2025

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish H

Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malic

Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remot

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGF

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trig

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds w

NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can p

An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a net

An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker wit

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network acce

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4

Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the le

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL

Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects

A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to ex

Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, i

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web pro

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Manageme

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file s

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enabl

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to creat

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Up

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 thro

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authe

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7

An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutraliza