Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2025-03-11 CVE-2025-2212 A vulnerability was found in Castlenet CBW383G2N up to 20250301.
network
low complexity
CWE-94
2.4
2025-03-11 CVE-2025-2213 A vulnerability was found in Castlenet CBW383G2N up to 20250301.
network
low complexity
CWE-94
2.4
2025-03-11 CVE-2025-1707 The Review Schema plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.4 via post meta.
network
low complexity
CWE-98
8.8
2025-03-11 CVE-2025-21170 NULL Pointer Dereference vulnerability in Adobe Substance 3D Modeler
Substance3D - Modeler versions 1.15.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.
local
low complexity
adobe CWE-476
5.5
2025-03-11 CVE-2025-27173 Heap-based Buffer Overflow vulnerability in Adobe Substance 3D Modeler
Substance3D - Modeler versions 1.15.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe CWE-122
7.8
2025-03-11 CVE-2025-27180 Out-of-bounds Read vulnerability in Adobe Substance 3D Modeler
Substance3D - Modeler versions 1.15.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
local
low complexity
adobe CWE-125
5.5
2025-03-11 CVE-2025-27181 Use After Free vulnerability in Adobe Substance 3D Modeler
Substance3D - Modeler versions 1.15.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe CWE-416
7.8
2025-03-11 CVE-2025-28856 Cross-Site Request Forgery (CSRF) vulnerability in W3Counter
Cross-Site Request Forgery (CSRF) vulnerability in dangrossman W3Counter Free Real-Time Web Stats allows Cross Site Request Forgery.
network
low complexity
w3counter CWE-352
8.8
2025-03-11 CVE-2025-28857 Cross-Site Request Forgery (CSRF) vulnerability in Rankchecker
Cross-Site Request Forgery (CSRF) vulnerability in rankchecker Rankchecker.io Integration allows Stored XSS.
network
low complexity
rankchecker CWE-352
6.1
2025-03-11 CVE-2025-28859 Cross-Site Request Forgery (CSRF) vulnerability in Codevibrant Maintenance Notice
Cross-Site Request Forgery (CSRF) vulnerability in CodeVibrant Maintenance Notice allows Cross Site Request Forgery.
network
low complexity
codevibrant CWE-352
8.8