55 matches found
MINI-6225-5WFG-PXPC
Bulletin has no description...
MINI-QF44-MRCH-6225
Bulletin has no description...
CVE-2026-6225
creationtimestamp| type| source ---|---|--- 2026-05-14 09:56:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlskhxod2l2i...
MINI-6225-36G8-CF22
Bulletin has no description...
MINI-32F5-VP3W-6225
Bulletin has no description...
ECHO-EE0D-6225-4B42
Bulletin has no description...
CVE-2025-6225
Kieback Neutrino-GLT product is used for building management. It's web component "SM70 PHWEB" is vulnerable to shell command injection via login form. The injected commands would execute with low privileges. The vulnerability has been fixed in version 9.40.02...
CVE-2025-6225
creationtimestamp| type| source ---|---|--- 2026-01-07 14:21:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115854257726767514 2026-01-07 15:01:10+00:00| seen| Telegram/utadLXNkSCvrMbTZz54AhdBQKOBTuhF91QCnJiq7ebTgUxA...
CVE-2013-6225
LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability...
iOS 12 / macOS 10.14 voucher_swap Use-After-Free
Proof of concept for an older vulnerability from 2019. A use-after-free vulnerability in Apple's Mach voucher subsystem affects macOS version 10.14 and iOS version 12...
CGA-2467-6225-J8R2
Bulletin has no description...
ECHO-6225-AD22-DD52
Bulletin has no description...
CVE-2023-6225
The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sumeta shortcode combined with post meta data in all versions up to, and including, 5.13.3 due to insufficient input sanitization and output escaping on user supplied...
CVE-2020-6225
SAP NetWeaver Knowledge Management, versions KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50, does not sufficiently validate path information provided by users, thus characters representing traverse to parent directory are passed through to the file APIs,...
CVE-2024-6225 Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.5 and 7.5.1 for the Pro version due to insufficient input sanitization and output escaping. This makes it possib...
WordPress Amelia Plugin <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)
Software Amelia Type Plugin Vulnerable versions = 1.1.5 Fixed in 1.1.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-6225 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 7d613d3e00ad Credits Vinay Kumar Required privilege Administrator...
CGA-6225-PFQ4-57GX
Bulletin has no description...
CVE-2023-6225
creationtimestamp| type| source ---|---|--- 2023-12-17 10:11:54+00:00| seen| https://t.me/ctinow/155559...
WordPress Shortcodes Ultimate Plugin < 7.0.0 Multiple Vulnerabilities
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:getshortcodes:shortcodesultimate"; if description...
CVE-2023-6225
CVE-2023-6225 affects the WordPress plug‑in WP Shortcodes Plugin — Shortcodes Ultimate and is a stored XSS vulnerability in the su_meta shortcode when combined with post meta data. Affected versions are up to 5.13.3; exploitation requires at least contributor privileges and occurs via insufficien...