Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
Recent vulnerabilities and exploits
6.1
CVSSv3
CVE-2025-29015
Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/pages_account.php.
4.8
CVSSv4
CVE-2025-3760
A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal 7.2.0 up to and including 7.4.3.129, and Liferay DXP 2024.Q4.1 up to and including 2024.Q4.7, 2024.Q3.1 up to and including 2024.Q3.9, 2024.Q2.0 up to and including 202...
3.1
CVSSv3
CVE-2025-26478
Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.
5.3
CVSSv3
CVE-2025-3479
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 1.42.0 via the 'handle_stripe_single' function due to insufficient validation on a user controlled ...
5.3
CVSSv3
CVE-2025-3453
The Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products – Restrict Content, Protect WooCommerce Category and more plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.7 ...
6.4
CVSSv3
CVE-2025-3487
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘limit’ parameter in all versions up to, and including, 1.42.0 due to insufficient input sanitization and output...
4.3
CVSSv3
CVE-2025-26477
Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
6.3
CVSSv4
CVE-2025-29931
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected product does not properly validate a length field in a serialized message which it uses to determine the amount of memory to be allocated for deserialization. This could all...
8.1
CVSSv3
CVE-2025-2188
There is a whitelist mechanism bypass in GameCenter ,successful exploitation of this vulnerability may affect service confidentiality and integrity.
Honor Com.hihonor.gamecenter
4.3
CVSSv3
CVE-2025-2197
Browser is affected by type confusion vulnerability, successful exploitation of this vulnerability may affect service availability.
Honor Com. Hihonor.baidu.browser
Preferred Score:
CVSSv2
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2024-50264
CVE-2025-43703
wpweb
mass assignment
CVE-2025-32817
CVE-2025-27840
CVE-2025-32844
information disclosure
CVE-2025-31338
woocommerce social login
sonicwall
avb
local
Home
/
Search Results
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »