Explore CVE records

HighPublished 28 Nov 2025, 14:31 WIB

CVE-2025-13768

Uniong｜WebITR - Authorization Bypass

WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability.

Excerpt language: en.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated28 Nov 2025, 21:56 WIB

Official record

MedPublished 28 Nov 2025, 10:27 WIB

CVE-2025-13737

Nextend Social Login and Register <= 3.1.21 - Cross-Site Request Forgery to Unlink User Social Login

The Nextend Social Login and Register plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.21. This is due to missing or incorrect nonce validation on the 'unlinkUser' function. This makes it possible for unauthenticated attackers to unlink the user's social login v…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

MedPublished 28 Nov 2025, 10:09 WIB

CVE-2025-64312

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Excerpt language: en.

CVSS4.9v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 21:58 WIB

Official record

MedPublished 28 Nov 2025, 10:08 WIB

CVE-2025-58311

UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

Excerpt language: en.

CVSS5.8v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 21:58 WIB

Official record

HighPublished 28 Nov 2025, 10:04 WIB

CVE-2025-58308

Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

Excerpt language: en.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 21:59 WIB

Official record

MedPublished 28 Nov 2025, 09:59 WIB

CVE-2025-58305

Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Excerpt language: en.

CVSS6.2v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 21:59 WIB

Official record

MedPublished 28 Nov 2025, 09:58 WIB

CVE-2025-58304

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Excerpt language: en.

CVSS4.9v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:00 WIB

Official record

HighPublished 28 Nov 2025, 09:56 WIB

CVE-2025-58302

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Excerpt language: en.

CVSS8.4v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:00 WIB

Official record

MedPublished 28 Nov 2025, 09:50 WIB

CVE-2025-58294

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Excerpt language: en.

CVSS6.2v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:01 WIB

Official record

MedPublished 28 Nov 2025, 09:49 WIB

CVE-2025-64313

Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.

Excerpt language: en.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:01 WIB

Official record

MedPublished 28 Nov 2025, 09:47 WIB

CVE-2025-64311

Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Excerpt language: en.

CVSS5.1v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:02 WIB

Official record

MedPublished 28 Nov 2025, 09:43 WIB

CVE-2025-58315

Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Excerpt language: en.

CVSS5.5v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:02 WIB

Official record

MedPublished 28 Nov 2025, 09:40 WIB

CVE-2025-58314

Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

Excerpt language: en.

CVSS6.6v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:03 WIB

Official record

MedPublished 28 Nov 2025, 09:37 WIB

CVE-2025-58312

Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability.

Excerpt language: en.

CVSS5.1v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:03 WIB

Official record

HighPublished 28 Nov 2025, 09:36 WIB

CVE-2025-58310

Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Excerpt language: en.

CVSS8v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:04 WIB

Official record

MedPublished 28 Nov 2025, 09:33 WIB

CVE-2025-58309

Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

Excerpt language: en.

CVSS6.8v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:04 WIB

Official record

MedPublished 28 Nov 2025, 09:32 WIB

CVE-2025-58307

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability.

Excerpt language: en.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:04 WIB

Official record

HighPublished 28 Nov 2025, 09:31 WIB

CVE-2025-58316

DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability.

Excerpt language: en.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:05 WIB

Official record

HighPublished 28 Nov 2025, 09:28 WIB

CVE-2025-58303

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability.

Excerpt language: en.

CVSS8.4v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:05 WIB

Official record

MedPublished 28 Nov 2025, 09:27 WIB

CVE-2025-64315

Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity.

Excerpt language: en.

CVSS4.4v3.1KEVNot listedEPSSPresentUpdated28 Nov 2025, 22:15 WIB

Official record

Find the CVE cohort

Severity

Matching records by UTC month

Signal coverage

Find the CVE cohort

Matching cohort composition

Severity

Matching records by UTC month

Signal coverage