CVEs published November 11, 2025
323 CVEs were published on November 11, 2025: 15 critical, 128 high. 2 are now in CISA KEV.
- Published
- 323
- Critical
- 15
- High
- 128
- Medium
- 166
- Low
- 14
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 110
Most affected products
- Microsoft Windows
- 36
- Mozilla Firefox · Mozilla Thunderbird
- 15
- Intel(R) CIP software
- 12
- Axis Communications AB AXIS OS
- 11
- Adobe Format Plugins
- 9
- Intel(R) QAT Windows software
- 7
- Microsoft 365 Apps for Enterprise · Microsoft Excel +1
- 7
- Fairsketch RISE CRM Framework
- 6
- Intel(R) PROSet/Wireless WiFi Software for Windows
- 6
- Adobe Illustrator on iPad
- 5
Critical 15
- CVE-2025-60724GDI+ Remote Code Execution VulnerabilityMicrosoft Office for Android · Microsoft Office LTSC for… +1
- CVE-2025-13032Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate privelages via pool overfloAvast (Free/Premiium/Ultimeat) Antivirus · Avsat One +1
- CVE-2025-13026Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-13024JIT miscompilation in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-13023Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-13022Incorrect boundary conditions in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-13021Incorrect boundary conditions in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-8324SQL InjectionZohocorp ManageEngine Analytics Plus
- CVE-2025-12539TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeoverleopardhost TNC Toolbox: Web Performance
- CVE-2017-20210Photo StationQNAP Systems Photo Station
- CVE-2025-11170WP移行専用プラグイン for CPI <= 1.0.2 - Unauthenticated Arbitrary File Uploadkddiwebcommunications WP移行専用プラグイン for CPI
- CVE-2025-12813Holiday class post calendar <= 7.1 - Unauthenticated Remote Code Execution via 'contents'strix-bubol5 Holiday class post calendar
- CVE-2025-11457EasyCommerce – AI-Powered, Blazing-Fast & Beautiful WordPress Ecommerce Plugin 0.9.0-beta2 - 1.8.2 - Unauthenticated Privilege EscalationEasyCommerce – AI-Powered WordPress Ecommerce Plugin to Sel…
- CVE-2025-42890Insecure key & Secret Management vulnerability in SQL Anywhere Monitor (Non-Gui)SAP_SE SQL Anywhere Monitor
- CVE-2025-42887Code Injection vulnerability in SAP Solution ManagerSAP_SE SAP Solution Manager
High 128
- CVE-2025-61835Substance3D - Stager | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Substance3D - Stager
- CVE-2025-61833Substance3D - Stager | Out-of-bounds Read (CWE-125)Adobe Substance3D - Stager
- CVE-2025-64531Substance3D - Stager | Use After Free (CWE-416)Adobe Substance3D - Stager
- CVE-2025-61834Substance3D - Stager | Use After Free (CWE-416)Adobe Substance3D - Stager
- CVE-2025-40827A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions < V225.0 Update 10).Siemens Software Center · Siemens Solid Edge SE2025
- CVE-2025-40816A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (Siemens LOGO! 12/24RCE · Siemens LOGO! 12/24RCEo +14
- CVE-2025-40815A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (Siemens LOGO! 12/24RCE · Siemens LOGO! 12/24RCEo +14
- CVE-2025-40763A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0).Siemens Altair Grid Engine
- CVE-2025-40744A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11).Siemens Solid Edge SE2025
- CVE-2024-32011A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).Siemens Spectrum Power
- CVE-2024-32010A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).Siemens Spectrum Power
- CVE-2024-32009A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).Siemens Spectrum Power
- CVE-2024-32008A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).Siemens Spectrum Power
- CVE-2025-61839Format Plugins | Out-of-bounds Read (CWE-125)Adobe Format Plugins
- CVE-2025-61837Format Plugins | Heap-based Buffer Overflow (CWE-122)Adobe Format Plugins
- CVE-2025-61838Format Plugins | Heap-based Buffer Overflow (CWE-122)Adobe Format Plugins
- CVE-2025-61830Adobe Pass | Incorrect Authorization (CWE-863)Adobe Pass
- CVE-2025-30398Nuance PowerScribe 360 Information Disclosure VulnerabilityMicrosoft Nuance PowerScribe · Microsoft PowerScribe One
- CVE-2025-60721Windows Administrator Protection Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-62222Agentic AI and Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code CoPilot Chat Extension
- CVE-2025-62213Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-62215Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-62211Dynamics 365 Field Service (online) Spoofing VulnerabilityMicrosoft Dynamics 365 Field Service
- CVE-2025-59499Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server 2016 Service Pack · Microsoft SQL Serv…
- CVE-2025-62205Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-62204Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-62203Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-62202Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-62201Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-62200Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-60720Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-60718Windows Administrator Protection Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-60717Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-60716DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-60715Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-60714Windows OLE Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-60713Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2025-59515Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59514Microsoft Streaming Service Proxy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-62452Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-62220Windows Subsystem for Linux GUI Remote Code Execution VulnerabilityMicrosoft Windows Subsystem for Linux GUI
- CVE-2025-62219Microsoft Wireless Provisioning System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-62218Microsoft Wireless Provisioning System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-62217Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-60719Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-62216Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-62210Dynamics 365 Field Service (online) Spoofing VulnerabilityMicrosoft Dynamics 365 Field Service
- CVE-2025-62199Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-60727Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-60726Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-60710Host Process for Windows Tasks Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-60709Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-60707Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-60705Windows Client-Side Caching Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-60704Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-60703Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59512Customer Experience Improvement Program (CEIP) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59511Windows WLAN Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59508Windows Speech Recognition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59507Windows Speech Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59506DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59505Windows Smart Card Reader Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59504Azure Monitor Agent Remote Code Execution VulnerabilityMicrosoft Azure Monitor
- CVE-2025-61828Illustrator on iPad | Out-of-bounds Write (CWE-787)Adobe Illustrator on iPad
- CVE-2025-61827Illustrator on iPad | Heap-based Buffer Overflow (CWE-122)Adobe Illustrator on iPad
- CVE-2025-61826Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Illustrator on iPad
- CVE-2025-61829Illustrator on iPad | Heap-based Buffer Overflow (CWE-122)Adobe Illustrator on iPad
- CVE-2025-61836Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Illustrator on iPad
- CVE-2025-61831Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator
- CVE-2025-61820Illustrator | Heap-based Buffer Overflow (CWE-122)Adobe Illustrator
- CVE-2025-61819Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)Adobe Photoshop Desktop
- CVE-2025-61818InCopy | Use After Free (CWE-416)Adobe InCopy
- CVE-2025-61816InCopy | Heap-based Buffer Overflow (CWE-122)Adobe InCopy
- CVE-2025-61817InCopy | Use After Free (CWE-416)Adobe InCopy
- CVE-2025-61815InDesign Desktop | Use After Free (CWE-416)Adobe InDesign Desktop
- CVE-2025-61814InDesign Desktop | Use After Free (CWE-416)Adobe InDesign Desktop
- CVE-2025-61824InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2025-61832InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2025-35971Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may alloIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-35968Protection mechanism failure in the UEFI firmware for the Slim Bootloader within firmware may allow an escalation of privilege.Slim Bootloader
- CVE-2025-35967Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allowIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-35963Insufficient control flow management for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: DeviceIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-33029Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may alloIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-33000Improper input validation for some Intel QuickAssist Technology before version 2.6.0 within Ring 3: User Applications may allow an escalatioIntel QuickAssist Technology
- CVE-2025-32091Incorrect default permissions in some firmware for the Intel(R) Arc(TM) B-series GPUs within Ring 1: Device Drivers may allow an escalation Intel(R) Arc(TM) B-series GPUs
- CVE-2025-30255Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may alloIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-30185Active debug code for some Intel UEFI reference platforms within Ring 0: Kernel may allow a denial of service and escalation of privilege.Intel UEFI reference platforms
- CVE-2025-27713Out-of-bounds write for some Intel(R) QAT Windows software before version 2.6.0.Intel(R) QAT Windows software
- CVE-2025-24838Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow aIntel(R) CIP software
- CVE-2025-24299Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an esIntel(R) CIP software
- CVE-2025-20010Use of unmaintained third party components for some Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User ApplIntel(R) Processor Identification Utility
- CVE-2025-33186NVIDIA AIStore contains a vulnerability in AuthN.AuthN component of NVIDIA AIStore
- CVE-2025-33178NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker NVIDIA NeMo Framework
- CVE-2025-23361NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause impropeNVIDIA NeMo Framework
- CVE-2025-23357NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injeNVIDIA Megatron-LM
- CVE-2025-13027Memory safety bugs fixed in Firefox 145 and Thunderbird 145Mozilla Firefox · Mozilla Thunderbird
- CVE-2025-13020Use-after-free in the WebRTC: Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-13019Same-origin policy bypass in the DOM: Workers componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-13018Mitigation bypass in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-13017Same-origin policy bypass in the DOM: Notifications componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-13025Incorrect boundary conditions in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-13016Incorrect boundary conditions in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-13014Use-after-free in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-13012Race condition in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-9408Userspace privilege escalation vulnerability on Cortex Mzephyrproject-rtos Zephyr
- CVE-2025-10918Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write Ivanti Endpoint Manager
- CVE-2025-11959Improper Access Control in Premierturk's Excavation Management Information SystemPremierturk Information Technologies Excavation Management…
- CVE-2025-11697Studio 5000 ® Simulation Interface Local Code ExecutionRockwell Automation Studio 5000 ® Simulation Interface
- CVE-2025-11696Studio 5000 ® Simulation Interface SSRFRockwell Automation Studio 5000® Simulation Interface™
- CVE-2025-11862Verve Asset Manager Access Control VulnerabilityRockwell Automation Verve Asset Manager
- CVE-2025-11085FactoryTalk® DataMosaix™ Private Cloud – Persistent XSSRockwell Automation FactoryTalk® DataMosaix™ Private Cloud
- CVE-2025-11084FactoryTalk® DataMosaix™ Private Cloud – Authentication BypassRockwell Automation FactoryTalk® DataMosaix™ Private Cloud
- CVE-2025-9223Command InjectionZohocorp ManageEngine Applications Manager
- CVE-2025-10161Authentication Bypass in Turkguven's PerfektiveTurkguven Software Technologies Perfektive
- CVE-2025-12846Blocksy Companion <= 2.1.19 - Authenticated (Author+) Arbitrary File Upload via SVG Upload Bypasscreativethemeshq Blocksy Companion
- CVE-2025-7633Stored XSSZohocorp ManageEngine Exchange Reporter Plus
- CVE-2025-7632Stored XSSZohocorp ManageEngine Exchange Reporter Plus
- CVE-2025-7430Stored XSSZohocorp ManageEngine Exchange Reporter Plus
- CVE-2025-7429Stored XSSZohocorp ManageEngine Exchange Reporter Plus
- CVE-2025-10714AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within MicrosofAxis Communications AB AXIS Optimizer
- CVE-2025-11855Age Restriction <= 3.0.2 - Subscriber+ Privilege Escalationage-restriction
- CVE-2025-11307WP Google Maps < 9.0.48 - Unauthenticated Stored XSSWP Go Maps
- CVE-2025-11521Astra Security Suite – Firewall & Malware Scan <= 0.2 - Unauthenticated Arbitrary File Uploadastrasecuritysuite Astra Security Suite – Firewall & Malwar…
- CVE-2025-12637Elastic Theme Editor <= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Uploadkoopersmith Elastic Theme Editor
- CVE-2025-11451Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.3 - Unauthenticated Arbitrary File Readmiunosoft Auto Amazon Links – Amazon Associates Affiliate P…
- CVE-2025-11168Mementor Core <= 2.2.5 - Authenticated (Subscriber+) Privilege Escalationmvirik Mementor Core
- CVE-2025-42940Memory Corruption vulnerability in SAP CommonCryptoLibSAP_SE SAP CommonCryptoLib
- CVE-2024-57695An issue in Agnitum Outpost Security Suite 7.5.3 (3942.608.1810) and 7.6 (3984.693.1842) allows a local attacker to execute arbitrary code v
Medium, low and unrated 180
- CVE-2025-40817A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (Siemens LOGO! 12/24RCE · Siemens LOGO! 12/24RCEo +14
- CVE-2025-40760A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0).Siemens Altair Grid Engine
- CVE-2024-32014A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).Siemens Spectrum Power
- CVE-2025-41116Incorrect oauth passthrough in Grafana Databricks DatasourceGrafana Labs Grafana Databricks Datasource Plugin
- CVE-2025-3717Incorrect oauth passthrough in Grafana Snowflake DatasourceGrafana Labs Grafana Snowflake Datasource Plugin
- CVE-2025-12748Libvirt: denial of service in xml parsinglibvirt · Red Hat Enterprise Linux
- CVE-2025-61843Format Plugins | Out-of-bounds Read (CWE-125)Adobe Format Plugins
- CVE-2025-61845Format Plugins | Out-of-bounds Read (CWE-125)Adobe Format Plugins
- CVE-2025-61840Format Plugins | Out-of-bounds Read (CWE-125)Adobe Format Plugins
- CVE-2025-61841Format Plugins | Out-of-bounds Read (CWE-125)Adobe Format Plugins
- CVE-2025-61842Format Plugins | Use After Free (CWE-416)Adobe Format Plugins
- CVE-2025-61844Format Plugins | Out-of-bounds Read (CWE-125)Adobe Format Plugins
- CVE-2025-62453GitHub Copilot and Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2025-62449Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code CoPilot Chat Extension
- CVE-2025-62214Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2025-62209Windows License Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-62208Windows License Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-60723DirectX Graphics Kernel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-47179Configuration Manager Elevation of Privilege VulnerabilityMicrosoft Configuration Manager
- CVE-2025-59240Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-60722Microsoft OneDrive for Android Elevation of Privilege VulnerabilityMicrosoft OneDrive for Android
- CVE-2025-62206Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2025-60728Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-60708Storvsp.sys Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-60706Windows Hyper-V Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-59513Windows Bluetooth RFCOM Protocol Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-59510Windows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-59509Windows Speech Recognition Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-35972Uncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User Applications may allow an escalation of privilIntel MPI Library
- CVE-2025-32732Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0.Intel(R) QAT Windows software
- CVE-2025-32449Unquoted search path for some PRI Driver software before version 03.03.1002 within Ring 3: User Applications may allow an escalation of privPRI Driver software
- CVE-2025-32446Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allowIntel QuickAssist Technology software
- CVE-2025-32088Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0.Intel(R) QAT Windows software
- CVE-2025-32038Uncontrolled search path for some FPGA Support Package for the Intel oneAPI DPC++C++ Compiler software before version 2025.0.1 within Ring 3Intel oneAPI DPC++C++ Compiler software
- CVE-2025-32037Improper access control for some Intel(R) PresentMon before version 2.3.1 within Ring 3: User Applications may allow a denial of service.Intel(R) PresentMon
- CVE-2025-32001Uncontrolled search path for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow Intel(R) Processor Identification Utility
- CVE-2025-31948Improper input validation for some Intel(R) oneAPI Math Kernel Library before version 2025.2 within Ring 3: User Applications may allow a deIntel(R) oneAPI Math Kernel Library
- CVE-2025-31940Incorrect default permissions for some Intel(R) Thread Director Visualizer software before version 1.1.1 within Ring 3: User Applications maIntel(R) Thread Director Visualizer software
- CVE-2025-31937Out-of-bounds read for some Intel(R) QAT Windows software before version 2.6.0.Intel(R) QAT Windows software
- CVE-2025-31931Uncontrolled search path for the Instrumentation and Tracing Technology API (ITT API) software before version 3.25.4 within Ring 3: User AppInstrumentation and Tracing Technology API (ITT API) softwa…
- CVE-2025-31647Uncontrolled search path for some Intel(R) Graphics Software before version 25.22.1502.2 within Ring 3: User Applications may allow an escalIntel(R) Graphics Software
- CVE-2025-31645Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an esSystem Event Log Viewer Utility software
- CVE-2025-31146Time-of-check time-of-use race condition for some Intel Ethernet Adapter Complete Driver Pack software before version 1.5.1.0 within Ring 3:Intel Ethernet Adapter Complete Driver Pack software
- CVE-2025-30518Incorrect default permissions for some Intel(R) PresentMon before version 2.3.1 within Ring 3: User Applications may allow an escalation of Intel(R) PresentMon
- CVE-2025-30509Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an Intel QuickAssist Technology software
- CVE-2025-30506Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escalIntel Driver and Support Assistant
- CVE-2025-30182Uncontrolled search path for some Intel(R) Distribution for Python software installers before version 2025.2.0 within Ring 3: User ApplicatiIntel(R) Distribution for Python software installers
- CVE-2025-27725Time-of-check time-of-use race condition for some ACAT before version 3.13 within Ring 3: User Applications may allow a denial of service.ACAT
- CVE-2025-27712Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within Ring 3: User Applications may allow an escalIntel(R) Neural Compressor software
- CVE-2025-27711Incorrect default permissions for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User AppIntel(R) One Boot Flash Update (Intel(R) OFU) software
- CVE-2025-27710Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0.Intel(R) QAT Windows software
- CVE-2025-27249Uncontrolled resource consumption for some Gaudi software before version 1.21.0 within Ring 3: User Applications may allow a denial of serviGaudi software
- CVE-2025-27246Incorrect default permissions for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may aIntel(R) Processor Identification Utility
- CVE-2025-26694Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0.Intel(R) QAT Windows software
- CVE-2025-26405Improper control of dynamically-managed code resources for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of Intel(R) NPU Drivers
- CVE-2025-26402Protection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service.Intel(R) NPU Drivers
- CVE-2025-25216Improper input validation in some firmware for some Intel(R) Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow Intel(R) Graphics Drivers and Intel LTS kernels
- CVE-2025-25059Uncontrolled search path for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User ApplicatIntel(R) One Boot Flash Update (Intel(R) OFU) software
- CVE-2025-24918Improper link resolution before file access ('link following') for some Intel(R) Server Configuration Utility software and Intel(R) Server FIntel(R) Server Configuration Utility software and Intel(R)…
- CVE-2025-24863Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow aIntel(R) CIP software
- CVE-2025-24862Unrestricted upload of file with dangerous type for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User ApplicIntel(R) CIP software
- CVE-2025-24848Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow anIntel(R) CIP software
- CVE-2025-24847Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an inIntel(R) CIP software
- CVE-2025-24842Uncontrolled search path for the Intel(R) System Support Utility before version 4.1.0 within Ring 3: User Applications may allow an escalatiIntel(R) System Support Utility
- CVE-2025-24834Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow anIntel(R) CIP software
- CVE-2025-24519Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0.Intel(R) QAT Windows software
- CVE-2025-24516Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an infoIntel(R) CIP software
- CVE-2025-24512Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers maIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2025-24491Uncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version killer 4.0 40.25.509.1465 within Ring 3: UseIntel(R) Killer(TM) Performance Suite software
- CVE-2025-24327Insecure inherited permissions for some Intel(R) Rapid Storage Technology Application before version 20.0.1021 within Ring 3: User ApplicatiIntel(R) Rapid Storage Technology Application
- CVE-2025-24314Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an infoIntel(R) CIP software
- CVE-2025-24307Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow aIntel(R) CIP software
- CVE-2025-22391Improper access control for some SigTest before version 6.1.10 within Ring 3: User Applications may allow an escalation of privilege.SigTest
- CVE-2025-20622Sensitive information uncleared in resource before release for reuse for some Intel(R) NPU Drivers for Windows before version 32.0.100.4023 Intel(R) NPU Drivers for Windows
- CVE-2025-20614External control of file name or path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications mayIntel(R) CIP software
- CVE-2025-20065Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allowDisplay Virtualization for Windows OS software
- CVE-2025-20056Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow an escalation of prIntel VTune Profiler
- CVE-2025-20050Uncontrolled search path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escIntel(R) CIP software
- CVE-2025-33185NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure.AuthN component of NVIDIA AIStore
- CVE-2025-33202NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extrNVIDIA Triton Inference Server
- CVE-2025-12944Improper input validation in NETGEAR DGN2200v4NETGEAR DGN2200v4
- CVE-2025-12943Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300NETGEAR RAX30 · NETGEAR RAXE300
- CVE-2025-12942Improper input validation in NETGEAR R6260 and R6850NETGEAR R6260 · NETGEAR R6850
- CVE-2025-12940Credentials recorded in logs in NETGEAR WAX610 and WAX610YNETGEAR WAX610 · NETGEAR WAX610Y
- CVE-2025-10905Collision in minifilter driver of Avast Free Antivirus results in disabling of real-time protectionAvast Free Antivirus
- CVE-2025-13015Spoofing issue in FirefoxMozilla Firefox
- CVE-2025-13013Mitigation bypass in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-64773In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limitJetBrains YouTrack
- CVE-2025-12101Cross-Site Scripting (XSS)NetScaler ADC · NetScaler Gateway
- CVE-2025-9227Stored XSSZohocorp ManageEngine OpManager
- CVE-2025-41106Multiple vulnerabilities in Fairsketch's RISE CRM FrameworkFairsketch RISE CRM Framework
- CVE-2025-41105Multiple vulnerabilities in Fairsketch's RISE CRM FrameworkFairsketch RISE CRM Framework
- CVE-2025-41104Multiple vulnerabilities in Fairsketch's RISE CRM FrameworkFairsketch RISE CRM Framework
- CVE-2025-41103Multiple vulnerabilities in Fairsketch's RISE CRM FrameworkFairsketch RISE CRM Framework
- CVE-2025-41102Multiple vulnerabilities in Fairsketch's RISE CRM FrameworkFairsketch RISE CRM Framework
- CVE-2025-41101Multiple vulnerabilities in Fairsketch's RISE CRM FrameworkFairsketch RISE CRM Framework
- CVE-2025-11960Reflected XSS in Aryom's KVKNETAryom Software High Technology Systems KVKNET
- CVE-2025-12788Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Missing Payment Verification to Unauthenticated Payment Bypassthemefic Hydra Booking — Appointment Scheduling & Booking C…
- CVE-2025-12953Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tamperingtechlabpro1 Classified Listing – AI-Powered Classified ads…
- CVE-2025-12787Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generationthemefic Hydra Booking — Appointment Scheduling & Booking C…
- CVE-2025-5317Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for MacBitdefender Endpoint Security Tools for Mac
- CVE-2025-9055The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privilegesAxis Communications AB AXIS OS
- CVE-2025-8998It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability.Axis Communications AB AXIS OS
- CVE-2025-9524The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability.Axis Communications AB AXIS OS
- CVE-2025-8108An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation.Axis Communications AB AXIS OS
- CVE-2025-6779An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation.Axis Communications AB AXIS OS
- CVE-2025-6571A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it.Axis Communications AB AXIS OS
- CVE-2025-5452A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potAxis Communications AB AXIS OS
- CVE-2025-6298ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation.Axis Communications AB AXIS OS
- CVE-2025-5718The ACAP Application framework could allow privilege escalation through a symlink attack.Axis Communications AB AXIS OS
- CVE-2025-5454An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escaAxis Communications AB AXIS OS
- CVE-2025-4645An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution.Axis Communications AB AXIS OS
- CVE-2025-11237Make Email Customizer for WooCommerce <= 1.0.6 - Subscriber+ Arbitrary Options UpdateMake Email Customizer for WooCommerce
- CVE-2025-12667GitHub Gist Shortcode Plugin <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingpaul1999 GitHub Gist Shortcode Plugin
- CVE-2025-12651Live Photos on WordPress <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeeggemplo Live Photos on WordPress
- CVE-2025-12019Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scriptingmervinpraison Featured Image
- CVE-2025-11999Add Multiple Marker <= 1.2 - Missing Authorization to Unauthenticated Settings Updatekrishaweb Multi Location Marker
- CVE-2025-12662Coon Google Maps <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeandrico Coon Google Maps
- CVE-2025-11129Include fussball.de Widgets <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'api' and 'type'mheob Include Fussball.de Widgets
- CVE-2025-11986Crypto Tool <= 2.22 - Unauthenticated Information Exposure via Global Authentication Stateodude Crypto Tool
- CVE-2025-12126The Total Book Project <= 1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Book Manipulationryanmoyer The Total Book Project
- CVE-2025-11882Simple Donate <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingethoseo Simple Donate
- CVE-2025-12663Jeba Cute forkit <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodejahed Jeba Cute forkit
- CVE-2025-11860Twitter Feed <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingcaselock Twitter Feed
- CVE-2025-11821Woocommerce – Products By Custom Tax <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeelvismdev Woocommerce – Products By Custom Tax
- CVE-2025-12668WP Count Down Timer <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingsitedin WP Count Down Timer
- CVE-2025-12658Preload Current Images <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodemmdeveloper Preload Current Images
- CVE-2025-11859Paypal Donation Shortcode <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingcoenjacobs Paypal Donation Shortcode
- CVE-2025-11532Wisly <= 1.0.0 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulationsoftivus Wisly
- CVE-2025-12631Squirrels Auto Inventory <= 1.0.3 - Authenticated (Admin+) Stored Cross-Site Scriptingspokanetony Squirrels Auto Inventory
- CVE-2025-12665Ninja Countdown <= 1.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Countdown Deletionlovelightplugins Ninja Countdown | Fastest Countdown Builder
- CVE-2025-12671WP-Iconics <= 0.0.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingmrx3k1 WP-Iconics
- CVE-2025-11869Precise Columns <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingsimonpedge Precise Columns
- CVE-2025-12526Private Google Calendars <= 20250811 - Missing Authorization to Authenticated (Subscriber+) Settings Resetmichielve Private Google Calendars
- CVE-2025-11828Magazine Companion <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingpubudu-malalasekara Post Blocks & Tools
- CVE-2025-12753Chart Expert <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodesagortouch Chart Expert
- CVE-2025-12711Share to Google Classroom <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via share_to_google Shortcodepritenhshah Share to Google Classroom
- CVE-2025-11856Eventbee Ticketing Widget <= 1.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingEventbee Ticketing Widget
- CVE-2025-12590YSlider <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scriptingandreaferracani YSlider
- CVE-2025-12021WP-OAuth <= 0.4.1 - Reflected Cross-Site Scriptinghectavex WP-OAuth
- CVE-2025-12588USB Qr Code Scanner For Woocommerce <= 1.0.0 - Cross-Site Request Forgery to Settings Updatebehzadrohizadeh USB Qr Code Scanner For Woocommerce
- CVE-2025-12020Double the Donation <= 3.0.0 - Authenticated (Admin+) Stored Cross-Site Scriptingkanwei_doublethedonation Double the Donation – A workplace…
- CVE-2025-12132WP Custom Admin Login Page Logo <= 1.4.8.4 - Cross-Site Request Forgery to Settings Updatelarsactionhero WP Custom Admin Login Page Logo
- CVE-2025-12589WP-Walla <= 0.5.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scriptingbaronen WP-Walla
- CVE-2025-12672Flickr Show <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingnuvuscripts Flickr Show
- CVE-2025-11997Document Pro Elementor – Documentation & Knowledge Base <= 1.0.9 - Unauthenticated Information Exposurengothoai Document Pro Elementor – Documentation & Knowledge…
- CVE-2025-12010Authors List <= 2.0.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Limited Method Call in Plugin's Shortcodewpkube Authors List
- CVE-2025-12754Geopost <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcoderampantlogic Geopost
- CVE-2025-11805Skip to Timestamp <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodedoytch Skip to Timestamp
- CVE-2025-12644Nonaki – Drag and Drop Email Template builder and Newsletter plugin for WordPress <= 1.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fieldswpcox Nonaki – Drag and Drop Email Template builder and New…
- CVE-2025-11886CTL Arcade Lite <= 1.0 - Cross-Site Request Forgery to Plugin Activation and Deactivationcodethislab CTL Arcade Lite
- CVE-2025-12632RandomQuotr <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scriptingloveless RandomQuotr
- CVE-2025-12538Fleet Manager <= 2.5.1 - Authenticated (Editor+) Stored Cross-Site Scriptingiworks Fleet Manager
- CVE-2025-12880Progress Bar Blocks for Gutenberg <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVGjobayer534 Progress Bar Blocks for Gutenberg
- CVE-2025-11996Find Unused Images <= 1.0.7 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletiontoastwebsites Find Unused Images
- CVE-2025-11863My Geo Posts Free <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingmindstien My Geo Posts Free
- CVE-2025-11988Crypto Tool <= 2.22 - Missing Authentication to Unauthenticated Limited File Deletionodude Crypto Tool
- CVE-2025-11829Five9 Live Chat <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingFive9 Live Chat
- CVE-2025-12652Ungapped Widgets <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeoscaruribe Ungapped Widgets
- CVE-2025-11873WP BBCode <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingeflyjason WP BBCode
- CVE-2025-11874Slippy Slider – Responsive Touch Navigation Slider <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingmitegvg Slippy Slider – Responsive Touch Navigation Slider
- CVE-2025-11891Shelf Planner <= 2.8.1 - Unauthenticated Information Exposure via Log Filesshelfplanner Shelf Planner Inventory Management for WooComm…
- CVE-2025-11822WP Bootstrap Tabs <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodevirtus-designs WP Bootstrap Tabs
- CVE-2025-11894Shelf Planner <= 2.8.1 - Missing Authorization to Unauthenticated Settings Updateshelfplanner Shelf Planner Inventory Management for WooComm…
- CVE-2025-31719In TEE EcDSA algorithm, there is a possible memory consistency issue.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2025-42924Open Redirect vulnerabilities in SAP S/4HANA landscape (SAP E-Recruiting BSP)SAP_SE SAP S/4HANA landscape
- CVE-2025-42919Information Disclosure vulnerability in SAP NetWeaver Application Server JavaSAP_SE SAP NetWeaver Application Server Java
- CVE-2025-42899Missing Authorization check in SAP S4CORE (Manage Journal Entries)SAP_SE SAP S4CORE
- CVE-2025-42897Information Disclosure vulnerability in SAP Business One (SLD)SAP_SE SAP Business One
- CVE-2025-42895Code Injection vulnerability in SAP HANA JDBC ClientSAP_SE SAP HANA JDBC Client
- CVE-2025-42894Path Traversal vulnerability in SAP Business ConnectorSAP_SE SAP Business Connector
- CVE-2025-42893Open Redirect vulnerability in SAP Business ConnectorSAP_SE SAP Business Connector
- CVE-2025-42892OS Command Injection vulnerability in SAP Business ConnectorSAP_SE SAP Business Connector
- CVE-2025-42889SQL Injection vulnerability in SAP Starter Solution (PL SAFT)SAP_SE SAP Starter Solution
- CVE-2025-42888Information Disclosure vulnerability in SAP GUI for WindowsSAP_SE SAP GUI for Windows
- CVE-2025-42886Reflected Cross-Site Scripting (XSS) vulnerability in SAP Business ConnectorSAP_SE SAP Business Connector
- CVE-2025-42885Missing authentication in SAP HANA 2.0 (hdbrss)SAP_SE SAP HANA
- CVE-2025-42884JNDI Injection vulnerability in SAP NetWeaver Enterprise PortalSAP_SE SAP NetWeaver Enterprise Portal
- CVE-2025-42883Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench)SAP_SE SAP NetWeaver Application Server for ABAP
- CVE-2025-42882Missing Authorization check in SAP NetWeaver Application Server for ABAPSAP_SE SAP NetWeaver Application Server for ABAP