CVE Records

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Insecure Deserialization Vulnerability

Command Injection Vulnerability

Path traversal vulnerability in WinRAR

Adobe Experience Manager | Incorrect Authorization (CWE-863)

Trend Micro Apex One OS Command Injection Vulnerability

Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

Apple Multiple Products Buffer Overflow Vulnerability

posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

Microsoft SharePoint Server Remote Code Execution Vulnerability

Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

CrushFTP Unprotected Alternate Channel Vulnerability

Livewire vulnerable to remote command execution during property update hydration

Fortinet FortiWeb SQL Injection Vulnerability

Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Wing FTP Server Information Disclosure Vulnerability

Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

Git allows arbitrary code execution through broken config quoting

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

Memory overflow vulnerability leading to unintended control flow and Denial of Service

Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability

NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

Apple Multiple Products Unspecified Vulnerability

Windows SMB Client Elevation of Privilege Vulnerability

Internet Shortcut Files Remote Code Execution Vulnerability

IGEL OS Use of a Key Past its Expiration Date Vulnerability

Incorrect Authorization in Graphics

Use After Free in Graphics

Incorrect Authorization in Graphics Windows

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

RoundCube Webmail Deserialization of Untrusted Data Vulnerability

TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

Versa Concerto Actuator Authentication Bypass Information Leak

Arbitrary Command Injection in Smartbedded MeteoBridge

Scripting Engine Memory Corruption Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Remote Code Execution

Authentication Bypass

Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

Samsung MagicINFO 9 Server Path Traversal Vulnerability

Insecure Deserialization in SAP NetWeaver (Visual Composer development server)

TeleMessage TM SGNL Hidden Functionality Vulnerability

Craft CMS stores user-provided content in session files

SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection

SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection

Srimax Output Messenger Directory Traversal Vulnerability

ScreenConnect Exposure to ASP.NET ViewState Code Injection

Commvault Web Server unspecified vulnerability

Craft CMS Allows Remote Code Execution

Missing Authorization check in SAP NetWeaver (Visual Composer development server)

Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6

Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal

Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

Apple Multiple Products Memory Corruption Vulnerability

Apple Multiple Products Arbitrary Read and Write Vulnerability

Yiiframework Yii Improper Protection of Alternate Path Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CrushFTP Authentication Bypass Vulnerability

Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability

Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

Google Chromium Mojo Sandbox Escape Vulnerability

D-Link DIR-823X Command Injection Vulnerability

Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE

Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass

Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass

Multiple Reviewdog actions were compromised during a specific time period

tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability

Junos OS: An local attacker with shell access can execute arbitrary code

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Microsoft Management Console Security Feature Bypass Vulnerability

Windows NTFS Remote Code Execution Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Redfish Authentication Bypass

FreeType Out-of-Bounds Write Vulnerability

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

Edimax IC-7100 IP Camera OS Command Injection

VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

VMware ESXi Arbitrary Write Vulnerability

VMware ESXi and Workstation TOCTOU Race Condition Vulnerability