CVEs published August 12, 2025
353 CVEs were published on August 12, 2025: 14 critical, 164 high.
- Published
- 353
- Critical
- 14
- High
- 164
- Medium
- 159
- Low
- 16
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 158
Most affected products
- Microsoft Windows
- 51
- Adobe InDesign Desktop
- 14
- Adobe Substance3D - Modeler
- 13
- Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1
- 12
- Adobe Substance3D - Painter
- 9
- Adobe InCopy
- 8
- Edge Orchestrator software
- 8
- Intel(R) 800 Series Ethernet
- 8
- Siemens SmartClient modules Opcenter QL Home · Siemens S… +1
- 7
- Adobe Commerce · magento/project-community-edition +1
- 5
Critical 14
- CVE-2025-49457Zoom Clients for Windows - Untrusted Search PathZoom Communications Zoom Clients for Windows
- CVE-2025-55169WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'LabRedesCefetRJ WeGIA
- CVE-2025-25256An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in FortinFortinet FortiSIEM
- CVE-2025-55168WeGIA SQL Injection via id_fichamedica at endpoint `GET /html/saude/aplicar_medicamento.php`LabRedesCefetRJ WeGIA
- CVE-2025-53766GDI+ Remote Code Execution VulnerabilityMicrosoft Office for Android · Microsoft Office for Univ… +1
- CVE-2025-50171Remote Desktop Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-50165Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-24325Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticIntel(R) 800 Series Ethernet
- CVE-2025-55167WeGIA SQL Injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php`LabRedesCefetRJ WeGIA
- CVE-2025-55010Kanboard Authenticated Admin Remote Code Execution via Unsafe Deserialization of Eventskanboard
- CVE-2025-40746A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2).Siemens SIMATIC RTLS Locating Manager
- CVE-2025-8059B Blocks <= 2.0.6 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr_registration Functionbplugins bBlocks – Essential Gutenberg Blocks & Patterns Co…
- CVE-2025-42957Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise)SAP_SE SAP S/4HANA
- CVE-2025-42950Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)SAP_SE SAP Landscape Transformation
High 164
- CVE-2025-54230Adobe Framemaker | Use After Free (CWE-416)Adobe Framemaker
- CVE-2025-54232Adobe Framemaker | Use After Free (CWE-416)Adobe Framemaker
- CVE-2025-54231Adobe Framemaker | Use After Free (CWE-416)Adobe Framemaker
- CVE-2025-54229Adobe Framemaker | Use After Free (CWE-416)Adobe Framemaker
- CVE-2025-54222Substance3D - Stager | Out-of-bounds Write (CWE-787)Adobe Substance3D - Stager
- CVE-2025-54216InCopy | Out-of-bounds Write (CWE-787)Adobe InCopy
- CVE-2025-54217InCopy | Heap-based Buffer Overflow (CWE-122)Adobe InCopy
- CVE-2025-54215InCopy | Out-of-bounds Write (CWE-787)Adobe InCopy
- CVE-2025-54218InCopy | Out-of-bounds Write (CWE-787)Adobe InCopy
- CVE-2025-54223InCopy | Use After Free (CWE-416)Adobe InCopy
- CVE-2025-54219InCopy | Heap-based Buffer Overflow (CWE-122)Adobe InCopy
- CVE-2025-54221InCopy | Out-of-bounds Write (CWE-787)Adobe InCopy
- CVE-2025-54220InCopy | Heap-based Buffer Overflow (CWE-122)Adobe InCopy
- CVE-2025-54211InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2025-54207InDesign Desktop | Access of Uninitialized Pointer (CWE-824)Adobe InDesign Desktop
- CVE-2025-54224InDesign Desktop | Use After Free (CWE-416)Adobe InDesign Desktop
- CVE-2025-54213InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2025-54210InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2025-54225InDesign Desktop | Use After Free (CWE-416)Adobe InDesign Desktop
- CVE-2025-54209InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2025-54208InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2025-54226InDesign Desktop | Use After Free (CWE-416)Adobe InDesign Desktop
- CVE-2025-54212InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2025-54206InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2025-55165Autocaliweb Exposure of Sensitive Information to an Unauthorized Actor in `config_sql.py`gelbphoenix autocaliweb
- CVE-2025-54187Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2025-49573Substance3D - Modeler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Modeler
- CVE-2025-49572Substance3D - Modeler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Modeler
- CVE-2025-49571Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)Adobe Substance3D - Modeler
- CVE-2025-49570Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop Desktop
- CVE-2025-49561Animate | Use After Free (CWE-416)Adobe Animate
- CVE-2025-55171WeGIA Anonymous Attacker can Delete Arbitrary Image file at endpoint `/html/personalizacao_remover.php`LabRedesCefetRJ WeGIA
- CVE-2025-49569Substance3D - Viewer | Out-of-bounds Write (CWE-787)Adobe Substance3D - Viewer
- CVE-2025-49560Substance3D - Viewer | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Viewer
- CVE-2024-26009An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 Fortinet FortiProxy · Fortinet FortiOS +2
- CVE-2025-52970A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.Fortinet FortiWeb
- CVE-2025-49556Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · magento/project-community-edition +1
- CVE-2025-49557Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · magento/community-edition +1
- CVE-2025-49554Adobe Commerce | Improper Input Validation (CWE-20)Adobe Commerce · magento/project-community-edition +1
- CVE-2025-49555Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)Adobe Commerce · magento/project-community-edition +1
- CVE-2025-49712Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-49707Azure Virtual Machines Spoofing VulnerabilityMicrosoft DCadsv5-series Azure VM · Microsoft DCasv5-ser… +9
- CVE-2025-53793Azure Stack Hub Information Disclosure VulnerabilityMicrosoft Azure Stack Hub
- CVE-2025-53789Windows StateRepository API Server file Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53788Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege VulnerabilityMicrosoft Windows Subsystem for Linux
- CVE-2025-53784Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-53783Microsoft Teams Remote Code Execution VulnerabilityMicrosoft Teams for Android · Microsoft Teams for Desktop +6
- CVE-2025-53779Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2025-53778Windows NTLM Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-50155Windows Push Notifications Apps Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53740Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-53739Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-53738Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2025-53737Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-53735Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-53734Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-53733Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2025-53732Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office for Android · Microsoft Office for Univers…
- CVE-2025-53731Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-47954Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2025-53726Windows Push Notifications Apps Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53725Windows Push Notifications Apps Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53724Windows Push Notifications Apps Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53723Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53722Windows Remote Desktop Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-53721Windows Connected Devices Platform Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53720Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-53718Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53155Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53154Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53152Desktop Windows Manager Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-53151Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53149Kernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53147Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53145Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-53144Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-53143Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-53142Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53141Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53140Windows Kernel Transaction Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53137Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53135DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53134Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53133Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53132Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53131Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-50177Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-50176DirectX Graphics Kernel Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-50173Windows Installer Elevation of Privilege VulnerabilityMicrosoft Multimedia Redirection Installer · Microsoft Wind…
- CVE-2025-50170Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-50169Windows SMB Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-50168Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-50167Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-50164Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-50163Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-50162Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-50161Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-50160Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-50159Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-50158Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-50153Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49762Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49761Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49759Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server 2016 Service Pack · Microsoft SQL Serv…
- CVE-2025-49757Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-53781Azure Virtual Machines Information Disclosure VulnerabilityMicrosoft DCadsv5-series Azure VM · Microsoft DCasv5-ser… +9
- CVE-2025-53773GitHub Copilot and Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2025-53772Web Deploy Remote Code Execution VulnerabilityMicrosoft Web Deploy
- CVE-2025-24999Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server 2016 Service Pack · Microsoft SQL Serv…
- CVE-2025-53761Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2025-53760Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-53759Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-53741Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-53730Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-33051Microsoft Exchange Server Information Disclosure VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2025-53729Microsoft Azure File Sync Elevation of Privilege VulnerabilityMicrosoft Azure File Sync
- CVE-2025-53727Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server 2016 Service Pack · Microsoft SQL Serv…
- CVE-2025-49758Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server 2016 Service Pack · Microsoft SQL Serv…
- CVE-2025-49563Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator
- CVE-2025-49564Illustrator | Stack-based Buffer Overflow (CWE-121)Adobe Illustrator
- CVE-2025-25273Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow aIntel(R) 700 Series Ethernet
- CVE-2025-24486Improper input validation in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authenticIntel(R) 700 Series Ethernet
- CVE-2025-24484Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticIntel(R) 800 Series Ethernet
- CVE-2025-24323Improper access control in some firmware package and LED mode toggle tool for some Intel(R) PCIe Switch software before version MR4_1.0b1 mafirmware package and LED mode toggle tool for some Intel(R)…
- CVE-2025-24305Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware for some Intel(R) Xeon(R) processors may allow a pIntel(R) Xeon(R) processors
- CVE-2025-24303Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.Intel(R) 800 Series Ethernet
- CVE-2025-23241Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authIntel(R) 800 Series Ethernet
- CVE-2025-22893Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow aIntel(R) 800 Series Ethernet
- CVE-2025-22889Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processor with Intel(R) TDX may allow a privileged Intel(R) Xeon(R) 6 processor with Intel(R) TDX
- CVE-2025-22839Insufficient granularity of access control in the OOB-MSM for some Intel(R) Xeon(R) 6 Scalable processors may allow a privileged user to potIntel(R) Xeon(R) 6 Scalable processors
- CVE-2025-22836Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authIntel(R) 800 Series Ethernet
- CVE-2025-20625Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.110.0.5 may allow an unauthenticatedIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-20109Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potIntel(R) Processors
- CVE-2025-20093Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.Intel(R) 800 Series Ethernet
- CVE-2025-20074Time-of-check Time-of-use race condition for some Intel(R) Connectivity Performance Suite software installers before version 40.24.11210 mayIntel(R) Connectivity Performance Suite software installers
- CVE-2025-20053Improper buffer restrictions for some Intel(R) Xeon(R) Processor firmware with SGX enabled may allow a privileged user to potentially enableIntel(R) Xeon(R) Processor firmware with SGX enabled
- CVE-2025-55164content-security-policy-parser Prototype Pollution Vulnerability May Lead to RCEhelmetjs content-security-policy-parser · content-security-…
- CVE-2025-38500xfrm: interface: fix use-after-free after changing collect_md xfrm interfaceLinux
- CVE-2025-54800Hydra persistent XSS in build metricsNixOS hydra
- CVE-2025-5462A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway beIvanti Connect Secure · Ivanti Policy Secure +2
- CVE-2025-5456A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA GatewaIvanti Connect Secure · Ivanti Policy Secure +2
- CVE-2025-3831Exposed SFTP servercheckpoint Check Point Harmony SASE
- CVE-2025-8297Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privIvanti Avalanche
- CVE-2025-8296SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execute arbitrarIvanti Avalanche
- CVE-2025-22830SmiFlash Race Condition VulnerabilityAMI AptioV
- CVE-2025-40770A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions).Siemens SINEC Traffic Analyzer
- CVE-2025-40769A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0).Siemens SINEC Traffic Analyzer
- CVE-2025-40768A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0).Siemens SINEC Traffic Analyzer
- CVE-2025-40767A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0).Siemens SINEC Traffic Analyzer
- CVE-2025-40764A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002).Siemens Simcenter Femap
- CVE-2025-40762A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002).Siemens Simcenter Femap
- CVE-2025-40761A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (AllSiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2025-40759A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP Siemens SIMATIC S7-PLCSIM · Siemens SIMATIC STEP 7 +7
- CVE-2025-40743A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK 828D PPU.5 (All versions < V5.25 SP1), SINSiemens SINUMERIK 828D PPU.4 · Siemens SINUMERIK 828D PP… +3
- CVE-2025-30033The affected setup component is vulnerable to DLL hijacking.Siemens Automation License Manager · Siemens CEMAT +85
- CVE-2024-54678A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All vSiemens SIMATIC PCS neo · Siemens SIMATIC S7-PLCSIM +9
- CVE-2024-52504A vulnerability has been identified in SIPROTEC 4 6MD61 (All versions), SIPROTEC 4 6MD63 (All versions), SIPROTEC 4 6MD66 (All versions), SISiemens SIPROTEC 4 6MD61 · Siemens SIPROTEC 4 6MD63 +27
- CVE-2024-41979A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >=Siemens SmartClient modules Opcenter QL Home · Siemens S… +1
- CVE-2025-41686Improper File Permissions Allow Local Privilege EscalationPhoenix Contact DaUM
- CVE-2025-8418B Slider- Gutenberg Slider Block for WP <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installationbplugins bSlider – Create Responsive Image, Post, Product,…
- CVE-2025-6253UiCore Elements <= 1.3.0 - Missing Authorization to Unauthenticated Arbitrary File ReadUiCore Elements – Free widgets and templates for Elementor
- CVE-2025-5391WooCommerce Purchase Orders <= 1.0.2 - Authenticated (Subscriber+) Arbitrary File Deletionbbioon Purchase Orders for WooCommerce
- CVE-2025-42976Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document)SAP_SE SAP NetWeaver Application Server ABAP
- CVE-2025-42951Broken Authorization in SAP Business One (SLD)SAP_SE SAP Business One
Medium, low and unrated 175
- CVE-2025-49456Zoom Clients for Windows- Race ConditionZoom Communications Zoom Clients for Windows
- CVE-2025-54238Dimension | Out-of-bounds Read (CWE-125)Adobe Dimension
- CVE-2025-54233Adobe Framemaker | Out-of-bounds Read (CWE-125)Adobe Framemaker
- CVE-2025-54214InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2025-54227InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2025-54228InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2025-54205Substance3D - Sampler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Sampler
- CVE-2025-54188Substance3D - Painter | Out-of-bounds Read (CWE-125)Adobe Substance3D - Painter
- CVE-2025-54193Substance3D - Painter | Out-of-bounds Read (CWE-125)Adobe Substance3D - Painter
- CVE-2025-54194Substance3D - Painter | Out-of-bounds Read (CWE-125)Adobe Substance3D - Painter
- CVE-2025-54190Substance3D - Painter | Out-of-bounds Read (CWE-125)Adobe Substance3D - Painter
- CVE-2025-54191Substance3D - Painter | Out-of-bounds Read (CWE-125)Adobe Substance3D - Painter
- CVE-2025-54195Substance3D - Painter | Out-of-bounds Read (CWE-125)Adobe Substance3D - Painter
- CVE-2025-54189Substance3D - Painter | Out-of-bounds Read (CWE-125)Adobe Substance3D - Painter
- CVE-2025-54192Substance3D - Painter | Out-of-bounds Read (CWE-125)Adobe Substance3D - Painter
- CVE-2025-54197Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2025-54186Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2025-54235Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2025-54203Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2025-54200Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2025-54204Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2025-54202Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2025-54199Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2025-54201Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2025-54198Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2025-49562Animate | Use After Free (CWE-416)Adobe Animate
- CVE-2025-55170WeGIA reflected XSS via `verificacao` and `redir_config` param at endpoint `/html/alterar_senha.php`LabRedesCefetRJ WeGIA
- CVE-2025-36000IBM WebSphere Application Server Liberty cross-site scriptingIBM WebSphere Application Server Liberty
- CVE-2024-48892A relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an auFortinet FortiSOAR
- CVE-2025-47857A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in Fortinet FortiWeb CLIFortinet FortiWeb
- CVE-2025-32932An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in FortiSOAR version 7.6.1 anFortinet FortiSOAR
- CVE-2025-27759An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiWeb veFortinet FortiWeb
- CVE-2024-52964An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.Fortinet FortiManager
- CVE-2025-25248An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and beFortinet FortiOS · Fortinet FortiPAM +1
- CVE-2023-45584A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FoFortinet FortiProxy · Fortinet FortiOS +1
- CVE-2025-53744An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 aFortinet FortiOS
- CVE-2025-49813An improper neutralization of special elements used in an OS Command ("OS Command Injection") vulnerability [CWE-78] in Fortinet FortiADC veFortinet FortiADC
- CVE-2025-32766A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileFortinet FortiWeb
- CVE-2024-40588Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCaFortinet FortiCamera · Fortinet FortiNDR +3
- CVE-2025-43734A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.QLiferay Portal · Liferay DXP +3
- CVE-2025-36124IBM WebSphere Application Server Liberty bypass securityIBM WebSphere Application Server Liberty
- CVE-2025-49558Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)Adobe Commerce · magento/project-community-edition +1
- CVE-2025-49559Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Commerce · magento/project-community-edition +1
- CVE-2025-20044Improper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation ofIntel(R) TDX Module firmware
- CVE-2025-49736Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityMicrosoft Edge for Android
- CVE-2025-49755Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityMicrosoft Edge for Android
- CVE-2025-48807Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-50157Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-53769Windows Security App Spoofing VulnerabilityMicrosoft Windows Security App
- CVE-2025-53765Azure Stack Hub Information Disclosure VulnerabilityMicrosoft Azure Stack Hub
- CVE-2025-53736Microsoft Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2025-53728Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2025-53719Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-53716Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-53156Windows Storage Port Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-53153Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-53148Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-53138Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-53136NT OS Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-50172DirectX Graphics Kernel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-50166Windows Distributed Transaction Coordinator (MSDTC) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-50156Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-50154Microsoft Windows File Explorer Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-49743Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-25007Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2025-25006Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2025-25005Microsoft Exchange Server Tampering VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2025-49745Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2025-49751Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-49568Illustrator | Use After Free (CWE-416)Adobe Illustrator
- CVE-2025-49567Illustrator | NULL Pointer Dereference (CWE-476)Adobe Illustrator
- CVE-2024-33607Out-of-bounds read in some Intel(R) TDX module software before version TDX_1.5.07.00.774 may allow an authenticated user to potentially enabIntel(R) TDX module software
- CVE-2025-32086Improperly implemented security check for standard in the DDRIO configuration for some Intel(R) Xeon(R) 6 Processors when using Intel(R) SGXIntel(R) Xeon(R) 6 Processors when using Intel(R) SGX or In…
- CVE-2025-32004Improper input validation in the Intel Edger8r Tool for some Intel(R) SGX SDK may allow an authenticated user to potentially enable escalatiIntel(R) SGX SDK
- CVE-2025-27717Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of privIntel(R) Graphics Driver software
- CVE-2025-27707Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM)Edge Orchestrator software
- CVE-2025-27576Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow Edge Orchestrator software
- CVE-2025-27559Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated user to potentially enaAI Playground software
- CVE-2025-27537Improper input validation for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an autheEdge Orchestrator software
- CVE-2025-27250Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow Edge Orchestrator software
- CVE-2025-26863Uncontrolled resource consumption in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an aIntel(R) 700 Series Ethernet
- CVE-2025-26697Uncontrolled resource consumption in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an aIntel(R) 700 Series Ethernet
- CVE-2025-26472Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow Edge Orchestrator software
- CVE-2025-26470Incorrect default permissions for some Intel(R) Distribution for Python software installers before version 2025.1.0 may allow an authenticatIntel(R) Distribution for Python software installers
- CVE-2025-26404Uncontrolled search path for some Intel(R) DSA software before version 25.2.15.9 may allow an authenticated user to potentially enable escalIntel(R) DSA software
- CVE-2025-26403Out-of-bounds write in the memory subsystem for some Intel(R) Xeon(R) 6 processors when using Intel(R) SGX or Intel(R) TDX may allow a priviIntel(R) Xeon(R) 6 processors when using Intel(R) SGX or In…
- CVE-2025-24923Uncontrolled search path in some Intel(R) AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to potenIntel(R) AI for Enterprise Retrieval-augmented Generation s…
- CVE-2025-24921Improper neutralization for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unautheEdge Orchestrator software
- CVE-2025-24840Improper access control for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unautheEdge Orchestrator software
- CVE-2025-24835Protection mechanism failure in the Intel(R) Graphics Driver for the Intel(R) Arc(TM) B-Series graphics before version 32.0.101.6737 may allIntel(R) Arc(TM) B-Series graphics
- CVE-2025-24523Protection mechanism failure for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an auEdge Orchestrator software
- CVE-2025-24520Insertion of sensitive information into log file for some Intel(R) Local Manageability Service software before version 2514.7.16.0 may allowIntel(R) Local Manageability Service software
- CVE-2025-24515NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via locaIntel(R) Graphics Drivers
- CVE-2025-24511Improper initialization in the Linux kernel-mode driver for some Intel(R) I350 Series Ethernet before version 5.19.2 may allow an authenticaIntel(R) I350 Series Ethernet
- CVE-2025-24324Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authIntel(R) 800 Series Ethernet
- CVE-2025-24313Improper access control for some Device Plugins for Kubernetes software maintained by Intel before version 0.32.0 may allow a privileged useDevice Plugins for Kubernetes software maintained by Intel
- CVE-2025-24302Uncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1 may allow an authenticated user to potentiallTinyCBOR libraries maintained by Intel
- CVE-2025-24296Improper input validation in some firmware for the Intel(R) E810 Ethernet before version 4.6 may allow a privileged user to enable denial offirmware for the Intel(R) E810 Ethernet
- CVE-2025-22853Improper synchronization in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege viaIntel(R) TDX
- CVE-2025-22840Sequence of processor instructions leads to unexpected behavior for some Intel(R) Xeon(R) 6 Scalable processors may allow an authenticated uIntel(R) Xeon(R) 6 Scalable processors
- CVE-2025-22838Uncontrolled search path for some Intel(R) RealSense(TM) Dynamic Calibrator software before version 2.14.2.0 may allow an authenticated userIntel(R) RealSense(TM) Dynamic Calibrator software
- CVE-2025-22392Out-of-bounds read in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable iIntel(R) AMT and Intel(R) Standard Manageability
- CVE-2025-21096Improper buffer restrictions in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalation of privilegeIntel(R) TDX
- CVE-2025-21093Uncontrolled search path element for some Intel(R) Driver & Support Assistant Tool software before version 24.6.49.8 may allow an authenIntel(R) Driver & Support Assistant Tool software
- CVE-2025-21090Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable deIntel(R) Xeon(R) processors
- CVE-2025-21086Improper input validation in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authenticIntel(R) 700 Series Ethernet
- CVE-2025-20627Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.1 may allow an authenticated user to potIntel(R) oneAPI DPC++/C++ Compiler software
- CVE-2025-20613Predictable Seed in Pseudo-Random Number Generator (PRNG) in the firmware for some Intel(R) TDX may allow an authenticated user to potentialIntel(R) TDX
- CVE-2025-20099Improper access control for some Intel(R) Rapid Storage Technology installation software may allow an authenticated user to potentially enabIntel(R) Rapid Storage Technology installation software
- CVE-2025-20092Uncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an authenticated user to potentially enable escaClock Jitter Tool software
- CVE-2025-20090Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authenticated user to poteIntel(R) QuickAssist Technology software
- CVE-2025-20087Incorrect default permissions for some Intel(R) oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentiallyIntel(R) oneAPI DPC++/C++ Compiler software installers
- CVE-2025-20077Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some Intel(R) reference server platforms mIntel(R) reference server platforms
- CVE-2025-20067Observable timing discrepancy in firmware for some Intel(R) CSME and Intel(R) SPS may allow a privileged user to potentially enable informatIntel(R) CSME and Intel(R) SPS
- CVE-2025-20048Uncontrolled search path for the Intel(R) Trace Analyzer and Collector software all verions may allow an authenticated user to potentially eIntel(R) Trace Analyzer and Collector software
- CVE-2025-20037Time-of-check time-of-use race condition in firmware for some Intel(R) Converged Security and Management Engine may allow a privileged user Intel(R) Converged Security and Management Engine
- CVE-2025-20025Uncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1 may allow an authenticated user to potentiallTinyCBOR libraries maintained by Intel
- CVE-2025-20023Incorrect default permissions for some Intel(R) Graphics Driver software installers may allow an authenticated user to potentially enable esIntel(R) Graphics Driver software installers
- CVE-2025-20017Uncontrolled search path for some Intel(R) oneAPI Toolkit and component software installers may allow an authenticated user to potentially eIntel(R) oneAPI Toolkit and component software installers
- CVE-2025-55166svg-sanitizer By-Passing Attribute Sanitizationdarylldoyle svg-sanitizer · enshrined/svg-sanitize
- CVE-2025-3089Broken Access Control in ServiceNow AI PlatformServiceNow AI Platform
- CVE-2025-55011Kanboard Path Traversal in File Write via Task File Upload Apikanboard
- CVE-2025-54864Hydra missing authentication when triggering evaluations through GitHub and Gitea pluginsNixOS hydra
- CVE-2025-8452Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc.Brother Industries DCP-L8410CDW · Brother Industries M… +396
- CVE-2025-5468Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, IvantiIvanti Connect Secure · Ivanti Policy Secure +2
- CVE-2025-5466XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and IvaIvanti Connect Secure · Ivanti Policy Secure +2
- CVE-2025-8310Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticatIvanti Virtual Application Delivery ControllerCWE-862
- CVE-2024-38805iSCSI Remote Memory Corruption and Denial of ServiceTianoCore EDK2
- CVE-2025-22834ThirdPartyVideo SetVariable VulnerabilityAMI AptioV
- CVE-2025-43735A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.QLiferay Portal · Liferay DXP +3
- CVE-2025-40766A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0).Siemens SINEC Traffic Analyzer
- CVE-2025-40753A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions >= V2.60 < V2.62), POWER METER SICAM Q100 (Siemens POWER METER SICAM Q100 · Siemens POWER METER SICAM…
- CVE-2025-40752A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions >= V2.60 < V2.62), POWER METER SICAM Q100 (Siemens POWER METER SICAM Q100 · Siemens POWER METER SICAM…
- CVE-2025-40751A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3).Siemens SIMATIC RTLS Locating Manager
- CVE-2025-40584A vulnerability has been identified in SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5Siemens SIMOTION SCOUT TIA · Siemens SIMOTION SCOUT +1
- CVE-2025-40570A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V10.0), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V1Siemens SIPROTEC 5 6MD84 · Siemens SIPROTEC 5 6MD85 +34
- CVE-2025-33023A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (AllSiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2025-30034A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3).Siemens SIMATIC RTLS Locating Manager
- CVE-2024-41986A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >=Siemens SmartClient modules Opcenter QL Home · Siemens S… +1
- CVE-2024-41985A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >=Siemens SmartClient modules Opcenter QL Home · Siemens S… +1
- CVE-2024-41984A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >=Siemens SmartClient modules Opcenter QL Home · Siemens S… +1
- CVE-2024-41983A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >=Siemens SmartClient modules Opcenter QL Home · Siemens S… +1
- CVE-2024-41982A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >=Siemens SmartClient modules Opcenter QL Home · Siemens S… +1
- CVE-2024-41980A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >=Siemens SmartClient modules Opcenter QL Home · Siemens S… +1
- CVE-2025-43736A Denial Of Service via File Upload (DOS) vulnerability in the Liferay Portal 7.4.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2Liferay Portal · Liferay DXP +6
- CVE-2025-8885Possible DOS in processing specially formed ASN.1 Object IdentifiersLegion of the Bouncy Castle BC Java · Legion of the Boun… +7
- CVE-2025-26398SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key VulnerabilitySolarWinds Database Performance Analyzer
- CVE-2025-8482Simple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration10up Simple Local Avatars
- CVE-2025-8874Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBoxlitonice13 Master Addons For Elementor – Widgets, Extension…
- CVE-2025-8767AnWP Football Leagues <= 0.16.17 - Authenticated (Administrator+) CSV Injectionanwppro AnWP Football Leagues
- CVE-2025-47444WordPress FiboSearch plugin <= 1.32.1 - Broken Access Control vulnerabilityDamian Góra FiboSearch
- CVE-2025-8081Elementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Importelemntor Elementor Website Builder – more than just a page…
- CVE-2025-30027An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution.Axis Communications AB AXIS OS
- CVE-2025-3892ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation.Axis Communications AB AXIS OS
- CVE-2025-7622During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access Axis Communications AB AXIS Camera Station Pro · Axis Commu…
- CVE-2025-8314Software Issue Manager <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameteremarket-design Project Management, Bug and Issue Tracking P…
- CVE-2025-8568GMap - Venturit <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'h' Parameterprabode GMap Generator
- CVE-2025-8688Inline Stock Quotes <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via stock Shortcodeebernstein Inline Stock Quotes
- CVE-2025-8621Mosaic Generator <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'c' Parameterodn Mosaic Generator
- CVE-2025-8690Simple Responsive Slider <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingaddix Simple Responsive Slider
- CVE-2025-4390WP Private Content Plus <= 3.6.2 - Unauthenticated Sensitive Information Exposurenimeshrmr WP Private Content Plus
- CVE-2025-8685Wp chart generator <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpchart Shortcodeemilien Wp chart generator
- CVE-2025-8462RT Easy Builder <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingrisetheme RT Easy Builder – Advanced addons for Elementor
- CVE-2025-42975Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document)SAP_SE SAP NetWeaver Application Server ABAP
- CVE-2025-42955Missing authorization check in SAP Cloud ConnectorSAP_SE SAP Cloud Connector
- CVE-2025-42949Missing Authorization check in ABAP PlatformSAP_SE ABAP Platform
- CVE-2025-42948Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP PlatformSAP_SE SAP NetWeaver ABAP Platform
- CVE-2025-42946Directory Traversal vulnerability in SAP S/4HANA (Bank Communication Management)SAP_SE SAP S/4HANA
- CVE-2025-42945HTML Injection vulnerability in SAP NetWeaver Application Server ABAPSAP_SE SAP NetWeaver Application Server ABAP
- CVE-2025-42943Information Disclosure in SAP GUI for WindowsSAP_SE SAP GUI for Windows
- CVE-2025-42942Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAPSAP_SE SAP NetWeaver Application Server for ABAP
- CVE-2025-42941Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad)SAP_SE SAP Fiori
- CVE-2025-42936Missing Authorization check in SAP NetWeaver Application Server for ABAPSAP_SE SAP NetWeaver Application Server for ABAP
- CVE-2025-42935Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager)SAP_SE SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2025-42934CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice)SAP_SE SAP S/4HANA