How severe is CVE-2025-0218?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.1 out of 10.

What type of vulnerability is CVE-2025-0218?

This is classified as CWE-340, which is a common weakness in software security.

CVE-2025-0218

HIGH Year: 2025

CVSS v3 Score

7.1

High

Weakness Type

CWE-340

View all →

Vulnerability Description

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-create the directory and thus prevent pgAgent from executing jobs, disrupting scheduled tasks.

CVE-2024-52299

HIGH

CVSS:7.5(High)

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Any user with view right on XWiki.PDFViewerService can access any attachment stored in the wiki as the "key" that is passed to pre...

CWE-3402024

CVE-2024-12034

MEDIUM

CVSS:5.3(Medium)

The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generatin...

CWE-3402024

CVE-2024-28957

MEDIUM

CVSS:5.3(Medium)

Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by pred...

CWE-3402024

CVE-2024-47945

CRITICAL

CVSS:9.1(Critical)

The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are predictable, with only 32,768 possible values per user, which al...

CWE-3402024