Results
48,153· Page 220/964An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creat
Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to ele
Use after free in Xbox allows an authorized attacker to elevate privileges locally.
Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security (VBS) Enclave allows an aut
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security fe
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally.
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose i
A vulnerability in the parsing of ethernet frames in AOS-8 Instant and AOS 10 could allow an unauthenticated remote atta
A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root
A vulnerability in the web-based management interface of network access point configuration services could allow an auth
Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobilit
Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobilit
An arbitrary file download vulnerability exists in the web-based management interface of AOS-10 GW and AOS-8 Controller/
Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor ope
Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor ope
Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor ope
A vulnerability in an AOS firmware binary allows an authenticated malicious actor to permanently delete necessary boot i
An authenticated command injection vulnerability exists in the command line interface binary of AOS-10 GW and AOS-8 Cont
Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobili
Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobili
Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobili
An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor oper
An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor oper
An arbitrary file write vulnerability exists in the web-based management interface of both the AOS-10 GW and AOS-8 Contr
A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows o
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows o
A remote, unauthenticated privilege escalation in ibi WebFOCUS allows an attacker to gain administrative access to the a
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon In
mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions thr
Home Assistant is open source home automation software that puts local control and privacy first. In versions 2025.1.0 t
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0
An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API a
An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 t
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2,
An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through 7.4.3,
An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, versi
An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.
A concurrent execution using shared resource with improper synchronization ('Race Condition') vulnerability [CWE-362] in
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon In
An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 t
An improper authentication vulnerability [CWE-287] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.
Test your stack for 2025issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.