Vuldb Updates

A vulnerability categorized as problematic has been discovered in Beward N100 H.264 VGA IP Camera M2.1.6.04C014. This vulnerability affects unknown code. Executing manipulation can lead to cross-site request forgery. The identification of this vulnerability is CVE-2019-25247. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability categorized as critical has been discovered in Devolo dLAN 550 duo+ Starter Kit up to 3.1.0-1. This affects an unknown function of the component htmlmgr. The manipulation results in incorrect privilege assignment. This vulnerability is identified as CVE-2019-25249. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability marked as critical has been reported in iSeeQ Hybrid DVR WH-H4 1.03R/2.0.0.P. This vulnerability affects unknown code of the file /cgi-bin/get_jpeg. The manipulation leads to missing authentication. This vulnerability is listed as CVE-2019-25236. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability classified as critical was found in Ross Video DashBoard 8.5.1. The affected element is an unknown function of the file DashBoard.exe. Such manipulation leads to incorrect permission assignment. This vulnerability is documented as CVE-2019-25245. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability classified as problematic was found in Carlo Gavazzi AB SmartHouse Webapp 6.5.33. Affected by this issue is some unknown functionality. The manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2019-25234. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Mitel MiVoice Connect up to 9.6.2208.101 and classified as critical. Impacted is an unknown function of the component Connect Mobility Router. The manipulation leads to weak password recovery. This vulnerability is listed as CVE-2023-31459. The attack must be carried out from within the local network. There is no available exploit.

A vulnerability was found in Mitel MiVoice Connect up to 19.3 SP2. It has been classified as critical. The impacted element is an unknown function of the component Headquarters Server. This manipulation causes improper access controls. This vulnerability is registered as CVE-2023-31457. The attack requires access to the local network. No exploit is available.

A vulnerability was found in Mitel MiVoice up to 9.6.2208.101. It has been declared as critical. This affects an unknown function of the component Connect Mobility Router. Such manipulation leads to command injection. This vulnerability is documented as CVE-2023-31460. The attack requires being on the local network. There is not any exploit available.

A vulnerability, which was classified as critical, was found in SteelSeries GG 36.0.0. Affected by this issue is some unknown functionality of the component API Listener. The manipulation results in path traversal. This vulnerability is cataloged as CVE-2023-31461. The attack must originate from the local network. Furthermore, there is an exploit available.

A vulnerability was found in Mitel MiVoice Connect up to 19.3 SP2 and classified as critical. The affected element is an unknown function of the component Edge Gateway. The manipulation results in improper access controls. This vulnerability is cataloged as CVE-2023-31458. The attack must originate from the local network. There is no exploit available.

A vulnerability marked as critical has been reported in Paessler PRTG Network Monitor 23.2.83.1760 on x64. Affected is an unknown function. This manipulation causes path traversal. This vulnerability appears as CVE-2023-31450. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as critical has been found in Paessler PRTG Network Monitor 23.2.83.1760 on x64. Affected by this issue is some unknown functionality of the component WMI Sensor Handler. Performing manipulation results in path traversal. This vulnerability is known as CVE-2023-31449. Access to the local network is required for this attack. No exploit is available.

A vulnerability classified as problematic was found in Paessler PRTG Network Monitor 23.2.83.1760 on x64. This affects an unknown part of the file controls/addsensor3.htm. Executing manipulation can lead to missing encryption of sensitive data. This vulnerability is handled as CVE-2023-31452. The attack can be executed remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, was found in NATO Communications and Information Agency anet up to 3.3.0. This affects an unknown part of the component JSON File Handler. The manipulation results in infinite loop. This vulnerability is known as CVE-2023-31441. Access to the local network is required for this attack. No exploit is available.

A vulnerability was found in Lightbend Akka up to 2.8.0 and classified as problematic. Impacted is an unknown function of the component async-dns. The manipulation results in insufficiently random values. This vulnerability is known as CVE-2023-31442. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.2.12. Affected by this issue is the function qfq_change_class of the file net/sched/sch_qfq.c. Performing manipulation results in out-of-bounds write. This vulnerability was named CVE-2023-31436. The attack needs to be approached within the local network. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability was found in Yannick Lefebvre Link Library Plugin up to 7.8.4 on WordPress. It has been classified as critical. The impacted element is an unknown function. Performing manipulation results in server-side request forgery. This vulnerability is identified as CVE-2025-68600. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in LiveComposer Page Builder: Live Composer Plugin up to 2.0.5 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. This manipulation causes cross site scripting. This vulnerability is tracked as CVE-2025-68598. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as problematic has been discovered in Embeds For YouTube Plugin Support YouTube Embed Plugin up to 5.4 on WordPress. This affects an unknown part. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2025-68599. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Mitsubishi Electric smartRTU. It has been declared as critical. Affected by this issue is some unknown functionality of the component API. The manipulation results in missing authentication. This vulnerability is known as CVE-2025-3232. It is possible to launch the attack remotely. No exploit is available. Applying restrictive firewalling is recommended.