Vulnerabilities (CVE)

1,704 pages, showing 1,501–1,600, ordered by identifier.

CVE-2025-42599 — Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability Qualitia Active! Mail contains a stack-based buffer overflow vulnerability that allows a remote, unauthenticated...
CVE-2025-42999 — SAP NetWeaver Deserialization Vulnerability SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged...
CVE-2025-43200 — Apple Multiple Products Unspecified Vulnerability Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously...
CVE-2025-43300 — Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.
CVE-2025-43510 — Apple Multiple Products Improper Locking Vulnerability Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a...
CVE-2025-43520 — Apple Multiple Products Classic Buffer Overflow Vulnerability Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain a classic buffer overflow vulnerability which could...
CVE-2025-43529 — Apple Multiple Products Use-After-Free WebKit Vulnerability Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing...
CVE-2025-4427 — Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability Ivanti Endpoint Manager Mobile (EPMM) contains an authentication bypass vulnerability in the API component that...
CVE-2025-4428 — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the API component that allows an...
CVE-2025-4632 — Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file...
CVE-2025-47729 — TeleMessage TM SGNL Hidden Functionality Vulnerability TeleMessage TM SGNL contains a hidden functionality vulnerability in which the archiving backend holds cleartext...
CVE-2025-47812 — Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability Wing FTP Server contains an improper neutralization of null byte or NUL character vulnerability that can allow...
CVE-2025-47813 — Wing FTP Server Information Disclosure Vulnerability Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a...
CVE-2025-47827 — IGEL OS Use of a Key Past its Expiration Date Vulnerability IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The...
CVE-2025-48384 — Git Link Following Vulnerability Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return...
CVE-2025-48543 — Android Runtime Use-After-Free Vulnerability Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to...
CVE-2025-48572 — Android Framework Privilege Escalation Vulnerability Android Framework contains an unspecified vulnerability that allows for privilege escalation.
CVE-2025-48595 — Android Framework Integer Overflow Vulnerability Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for...
CVE-2025-48633 — Android Framework Information Disclosure Vulnerability Android Framework contains an unspecified vulnerability that allows for information disclosure.
CVE-2025-48700 — Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to...
CVE-2025-48703 — CWP Control Web Panel OS Command Injection Vulnerability CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command Injection vulnerability that allows...
CVE-2025-48927 — TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability TeleMessage TM SGNL contains an initialization of a resource with an insecure default vulnerability. This...
CVE-2025-48928 — TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This...
CVE-2025-49113 — RoundCube Webmail Deserialization of Untrusted Data Vulnerability RoundCube Webmail contains a deserialization of untrusted data vulnerability that allows remote code execution by...
CVE-2025-49704 — Microsoft SharePoint Code Injection Vulnerability Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code...
CVE-2025-49706 — Microsoft SharePoint Improper Authentication Vulnerability Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform...
CVE-2025-5086 — Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a...
CVE-2025-52691 — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow...
CVE-2025-53521 — F5 BIG-IP Stack-Based Buffer Overflow Vulnerability F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote...
CVE-2025-53690 — Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a...
CVE-2025-53770 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow...
CVE-2025-54068 — Laravel Livewire Code Injection Vulnerability Laravel Livewire contain a code injection vulnerability that could allow unauthenticated attackers to achieve remote...
CVE-2025-5419 — Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to...
CVE-2025-54236 — Adobe Commerce and Magento Improper Input Validation Vulnerability Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an...
CVE-2025-54253 — Adobe Experience Manager Forms Code Execution Vulnerability Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution.
CVE-2025-54309 — CrushFTP Unprotected Alternate Channel Vulnerability CrushFTP contains an unprotected alternate channel vulnerability. When the DMZ proxy feature is not used, mishandles...
CVE-2025-54313 — Prettier eslint-config-prettier Embedded Malicious Code Vulnerability Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package...
CVE-2025-54948 — Trend Micro Apex One OS Command Injection Vulnerability Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow...
CVE-2025-55177 — Meta Platforms WhatsApp Incorrect Authorization Vulnerability Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of...
CVE-2025-55182 — Meta React Server Components Remote Code Execution Vulnerability Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote...
CVE-2025-5777 — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation....
CVE-2025-57819 — Sangoma FreePBX Authentication Bypass Vulnerability Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data...
CVE-2025-58034 — Fortinet FortiWeb OS Command Injection Vulnerability Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute...
CVE-2025-58360 — OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerability that occurs when the...
CVE-2025-59230 — Microsoft Windows Improper Access Control Vulnerability Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager...
CVE-2025-59287 — Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that...
CVE-2025-59374 — ASUS Live Update Embedded Malicious Code Vulnerability ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized...
CVE-2025-59689 — Libraesva Email Security Gateway Command Injection Vulnerability Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via...
CVE-2025-59718 — Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic...
CVE-2025-60710 — Microsoft Windows Link Following Vulnerability Microsoft Windows contains a link following vulnerability that allows for privilege escalation
CVE-2025-61757 — Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing...
CVE-2025-61882 — Oracle E-Business Suite Unspecified Vulnerability Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The...
CVE-2025-61884 — Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of...
CVE-2025-61932 — Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication channel vulnerability...
CVE-2025-6204 — Dassault Systèmes DELMIA Apriso Code Injection Vulnerability Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute...
CVE-2025-6205 — Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability Dassault Systèmes DELMIA Apriso contains a missing authorization vulnerability that could allow an attacker to gain...
CVE-2025-6218 — RARLAB WinRAR Path Traversal Vulnerability RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the...
CVE-2025-62215 — Microsoft Windows Race Condition Vulnerability Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level...
CVE-2025-62221 — Microsoft Windows Use After Free Vulnerability Microsoft Windows Cloud Files Mini Filter Driver contains a use after free vulnerability that can allow an...
CVE-2025-62593 — Ray-Project Ray Code Injection Vulnerability Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray...
CVE-2025-64328 — Sangoma FreePBX OS Command Injection Vulnerability Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a...
CVE-2025-64446 — Fortinet FortiWeb Path Traversal Vulnerability Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to...
CVE-2025-6543 — Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and...
CVE-2025-6554 — Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary...
CVE-2025-6558 — Google Chromium ANGLE and GPU Improper Input Validation Vulnerability Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow...
CVE-2025-66376 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classic UI where...
CVE-2025-66644 — Array Networks ArrayOS AG OS Command Injection Vulnerability Array Networks ArrayOS AG contains an OS command injection vulnerability that could allow an attacker to execute...
CVE-2025-67038 — Lantronix EDS5000 Code Injection Vulnerability Lantronix EDS5000 contains a code injection vulnerability that could allow attackers to inject arbitrary OS commands...
CVE-2025-68461 — RoundCube Webmail Cross-site Scripting Vulnerability RoundCube Webmail contains a cross-site scripting vulnerability via the animate tag in an SVG document.
CVE-2025-68613 — n8n Improper Control of Dynamically-Managed Code Resources Vulnerability n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression...
CVE-2025-68645 — Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for...
CVE-2025-68686 — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may...
CVE-2025-7775 — Citrix NetScaler Memory Overflow Vulnerability Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code...
CVE-2025-8088 — RARLAB WinRAR Path Traversal Vulnerability RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability...
CVE-2025-8110 — Gogs Path Traversal Vulnerability Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that...
CVE-2025-8875 — N-able N-Central Insecure Deserialization Vulnerability N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution.
CVE-2025-8876 — N-able N-Central Command Injection Vulnerability N-able N-Central contains a command injection vulnerability via improper sanitization of user input.
CVE-2025-9242 — WatchGuard Firebox Out-of-Bounds Write Vulnerability WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote...
CVE-2025-9377 — TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental...
CVE-2026-0257 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security...
CVE-2026-0300 — Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka...
CVE-2026-0770 — Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote...
CVE-2026-10520 — Ivanti Sentry OS Command Injection Vulnerability Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow...
CVE-2026-11645 — Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute...
CVE-2026-12569 — PTC Windchill and FlexPLM Improper Input Validation Vulnerability PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote...
CVE-2026-1281 — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve...
CVE-2026-1340 — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve...
CVE-2026-15409 — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote...
CVE-2026-15410 — SonicWall SMA1000 Appliances Code Injection Vulnerability SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially...
CVE-2026-1603 — Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability...
CVE-2026-16232 — Check Point SmartConsole Improper Authentication Vulnerability Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated...
CVE-2026-16812 — Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote...
CVE-2026-1731 — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability....
CVE-2026-18556 — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.
CVE-2026-18577 — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication...
CVE-2026-20045 — Cisco Unified Communications Products Code Injection Vulnerability Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition...
CVE-2026-20122 — Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file...
CVE-2026-20127 — Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN...
CVE-2026-20128 — Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an...
CVE-2026-20131 — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management...

Browse by topic

Every page in the corpus, grouped. Search finds one page; this shows what else is here.