Vulnerabilities (CVE)

1,704 pages, showing 1,401–1,500, ordered by identifier.

CVE-2025-10585 — Google Chromium V8 Type Confusion Vulnerability Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.
CVE-2025-11371 — Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that...
CVE-2025-11953 — React Native Community CLI OS Command Injection Vulnerability React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network...
CVE-2025-12480 — Gladinet Triofox Improper Access Control Vulnerability Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even...
CVE-2025-1316 — Edimax IC-7100 IP Camera OS Command Injection Vulnerability Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input sanitization that...
CVE-2025-13223 — Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption.
CVE-2025-14174 — Google Chromium Out of Bounds Memory Access Vulnerability Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to...
CVE-2025-14611 — Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of...
CVE-2025-14733 — WatchGuard Firebox Out of Bounds Write Vulnerability WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This...
CVE-2025-14847 — MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed...
CVE-2025-15556 — Notepad++ Download of Code Without Integrity Check Vulnerability Notepad++ when using the WinGUp updater, contains a download of code without integrity check vulnerability that...
CVE-2025-1976 — Broadcom Brocade Fabric OS Code Injection Vulnerability Broadcom Brocade Fabric OS contains a code injection vulnerability that allows a local user with administrative...
CVE-2025-20281 — Cisco Identity Services Engine Injection Vulnerability Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC...
CVE-2025-20333 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web...
CVE-2025-20337 — Cisco Identity Services Engine Injection Vulnerability Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC...
CVE-2025-20352 — Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol...
CVE-2025-20362 — Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web...
CVE-2025-20393 — Cisco Multiple Products Improper Input Validation Vulnerability Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input...
CVE-2025-21042 — Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability...
CVE-2025-21043 — Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote...
CVE-2025-21333 — Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows...
CVE-2025-21334 — Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local...
CVE-2025-21335 — Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local...
CVE-2025-21391 — Microsoft Windows Storage Link Following Vulnerability Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This...
CVE-2025-21418 — Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that...
CVE-2025-21479 — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory...
CVE-2025-21480 — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory...
CVE-2025-21590 — Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could...
CVE-2025-22224 — VMware ESXi and Workstation TOCTOU Race Condition Vulnerability VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to...
CVE-2025-22225 — VMware ESXi Arbitrary Write Vulnerability VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges...
CVE-2025-22226 — VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in...
CVE-2025-22457 — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that...
CVE-2025-23006 — SonicWall SMA1000 Appliances Deserialization Vulnerability SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization...
CVE-2025-23209 — Craft CMS Code Injection Vulnerability Craft CMS contains a code injection vulnerability caused by improper validation of the database backup path,...
CVE-2025-24016 — Wazuh Server Deserialization of Untrusted Data Vulnerability Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code execution on Wazuh servers.
CVE-2025-24054 — Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized...
CVE-2025-24085 — Apple Multiple Products Use-After-Free Vulnerability Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious...
CVE-2025-24200 — Apple iOS and iPadOS Incorrect Authorization Vulnerability Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable...
CVE-2025-24201 — Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may...
CVE-2025-24472 — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain...
CVE-2025-24813 — Apache Tomcat Path Equivalence Vulnerability Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose...
CVE-2025-24893 — XWiki Platform Eval Injection Vulnerability XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code...
CVE-2025-24983 — Microsoft Windows Win32k Use-After-Free Vulnerability Microsoft Windows Win32 Kernel Subsystem contains a use-after-free vulnerability that allows an authorized attacker...
CVE-2025-24984 — Microsoft Windows NTFS Information Disclosure Vulnerability Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file...
CVE-2025-24985 — Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows...
CVE-2025-24989 — Microsoft Power Pages Improper Access Control Vulnerability Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to...
CVE-2025-24990 — Microsoft Windows Untrusted Pointer Dereference Vulnerability Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for...
CVE-2025-24991 — Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an...
CVE-2025-24993 — Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows...
CVE-2025-25181 — Advantive VeraCore SQL Injection Vulnerability Advantive VeraCore contains a SQL injection vulnerability in timeoutWarning.asp that allows a remote attacker to...
CVE-2025-25257 — Fortinet FortiWeb SQL Injection Vulnerability Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute...
CVE-2025-26399 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an...
CVE-2025-26633 — Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an...
CVE-2025-27038 — Qualcomm Multiple Chipsets Use-After-Free Vulnerability Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption...
CVE-2025-27363 — FreeType Out-of-Bounds Write Vulnerability FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to...
CVE-2025-2746 — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could...
CVE-2025-2747 — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could...
CVE-2025-2749 — Kentico Xperience Path Traversal Vulnerability Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync...
CVE-2025-2775 — SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin...
CVE-2025-2776 — SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL...
CVE-2025-2783 — Google Chromium Mojo Sandbox Escape Vulnerability Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from...
CVE-2025-27915 — Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that exists in the Classic...
CVE-2025-27920 — Srimax Output Messenger Directory Traversal Vulnerability Srimax Output Messenger contains a directory traversal vulnerability that allows an attacker to access sensitive...
CVE-2025-29635 — D-Link DIR-823X Command Injection Vulnerability D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary...
CVE-2025-29824 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an...
CVE-2025-30066 — tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows a remote...
CVE-2025-30154 — reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability reviewdog action-setup GitHub Action contains an embedded malicious code vulnerability that dumps exposed secrets to...
CVE-2025-30397 — Microsoft Windows Scripting Engine Type Confusion Vulnerability Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to...
CVE-2025-30400 — Microsoft Windows DWM Core Library Use-After-Free Vulnerability Microsoft Windows DWM Core Library contains a use-after-free vulnerability that allows an authorized attacker to...
CVE-2025-30406 — Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the...
CVE-2025-31125 — Vite Vitejs Improper Access Control Vulnerability Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using...
CVE-2025-31161 — CrushFTP Authentication Bypass Vulnerability CrushFTP contains an authentication bypass vulnerability in the HTTP authorization header that allows a remote...
CVE-2025-31200 — Apple Multiple Products Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code...
CVE-2025-31201 — Apple Multiple Products Arbitrary Read and Write Vulnerability Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an...
CVE-2025-31277 — Apple Multiple Products Buffer Overflow Vulnerability Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could...
CVE-2025-31324 — SAP NetWeaver Unrestricted File Upload Vulnerability SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an...
CVE-2025-32432 — Craft CMS Code Injection Vulnerability Craft CMS contains a code injection vulnerability that allows a remote attacker to execute arbitrary code.
CVE-2025-32433 — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability Erlang Erlang/OTP SSH server contains a missing authentication for critical function vulnerability. This could allow...
CVE-2025-32463 — Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could...
CVE-2025-3248 — Langflow Missing Authentication Vulnerability Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote,...
CVE-2025-32701 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an...
CVE-2025-32706 — Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buffer overflow vulnerability that...
CVE-2025-32709 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an...
CVE-2025-32756 — Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability Fortinet FortiFone, FortiVoice, FortiNDR and FortiMail contain a stack-based overflow vulnerability that may allow a...
CVE-2025-32975 — Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability Quest KACE Systems Management Appliance (SMA) contains an improper authentication vulnerability that could allow...
CVE-2025-33053 — Microsoft Windows External Control of File Name or Path Vulnerability Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to...
CVE-2025-33073 — Microsoft Windows SMB Client Improper Access Control Vulnerability Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege...
CVE-2025-34026 — Versa Concerto Improper Authentication Vulnerability Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik...
CVE-2025-34028 — Commvault Command Center Path Traversal Vulnerability Commvault Command Center contains a path traversal vulnerability that allows a remote, unauthenticated attacker to...
CVE-2025-34291 — Langflow Origin Validation Error Vulnerability Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined...
CVE-2025-35939 — Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability Craft CMS contains an external control of assumed-immutable web parameter vulnerability. This vulnerability could...
CVE-2025-37164 — Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote...
CVE-2025-38352 — Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on...
CVE-2025-3928 — Commvault Web Server Unspecified Vulnerability Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attacker to create...
CVE-2025-3935 — ConnectWise ScreenConnect Improper Authentication Vulnerability ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a...
CVE-2025-4008 — Smartbedded Meteobridge Command Injection Vulnerability Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers...
CVE-2025-40536 — SolarWinds Web Help Desk Security Control Bypass Vulnerability SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated...
CVE-2025-40551 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code...
CVE-2025-40602 — SonicWall SMA1000 Missing Authorization Vulnerability SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance...
CVE-2025-41244 — Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A...

Browse by topic

Every page in the corpus, grouped. Search finds one page; this shows what else is here.