SEARCH
CVEs, Fix available
151–175 of 114,354 matches, best first.
- CVE-2025-4632Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attack
- CVE-2025-12480Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even
- CVE-2025-43529A use-after-free issue was addressed with improved memory management.
- CVE-2025-9242WatchGuard Firebox iked Out of Bounds Write Vulnerability
- CVE-2026-105133Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication
- CVE-2024-54085Redfish Authentication Bypass
- CVE-2025-31200A memory corruption issue was addressed with improved bounds checking.
- CVE-2025-31201This issue was addressed by removing the vulnerable code.
- CVE-2026-8037OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- CVE-2022-4262Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted
- CVE-2025-54948A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious
- CVE-2025-2747Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass
- CVE-2025-2746Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass
- CVE-2025-7775Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service
- CVE-2025-24085A use after free issue was addressed with improved memory management.
- CVE-2025-48703CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in t
- CVE-2026-45659Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2024-50603An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996.
- CVE-2022-3038Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption v
- CVE-2026-102490Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package
- CVE-2023-6549Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial
- CVE-2025-6543Memory overflow vulnerability leading to unintended control flow and Denial of Service
- CVE-2025-54309CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows
- CVE-2026-42016Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
- CVE-2025-40536SolarWinds Web Help Desk Security Control Bypass Vulnerability