CVEs published October 14, 2025
369 CVEs were published on October 14, 2025: 20 critical, 209 high. 3 are now in CISA KEV.
- Published
- 369
- Critical
- 20
- High
- 209
- Medium
- 129
- Low
- 11
- Unrated
- 0
- Now in CISA KEV
- 3
- Fix available
- 221
Most affected products
- Microsoft Windows
- 118
- Hewlett Packard Enterprise (HPE) ArubaOS
- 17
- Mozilla Firefox · Mozilla Thunderbird
- 11
- Centreon Infra Monitoring
- 9
- MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- 7
- Microsoft Windows Server
- 7
- Adobe Substance3D - Stager
- 5
- Microsoft 365 Apps for Enterprise · Microsoft Excel +1
- 5
- Phoenix Contact QUINT4-UPS/24DC/24DC/5/EIP · Phoenix Con… +2
- 5
- Adobe Dimension
- 4
Critical 20
- CVE-2025-62376pwn.college DOJO vulnerable to improper authentication in workspace endpoint allowing unauthorized Windows VM accesspwncollege dojo
- CVE-2025-49553Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Connect
- CVE-2025-59287Windows Server Update Service (WSUS) Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2025-49708Microsoft Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55315ASP.NET Security Feature Bypass VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio +13
- CVE-2025-11548ibi WebFOCUS - Unauthenticated RCE Vulnerabilityibi WebFOCUS
- CVE-2025-10610SQLi in SFS WinsureSFS Consulting Information Processing Industry and Foreign…
- CVE-2025-7328Rockwell Automation Comms - 1783-NATR Multiple Broken Authentication VulnerabilitiesRockwell Automation Comms - 1783-NATR
- CVE-2025-11717The password edit screen was not hidden in Android card viewMozilla Firefox
- CVE-2025-11721Memory safety bug fixed in Firefox 144 and Thunderbird 144Mozilla Firefox · Mozilla Thunderbird
- CVE-2025-11719Use-after-free caused by the native messaging web extension API on WindowsMozilla Firefox · Mozilla Thunderbird
- CVE-2025-11708Use-after-free in MediaTrackGraphImpl::GetInstance()Mozilla Firefox · Mozilla Thunderbird
- CVE-2025-11710Cross-process information leaked due to malicious IPC messagesMozilla Firefox · Mozilla Thunderbird
- CVE-2025-11709Out of bounds read/write in a privileged process triggered by WebGL texturesMozilla Firefox · Mozilla Thunderbird
- CVE-2025-40771A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6Siemens SIMATIC CP 1542SP-1 · Siemens SIMATIC CP 1543SP-1 +2
- CVE-2025-40765A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3).Siemens TeleControl Server Basic
- CVE-2025-46581ZTE ZXCDN product has a Struts RCE VulnerabilityZTE ZXCDN
- CVE-2025-42937Directory Traversal vulnerability in SAP Print ServiceSAP_SE SAP Print Service
- CVE-2025-42910Unrestricted File Upload Vulnerability in SAP Supplier Relationship ManagementSAP_SE SAP Supplier Relationship Management
- CVE-2025-54603An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation
High 209
- CVE-2025-49552Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Connect
- CVE-2025-54263Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · magento/community-edition +1
- CVE-2025-54264Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · magento/project-community-edition +1
- CVE-2025-61803Substance3D - Stager | Integer Overflow or Wraparound (CWE-190)Adobe Substance3D - Stager
- CVE-2025-61802Substance3D - Stager | Use After Free (CWE-416)Adobe Substance3D - Stager
- CVE-2025-61805Substance3D - Stager | Out-of-bounds Read (CWE-125)Adobe Substance3D - Stager
- CVE-2025-61807Substance3D - Stager | Integer Overflow or Wraparound (CWE-190)Adobe Substance3D - Stager
- CVE-2025-61806Substance3D - Stager | Out-of-bounds Read (CWE-125)Adobe Substance3D - Stager
- CVE-2025-61799Dimension | Out-of-bounds Read (CWE-125)Adobe Dimension
- CVE-2025-61798Dimension | Out-of-bounds Read (CWE-125)Adobe Dimension
- CVE-2025-61800Dimension | Integer Overflow or Wraparound (CWE-190)Adobe Dimension
- CVE-2025-61801Dimension | Use After Free (CWE-416)Adobe Dimension
- CVE-2025-61678FreePBX Endpoint Manager vulnerable to authenticated arbitrary file upload via fwbrand parameterFreePBX endpointman
- CVE-2025-34267Flowise Authenticated Command Execution and Sandbox Bypass via Puppeteer & Playwright PackagesFlowiseAI Flowise · flowise
- CVE-2025-61675FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parametersFreePBX endpoint
- CVE-2025-54283Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator
- CVE-2025-54284Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator
- CVE-2025-59429FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status pageFreePBX core
- CVE-2025-54282Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)Adobe Framemaker
- CVE-2025-54281Adobe Framemaker | Use After Free (CWE-416)Adobe Framemaker
- CVE-2025-59051FreePBX Endpoint Manager command injection via Network Scanning featureFreePBX endpoint
- CVE-2025-54276Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2025-33182NVIDIA Jetson Linux contains a vulnerability in UEFI, where improper authentication may allow a privileged user to cause corruption of the LNVIDIA Jetson Orin Series · NVIDIA Jetson Xavier Series
- CVE-2025-54274Substance3D - Viewer | Stack-based Buffer Overflow (CWE-121)Adobe Substance3D - Viewer
- CVE-2025-54273Substance3D - Viewer | Out-of-bounds Write (CWE-787)Adobe Substance3D - Viewer
- CVE-2025-54280Substance3D - Viewer | Out-of-bounds Write (CWE-787)Adobe Substance3D - Viewer
- CVE-2025-23356NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing.NVIDIA Isaac Lab
- CVE-2025-8459A user with low privileges can inject XSS in the Monitoring Recurrent downtimes pageCentreon Infra Monitoring
- CVE-2025-59497Microsoft Defender for Linux Denial of Service VulnerabilityMicrosoft Defender for Endpoint for Linux
- CVE-2025-59289Windows Bluetooth Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59285Azure Monitor Agent Elevation of Privilege VulnerabilityMicrosoft Azure Monitor
- CVE-2025-59278Windows Authentication Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59275Windows Authentication Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59261Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59230Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59248Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2025-59241Windows Health and Optimized Experiences Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59238Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2025-59232Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +4
- CVE-2025-59227Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-59226Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-59225Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-59224Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-59223Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-59222Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2025-59221Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2025-59213Configuration Manager Elevation of Privilege VulnerabilityMicrosoft Configuration Manager
- CVE-2025-59210Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59208Windows MapUrlToZone Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-59205Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59194Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59193Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59192Storport.sys Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59191Windows Connected Devices Platform Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59189Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59187Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-58738Inbox COM Objects (Global Memory) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-58737Remote Desktop Protocol Remote Code Execution VulnerabilityMicrosoft Windows Server 2012 R2 · Microsoft Windows Server
- CVE-2025-58736Inbox COM Objects (Global Memory) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-58734Inbox COM Objects (Global Memory) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-58733Inbox COM Objects (Global Memory) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-58731Inbox COM Objects (Global Memory) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-58730Inbox COM Objects (Global Memory) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-58727Windows Connected Devices Platform Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-58726Windows SMB Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-58725Windows COM+ Event System Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-58724Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege VulnerabilityMicrosoft Arc Enabled Servers - Azure Connected Machine Age…
- CVE-2025-58720Windows Cryptographic Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-58718Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop · Micro…
- CVE-2025-58714Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55698DirectX Graphics Kernel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-55697Azure Local Elevation of Privilege VulnerabilityMicrosoft Windows Server 2022, 23H2 Edition · Microsoft Win…
- CVE-2025-55696NtQueryInformation Token function (ntifs.h) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55694Windows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55693Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55692Windows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55691Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55690Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55688Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55684Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55680Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55678DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55331Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55328Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55326Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-55240Visual Studio Elevation of Privilege VulnerabilityMicrosoft Visual Studio
- CVE-2025-53768Xbox IStorageService Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53139Windows Hello Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-50175Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53150Windows Digital Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-50152Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53717Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-25004PowerShell Elevation of Privilege VulnerabilityMicrosoft PowerShell · Microsoft Windows
- CVE-2025-59502Remote Procedure Call Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-59494Azure Monitor Agent Elevation of Privilege VulnerabilityMicrosoft Azure Monitor
- CVE-2025-59295Windows URL Parsing Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-59292Azure Compute Gallery Elevation of Privilege VulnerabilityMicrosoft Azure Compute Gallery
- CVE-2025-59291Confidential Azure Container Instances Elevation of Privilege VulnerabilityMicrosoft Azure Compute Gallery
- CVE-2025-59290Windows Bluetooth Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59282Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-59281Xbox Gaming Services Elevation of Privilege VulnerabilityMicrosoft Xbox Gaming Services
- CVE-2025-59277Windows Authentication Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59255Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59254Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59250JDBC Driver for SQL Server Spoofing VulnerabilityMicrosoft JDBC Driver for SQL Server · com.microsoft.sqlser…
- CVE-2025-59249Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2025-59243Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-59242Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59237Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-59236Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-59235Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +4
- CVE-2025-59234Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-59233Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-59231Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-59228Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-59207Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59206Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59202Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59201Network Connection Status Indicator (NCSI) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59200Data Sharing Service Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-59199Software Protection Platform (SPP) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59196Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59195Windows Graphics Component Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-58735Inbox COM Objects (Global Memory) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-58732Inbox COM Objects (Global Memory) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-58728Windows Bluetooth Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-58722Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-58716Windows Speech Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-58715Windows Speech Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55701Windows Authentication Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55689Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55687Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55686Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55685Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55681Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55677Windows Device Association Broker Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55340Windows Remote Desktop Protocol Security Feature BypassMicrosoft Windows
- CVE-2025-55339Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55335Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24052Windows Agere Modem Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-24990Windows Agere Modem Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-55247.NET Elevation of Privilege VulnerabilityMicrosoft .NET · Microsoft.Build.Tasks.Core +2
- CVE-2025-53782Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2025-50174Windows Device Association Broker Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-48004Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-47989Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege VulnerabilityMicrosoft Arc Enabled Servers - Azure Connected Machine Age…
- CVE-2025-37134Authenticated Command Injection Vulnerability in the Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37133Authenticated Command Injection Vulnerability in AOS-8 Controller/Mobility Conductor Web-Based Management Interface via the CLI Binaryalong with accounting controls for tracking and logging user activities and resource usage.Hewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37132Authenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File WriteHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37147Secure Boot Bypass allows for Compromise of Hardware Root of TrustHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37146Unauthorized Filesystem Operations in System Firmware allow Authenticated Remote Code ExecutionHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-11577Clevo UEFI firmware exposed Boot Guard private keys, enabling potential abuse of the Boot Guard trust chainClevo Notebook System Firmware
- CVE-2024-33507An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in FortiIsolator 2.4.0 thrFortinet FortiIsolator
- CVE-2025-57741An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through 7.4.3, 7.2.0 through 7.2.11Fortinet FortiClientMac
- CVE-2025-49201A weak authentication vulnerability in Fortinet FortiPAM 1.5.0, FortiPAM 1.4.0 through 1.4.2, FortiPAM 1.3 all versions, FortiPAM 1.2 all veFortinet FortiPAM · Fortinet FortiSwitchManager
- CVE-2025-58325An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0Fortinet FortiOS
- CVE-2025-62172Home Assistant vulnerable to Stored XSS in Energy dashboard from Energy Entity Namehome-assistant core · homeassistant
- CVE-2025-62157Argo Workflows exposes artifact repository credentials in workflow-controller logsargoproj argo-workflows · github.com/argoproj/argo-workf… +2
- CVE-2025-62156argo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwriteargoproj argo-workflows · github.com/argoproj/argo-workf… +2
- CVE-2025-5946RCE via the poller reload feature available only to user with high privilegeCentreon Infra Monitoring
- CVE-2025-10985OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attackeIvanti Endpoint Manager Mobile
- CVE-2025-10243OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attackeIvanti Endpoint Manager Mobile
- CVE-2025-10242OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attackeIvanti Endpoint Manager Mobile
- CVE-2025-47856Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiVoiFortinet FortiVoice
- CVE-2025-9178Rockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service VulnerabilityRockwell Automation 1715-AENTR EtherNet/IP Adapter
- CVE-2025-9177Rockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service VulnerabilityRockwell Automation 1715-AENTR EtherNet/IP Adapter
- CVE-2025-7330Rockwell Automation 1783-NATR Cross-Site Request Forgery VulnerabilityRockwell Automation Comms - 1783-NATR
- CVE-2025-7329Rockwell Automation Comms - 1783-NATR Stored Cross-Site Scripting VulnerabilityRockwell Automation Comms - 1783-NATR
- CVE-2025-11720Spoofing risk in Android custom tabsMozilla Firefox
- CVE-2025-11715Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144Mozilla Firefox · Mozilla Thunderbird
- CVE-2025-11713Potential user-assisted code execution in “Copy as cURL” commandMozilla Firefox · Mozilla Thunderbird
- CVE-2025-11714Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144Mozilla Firefox · Mozilla Thunderbird
- CVE-2025-9067Rockwell Automation FactoryTalk® Linx Privilege Escalation VulnerabilitiesRockwell Automation FactoryTalk Linx
- CVE-2025-9124Rockwell Automation Compact GuardLogix® 5370 Denial-Of-Service VulnerabilityRockwell Automation Compact GuardLogix®
- CVE-2025-9068Rockwell Automation FactoryTalk® Linx Privilege Escalation VulnerabilitiesRockwell Automation FactoryTalk Linx
- CVE-2025-9064Rockwell Automation FactoryTalk View Machine Edition Path TraversalRockwell Automation FactoryTalk View Machine Edition
- CVE-2025-9063Rockwell Automation PanelView Plus 7 Performance Series B Authentication BypassRockwell Automation PanelView Plus 7 Performance Series B
- CVE-2025-9066Rockwell Automation FactoryTalk® ViewPoint XXE to Denial-of-Service VulnerabilityRockwell Automation FactoryTalk ViewPoint
- CVE-2025-9437Rockwell Automation ArmorStart® AOP Denial-of-Service VulnerabilityRockwell Automation ArmorStart AOP
- CVE-2025-10228Session Hijacking in Rolantis Information Technologies' AgentisRolantis Information Technologies Agentis
- CVE-2025-40812A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update Siemens Solid Edge SE2024 · Siemens Solid Edge SE2025
- CVE-2025-40811A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update Siemens Solid Edge SE2024 · Siemens Solid Edge SE2025
- CVE-2025-40810A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update Siemens Solid Edge SE2024 · Siemens Solid Edge SE2025
- CVE-2025-40809A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update Siemens Solid Edge SE2024 · Siemens Solid Edge SE2025
- CVE-2025-40772A vulnerability has been identified in SiPass integrated (All versions < V3.0).Siemens SiPass integrated
- CVE-2025-40755A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1).Siemens SINEC NMS
- CVE-2011-20002A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl.Siemens SIMATIC S7-1200 CPU V1 family · Siemens SIMATIC S7-…
- CVE-2011-20001A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl.Siemens SIMATIC S7-1200 CPU V1 family · Siemens SIMATIC S7-…
- CVE-2025-20717In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20716In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20715In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20723In gnss driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6835, MT6878, MT6886, MT6897, MT6899, MT6985, MT…
- CVE-2025-20714In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20713In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20721In imgsensor, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6886, MT6897, MT6899, MT6985, MT6989, MT6991, MT…
- CVE-2025-20720In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7603, MT7615, MT7622, MT7915, MT7916, MT…
- CVE-2025-20719In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7603, MT7615, MT7622, MT7915, MT7916, MT…
- CVE-2025-20718In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20709In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7915, MT7916, MT7981, MT7986
- CVE-2025-20710In wlan AP driver, there is a possible out of bounds write due to an integer overflow.MediaTek MT6890, MT7915, MT7916, MT7981, MT7986
- CVE-2025-20711In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7916, MT7981, MT7986
- CVE-2025-20712In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6990, MT7990, MT7991, MT7992, MT7993
- CVE-2025-41699Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllersPhoenix Contact CHARX SEC-3150 · Phoenix Contact CHARX S… +2
- CVE-2025-41718Murrelektronik: Unprotected Transport of CredentialsMurrelektronik Firmware Impact67 Pro
- CVE-2025-41703Phoenix Contact: UPS Shutdown via Unauthenticated Modbus CommandPhoenix Contact QUINT4-UPS/24DC/24DC/5/EIP · Phoenix Con… +2
- CVE-2025-59889Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the Eaton IPP software
- CVE-2025-57618A path traversal vulnerability in FastX3 thru 3.3.67 allows an unauthenticated attacker to read arbitrary files on the server.
- CVE-2025-60535A Cross-Site Request Forgery (CSRF) in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary ope
- CVE-2025-60536An issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to cause a Denial of Service (DoS) via uploadi
Medium, low and unrated 140
- CVE-2025-54196Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)Adobe Connect
- CVE-2025-61797Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-54272Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-61796Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-54267Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · magento/project-community-edition +1
- CVE-2025-54266Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · magento/project-community-edition +1
- CVE-2025-54265Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · magento/community-edition +1
- CVE-2025-62374Parse Javascript SDK vulnerable to prototype pollution in `Parse.Object` and internal APIsparse-community Parse-SDK-JS · parse
- CVE-2025-33177NVIDIA Jetson Linux and IGX OS contain a vulnerability in NvMap, where improper tracking of memory allocations could allow a local attacker NVIDIA Jetson Orin Series · NVIDIA Jetson Thor Series +1
- CVE-2025-54275Substance3D - Viewer | Out-of-bounds Write (CWE-787)Adobe Substance3D - Viewer
- CVE-2025-11736itsourcecode Online Examination System index.php sql injectionitsourcecode Online Examination System
- CVE-2025-37145Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37144Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-59260Microsoft Failover Cluster Virtual Driver Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2025-59253Windows Search Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-59244NTLM Hash Disclosure Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-59229Microsoft Office Denial of Service VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-59214Microsoft Windows File Explorer Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-59209Windows Push Notification Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-59203Windows State Repository API Server File Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-59198Windows Search Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-59197Windows ETL Channel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-59190Windows Search Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-59188Microsoft Failover Cluster Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2025-59184Storage Spaces Direct Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2025-58739Microsoft Windows File Explorer Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-58729Windows Local Session Manager (LSM) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-55699Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-55695Windows WLAN AutoConfig Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-55683Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2025-55682Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-55679Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-55337Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-55334Windows Kernel Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-55332Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-55330Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-55248.NET, .NET Framework, and Visual Studio Information Disclosure VulnerabilityMicrosoft .NET · Microsoft Visual Studio +12
- CVE-2025-48813Virtual Secure Mode Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-59294Windows Taskbar Live Preview Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-59288Playwright Spoofing Vulnerabilitymicrosoft/playwright · playwright
- CVE-2025-59284Windows NTLM Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-47979Microsoft Failover Cluster Information Disclosure VulnerabilityMicrosoft Windows Server 2022, 23H2 Edition · Microsoft Win…
- CVE-2025-59280Windows SMB Client Tampering VulnerabilityMicrosoft Windows
- CVE-2025-59259Windows Local Session Manager (LSM) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-59258Windows Active Directory Federation Services (ADFS) Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2025-59257Windows Local Session Manager (LSM) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-59211Windows Push Notification Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-59204Windows Management Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-59186Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2025-59185NTLM Hash Disclosure Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-58719Windows Connected Devices Platform Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-58717Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-37143Authenticated Arbitrary File Download Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web Interface (Physical Access Required)Hewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-55700Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-55676Windows USB Video Class System Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-55338Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-55336Windows Cloud Files Mini Filter Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-55333Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-55325Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-55320Configuration Manager Elevation of Privilege VulnerabilityMicrosoft Configuration Manager
- CVE-2025-37142Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37141Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37140Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37139Vulnerability in AOS firmware allows for Authenticated Local malicious actor to Permanently Disable BootHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37138Authenticated Command Injection Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface (Physical Access Required)Hewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37137Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)Hewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37136Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)Hewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37135Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)Hewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-8430A user with elevated privileges can inject XSS in the Commands Connectors configuration configuration pageCentreon Infra Monitoring
- CVE-2025-37148Kernel Panic triggered by Modified Ethernet Frames leads to Denial of Service VulnerabilityHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-36730Windsurf Prompt Injection via FilenameWindsurf
- CVE-2025-37149A potential out-of-bound reads vulnerability in HPE ProLiant RL300 Gen11 Server's UEFI firmware.Hewlett Packard Enterprise (HPE) ProLiant RL300 Gen11 Server
- CVE-2025-8429A user with elevated privileges can inject XSS in the ACL Action access configuration pageCentreon Infra Monitoring
- CVE-2025-54893A user with elevated privileges can inject XSS in the Hosts templates configuration pageCentreon Infra Monitoring
- CVE-2025-31514A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS Fortinet FortiOS · Fortinet FortiProxy
- CVE-2025-46774An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2 and below, version Fortinet FortiClientMac
- CVE-2025-54822An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOFortinet FortiProxy · Fortinet FortiOS
- CVE-2025-62366Mailgen vulnerable to HTML injection and cross-site scripting via plaintext email generationeladnava mailgen · mailgen
- CVE-2025-31365An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through 7.4.3, 7.2.1 through 7.2Fortinet FortiClientMac
- CVE-2025-53845An improper authentication vulnerability [CWE-287] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenFortinet FortiAnalyzer
- CVE-2025-59921An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0, version 7.2.3 and Fortinet FortiADC
- CVE-2025-57716An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versioFortinet FortiClientWindows
- CVE-2025-25255An Improperly Implemented Security Check for Standard vulnerability [CWE-358] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiPrFortinet FortiOS · Fortinet FortiProxy
- CVE-2025-25252An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10Fortinet FortiOS
- CVE-2024-26008An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, ForFortinet FortiProxy · Fortinet FortiPAM +2
- CVE-2024-47569A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, Fortinet FortiManager · Fortinet FortiOS +8
- CVE-2025-54973A concurrent execution using shared resource with improper synchronization ('Race Condition') vulnerability [CWE-362] in Fortinet FortiAnalyFortinet FortiAnalyzer
- CVE-2023-46718A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 thrFortinet FortiOS · Fortinet FortiProxy
- CVE-2024-50571A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7Fortinet FortiManager · Fortinet FortiOS +2
- CVE-2025-31366An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3,Fortinet FortiSASE · Fortinet FortiOS +1
- CVE-2025-22258A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.Fortinet FortiPAM · Fortinet FortiOS +3
- CVE-2025-25253An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and beFortinet FortiProxy · Fortinet FortiOS +1
- CVE-2025-57740An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below,Fortinet FortiPAM · Fortinet FortiProxy +1
- CVE-2025-47890An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through Fortinet FortiOS · Fortinet FortiProxy +1
- CVE-2025-58324An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.Fortinet FortiSIEM
- CVE-2025-58903An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticatFortinet FortiOS
- CVE-2024-48891An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiSOAR 7.6.0 throFortinet FortiSOAR on-premise
- CVE-2025-54891A user with elevated privileges can inject XSS in the ACL Resource Access configuration pageCentreon Infra Monitoring
- CVE-2025-54892A user with elevated privileges can inject XSS in the SNMP traps group configuration pageCentreon Infra Monitoring
- CVE-2025-54889A user with elevated privileges can inject XSS in the SNMP traps manufacturer configuration pageCentreon Infra Monitoring
- CVE-2025-0033Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentialAMD EPYC™ 7003 Series Processors · AMD EPYC™ 9005 Series Pr…
- CVE-2025-59428EspoCRM allows arbitrary user creation via stored SVG injection and CSRFespocrm
- CVE-2024-44088Apache Geode: Reflected XSSApache Software Foundation Apache Geode · org.apache.geode:…
- CVE-2025-10986Path traversal in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker withIvanti Endpoint Manager Mobile
- CVE-2025-8428XSS found in the HTTP loader widgetCentreon Infra Monitoring
- CVE-2025-27906IBM Content Navigator information disclosureIBM Content Navigator
- CVE-2025-33044exFat Memory Corruption IssueAMI AptioV
- CVE-2025-22833FixupArray Pointer Validation in NTFSAMI AptioV
- CVE-2025-22832Buffer Overflow in NTFS when parsing the ATTRIBUTE_LISTAMI AptioV
- CVE-2025-22831Buffer Overflow in NTFS when parsing the VOLUME_NAMEAMI AptioV
- CVE-2025-11498CSV Formula Injection VulnerabilityB&R Industrial Automation Automation Runtime
- CVE-2025-11718Address bar could be spoofed on Android using visibilitychangeMozilla Firefox
- CVE-2025-11716Sandboxed iframes allowed links to open in external apps (Android only)Mozilla Firefox · Mozilla Thunderbird
- CVE-2025-11712An OBJECT tag type attribute overrode browser behavior on web resources without a content-typeMozilla Firefox · Mozilla Thunderbird
- CVE-2025-11711Some non-writable Object properties could be modifiedMozilla Firefox · Mozilla Thunderbird
- CVE-2025-40774A vulnerability has been identified in SiPass integrated (All versions < V3.0).Siemens SiPass integrated
- CVE-2025-40773A vulnerability has been identified in SiPass integrated (All versions < V3.0).Siemens SiPass integrated
- CVE-2025-20724In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20722In gnss driver, there is a possible out of bounds read due to an integer overflow.MediaTek MT6835, MT6878, MT6886, MT6897, MT6899, MT6980D, M…
- CVE-2025-41707Phoenix Contact: WebSocket Handler Denial of ServicePhoenix Contact QUINT4-UPS/24DC/24DC/5/EIP · Phoenix Con… +2
- CVE-2025-41706Phoenix Contact: Webserver Denial of Service through Malformed Content-LengthPhoenix Contact QUINT4-UPS/24DC/24DC/5/EIP · Phoenix Con… +2
- CVE-2025-41705Phoenix Contact: WebSocket Message Interception Leaks Webfrontend CredentialsPhoenix Contact QUINT4-UPS/24DC/24DC/5/EIP · Phoenix Con… +2
- CVE-2025-41704Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function CodePhoenix Contact QUINT4-UPS/24DC/24DC/5/EIP · Phoenix Con… +2
- CVE-2025-55078Incomplete validation of kernel object pointers in system callsEclipse Foundation ThreadX
- CVE-2025-11731Libxslt: type confusion in exsltfuncresultcompfunction of libxsltlibxslt · Red Hat Hardened Images +2
- CVE-2025-8594Pz-LinkCard < 2.5.7 - Contributor+ SSRFPz-LinkCard
- CVE-2025-10357Simple SEO < 2.0.32 - Contributor+ Stored XSSSimple SEO
- CVE-2025-10732SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosurebrainstormforce SureForms – Contact Form, Payment Form & Ot…
- CVE-2025-42939Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statements)SAP_SE SAP S/4HANA
- CVE-2025-42909Security Misconfiguration vulnerability in SAP Cloud Appliance Library AppliancesSAP_SE SAP Cloud Appliance Library Appliances
- CVE-2025-42908Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAPSAP_SE SAP NetWeaver Application Server for ABAP
- CVE-2025-42906Directory Traversal vulnerability in SAP Commerce CloudSAP_SE SAP Commerce Cloud
- CVE-2025-42903User Enumeration and Sensitive Data Exposure via RFC Function in SAP Financial Service Claims ManagementSAP_SE SAP Financial Service Claims Management
- CVE-2025-42902Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP PlatformSAP_SE SAP Netweaver AS ABAP and ABAP Platform
- CVE-2025-42901Code Injection vulnerability in SAP Application Server for ABAP (BAPI Browser)SAP_SE SAP Application Server for ABAP
- CVE-2025-56747Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Api_instructor controller where regul
- CVE-2025-57563A path traversal in StarNet Communications Corporation FastX v.4 through v4.1.51 allows unauthenticated attackers to read arbitrary files.
- CVE-2025-60374Stored Cross-Site Scripting (XSS) in Perfex CRM chatbot before 3.3.1 allows attackers to inject arbitrary HTML/JavaScript.
- CVE-2025-60537Improper input validation in the component /kafka/ui/serdes/CustomSerdeLoader.java of kafka-ui v0.6.0 to v0.7.2 allows attackers to execute
- CVE-2025-60540karakeep v0.26.0 to v0.7.0 was discovered to contain a Server-Side Request Forgery (SSRF).