Vulnerability Summary for the ... Note

Vulnerability Summary for the Week of November 17, 2025

This document details multiple high-severity vulnerabilities across various software products from different vendors. ABB Ability Edgenius has an authentication bypass vulnerability, while AMD StoreMI contains DLL hijacking and incorrect permissions flaws. The Vitepos Point of Sale (POS) for WooCommerce plugin suffers from an arbitrary file upload issue. Several vulnerabilities affect Broadcom's BCM5820X chip within Dell ControlVault, including privilege escalation, hard-coded passwords, and buffer overflows. Multiple out-of-bounds read and write vulnerabilities also affect the same Broadcom chip. The URL Image Importer plugin for WordPress has an arbitrary file upload vulnerability. Finally, multiple Campcodes products, including Online Polling System and School Fees Payment Management System, are affected by SQL injection vulnerabilities. Each vulnerability is assigned a CVE, CVSS score, and includes links to relevant source information and patch details where applicable.