CVEs we hold for Ami

Records whose assigning authority named Ami as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-76785amirsanni Mini-Inventory-and-Sales-Management-System Transaction.php getAll sql injectionamirsanni Mini-Inventory-and-Sales-Management-System

CVE-2026-73087Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcheramir20 dozzle

CVE-2026-66711WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.6 - Cross Site Scripting (XSS) vulnerabilityAmir Helzer WooCommerce Multilingual & Multicurrency

CVE-2026-45298Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)amir20 dozzle

CVE-2026-44985Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authenticationamir20 dozzle

CVE-2026-39540WordPress Shipment Tracker for Woocommerce plugin <= 1.5.3.2 - Cross Site Scripting (XSS) vulnerabilityAmit Mittal Shipment Tracker for Woocommerce

CVE-2026-33197BDS Module Bypass Secure Boot AdvisoryAMI AptioV

CVE-2026-24740Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Accessamir20 dozzle

CVE-2025-60146WordPress Map Categories to Pages Plugin <= 1.3.2 - Cross Site Scripting (XSS) VulnerabilityAmit Verma Map Categories to Pages

CVE-2025-5939Telegram for WP <= 1.6.1 - Authenticated (Admin+) Stored Cross-Site Scriptingamir-mousavi Telegram for WP

CVE-2025-58770TCG2 TPM RT Not Locked IssueAMI AptioV

CVE-2025-57905WordPress AgreeMe Checkboxes For WooCommerce Plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) VulnerabilityAmin Y AgreeMe Checkboxes For WooCommerce

CVE-2025-43833WordPress Absolute Links plugin <= 1.1.1 - SQL Injection vulnerabilityAmir Helzer Absolute Links

CVE-2025-33045Legacy Serial Redirection SMRAM VulnerabilitiesAMI AptioV

CVE-2025-33044exFat Memory Corruption IssueAMI AptioV

CVE-2025-33043SMM buffer IntegrityAMI AptioV

CVE-2025-26888WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.8 - Broken Access Control vulnerabilityAmir Helzer WooCommerce Multilingual & Multicurrency

CVE-2025-25094WordPress Breaking News Ticker plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerabilityAmitythemes.com Breaking News Ticker

CVE-2025-22834ThirdPartyVideo SetVariable VulnerabilityAMI AptioV

CVE-2025-22833FixupArray Pointer Validation in NTFSAMI AptioV

CVE-2025-22832Buffer Overflow in NTFS when parsing the ATTRIBUTE_LISTAMI AptioV

CVE-2025-22831Buffer Overflow in NTFS when parsing the VOLUME_NAMEAMI AptioV

CVE-2025-22830SmiFlash Race Condition VulnerabilityAMI AptioV

CVE-2025-14941GZSEO <= 2.0.11 - Authenticated (Contributor+) Authorization Bypass to Stored Cross-Site Scriptingaminhashemy GZSEO

CVE-2025-13704Autogen Headers Menu <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'head_class' Shortcode…amirshk Autogen Headers Menu

CVE-2024-8629WooCommerce Multilingual & Multicurrency with WPML <= 5.3.7 - Reflected Cross-Site Scriptingamirhelzer WPML Multilingual & Multicurrency for WooCommerce

CVE-2024-54085Redfish Authentication BypassAMI MegaRAC-SPx

CVE-2024-54084SMM Arbitrary Write via TOCTOU VulnerabilityAMI AptioV

CVE-2024-53725WordPress Post Hits Counter plugin <= 2.8.23 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilityaMiT Post Hits Counter

CVE-2024-50494WordPress Sudan Payment Gateway for WooCommerce plugin <= 1.2.2 - Arbitrary File Upload vulnerabilityAmin Omer Sudan Payment Gateway for WooCommerce

CVE-2024-47182Dozzle uses unsafe hash for passwordsamir20 dozzle

CVE-2024-44006WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.7 - Broken Access Control vulnerabilityAmir Helzer WooCommerce Multilingual & Multicurrency

CVE-2024-42446TOCTOU in SmmWheaAMI AptioV

CVE-2024-42444TOCTOU Race Condition between DMA and SMMAMI AptioV

CVE-2024-42442Runtime Service Access outside SMRAMAMI AptioV

CVE-2024-33660Potential Firmware update without integrity checkAMI AptioV

CVE-2024-33659BiosGuard Buffer Overflow and TOCTOU VulnerabilityAMI AptioV

CVE-2024-33658Buffer Overflow Vulnerability In OFBDAMI AptioV

CVE-2024-33657Smm Callout in SmmComputrace ModuleAMI AptioV

CVE-2024-33656Memory Leak in SmmComuptrace ModuleAMI AptioV

CVE-2024-31927WordPress WP Login and Logout Redirect plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityAminur Islam WP Login and Logout Redirect

CVE-2024-29815WordPress WP Change Email Sender plugin < 1.3.0 - Cross Site Scripting (XSS) vulnerabilityAminur Islam WP Change Email Sender

CVE-2024-2315SMM arbitrary code execution in OverclockAMI AptioV

CVE-2024-12395WooCommerce Additional Fees On Checkout (Free) <= 1.4.7 - Reflected Cross-Site Scripting via 'number'amitwpdeveloper Additional Fees For WooCommerce Checkout

CVE-2024-12222Deliver via Shipos for WooCommerce <= 2.1.7 - Reflected Cross-Site Scripting via dvsfw_bulk_label_url Parameteramitrotem Deliver via Shipos for WooCommerce

CVE-2024-11813Pulsating Chat Button <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scriptingaminshah74 Pulsating Chat Button

CVE-2023-5565Shortcode Menu <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeamitsukapure Shortcode Menu

CVE-2023-39539Failure when uploading a Logo image fileAMI AptioV

CVE-2023-39538Failure when uploading a Logo image fileAMI AptioV

CVE-2023-39537Improper input validation in BIOS TCG2AMI AptioV

CVE-2023-39536Improper input validation in BIOS OFBDAMI AptioV

CVE-2023-39535Improper input validation in BIOSAMI AptioV

CVE-2023-37297heap memory overflowAMI MegaRAC_SPx

CVE-2023-37296Stack-based Buffer OverflowAMI MegaRAC_SPx

CVE-2023-37295Heap-based Buffer OverflowAMI MegaRAC_SPx

CVE-2023-37294Heap-based Buffer OverflowAMI MegaRAC_SPx

CVE-2023-37293stack-based buffer overflowAMI MegaRAC_SPx

CVE-2023-34473Usage of Hard-coded CredentialsAMI MegaRAC_SPx

CVE-2023-34472no title heldAMI MegaRAC_SPx

CVE-2023-34471Missing Cryptographic StepAMI MegaRAC_SPx

CVE-2023-34470Improper access controlAMI AptioV

CVE-2023-34469Cold Rest VulnerabiltiyAMI AptioV

CVE-2023-34345no title heldAMI MegaRAC_SPx

CVE-2023-34344A vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid usernameAMI MegaRAC_SPx

CVE-2023-34343no title heldAMI MegaRAC_SPx

CVE-2023-34342no title heldAMI MegaRAC_SPx

CVE-2023-34341no title heldAMI MegaRAC_SPx

CVE-2023-34338hard coded cryptographic keyAMI MegaRAC_SPx

CVE-2023-34337Inadequate Encryption StrengthAMI MegaRAC_SPx

CVE-2023-34336no title heldAMI MegaRAC_SPx

CVE-2023-34335no title heldAMI MegaRAC_SPx

CVE-2023-34334no title heldAMI MegaRAC_SPx

CVE-2023-34333Untrusted Pointer DereferenceAMI MegaRAC_SPx

CVE-2023-34332Untrusted Pointer Dereference in BMCAMI MegaRAC_SPx

CVE-2023-34330Code injection via Dynamic Redfish Extension interfaceAMI MegaRAC_SPx13

CVE-2023-34329Authentication Bypass via HTTP Header SpoofingAMI MegaRAC_SPx12

CVE-2023-3043Stack-based Buffer Overflow BMCAMI MegaRAC_SPx

CVE-2023-28173WordPress Google XML Sitemap for Images Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)Amit Agarwal Google XML Sitemap for Images

CVE-2023-25055WordPress Google XML Sitemap for Videos Plugin <= 2.6.1 is vulnerable to Cross Site Request Forgery (CSRF)Amit Agarwal Google XML Sitemap for Videos

CVE-2023-23869WordPress Google XML Sitemap for Mobile Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)Amit Agarwal Google XML Sitemap for Mobile

CVE-2022-46858WordPress Product Specifications for Woocommerce Plugin <= 0.6.0 is vulnerable to Cross Site Scripting (XSS)Amin A.Rezapour Product Specifications for Woocommerce

CVE-2022-40262The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.AMI Aptio

CVE-2022-40261SMM memory corruption vulnerability in OverClockSmiHandler SMM driverAMI Aptio

CVE-2022-40259MegaRAC Default Credentials VulnerabilityAMI MegaRAC SPx13

CVE-2022-40258Weak password hashes for Redfish & APIAMI MegaRAC SPx-13

CVE-2022-40250Stack overflow vulnerability in SMI handler on SmmSmbiosElog.AMI Aptio

CVE-2022-40246Arbitrary write vulnerability in SbPei module leads to arbitrary code execution during PEI phase.AMI Aptio

CVE-2022-40242MegaRAC Default Credentials VulnerabilityAMI MegaRAC SPx13

CVE-2022-2827AMI MegaRAC User Enumeration VulnerabilityAMI MegaRAC SPx13

CVE-2022-26873The stack buffer overflow vulnerability in PlatformInitAdvancedPreMem leads to arbitrary code execution during PEI…AMI Aptio

CVE-2022-26872Password reset interception via APIAMI MegaRAC SPx-13

CVE-2021-47837Markdownify 1.2.0 - Persistent Cross-Site Scriptingamitmerchant1990 Markdownify

CVE-2020-37035e-learning Php Script 0.1.0 - 'search' SQL Injectionamitkolloldey e-learning PHP Script

CVE-2019-25320elearning-script 1.0 - Authentication Bypassamitkolloldey elearning-script

94 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.