CVEs published January 14, 2025
479 CVEs were published on January 14, 2025: 88 critical, 225 high. 7 are now in CISA KEV.
- Published
- 479
- Critical
- 88
- High
- 225
- Medium
- 150
- Low
- 16
- Unrated
- 0
- Now in CISA KEV
- 7
- Fix available
- 199
Most affected products
- Microsoft Windows
- 124
- Wavlink AC3000
- 62
- Ivanti Endpoint Manager
- 16
- Fortinet FortiOS
- 7
- Adobe Substance3D - Stager
- 5
- BlackBerry QNX Software Development Platform
- 5
- Adobe Substance3D - Designer
- 4
- Fortinet FortiManager
- 4
- Microsoft 365 Apps for Enterprise · Microsoft Office
- 4
- Microsoft Windows Server
- 4
Critical 88
- CVE-2024-54142Cross-site Scripting via Discourse-ai SharedAiConversation onebox in Discoursediscourse-ai
- CVE-2024-48856Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformBlackBerry QNX Software Development Platform
- CVE-2024-49375Remote Code Execution via Remote Model Loading in RasaRasaHQ rasa-pro-security-advisories · rasa-pro +1
- CVE-2025-21311Windows NTLM V1 Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21307Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21298Windows OLE Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-23025Privilege escalation (PR) through realtime WYSIWYG editing in XWikixwiki-platform · org.xwiki.platform:xwiki-platform-realtime…
- CVE-2024-13159Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remoteIvanti Endpoint Manager
- CVE-2024-13160Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remoteIvanti Endpoint Manager
- CVE-2024-13161Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remoteIvanti Endpoint Manager
- CVE-2024-10811Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remoteIvanti Endpoint Manager
- CVE-2024-34166An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39363A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505Wavlink AC3000
- CVE-2024-39761Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39760Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39759Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-36290A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39765Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505Wavlink AC3000
- CVE-2024-39764Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505Wavlink AC3000
- CVE-2024-39763Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505Wavlink AC3000
- CVE-2024-39762Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505Wavlink AC3000
- CVE-2024-39288A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39770Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39769Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39768Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39367An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39756A buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-37184A buffer overflow vulnerability exists in the adm.cgi rep_as_bridge() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39294A buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39358A buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-21797A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-37357A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39774A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39370An arbitrary code execution vulnerability exists in the adm.cgi set_MeshAp() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-37186An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39783Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39782Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39781Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39754A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39608A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39273A firmware update vulnerability exists in the fw_check.sh functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39604A command execution vulnerability exists in the update_filter_url.sh functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39357A stack-based buffer overflow vulnerability exists in the wireless.cgi SetName() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39359A stack-based buffer overflow vulnerability exists in the wireless.cgi DeleteMac() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-36493A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39603A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic_mesh() functionality of Wavlink AC3000 M33A8.V5030.210Wavlink AC3000
- CVE-2024-39757A stack-based buffer overflow vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-34544A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-36272A buffer overflow vulnerability exists in the usbip.cgi set_info() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-36258A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210Wavlink AC3000
- CVE-2024-36295A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39299A buffer overflow vulnerability exists in the qos.cgi qos_sta_settings() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39803Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39802Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39801Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39800Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V503Wavlink AC3000
- CVE-2024-39799Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V503Wavlink AC3000
- CVE-2024-39798Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V503Wavlink AC3000
- CVE-2024-38666An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505Wavlink AC3000
- CVE-2024-39602An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39795Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39794Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39793Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39360An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39280An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39790Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39789Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39788Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39787Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39786Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39785Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-39784Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2023-37936A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 througFortinet FortiSwitch
- CVE-2024-55591An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiFortinet FortiOS · Fortinet FortiProxy
- CVE-2025-20055OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340 provided by Y'S corporation.Y'S STEALTHONE D220 · Y'S STEALTHONE D340
- CVE-2024-12919Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_idcozmoslabs Paid Membership Subscriptions – Effortless Membe…
- CVE-2025-0070Improper Authentication in SAP NetWeaver ABAP Server and ABAP PlatformSAP_SE SAP NetWeaver Application Server for ABAP and ABAP P…
- CVE-2025-0066Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)SAP_SE SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2024-48760An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function.
- CVE-2024-57471H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G wireless network processing fun
- CVE-2024-57473H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function.
- CVE-2024-57479H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function.
- CVE-2024-57480H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function.
- CVE-2024-57482H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing funct
- CVE-2024-57483Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function.
- CVE-2024-57763MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField.
- CVE-2024-57764MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add.
- CVE-2024-57766MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField.
High 225
- CVE-2024-55921Cross-Site Request Forgery in Extension Manager Module in TYPO3typo3 · typo3/cms-extensionmanager
- CVE-2024-53263Git LFS permits exfiltration of credentials via crafted HTTP URLsgit-lfs · github.com/git-lfs/git-lfs +1
- CVE-2024-55924Cross-Site Request Forgery in Scheduler Module in TYPO3typo3 · typo3/cms-scheduler
- CVE-2025-21136Substance3D - Designer | Out-of-bounds Write (CWE-787)Adobe Substance3D - Designer
- CVE-2025-21138Substance3D - Designer | Out-of-bounds Write (CWE-787)Adobe Substance3D - Designer
- CVE-2025-21139Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Designer
- CVE-2025-21137Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Designer
- CVE-2025-21135Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Animate
- CVE-2024-48858Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformBlackBerry QNX Software Development Platform
- CVE-2024-48857Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformBlackBerry QNX Software Development Platform
- CVE-2025-21134Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Illustrator on iPad
- CVE-2025-21133Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Illustrator on iPad
- CVE-2025-21129Substance3D - Stager | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Stager
- CVE-2025-21132Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance3D - Stager
- CVE-2025-21130Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance3D - Stager
- CVE-2025-21131Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance3D - Stager
- CVE-2025-21128Substance3D - Stager | Stack-based Buffer Overflow (CWE-121)Adobe Substance3D - Stager
- CVE-2025-21122Photoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Photoshop Desktop
- CVE-2025-21127Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)Adobe Photoshop Desktop
- CVE-2025-0474Invoice Ninja PDF Rendering Server Side Request ForgeryInvoice Ninja
- CVE-2025-23042Gradio Blocked Path ACL Bypass Vulnerabilitygradio-app gradio · gradio
- CVE-2024-50338Carriage-return character in remote URL allows malicious repository to leak credentials in Git Credential Managergit-ecosystem git-credential-manager · git-credential-manag…
- CVE-2025-21245Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21409Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21223Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21238Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21240Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21250Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21417Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21246Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21334Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21333Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21326Internet Explorer Remote Code Execution VulnerabilityMicrosoft Windows Server 2022, 23H2 Edition · Microsoft Win…
- CVE-2025-21218Windows Kerberos Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2025-21402Microsoft Office OneNote Remote Code Execution VulnerabilityMicrosoft Office LTSC for Mac · Microsoft OneNote
- CVE-2025-21378Windows CSC Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21372Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21370Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21361Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft Office LTSC for Mac · Microsoft Outlook for Mac
- CVE-2025-21360Microsoft AutoUpdate (MAU) Elevation of Privilege VulnerabilityMicrosoft AutoUpdate for Mac
- CVE-2025-21343Windows Web Threat Defense User Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21339Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21338GDI+ Remote Code Execution VulnerabilityMicrosoft Office for Android · Microsoft Office for iOS +4
- CVE-2025-21331Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21172.NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET · Microsoft Visual Studio 2015 Update +13
- CVE-2025-21305Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21300Windows Universal Plug and Play (UPnP) Device Host Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21292Windows Search Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21287Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21286Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21276Windows MapUrlToZone Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21275Windows App Package Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21273Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21231IP Helper Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21230Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21224Windows Line Printer Daemon (LPD) Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21186Microsoft Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2025-21187Microsoft Power Automate Remote Code Execution VulnerabilityMicrosoft Power Automate for Desktop
- CVE-2025-21207Windows Connected Devices Platform Service (Cdpsvc) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21335Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21220Microsoft Message Queuing Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21330Windows Remote Desktop Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21405Visual Studio Elevation of Privilege VulnerabilityMicrosoft Visual Studio
- CVE-2025-21395Microsoft Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2025-21389Windows Universal Plug and Play (UPnP) Device Host Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21382Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21366Microsoft Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2025-21365Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-21364Microsoft Excel Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-21363Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-21362Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-21356Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-21354Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-21348Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-21346Microsoft Office Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-21345Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-21344Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-21173.NET Elevation of Privilege VulnerabilityMicrosoft .NET · Microsoft Visual Studio
- CVE-2025-21178Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio 2015 Update · Microsoft Visual Stud…
- CVE-2025-21176.NET, .NET Framework, and Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET · Microsoft Visual Studio 2015 Update +13
- CVE-2025-21315Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21309Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2025-21306Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21304Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21303Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21302Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21299Windows Kerberos Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-21297Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsoft W…
- CVE-2025-21296BranchCache Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21295SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21294Microsoft Digest Authentication Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21293Active Directory Domain Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21291Windows Direct Show Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21290Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21289Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21285Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21282Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21281Microsoft COM for Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21277Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21271Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21270Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21266Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21252Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21251Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21248Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21244Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21243Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21241Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21239Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21237Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21236Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21235Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21234Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21233Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21171.NET Remote Code Execution VulnerabilityMicrosoft .NET · Microsoft Visual Studio +13
- CVE-2025-21413Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21411Windows Telephony Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-23052Authenticated Command Injection Vulnerability allows Unauthorized Command Execution in CLI InterfaceHewlett Packard Enterprise (HPE) HPE Aruba Networking AOS
- CVE-2024-12085Rsync: info leak via uninitialized stack contentsrsync · Red Hat Enterprise Linux +4
- CVE-2025-23051Authenticated Remote Code Execution in AOS Web-based Management InterfaceHewlett Packard Enterprise (HPE) HPE Aruba Networking AOS
- CVE-2024-13162SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticIvanti Endpoint Manager
- CVE-2024-13163Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allowIvanti Endpoint Manager
- CVE-2024-13164An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a locaIvanti Endpoint Manager
- CVE-2024-13165An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote Ivanti Endpoint Manager
- CVE-2024-13166An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote Ivanti Endpoint Manager
- CVE-2024-13167An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote Ivanti Endpoint Manager
- CVE-2024-13168An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote Ivanti Endpoint Manager
- CVE-2024-13169An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local auIvanti Endpoint Manager
- CVE-2024-13170An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote Ivanti Endpoint Manager
- CVE-2024-13171Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allowsIvanti Endpoint Manager
- CVE-2024-13172Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows Ivanti Endpoint Manager
- CVE-2024-13158An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allowIvanti Endpoint Manager
- CVE-2024-13181Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.Ivanti Avalanche
- CVE-2024-13180Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information.Ivanti Avalanche
- CVE-2024-13179Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.Ivanti Avalanche
- CVE-2024-10630A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the applicatiIvanti Application Control Engine
- CVE-2024-42444TOCTOU Race Condition between DMA and SMMAMI AptioV
- CVE-2024-23106An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and before 7.0.10 allowFortinet FortiClientEMS
- CVE-2023-37931An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in FortiVoice Entreprise versFortinet FortiVoice
- CVE-2024-47571An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper accFortinet FortiManager
- CVE-2024-47572An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker to execute unauthorizFortinet FortiSOAR
- CVE-2024-35277A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager version 7.4.0 through 7.4.Fortinet FortiManager
- CVE-2024-48886A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, ForFortinet FortiOS · Fortinet FortiProxy
- CVE-2024-27778An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 4.4.0 thrFortinet FortiSandbox
- CVE-2023-37937An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch version 7.4.0 and 7.2.Fortinet FortiSwitch
- CVE-2024-46668An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 throFortinet FortiOS
- CVE-2024-35273A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escFortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2024-36512An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer 7.4.0 through 7.4.Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2024-46670An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiFortinet FortiOS · Fortinet FortiProxy +1
- CVE-2024-50566A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager Cloud 7.Fortinet FortiManager
- CVE-2024-11497Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalationPHOENIX CONTACT CHARX SEC-3000 · PHOENIX CONTACT CHARX S… +2
- CVE-2024-11864SCP-Firmware VulnerabilityArm SCP-Firmware
- CVE-2024-7344Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.Radix SmartRecovery · Greenware Technologies GreenGuard +4
- CVE-2024-56841A vulnerability has been identified in Mendix LDAP (All versions < V1.1.2).Siemens Mendix LDAP
- CVE-2024-47100A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly · Siemens S… +31
- CVE-2025-20620SQL Injection vulnerability exists in STEALTHONE D220/D340 provided by Y'S corporation.Y'S STEALTHONE D220 · Y'S STEALTHONE D340
- CVE-2025-20016OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340/D440 provided by Y'S corporation.Y'S STEALTHONE D220 · Y'S STEALTHONE D340 +1
- CVE-2025-0394Groundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Functiontrainingbusinesspros Groundhogg — CRM, Newsletters, and Mar…
- CVE-2024-12365W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgeryboldgrid W3 Total Cache
- CVE-2025-23082Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery (SSRF).Veeam Backup for Microsoft Azure
- CVE-2024-12398An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) anZyxel WBE530 firmware · Zyxel WBE660S firmware
- CVE-2025-0069DLL Hijacking vulnerability in SAPSetupSAP_SE SAPSetup
- CVE-2025-0063SQL Injection vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformSAP_SE SAP NetWeaver AS ABAP and ABAP Platform
- CVE-2025-0061Multiple vulnerabilities in SAP BusinessObjects Business Intelligence PlatformSAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2024-42911ECOVACS Robotics Deebot T20 OMNI and T20e OMNI before 1.24.0 was discovered to contain a WiFi Remote Code Execution vulnerability.
- CVE-2024-50858Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF).
- CVE-2024-53561A remote code execution (RCE) vulnerability in Arcadyan Meteor 2 CPE FG360 Firmware ETV2.10 allows attackers to execute arbitrary code via a
- CVE-2024-54730Flatnotes <v5.3.1 is vulnerable to denial of service through the upload image function.
- CVE-2024-57615An issue in the BATcalcbetween_intern component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via crafted
- CVE-2024-57616An issue in the vscanf component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- CVE-2024-57617An issue in the dameraulevenshtein component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL
- CVE-2024-57618An issue in the bind_col_exp component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL state
- CVE-2024-57619An issue in the atom_get_int component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL state
- CVE-2024-57620An issue in the trimchars component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statemen
- CVE-2024-57621An issue in the GDKanalytical_correlation component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via craf
- CVE-2024-57622An issue in the exp_bin component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- CVE-2024-57623An issue in the HEAP_malloc component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL stateme
- CVE-2024-57624An issue in the exp_atom component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements
- CVE-2024-57625An issue in the merge_table_prune_and_unionize component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via
- CVE-2024-57626An issue in the mat_join2 component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statement
- CVE-2024-57627An issue in the gc_col component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- CVE-2024-57628An issue in the exp_values_set_supertype component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafte
- CVE-2024-57629An issue in the tail_type component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statement
- CVE-2024-57630An issue in the exps_card component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statement
- CVE-2024-57631An issue in the exp_ref component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
- CVE-2024-57632An issue in the is_column_unique component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL st
- CVE-2024-57633An issue in the exps_bind_column component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL st
- CVE-2024-57634An issue in the exp_copy component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements
- CVE-2024-57635An issue in the chash_array component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafte
- CVE-2024-57636An issue in the itc_sample_row_check component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) v
- CVE-2024-57637An issue in the dfe_unit_gb_dependant component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS)
- CVE-2024-57638An issue in the dfe_body_copy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via craf
- CVE-2024-57639An issue in the dc_elt_size component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafte
- CVE-2024-57640An issue in the dc_add_int component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted
- CVE-2024-57641An issue in the sqlexp component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL
- CVE-2024-57642An issue in the dfe_inx_op_col_def_table component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (Do
- CVE-2024-57643An issue in the box_deserialize_string component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS)
- CVE-2024-57644An issue in the itc_hash_compare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via c
- CVE-2024-57645An issue in the qi_inst_state_free component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via
- CVE-2024-57646An issue in the psiginfo component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted S
- CVE-2024-57647An issue in the row_insert_cast component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via cr
- CVE-2024-57648An issue in the itc_set_param_row component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via
- CVE-2024-57649An issue in the qst_vec_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafte
- CVE-2024-57650An issue in the qi_inst_state_free component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via
- CVE-2024-57651An issue in the jp_add component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL
- CVE-2024-57652An issue in the numeric_to_dv component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via craf
- CVE-2024-57653An issue in the qst_vec_set_copy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via c
- CVE-2024-57654An issue in the qst_vec_get_int64 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via
- CVE-2024-57655An issue in the dfe_n_in_order component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via cra
- CVE-2024-57656An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS)
- CVE-2024-57657An issue in the sqlg_vec_upd component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via craft
- CVE-2024-57658An issue in the sql_tree_hash_1 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via cr
- CVE-2024-57659An issue in the sqlg_parallel_ts_seq component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) v
- CVE-2024-57660An issue in the sqlo_expand_jts component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via cr
- CVE-2024-57661An issue in the sqlo_df component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQ
- CVE-2024-57662An issue in the sqlg_hash_source component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via c
- CVE-2024-57663An issue in the sqlg_place_dpipes component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via
- CVE-2024-57664An issue in the sqlg_group_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via cr
- CVE-2024-57757JeeWMS before v2025.01.01 was discovered to contain a permission bypass in the component /interceptors/AuthInterceptor.cava.
- CVE-2024-57761An arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code via
- CVE-2024-57762MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file.
- CVE-2024-57765MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list.
- CVE-2024-57767MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download.
- CVE-2025-22983An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive i
- CVE-2025-22984An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sen
Medium, low and unrated 166
- CVE-2024-53277Cross-site Scripting in form messages in silverstripe frameworksilverstripe-framework · silverstripe/framework
- CVE-2024-47605Cross-site Scripting via insert media remote file oembed in silverstripe-asset-adminsilverstripe-asset-admin · silverstripe/framework
- CVE-2024-45102A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a coLenovo XClarity Administrator
- CVE-2024-10254A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attackerLenovo PC Manager · Lenovo Browser +1
- CVE-2024-10253A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to causeLenovo PC Manager · Lenovo Browser +1
- CVE-2024-55892Potential Open Redirect via Parsing Differences in TYPO3typo3 · typo3/cms-core
- CVE-2024-55893TYPO3 Cross-Site Request Forgery in Log Moduletypo3 · typo3/cms-belog
- CVE-2024-55894TYPO3 Cross-Site Request Forgery in Backend User Moduletypo3 · typo3/cms-beuser
- CVE-2024-55920Cross-Site Request Forgery in Dashboard Module in TYPO3typo3 · typo3/cms-dashboard
- CVE-2024-55922Cross-Site Request Forgery in Form Framework Module in TYPO3typo3 · typo3/cms-form
- CVE-2024-55923Cross-Site Request Forgery in Indexed Search Module in TYPO3typo3 · typo3/cms-indexed-search
- CVE-2024-55945Cross-Site Request Forgery in DB Check Module in TYPO3typo3 · typo3/cms-lowlevel
- CVE-2024-55891Information Disclosure via Exception Handling/Logger in TYPO3typo3 · typo3/cms-install
- CVE-2024-48855Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformBlackBerry QNX Software Development Platform
- CVE-2025-23074Special:EditProfile exposes the contents of profile fields marked "hidden"/friends or "friends of friends" when the privileged user isn't a friend of the user whose profile they edit(ed)Wikimedia Foundation Mediawiki - SocialProfile Extension
- CVE-2025-23041Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.FormsUmbraco.Forms.Issues · Umbraco.Forms +1
- CVE-2024-48854Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development PlatformBlackBerry QNX Software Development Platform
- CVE-2025-23073API list=globalblocks can reveal IP of autoblock if username and IP are included in the bgtargets parameterWikimedia Foundation Mediawiki - GlobalBlocking Extension
- CVE-2024-50349Git does not sanitize URLs when asking for credentials interactivelygit
- CVE-2024-52006Newline confusion in credential helpers can lead to credential exfiltration in gitgit
- CVE-2025-23072XSS in Special:RefreshSpecialWikimedia Foundation Mediawiki - RefreshSpecial Extension
- CVE-2025-21332MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-21313Windows Security Account Manager (SAM) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21374Windows CSC Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21340Windows Virtualization-Based Security (VBS) Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-21336Windows Cryptographic Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21324Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21323Windows Kernel Memory Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21317Windows Kernel Memory Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21312Windows Smart Card Reader Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21310Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21308Windows Themes Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-21274Windows Event Tracing Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21189MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-21261Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21256Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21232Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21229Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21228Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21227Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21226Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21225Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2025-21213Secure Boot Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-21211Secure Boot Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-21202Windows Recovery Environment Agent Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21193Active Directory Federation Server Spoofing VulnerabilityMicrosoft Windows Server
- CVE-2025-21328MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-21329MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-21278Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21217Windows NTLM Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-21403On-Premises Data Gateway Information Disclosure VulnerabilityMicrosoft On-Premises Data Gateway
- CVE-2025-21393Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-21219MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-21357Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2025-21341Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21327Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21321Windows Kernel Memory Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21320Windows Kernel Memory Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21319Windows Kernel Memory Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21318Windows Kernel Memory Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21316Windows Kernel Memory Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21314Windows SmartScreen Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-21301Windows Geolocation Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21288Windows COM Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21284Windows Virtual Trusted Platform Module Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21280Windows Virtual Trusted Platform Module Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-21272Windows COM Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21269Windows HTML Platforms Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-21268MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-21265Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21263Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21260Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21258Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21257Windows WLAN AutoConfig Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21255Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21249Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-21242Windows Kerberos Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21215Secure Boot Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-21214Windows BitLocker Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21210Windows BitLocker Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-12087Rsync: path traversal vulnerability in rsyncrsync · Red Hat Enterprise Linux +2
- CVE-2025-23366Org.jboss.hal:hal-console: wildfly hal console cross-site scriptinghal-console · Red Hat JBoss Enterprise Application Platf… +2
- CVE-2024-12747Rsync: race condition in rsync handling symbolic linksrsync · Red Hat Enterprise Linux +2
- CVE-2024-12088Rsync: --safe-links option bypass leads to path traversalrsync · Red Hat Enterprise Linux +2
- CVE-2024-12086Rsync: rsync server leaks arbitrary client filesrsync · Red Hat Enterprise Linux +2
- CVE-2025-21607Success of Certain Precompile Calls not Checked in Vypervyperlang vyper · vyper
- CVE-2025-0465AquilaCMS categories deserializationAquilaCMS
- CVE-2025-0464SourceCodester Task Reminder System Maintenance Section cross site scriptingSourceCodester Task Reminder System
- CVE-2025-0463Shanghai Lingdang Information Technology Lingdang CRM index.php unrestricted uploadShanghai Lingdang Information Technology Lingdang CRM
- CVE-2025-23081Various security vulnerabilities in Extension:DataTransferWikimedia Foundation Mediawiki - DataTransfer Extension · m…
- CVE-2024-52898IBM MQ information disclosureIBM MQ
- CVE-2025-23080XSSes in Special:BadgeViewWikimedia Foundation Mediawiki - OpenBadges Extension
- CVE-2025-0462Shanghai Lingdang Information Technology Lingdang CRM index.php sql injectionShanghai Lingdang Information Technology Lingdang CRM
- CVE-2024-45627Apache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerabilityApache Software Foundation Apache Linkis Metadata Query Ser…
- CVE-2025-0461Shanghai Lingdang Information Technology Lingdang CRM index.php path traversalShanghai Lingdang Information Technology Lingdang CRM
- CVE-2025-0460Blog Botz for Journal Theme blog_add unrestricted uploadBlog Botz for Journal Theme
- CVE-2024-29980Unsafe Handling of IHV UEFI VariablesPhoenix SecureCore™ for Intel Kaby Lake · Phoenix Secure… +2
- CVE-2024-29979Unsafe Handling of Phoenix UEFI VariablesPhoenix SecureCore™ for Intel Kaby Lake · Phoenix Secure… +2
- CVE-2025-0459libretro RetroArch Startup profapi.dll untrusted search pathlibretro RetroArch
- CVE-2025-0458Virtual Computer Vysual RH Solution Login Panel index.php cross site scriptingVirtual Computer Vysual RH Solution
- CVE-2024-39773An information disclosure vulnerability exists in the testsave.sh functionality of Wavlink AC3000 M33A8.V5030.210505.Wavlink AC3000
- CVE-2024-32115A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged Fortinet FortiManager
- CVE-2024-46667A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all vFortinet FortiSIEM
- CVE-2024-36504An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, 7.0 aFortinet FortiOS
- CVE-2024-21758A stack-based buffer overflow in Fortinet FortiWeb versions 7.2.0 through 7.2.7, and 7.4.0 through 7.4.1 may allow a privileged user to execFortinet FortiWeb
- CVE-2024-46666An allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS versions 7.6.0, versions 7.4.4 through 7.4.0, 7.2Fortinet FortiOS
- CVE-2024-45326An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDecepFortinet FortiDeceptor
- CVE-2024-26012A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiAP-S 6.2 all verisons, and 6.4Fortinet FortiAP-S · Fortinet FortiAP-W2 +1
- CVE-2024-36506An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all Fortinet FortiClientEMS
- CVE-2024-48890An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiSOAR IMAP conneFortinet FortiSOAR
- CVE-2024-33502An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 thrFortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2024-50564A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all veFortinet FortiClientWindows
- CVE-2024-36510An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5Fortinet FortiClientEMS · Fortinet FortiSOAR
- CVE-2024-54021An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in Fortinet FortiOS 7.2.0 tFortinet FortiOS · Fortinet FortiProxy
- CVE-2024-35278A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.2.4 through 7.2.0 Fortinet FortiPortal
- CVE-2024-52967An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attackeFortinet FortiPortal
- CVE-2024-40587An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiVoice Fortinet FortiVoice
- CVE-2024-46664A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to reFortinet FortiRecorder
- CVE-2024-47566A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.Fortinet FortiRecorder
- CVE-2024-33503A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FoFortinet FortiManager Cloud · Fortinet FortiManager
- CVE-2024-56497An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail versions 7.2.0 through 7Fortinet FortiMail · Fortinet FortiRecorder
- CVE-2024-48884A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1,Fortinet FortiOS · Fortinet FortiProxy +1
- CVE-2024-52969An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiSIEM ersion 7.1.7 andFortinet FortiSIEM
- CVE-2023-46715An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and version 7.2.6 and below alFortinet FortiProxy · Fortinet FortiOS
- CVE-2023-42786A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versioFortinet FortiOS
- CVE-2024-35276A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer Fortinet FortiAnalyzer · Fortinet FortiManager Cloud +1
- CVE-2024-35275A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2023-42785A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versioFortinet FortiOS
- CVE-2024-46669An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b ForFortinet FortiOS
- CVE-2024-55593A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWeb versions 6.3.17 through 7.6.1 alFortinet FortiWeb
- CVE-2024-52963A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4Fortinet FortiProxy · Fortinet FortiOS +1
- CVE-2024-48893An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSOAR 7.3.0 through 7.3.3, 7.2.1 through 7.2.2 Fortinet FortiSOAR
- CVE-2024-46665An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in Fortinet FortiOS
- CVE-2024-11863SCP-Firmware VulnerabilityArm SCP-Firmware
- CVE-2024-12240Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parametergpriday Page Builder by SiteOrigin
- CVE-2024-53649A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.80), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9Siemens SIPROTEC 5 6MD84 · Siemens SIPROTEC 5 6MD85 +34
- CVE-2024-45385A vulnerability has been identified in Industrial Edge Management OS (IEM-OS) (All versions).Siemens Industrial Edge Management OS
- CVE-2024-11736Org.keycloak:keycloak-quarkus-server: unrestricted admin use of system and environment variableskeycloak · Red Hat build of Keycloak +3
- CVE-2024-11734Org.keycloak:keycloak-quarkus-server: denial of service in keycloak server via security headerskeycloak · Red Hat build of Keycloak +3
- CVE-2024-13156HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameterbplugins HTML5 Video Player – Embed and Play Videos in Cust…
- CVE-2025-0393Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2024-12008W3 Total Cache <= 2.8.1 Information Exposure via Log Filesboldgrid W3 Total Cache
- CVE-2024-12006W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivationboldgrid W3 Total Cache
- CVE-2024-13323Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcodewpdevelop Booking Calendar
- CVE-2024-12083Path Traversal Vulnerabilities in NJ/NX-series Machine Automation ControllersOMRON Machine Automation Controller NJ-series · OMRON Machi…
- CVE-2024-12298Vulnerability Report on Improper Restriction of XML External Entity Reference in NB-DesignerOMRON Programable Terminals NB-Designer
- CVE-2025-0068Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAPSAP_SE SAP NetWeaver Application Server ABAP
- CVE-2025-0067Missing Authorization check in SAP NetWeaver Application Server JavaSAP_SE SAP NetWeaver Application Server Java
- CVE-2025-0060Multiple vulnerabilities in SAP BusinessObjects Business Intelligence PlatformSAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2025-0059Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)SAP_SE SAP NetWeaver Application Server ABAP
- CVE-2025-0058Information Disclosure vulnerability in SAP Business Workflow and SAP Flexible WorkflowSAP_SE SAP Business Workflow and SAP Flexible Workflow
- CVE-2025-0057Cross-Site Scripting vulnerability in SAP NetWeaver AS JAVA (User Admin Application)SAP_SE SAP NetWeaver AS JAVA
- CVE-2025-0056Information Disclosure vulnerability in SAP GUI for JavaSAP_SE SAP GUI for Java
- CVE-2025-0055Information Disclosure vulnerability in SAP GUI for WindowsSAP_SE SAP GUI for Windows
- CVE-2025-0053Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server for ABAP and ABAP P…
- CVE-2024-50857The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS).
- CVE-2024-50859The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS.
- CVE-2024-50861The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS.
- CVE-2024-53563A stored cross-site scripting (XSS) vulnerability in Arcadyan Meteor 2 CPE FG360 Firmware ETV2.10 allows attackers to execute arbitrary web
- CVE-2024-55000Sourcecodester House Rental Management system v1.0 is vulnerable to Cross Site Scripting (XSS) in rental/manage_categories.php.
- CVE-2024-56374An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18.djangoproject Django · django
- CVE-2024-57760JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java.
- CVE-2025-22996A stored cross-site scripting (XSS) vulnerability in the spf_table_content component of Linksys E5600 Router Ver.
- CVE-2025-22997A stored cross-site scripting (XSS) vulnerability in the prf_table_content component of Linksys E5600 Router Ver.
- CVE-2025-23018IPv4-in-IPv6 and IPv6-in-IPv6 tunneling (RFC 2473) do not require the validation or verification of the source of a network packet, allowingIETF IPv6
- CVE-2025-23019IPv6-in-IPv4 tunneling (RFC 4213) allows an attacker to spoof and route traffic via an exposed network interface.IETF IPv6