2025

The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent insta

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a sp

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and O

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Seq

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4

Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regres

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and

CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle

Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server com

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server pas

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish H

Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malic

Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remot

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds w

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can p

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network acce

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0

Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, i

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Manageme

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to creat

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 thro

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authe

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7

An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutraliza