2025

Windows Telephony Service Remote Code Execution Vulnerability

Microsoft Surface Security Feature Bypass Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows Core Messaging Elevation of Privileges Vulnerability

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Illustrator versions 29.1, 28.7.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could res

Substance3D - Designer versions 14.0.2 and earlier are affected by an out-of-bounds write vulnerability that could resul

Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability th

Illustrator versions 29.1, 28.7.3 and earlier are affected by a Use After Free vulnerability that could result in arbitr

InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that co

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.

An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attack

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnera

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could r

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that c

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could r

An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.4.0

An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in

A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS

An HTML Injection vulnerability in Avaya Spaces may have allowed disclosure of sensitive information or modification of

A Cross-Site Scripting (XSS) vulnerability in Avaya Spaces may have allowed unauthorized code execution and potential di

Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Due to a lack of CSRF coun

Misskey is an open source, federated social media platform. Starting in version 12.109.0 and prior to version 2025.2.0-a

Misskey is an open source, federated social media platform. Starting in version 12.109.0 and prior to version 2025.2.0-a

eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management

Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to d

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker

In JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose sensitive resources

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 121

A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1

A vulnerability has been identified in SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions). The

A vulnerability has been identified in Teamcenter V14.1 (All versions), Teamcenter V14.2 (All versions), Teamcenter V14.

A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All v

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP300) (All ve

A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Up

An authenticated attacker is able to use the Plugin Manager of the web interface of the Wattsense Bridge devices to uplo

In affected versions of Octopus Server the preview import feature could be leveraged to identify the existence of a targ

The Zox News - Professional WordPress News & Magazine Theme plugin for WordPress is vulnerable to unauthorized data modi

Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in

SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a public

The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an aut

The User Account and Authentication service (UAA) for SAP HANA extended application services, advanced model (SAP HANA X

A vulnerability, which was classified as critical, was found in Lumsoft ERP 8. Affected is the function DoUpload/DoWebUp

Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allo

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by t