Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2025-06-02 CVE-2025-3919 The WordPress Comments Import & Export plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_settings function in all versions up to, and including, 2.4.3.
network
low complexity
CWE-79
6.4
6.4
2025-06-02 CVE-2025-20297 In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through the pdfgen/render REST endpoint that could result in execution of unauthorized JavaScript code in the browser of a user.
network
low complexity
CWE-79
4.3
4.3
2025-06-02 CVE-2025-20298 In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory (by default, C:\Program Files\SplunkUniversalForwarder).
network
low complexity
CWE-732
8.0
8.0
2025-06-02 CVE-2025-5447 A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.
network
low complexity
CWE-77
6.3
6.3
2025-06-02 CVE-2025-26396 The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability.
local
low complexity
CWE-269
7.8
7.8
2025-06-02 CVE-2025-5446 A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.
network
low complexity
CWE-77
6.3
6.3
2025-06-02 CVE-2025-5441 A vulnerability classified as critical was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.
network
low complexity
CWE-77
6.3
6.3
2025-06-02 CVE-2025-5439 A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.
network
low complexity
CWE-77
6.3
6.3
2025-06-02 CVE-2025-5440 A vulnerability classified as critical has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.
network
low complexity
CWE-77
6.3
6.3
2025-06-02 CVE-2025-5437 A vulnerability classified as critical has been found in Multilaser Sirius RE016 MLT1.0.
network
low complexity
CWE-287
5.3
5.3