2025

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security

Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Managemen

Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally.

Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to exec

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elev

Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a se

Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potential

A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalatio

Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially r

Incorrect default permissions in the AMD Optimizing CPU Libraries (AOCL) installation directory could allow an attacker

Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms all

Actualizer is a single shell script solution to allow developers and embedded engineers to create Debian operating syste

Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 aff

upset-gal-web v7.1.0 /api/music/v1/cover.ts contains an arbitrary file read vulnerabilit

NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and

owl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus/save_order.

Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to e

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition

Privilege escalation in jar_signature agent plugin in Checkmk versions <2.4.0b7 (beta), <2.3.0p32, <2.2.0p42, and 2.1.0p

The content of a SVG file, received as input in Centreon web, was not properly checked. Allows Reflected XSS. A user w

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon we

Incorrect Authorization vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Ed

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Ed

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All ve

A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.14), Teamcenter Visualizat

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions < V2.135), IEC 1Ph

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC N

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC N

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC N

A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2

The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'rep

A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is a

An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that ac

Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by

The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on t

The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on t

The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegem

VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this

The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags qu

conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR

Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization c