Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2025-06-03 CVE-2025-5512 A vulnerability, which was classified as critical, was found in quequnlong shiyi-blog up to 1.2.1.
network
low complexity
CWE-287
7.3
2025-06-03 CVE-2025-1334 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows web pages to be stored locally which can be read by another user on the system.
local
low complexity
CWE-525
4.0
2025-06-03 CVE-2025-25019 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not invalidate session after a logout which could allow a user to impersonate another user on the system.
network
high complexity
CWE-613
4.8
2025-06-03 CVE-2025-25020 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an authenticated user to cause a denial of service due to improperly validating API data input.
network
low complexity
CWE-1287
6.5
2025-06-03 CVE-2025-25021 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a privileged execute code in case management script creation due to the improper generation of code.
network
low complexity
CWE-94
7.2
2025-06-03 CVE-2025-25022 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files.
low complexity
CWE-260
critical
9.6
2025-06-03 CVE-2025-5507 A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011.
network
low complexity
CWE-94
2.4
2025-06-03 CVE-2025-5508 Cross-site Scripting vulnerability in Totolink A3002Ru Firmware 2.1.1B20230720.1011
A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011.
network
low complexity
totolink CWE-79
3.4
2025-06-03 CVE-2025-5509 Unspecified vulnerability in Quequnlong Shiyi-Blog
A vulnerability classified as critical has been found in quequnlong shiyi-blog up to 1.2.1.
network
low complexity
quequnlong
critical
9.8
2025-06-03 CVE-2025-5503 A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105.
network
low complexity
CWE-121
8.8