CVE-2025-3415 vulnerabilities

Vulnerabilities for packages: grafana-fips...

MINI-7773-7XRV-PXPM

Bulletin has no description...

MINI-5RRP-7JR4-GQ2X

Bulletin has no description...

MINI-RR87-XCRX-GM2X

Bulletin has no description...

MINI-WHXR-96GW-C34W

Bulletin has no description...

MINI-22VM-XRP4-58QR

Bulletin has no description...

MINI-2QM6-RM37-8JX7

Bulletin has no description...

MINI-CJ5H-Q634-G7WW

Bulletin has no description...

MINI-JH7X-VFRW-R846

Bulletin has no description...

MINI-FHW6-32M5-293G

Bulletin has no description...

MINI-H39F-4C48-F2PW

Bulletin has no description...

MINI-4P53-R45H-XHW2

Bulletin has no description...

CGA-4P53-W327-CVJQ

Bulletin has no description...

CGA-VMFX-V5HC-3728

Bulletin has no description...

CGA-9F2F-GX28-G784

Bulletin has no description...

CVE-2025-69133

Subscriber Local File Inclusion in Tourmaster = 5.4.5 versions...

MINI-WRM5-9R79-R8GG

Bulletin has no description...

CVE-2026-9188

The Appointment Bookings for Zoom GoogleMeet and more – Wappointment plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 2.7.6 via the appointmentkey parameter due to the appointment editkey — the sole authorization token consumed by tryCance...

CVE-2026-12657

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.2 via the 'serviceid' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-11896

The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.14 via the 'vcal' parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to...