Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
7 results
Sep 18, 2025Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5.CVE-2025-10207 · Other software · ABB · reported by cybersecurity@ch.abb.comHigh 7.5
Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5.
- Product
- FLXEON
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2025Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.A remote code execution is possible due to an improper input validation.CVE-2024-48851 · Other software · ABB · reported by cybersecurity@ch.abb.comHigh 7.5
Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.A remote code execution is possible due to an improper input validation. This issue affects FLXEON: through 9.3.5.
- Product
- FLXEON
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2025Use of a One-Way Hash with a Predictable Salt vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5.CVE-2025-10205 · Other software · ABB · reported by cybersecurity@ch.abb.comHigh 8.7
Use of a One-Way Hash with a Predictable Salt vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5. and newer versions
- Product
- FLXEON
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2025Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versionsCVE-2024-48842 · Other software · ABB · reported by cybersecurity@ch.abb.comHigh 7.3
Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions
- Product
- FLXEON
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 29, 2025Insertion of Sensitive Information into Log File vulnerability observed in FLEXON.CVE-2024-48852 · Other software · ABB · reported by cybersecurity@ch.abb.comMedium 6.9
Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some information may be improperly disclosed through https access. This issue affects FLXEON through <= 9.3.4.
- Product
- FLXEON
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 29, 2025Missing Origin Validation in WebSockets vulnerability in FLXEON.CVE-2024-48849 · Other software · ABB · reported by cybersecurity@ch.abb.comHigh 8.8
Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS requests. This issue affects FLXEON: through <= 9.3.4.
- Product
- FLXEON
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2025Network access can be used to execute arbitrary code with elevated privileges.CVE-2024-48841 · Other software · ABB · reported by cybersecurity@ch.abb.comCritical 10
Network access can be used to execute arbitrary code with elevated privileges. This issue affects FLXEON 9.3.4 and older.
- Product
- FLXEON
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.