Vulnerability Summary for the ... Note

Vulnerability Summary for the Week of November 10, 2025

The text details multiple high-severity vulnerabilities across various software and hardware products. These vulnerabilities range from sensitive information exposure to remote code execution and privilege escalation. Several WordPress plugins, including TNC Toolbox, WP for CPI, EasyCommerce, and Holiday class post calendar, are affected. IBM AIX and VIOS systems face multiple issues, including command execution and insecure key storage. SAP, D-Link, Dell, and Microsoft products also experience critical vulnerabilities. Other impacted products include General Industrial Controls Lynx+ Gateway, TrioFox, pgAdmin, and Zohocorp ManageEngine Analytics Plus. Some vulnerabilities allow for arbitrary file uploads, unauthorized access, and complete system compromise. Specific issues include a stack-based buffer overflow in D-Link DIR-816L and an SSRF vulnerability in charmbracelet soft-serve. The text provides CVE numbers, CVSS scores, and links to further information and patch details for each vulnerability. Several vendors, including Avast and Fortinet, are also listed with their vulnerability details.