2025

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized atta

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.

Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information ov

Exposure of sensitive information to an unauthorized actor in Windows Power Dependency Coordinator allows an authorized

Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an authoriz

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to dis

Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feat

Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to den

Adobe Experience Manager Screens versions FP11.3 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnera

After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to d

Animate versions 24.0.7, 23.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disc

Animate versions 24.0.7, 23.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disc

After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to d

After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to d

After Effects versions 25.1, 24.6.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could resu

After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to d

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose informa

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose informa

Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose informa

Exposed dangerous method or function in Windows Local Session Manager (LSM) allows an authorized attacker to deny servic

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hell

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a ph

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.

Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose inform

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose informa

Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder w

Missing Authorization vulnerability in Shahjada Live Forms liveforms.This issue affects Live Forms: from n/a through <=

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broads

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in maennchen1.de m1.DownloadLis

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via ad

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via ad

Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conducto

A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attac

An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested

A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the

An issue has been identified where a specially crafted request sent to an Observability API could cause the kibana serve

A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an

A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject

Reflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthentica

An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022

Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a r

Shopware 6 is an open commerce platform based on Symfony Framework and Vue. Through the store-api it is possible as a at

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in

An Improper Output Neutralization for Logs vulnerability [CWE-117] in FortiAnalyzer version 7.6.1 and below, version 7.4

An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, versi

The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized lo