Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2025-02-06 CVE-2024-51547 Use of Hard-coded Credentials vulnerability in ABB products
Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.
network
low complexity
abb CWE-798
critical
9.8
2025-02-06 CVE-2024-51450 IBM Security Verify Directory 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
network
low complexity
CWE-78
critical
9.1
2025-02-04 CVE-2025-1009 Use After Free vulnerability in Mozilla Firefox
An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash.
network
low complexity
mozilla CWE-416
critical
9.8
2025-02-04 CVE-2025-1016 Out-of-bounds Write vulnerability in Mozilla Firefox
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6.
network
low complexity
mozilla CWE-787
critical
9.8
2025-02-04 CVE-2025-1017 Out-of-bounds Write vulnerability in Mozilla Firefox
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6.
network
low complexity
mozilla CWE-787
critical
9.8
2025-02-04 CVE-2025-1020 Out-of-bounds Write vulnerability in Mozilla Firefox
Memory safety bugs present in Firefox 134 and Thunderbird 134.
network
low complexity
mozilla CWE-787
critical
9.8
2025-02-04 CVE-2025-0890 **UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but fail to do so.
network
low complexity
CWE-287
critical
9.8
2025-02-03 CVE-2025-24905 SQL Injection vulnerability in Wegia
WeGIA is a Web Manager for Charitable Institutions.
network
low complexity
wegia CWE-89
critical
9.8
2025-02-03 CVE-2025-24906 SQL Injection vulnerability in Wegia
WeGIA is a Web Manager for Charitable Institutions.
network
low complexity
wegia CWE-89
critical
9.8
2025-02-03 CVE-2025-24957 SQL Injection vulnerability in Wegia
WeGIA is a Web Manager for Charitable Institutions.
network
low complexity
wegia CWE-89
critical
9.8