| CVE ID | Published | Description | Score | Severity | |
|---|---|---|---|---|---|
CVE-2025-14741 |
2026-01-09 07h15 +00:00 |
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to missing authorization to unau... |
9.1 |
Critical |
|
CVE-2025-69194 |
2026-01-09 07h15 +00:00 |
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails... |
8.8 |
High |
|
CVE-2025-14736 |
2026-01-09 06h16 +00:00 |
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all v... |
9.8 |
Critical |
|
CVE-2025-70974 |
2026-01-09 06h16 +00:00 |
Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the... |
10 |
Critical |
|
CVE-2025-68716 |
2026-01-08 20h15 +00:00 |
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the LA... |
8.4 |
High |
|
CVE-2025-68717 |
2026-01-08 20h15 +00:00 |
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validati... |
9.4 |
Critical |
|
CVE-2025-68719 |
2026-01-08 20h15 +00:00 |
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle configuration management. Once any user i... |
8.8 |
High |
|
CVE-2025-66913 |
2026-01-08 19h15 +00:00 |
JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user-controlled... |
9.8 |
Critical |
|
CVE-2025-66916 |
2026-01-08 19h15 +00:00 |
The snailjob component in RuoYi-Vue-Plus versions 5.5.1 and earlier, interface /snail-job/workflow/c... |
9.4 |
Critical |
|
CVE-2025-67325 |
2026-01-08 18h15 +00:00 |
Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows re... |
9.8 |
Critical |