CVEs published May 13, 2025
312 CVEs were published on May 13, 2025: 30 critical, 130 high. 10 are now in CISA KEV.
- Published
- 312
- Critical
- 30
- High
- 130
- Medium
- 141
- Low
- 11
- Unrated
- 0
- Now in CISA KEV
- 10
- Fix available
- 129
Most affected products
- Microsoft Windows
- 36
- Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- 17
- Siemens SCALANCE LPE9403
- 12
- Adobe ColdFusion
- 8
- Intel(R) PROSet/Wireless WiFi Software for Windows
- 7
- Microsoft 365 Apps for Enterprise · Microsoft Excel +1
- 7
- Adobe Substance3D - Stager
- 6
- SAP_SE SAP Supplier Relationship Management
- 6
- Adobe Animate
- 5
- Intel(R) Server D50DNP and M50FCP boards
- 5
Critical 30
- CVE-2025-43559ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2025-43562ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe ColdFusion
- CVE-2025-43564ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2025-43560ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2025-43563ColdFusion | Improper Access Control (CWE-284)Adobe ColdFusion
- CVE-2025-43561ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2025-43567Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect
- CVE-2025-30387Document Intelligence Studio On-Prem Elevation of Privilege VulnerabilityMicrosoft Azure AI Document Intelligence Studio
- CVE-2025-4658Authentication Bypass in OPKSSHOPKSSH · github.com/openpubkey/opkssh
- CVE-2025-3757Authentication Bypass in OpenPubKeyOPKSSH · github.com/openpubkey/openpubkey
- CVE-2025-22462An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch…Ivanti Neurons for ITSM
- CVE-2025-32756A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versionFortinet FortiNDR · Fortinet FortiCamera +3
- CVE-2025-33025A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5)…Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2025-33024A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5)…Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2025-32469A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5)…Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2025-26390A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0).Siemens OZW672 · Siemens OZW772
- CVE-2025-26389A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0).Siemens OZW672 · Siemens OZW772
- CVE-2025-40628SQL Injection in DomainsPRODomainsPRO
- CVE-2025-22248[pgpool] Unauthenticated access to postgres through pgpoolVMware Bitnami
- CVE-2025-4632Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackSamsung Electronics MagicINFO 9 Server
- CVE-2025-42999Insecure Deserialization in SAP NetWeaver (Visual Composer development server)SAP_SE SAP NetWeaver
- CVE-2025-30012Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)SAP_SE SAP Supplier Relationship Management
- CVE-2024-46506NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings…NetAlertX
- CVE-2025-28056rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.
- CVE-2025-44831EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface.
Show all 30 entriesShow fewer entries
- CVE-2025-45857EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command parameter in the mp function.
- CVE-2025-45858TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.
- CVE-2025-45861TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface.
- CVE-2025-45863TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice…
- CVE-2025-45865TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface.
High 130
- CVE-2025-26646.NET, Visual Studio, and Build Tools for Visual Studio Spoofing VulnerabilityMicrosoft .NET · Microsoft Build Tools for Visual Studio +2
- CVE-2024-36292Improper buffer restrictions for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an…Intel(R) Data Center GPU Flex Series for Windows driver
- CVE-2025-24308Improper input validation in the UEFI firmware error handler for the Intel(R) Server D50DNP and M50FCP may allow a privileged user to…Intel(R) Server D50DNP and M50FCP
- CVE-2025-22892Uncontrolled resource consumption for some OpenVINO™ model server software maintained by Intel(R) before version 2024.4 may allow an…OpenVINO™ model server software maintained by Intel
- CVE-2025-22843Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-21094Improper input validation in the UEFI firmware DXE module for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to…Intel(R) Server D50DNP and M50FCP boards
- CVE-2025-20618Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user…Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20100Improper access control in the memory controller configurations for some Intel(R) Xeon(R) 6 processor with E-cores may allow a privileged…Intel(R) Xeon(R) 6 processor with E-cores
- CVE-2025-20083Improper authentication in the firmware for the Intel(R) Slim Bootloader may allow a privileged user to potentially enable escalation of…Intel(R) Slim Bootloader
- CVE-2025-20082Time-of-check time-of-use race condition in the UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards may…Intel(R) Server D50DNP and M50FCP boards
- CVE-2025-20062Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to…Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20046Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to…Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20032Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to…Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20026Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to…Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20006Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to…Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20004Insufficient control flow management in the Alias Checking Trusted Module for some Intel(R) Xeon(R) 6 processor E-Cores firmware may allow…Intel(R) Xeon(R) 6 processor E-Cores firmware
- CVE-2025-20003Improper link resolution before file access ('Link Following') for some Intel(R) Graphics Driver software installers may allow an…Intel(R) Graphics Driver software installers
- CVE-2025-43565ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2025-43554Substance3D - Modeler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Modeler
- CVE-2025-43553Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)Adobe Substance3D - Modeler
- CVE-2025-43569Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance3D - Stager
- CVE-2025-43571Substance3D - Stager | Use After Free (CWE-416)Adobe Substance3D - Stager
- CVE-2025-43570Substance3D - Stager | Use After Free (CWE-416)Adobe Substance3D - Stager
- CVE-2025-43568Substance3D - Stager | Use After Free (CWE-416)Adobe Substance3D - Stager
- CVE-2025-43549Substance3D - Stager | Use After Free (CWE-416)Adobe Substance3D - Stager
Show all 130 entriesShow fewer entries
- CVE-2025-43572Dimension | Out-of-bounds Write (CWE-787)Adobe Dimension
- CVE-2025-43548Dimension | Out-of-bounds Write (CWE-787)Adobe Dimension
- CVE-2025-3744Nomad Vulnerable To Violation Of Mandatory Sentinel Policies in Nomad Job Submissions via Policy OverrideHashiCorp Nomad Enterprise
- CVE-2025-43547Bridge | Integer Overflow or Wraparound (CWE-190)Adobe Bridge
- CVE-2025-43546Bridge | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Bridge
- CVE-2025-43545Bridge | Access of Uninitialized Pointer (CWE-824)Adobe Bridge
- CVE-2025-30330Illustrator | Heap-based Buffer Overflow (CWE-122)Adobe Illustrator
- CVE-2025-43557Animate | Access of Uninitialized Pointer (CWE-824)Adobe Animate
- CVE-2025-43556Animate | Integer Overflow or Wraparound (CWE-190)Adobe Animate
- CVE-2025-43555Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Animate
- CVE-2025-30328Animate | Out-of-bounds Write (CWE-787)Adobe Animate
- CVE-2025-4660Remote Code Execution in Windows Secure Connector/ HPS Inspection Engine via Insecure Named Pipe AccessForescout SecureConnector
- CVE-2025-30325Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)Adobe Photoshop Desktop
- CVE-2025-30326Photoshop Desktop | Access of Uninitialized Pointer (CWE-824)Adobe Photoshop Desktop
- CVE-2025-30324Photoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Photoshop Desktop
- CVE-2025-30322Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2023-31359Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting…AMD AIM-T Manageability API
- CVE-2023-31358A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting…AMD AIM-T Manageability API
- CVE-2025-27197Lightroom Desktop | Out-of-bounds Write (CWE-787)Adobe Lightroom Desktop
- CVE-2025-30318InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2025-0035Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in…AMD Cloud Manageability Service
- CVE-2024-36321Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in…AMD AIM-T Manageability Service
- CVE-2025-24063Kernel Streaming Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32707NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32705Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-32704Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-32702Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2025-30397Scripting Engine Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2025-30388Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Office for Android · Microsoft Office for Univ… +2
- CVE-2025-30385Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-29963Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-29962Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-29842UrlMon Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-29841Universal Print Management Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-29840Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-29838Windows ExecutionContext Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-29833Microsoft Virtual Machine Bus (VMBus) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-29831Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsoft W…
- CVE-2025-26677Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2025-32709Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21264Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code CoPilot Chat Extension · Micro…
- CVE-2025-32706Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32701Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-30400Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-29826Microsoft Dataverse Elevation of Privilege VulnerabilityMicrosoft Dataverse
- CVE-2025-30393Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-27468Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-30386Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-30384Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-30383Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-30382Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-30381Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-30379Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-30378Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-30377Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-30376Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-30375Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-29979Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-29978Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-29977Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-29976Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-29975Microsoft PC Manager Elevation of Privilege VulnerabilityMicrosoft PC Manager
- CVE-2025-29973Microsoft Azure File Sync Elevation of Privilege VulnerabilityMicrosoft Azure File Sync
- CVE-2025-29971Web Threat Defense (WTD.sys) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-29970Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-29969MS-EVEN RPC Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-29967Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop · Micro…
- CVE-2025-29966Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop · Micro…
- CVE-2025-29964Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2024-36339A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalation, potentially…AMD Optimizing CPU Libraries
- CVE-2024-21960Incorrect default permissions in the AMD Optimizing CPU Libraries (AOCL) installation directory could allow an attacker to achieve…AMD Optimizing CPU Libraries
- CVE-2025-30310Dreamweaver Desktop | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)Adobe Dreamweaver Desktop
- CVE-2025-4428Remote Code ExecutionIvanti Endpoint Manager Mobile
- CVE-2025-47276Actualizer Uses OpenSSL's "-passwd" Function Which Uses SHA512 Under The Hood Instead of Proper Password Hasher like Yescript/Argon2iChewKeanHo Actualizer
- CVE-2025-22460Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their…Ivanti CSA
- CVE-2024-42446TOCTOU in SmmWheaAMI AptioV
- CVE-2025-4648A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.Centreon web
- CVE-2025-40582A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge…Siemens SCALANCE LPE9403
- CVE-2025-40581A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge…Siemens SCALANCE LPE9403
- CVE-2025-40574A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40566A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0…Siemens SIMATIC PCS neo
- CVE-2025-32454A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.14), Teamcenter Visualization V2312 (All…Siemens Teamcenter Visualization · Siemens Tecnomatix Plant…
- CVE-2025-31930A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions < V2.135), IEC 1Ph 7.4kW Child…Siemens IEC 1Ph 7.4kW Child socket · Siemens IEC 1Ph 7.… +19
- CVE-2025-30176A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions <…Siemens SIMATIC PCS neo · Siemens SINEC NMS +3
- CVE-2025-30175A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions <…Siemens SIMATIC PCS neo · Siemens SINEC NMS +3
- CVE-2025-30174A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions <…Siemens SIMATIC PCS neo · Siemens SINEC NMS +3
- CVE-2025-24007A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions).Siemens SIRIUS 3RK3 Modular Safety System · Siemens SIRIUS…
- CVE-2024-23815A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from…Siemens Desigo CC
- CVE-2025-4647A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVGCentreon web
- CVE-2025-4646A high privilege user is able to create and use a valid admin API token in centreon-webCentreon web
- CVE-2025-41645SMA: Sunny Portal demo system privilege escalationSMA www.sunnyportal.com
- CVE-2025-4474Frontend Dashboard 1.0 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via…vinoth06 Frontend Dashboard
- CVE-2025-4317TheGem <= 5.10.3 - Authenticated (Subscriber+) Arbitrary File UploadCodexThemes TheGem
- CVE-2025-4473Frontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via…vinoth06 Frontend Dashboard
- CVE-2025-22249VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)Vmware Aria Automation · VMware Cloud Foundation +1
- CVE-2025-4396Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL InjectionRelevanssi Premium · comesio Relevanssi – A Better Search
- CVE-2025-35471conda-forge openssl-feedstock writable OPENSSLDIRconda-forge openssl-feedstock · conda-forge miniforge
- CVE-2025-43011Missing Authorization Check in SAP Landscape Transformation (PCL Basis)SAP_SE SAP Landscape Transformation
- CVE-2025-43010Code injection vulnerability in SAP S/4HANA Cloud Private Edition or On Premise(SCM Master Data Layer (MDL))SAP_SE SAP S/4HANA Cloud Private Edition or on Premise (SCM…
- CVE-2025-43000Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW)SAP_SE SAP Business Objects Business Intelligence Platform
- CVE-2025-30018Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)SAP_SE SAP Supplier Relationship Management
- CVE-2024-48766NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors…NetAlertX
- CVE-2024-56526An issue was discovered in OXID eShop before 7.oxid-esales/oxideshop-ce · oxid-esales/oxideshop-metapac… +1
- CVE-2025-28055upset-gal-web v7.1.0 /api/music/v1/cover.ts contains an arbitrary file read vulnerabilit
- CVE-2025-28057owl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus/save_order.
Medium, low and unrated 152
- CVE-2025-4574Crossbeam-channel: crossbeam-channel vulnerable to double free on dropcrossbeam-channel · Red Hat Directory Server +6
- CVE-2024-48869Improper restriction of software interfaces to hardware features for some Intel(R) Xeon(R) 6 processor with E-cores when using Intel(R)…Intel(R) Xeon(R) 6 processor with E-cores when using Intel(…
- CVE-2024-47800Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of…Intel(R) Graphics Driver software
- CVE-2024-47795Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.0 may allow an authenticated user to…Intel(R) oneAPI DPC++/C++ Compiler software
- CVE-2024-47550Incorrect default permissions for some Endurance Gaming Mode software installers may allow an authenticated user to potentially enable…Endurance Gaming Mode software installers
- CVE-2024-46895Uncontrolled search path for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6083/32.0.101.5736 may allow an…Intel(R) Arc™ & Iris(R) Xe graphics software
- CVE-2024-45371Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6077 may allow an authenticated…Intel(R) Arc™ & Iris(R) Xe graphics software
- CVE-2024-45333Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an…Intel(R) Data Center GPU Flex Series for Windows driver
- CVE-2024-45332Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect…Intel(R) Processors
- CVE-2024-43420Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel…Intel Atom(R) processors
- CVE-2024-43101Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver software before version 31.0.101.4255 may allow…Intel(R) Data Center GPU Flex Series for Windows driver sof…
- CVE-2024-39833Uncontrolled search path for some Intel(R) QAT software before version 2.3.0 may allow an authenticated user to potentially enable…Intel(R) QAT software
- CVE-2024-39758Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 31.0.101.4032 may allow an authenticated…Intel(R) Arc™ & Iris(R) Xe graphics software
- CVE-2024-31150Out-of-bounds read for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable information disclosure…Intel(R) Graphics Driver software
- CVE-2024-31073Uncontrolled search path for some Intel(R) oneAPI Level Zero software may allow an authenticated user to potentially enable escalation of…Intel(R) oneAPI Level Zero software
- CVE-2024-29222Out-of-bounds write for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable denial of service via…Intel(R) Graphics Driver software
- CVE-2024-28956Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may…Intel(R) Processors
- CVE-2024-28954Incorrect default permissions for some Intel(R) Graphics Driver installers may allow an authenticated user to potentially enable…Intel(R) Graphics Driver installers
- CVE-2024-28036Improper conditions check for some Intel(R) Arc™ GPU may allow an authenticated user to potentially enable denial of service via local…Intel(R) Arc™ GPU
- CVE-2025-24495Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated…Intel(R) Core™ Ultra Processors
- CVE-2025-23233Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-22895Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-22848Improper conditions check for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-22844Improper access control for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an unauthenticated user to…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-22448Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software before version 1.12.0 may allow an authenticated user…Intel(R) Simics(R) Package Manager software
Show all 152 entriesShow fewer entries
- CVE-2025-22446Inadequate encryption strength for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-21100Improper initialization in the UEFI firmware for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to potentially…Intel(R) Server D50DNP and M50FCP boards
- CVE-2025-21099Uncontrolled search path for some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege…Intel(R) Graphics software
- CVE-2025-21081Protection mechanism failure for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20629Insecure inherited permissions in the NVM Update Utility for some Intel(R) Ethernet Network Adapter E810 Series before version 4.60 may…Intel(R) Ethernet Network Adapter E810 Series
- CVE-2025-20624Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20623Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some…Intel(R) Core™ processors
- CVE-2025-20616Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20612Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20611Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20108Uncontrolled search path element for some Intel(R) Network Adapter Driver installers for Windows 11 before version 29.4 may allow an…Intel(R) Network Adapter Driver installers for Windows
- CVE-2025-20104Race condition in some Administrative Tools for some Intel(R) Network Adapters package before version 29.4 may allow an authenticated user…Administrative Tools for some Intel(R) Network Adapters pac…
- CVE-2025-20103Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially…Intel(R) Processors
- CVE-2025-20101Out-of-bounds read for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable information disclosure or…Intel(R) Graphics Drivers
- CVE-2025-20095Incorrect Default Permissions for some Intel(R) RealSense™ SDK software before version 2.56.2 may allow an authenticated user to…Intel(R) RealSense™ SDK software
- CVE-2025-20084Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20079Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially enable escalation of privilege…Intel(R) Advisor software
- CVE-2025-20076Improper access control for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an unauthenticated user to…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20071NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via…Intel(R) Graphics Drivers
- CVE-2025-20057Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20054Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable…Intel(R) Processors
- CVE-2025-20052Improper access control for some Intel(R) Graphics software may allow an authenticated user to potentially enable denial of service via…Intel(R) Graphics software
- CVE-2025-20047Improper locking in the Intel(R) Integrated Connectivity I/O interface (CNVi) for some Intel(R) Core™ Ultra Processors may allow an…Intel(R) Core™ Ultra Processors
- CVE-2025-20043Uncontrolled search path for some Intel(R) RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially…Intel(R) RealSense™ SDK software
- CVE-2025-20041Uncontrolled search path for some Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe graphics before version…Intel(R) Graphics software for Intel(R) Arc™ graphics and I…
- CVE-2025-20039Race condition for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to…Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20034Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards before…Intel(R) Server D50DNP and M50FCP boards
- CVE-2025-20031Improper input validation for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via…Intel(R) Graphics Drivers
- CVE-2025-20030Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20022Insufficient control flow management for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow a privileged user to…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20018Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of…Intel(R) Graphics Drivers
- CVE-2025-20015Uncontrolled search path element for some Intel(R) Ethernet Connection software before version 29.4 may allow an authenticated user to…Intel(R) Ethernet Connection software
- CVE-2025-20013Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow…Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
- CVE-2025-20012Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable information…Intel(R) Core™ Ultra Processors
- CVE-2025-20009Improper input validation in the UEFI firmware GenerationSetup module for the Intel(R) Server D50DNP and M50FCP boards may allow a…Intel(R) Server D50DNP and M50FCP boards
- CVE-2025-20008Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software before version 1.12.0 may allow a privileged user to…Intel(R) Simics(R) Package Manager software
- CVE-2025-43566ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe ColdFusion
- CVE-2025-30315Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2025-30316Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2025-30314Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2025-43551Substance3D - Stager | Out-of-bounds Read (CWE-125)Adobe Substance3D - Stager
- CVE-2025-30329Animate | NULL Pointer Dereference (CWE-476)Adobe Animate
- CVE-2025-30320InDesign Desktop | NULL Pointer Dereference (CWE-476)Adobe InDesign Desktop
- CVE-2025-30319InDesign Desktop | NULL Pointer Dereference (CWE-476)Adobe InDesign Desktop
- CVE-2025-47280Umbraco.Forms has HTML injection vulnerability in 'Send email' workflowUmbraco.Forms.Issues · Umbraco.Forms +1
- CVE-2024-6364Server Identity Validation Bypass in Absolute Persistence®Absolute Security Absolute Persistence
- CVE-2025-29974Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29961Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29958Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29957Windows Deployment Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-29956Windows SMB Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29955Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-29954Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-29839Windows Multiple UNC Provider Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29837Windows Installer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29836Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29835Windows Remote Access Connection Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29832Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29830Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29829Windows Trusted Runtime Interface Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-26685Microsoft Defender for Identity Spoofing VulnerabilityMicrosoft Defender for Identity
- CVE-2025-27488Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege VulnerabilityMicrosoft Windows 10 HLK · Microsoft Windows 11 HLK 22H2 +3
- CVE-2025-32703Visual Studio Information Disclosure VulnerabilityMicrosoft Visual Studio
- CVE-2025-30394Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2025-29968Active Directory Certificate Services (AD CS) Denial of Service VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-29960Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-29959Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-26684Microsoft Defender Elevation of Privilege VulnerabilityMicrosoft Defender for Endpoint for Linux
- CVE-2025-47278Flask uses fallback key instead of current signing keypallets flask · flask
- CVE-2025-4427Authentication BypassIvanti Endpoint Manager Mobile
- CVE-2025-46721nosurf vulnerable to CSRF due to non-functional same-origin request checksjustinas nosurf · github.com/justinas/nosurf
- CVE-2025-31493Path traversal of collection names during file system lookupgetkirby kirby · getkirby/cms
- CVE-2025-30207Kirby vulnerable to path traversal in the router for PHP's built-in servergetkirby kirby · getkirby/cms
- CVE-2025-30159Kirby vulnerable to path traversal of snippet names in the `snippet()` helpergetkirby kirby · getkirby/kirby
- CVE-2024-12533Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This…Phoenix SecureCore Technology
- CVE-2025-22859A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may…Fortinet FortiClientEMS
- CVE-2024-35281An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below…Fortinet FortiClientMac · Fortinet FortiVoiceUCDesktop
- CVE-2024-36340A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting…AMD μProf
- CVE-2025-4649ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all…Centreon web
- CVE-2025-32917Privilege escalation in jar_signatureCheckmk
- CVE-2025-40583A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge…Siemens SCALANCE LPE9403
- CVE-2025-40580A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40579A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40578A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions).Siemens SCALANCE LPE9403
- CVE-2025-40577A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40576A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40575A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40573A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40572A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Siemens SCALANCE LPE9403
- CVE-2025-40571A vulnerability has been identified in Mendix OIDC SSO (Mendix 10.12 compatible) (All versions < V4.0.1), Mendix OIDC SSO (Mendix 9…Siemens Mendix OIDC SSO
- CVE-2025-40556A vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 (All versions), BACnet ATEC 550-445 (All…Siemens BACnet ATEC 550-440 · Siemens BACnet ATEC 550-441 +2
- CVE-2025-40555A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions).Siemens APOGEE PXC+TALON TC Series
- CVE-2025-31929A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Child socket/ shutter…Siemens IEC 1Ph 7.4kW Child socket · Siemens IEC 1Ph 7.… +21
- CVE-2025-24510A vulnerability has been identified in MS/TP Point Pickup Module (All versions).Siemens MS/TP Point Pickup Module
- CVE-2025-24009A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions).Siemens SIRIUS 3RK3 Modular Safety System · Siemens SIRIUS…
- CVE-2025-24008A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions).Siemens SIRIUS 3RK3 Modular Safety System · Siemens SIRIUS…
- CVE-2024-51447A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2).Siemens Polarion
- CVE-2024-51446A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).Siemens Polarion
- CVE-2024-51445A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).Siemens Polarion
- CVE-2024-51444A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).Siemens Polarion
- CVE-2025-3916CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to…Schneider Electric EcoStruxure™ Power Build Rapsody software
- CVE-2025-27696Apache Superset: Incorrect authorization leading to resource ownership takeoverApache Software Foundation Apache Superset · apache-superset
- CVE-2025-4339TheGem <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options UpdateCodexThemes TheGem
- CVE-2025-3107Newsletters <= 4.9.9.8 - Authenticated (Contributor+) SQL Injection orderby Parametercontrid Newsletters
- CVE-2025-22246CVE-2025-22246 – UAA Private Key ExposureCloud Foundry UAA · Cloud Foundry CF deployment
- CVE-2025-43009Missing Authorization check in SAP Service Parts Management (SPM)SAP_SE SAP Service Parts Management
- CVE-2025-43008Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM PortugalSAP_SE SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal
- CVE-2025-43007Missing Authorization check in SAP Service Parts Management (SPM)SAP_SE SAP Service Parts Management
- CVE-2025-43006Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)SAP_SE SAP Supplier Relationship Management
- CVE-2025-43005Information Disclosure vulnerability in SAP GUI for WindowsSAP_SE SAP GUI for Windows
- CVE-2025-43004Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard)SAP_SE SAP Digital Manufacturing
- CVE-2025-43003Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise)SAP_SE SAP S/4HANA
- CVE-2025-43002Missing Authorization check in SAP S4/HANA (OData meta-data property)SAP_SE SAP S4/HANA
- CVE-2025-42997Information Disclosure vulnerability in SAP Gateway ClientSAP_SE SAP Gateway Client
- CVE-2025-31329Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platf…
- CVE-2025-30011Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)SAP_SE SAP Supplier Relationship Management
- CVE-2025-30010Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)SAP_SE SAP Supplier Relationship Management
- CVE-2025-30009Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)SAP_SE SAP Supplier Relationship Management
- CVE-2025-26662Cross-Site Scripting (XSS) vulnerability in the SAP Data Services Management ConsoleSAP_SE SAP Data Services Management Console
- CVE-2025-44039CP-XR-DE21-S -4G Router Firmware version 1.031.022 was discovered to contain insecure protections for its UART console.
- CVE-2025-45746In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service…ZKTeco ZKBio CVSecurity
- CVE-2025-45859TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice…
- CVE-2025-45864TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s…
- CVE-2025-45866TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s…
- CVE-2025-45867TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup…
- CVE-2025-47204An issue was discovered in post.php in bootstrap-multiselect (aka Bootstrap Multiselect) 1.1.2.bootstrap-multiselect
- CVE-2025-47905Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests…varnish-software Varnish Cache