versions 9.11.x <= 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private… |
CVE-2025-2583 | Low | 3.5 | 2025-03-21 | A vulnerability was found in SimpleMachines SMF 2.1.4. It has been classified as problematic. This affects an unknown part of the file ManageNews.php. The mani… |
CVE-2025-2582 | Low | 3.5 | 2025-03-21 | A vulnerability was found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the file ManageAtt… |
CVE-2025-30345 | Low | 3.5 | 2025-03-21 | An issue was discovered in OpenSlides before 4.2.5. When creating new chats via the chat_group.create action, the user is able to specify the name of the chat… |
CVE-2025-30343 | Low | 3.0 | 2025-03-21 | A directory traversal issue was discovered in OpenSlides before 4.2.5. Files can be uploaded to OpenSlides meetings and organized in folders. The interface all… |
CVE-2025-2555 | Low | 2.9 | 2025-03-20 | A vulnerability classified as problematic has been found in Audi Universal Traffic Recorder App 2.0. Affected is an unknown function of the component FTP Crede… |
CVE-2025-29923 | Low | 3.7 | 2025-03-20 | go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.2, go-redis potentially responds out of order whe… |