CVE Records

NAKIVO Backup and Replication Absolute Path Traversal Vulnerability

Remote code execution as guest via SolrSearchMacros request in xwiki

Microsoft Power Pages Elevation of Privilege Vulnerability

PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface

PAN-OS: Authentication Bypass in the Management Web Interface

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Remote code execution in Wazuh server

Apple iOS and iPadOS Incorrect Authorization Vulnerability

Trimble Cityworks Deserialization Vulnerability

Zyxel DSL CPE OS Command Injection Vulnerability

Zyxel DSL CPE OS Command Injection Vulnerability

Advantive VeraCore SQL Injection Vulnerability

Advantive VeraCore Unrestricted File Upload Vulnerability

Digiever DS-2105 Pro Missing Authorization Vulnerability

Apple Multiple Products Use-After-Free Vulnerability

7-Zip Mark-of-the-Web Bypass Vulnerability

SonicWall SMA1000 Appliances Deserialization Vulnerability

Potential RCE with a compromised security key in craft/cms

SimpleHelp Path Traversal Vulnerability

SimpleHelp Path Traversal Vulnerability

SimpleHelp Missing Authorization Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Aviatrix Controllers OS Command Injection Vulnerability

DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection

ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet

ALSA: usb-audio: Fix out of bounds reads when finding clock sources

RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms

Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)

Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

Cleo Multiple Products Unauthenticated File Upload Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Mitel MiCollab Path Traversal Vulnerability

media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

Zyxel Multiple Firewalls Path Traversal Vulnerability

Partner.Microsoft.Com Elevation of Privilege Vulnerability

ProjectSend Unauthenticated Configuration Modification

Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

Apple Multiple Products Code Execution Vulnerability

HID: core: zero-initialize the report buffer

Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

Stored XSS vulnerability in MDaemon Email Server

GeoVision EOL devices - OS Command Injection

Android Framework Privilege Escalation Vulnerability

Limited remote code execution with privilege of a NetworkService Account access

Windows Task Scheduler Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Privilege escalation to NetworkService Account access

CyberPanel Incorrect Default Permissions Vulnerability

CyberPanel Incorrect Default Permissions Vulnerability

Cleo Multiple Products Unrestricted File Upload Vulnerability

Cisco ASA and FTD Denial-of-Service Vulnerability

Fortinet FortiManager Missing Authentication Vulnerability

Mitel MiCollab Path Traversal Vulnerability

ScienceLogic SL1 unspecified vulnerability

Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure

Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure

Mozilla Firefox Use-After-Free Vulnerability

Microsoft Management Console Remote Code Execution Vulnerability

Microsoft Configuration Manager Remote Code Execution Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

Use After Free in DSP Service

Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration

PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

Privilege escalation vulnerability

Heap-overflow vulnerability

Ivanti Cloud Services Appliance OS Command Injection Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

Microsoft Publisher Security Feature Bypass Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Veeam Backup and Replication Deserialization Vulnerability

Cisco Smart Licensing Utility Static Credential Vulnerability

Apache OFBiz: Confused controller-view authorization logic (forced browsing)

WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability

SonicWall SonicOS Improper Access Control Vulnerability

Versa Director Dangerous File Type Upload Vulnerability

SolarWinds Web Help Desk Hardcoded Credential Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Inappropriate Implementation Vulnerability

Arbitrary Code Execution in WPS Office

SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

Microsoft Project Remote Code Execution Vulnerability