Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

48,153· Page 853/964
7.5
CVE-2024-31155

Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentiall

5.0
CVE-2024-31153

Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authentica

5.3
CVE-2024-31068

Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potent

6.0
CVE-2024-30211

Improper access control in some Intel(R) ME driver pack installer engines before version 2422.6.2.0 may allow an authent

6.7
CVE-2024-29223

Uncontrolled search path for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticat

7.5
CVE-2024-29214

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged use

7.5
CVE-2024-28127

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enabl

5.3
CVE-2024-28047

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enabl

2.3
CVE-2024-26021

Improper initialization in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged

2.3
CVE-2024-25571

Improper input validation in some Intel(R) SPS firmware before SPS_E5_06.01.04.059.0 may allow a privileged user to pote

6.7
CVE-2024-24852

Uncontrolled search path in some Intel(R) Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow a

7.5
CVE-2024-24582

Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to

5.3
CVE-2024-21859

Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentiall

6.7
CVE-2024-21830

Uncontrolled search path in some Intel(R) VPL software before version 2023.4.0 may allow an authenticated user to potent

7.5
CVE-2023-49618

Improper buffer restrictions in some Intel(R) System Security Report and System Resources Defense firmware may allow a p

7.5
CVE-2023-49615

Improper input validation in some Intel(R) System Security Report and System Resources Defense firmware may allow a priv

7.5
CVE-2023-49603

Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user

5.3
CVE-2023-48366

Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user

7.9
CVE-2023-48267

Improper buffer restrictions in some Intel(R) System Security Report and System Resources Defense firmware may allow a p

8.2
CVE-2023-43758

Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enabl

7.5
CVE-2023-34440

Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enabl

6.1
CVE-2023-32277

Untrusted Pointer Dereference in I/O subsystem for some Intel(R) QAT software before version 2.0.5 may allow authenticat

8.2
CVE-2023-31276

Heap-based buffer overflow in BMC Firmware for the Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R

7.3
CVE-2023-29164

Improper access control in BMC Firmware for the Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) S

9.1
CVE-2022-31631

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote u

6.3
CVE-2025-1227

A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selec

5.3
CVE-2025-1226

A vulnerability was found in ywoa up to 2024.07.03. It has been declared as critical. This vulnerability affects unknown

N/A
CVE-2025-0113

A problem with the network isolation mechanism of the Palo Alto Networks Cortex XDR Broker VM allows attackers unauthori

6.5
CVE-2025-0111KEV

An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker wit

N/A
CVE-2025-0110

A command injection vulnerability in the Palo Alto Networks PAN-OS OpenConfig plugin enables an authenticated administra

N/A
CVE-2025-0109

An unauthenticated file deletion vulnerability in the Palo Alto Networks PAN-OS management web interface enables an unau

9.1
CVE-2025-0108KEV

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network acce

7.8
CVE-2024-12673

An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo Vantage on SMB notebook devic

6.3
CVE-2025-1225

A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the fu

6.3
CVE-2025-1224

A vulnerability classified as critical was found in ywoa up to 2024.07.03. This vulnerability affects the function listN

9.8
CVE-2025-25343

Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function.

7.5
CVE-2025-25283

parse-duraton is software that allows users to convert a human readable duration to milliseconds. Versions prior to 2.1.

8.2
CVE-2025-25205

Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a

4.0
CVE-2025-25201

Nitrokey 3 Firmware is the the firmware of Nitrokey 3 USB keys. For release 1.8.0, and test releases with PIV enabled pr

6.3
CVE-2025-1216

A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03. This issue affects the funct

2.8
CVE-2025-1215

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of th

8.1
CVE-2025-1146

CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the

7.1
CVE-2025-0937

Nomad Community and Nomad Enterprise ("Nomad") event stream configured with a wildcard namespace can bypass the ACL Poli

5.4
CVE-2025-25741

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the IPv6_PppoePass

7.5
CVE-2025-25200

Koa is expressive middleware for Node.js using ES2017 async functions. Prior to versions 0.21.2, 1.7.1, 2.15.4, and 3.0.

7.5
CVE-2025-25199

go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation (CNG). Prior to commit f49c8e1

7.1
CVE-2025-25198

mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability

6.3
CVE-2025-1214

A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an unknown part of the file

3.5
CVE-2025-1213

A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some un

5.3
CVE-2024-6097

In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local t

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.