Vulnerability Summary for the ... Note

Vulnerability Summary for the Week of March 17, 2025

The text details a compilation of high-severity vulnerabilities across various software products from different vendors. These vulnerabilities include code execution flaws, SQL injection, privilege escalation, and authentication bypass. Several Synology products, including Unified Controller, DiskStation Manager, and Camera Firmware, are affected by vulnerabilities allowing remote code execution. IBM AIX systems have vulnerabilities related to command execution and SSL/TLS. Multiple WordPress plugins and themes, like Altair, CozyStay, Service Finder Bookings, and MinimogWP, are susceptible to various attacks. D-Link DAP-1620 routers suffer from critical buffer overflow vulnerabilities. Other affected products include Fortinet FortiMail, CM News, and MB connect line mbCONNECT24. Additionally, vulnerabilities exist in Esri ArcGIS, Microsoft Partner Center, and several other software packages. The reported vulnerabilities have high CVSS scores, indicating significant risks. The disclosed information is based on published CVE entries.