Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2025-05-05 CVE-2025-0915 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 under specific configurations could allow an authenticated user to cause a denial of service due to insufficient release of allocated memory resources.
network
high complexity
CWE-770
5.3
5.3
2025-05-05 CVE-2025-1000 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service when connecting to a z/OS database due to improper handling of automatic client rerouting.
network
high complexity
CWE-770
5.3
5.3
2025-05-05 CVE-2025-1493 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service due to concurrent execution of shared resources.
network
high complexity
CWE-362
5.3
5.3
2025-05-05 CVE-2025-4288 A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7.
network
low complexity
CWE-120
7.3
7.3
2025-05-05 CVE-2025-4289 A vulnerability classified as critical was found in PCMan FTP Server 2.0.7.
network
low complexity
CWE-120
7.3
7.3
2025-05-05 CVE-2025-1909 The BuddyBoss Platform Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.01.
network
low complexity
CWE-288
critical
 9.8
9.8
2025-05-05 CVE-2025-4286 A vulnerability was found in Intelbras InControl up to 2.21.59.
network
low complexity
CWE-256
2.7
2.7
2025-05-05 CVE-2025-4287 A vulnerability was found in PyTorch 2.6.0+cu124.
local
low complexity
CWE-404
3.3
3.3
2025-05-05 CVE-2025-4279 The External image replace plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'external_image_replace_get_posts::replace_post' function in all versions up to, and including, 1.0.8.
network
low complexity
CWE-434
8.8
8.8
2025-05-05 CVE-2025-4283 A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical.
network
low complexity
CWE-74
7.3
7.3