Security advisories — page 1

• CVE-2026-20316mediumCVE-2026-20316 updated by NVD
• CVE-2026-16812criticalCVE-2026-16812 updated by NVD
• CVE-2025-68686mediumCVE-2025-68686 updated by NVD
• CVE-2026-16232criticalCVE-2026-16232 updated by NVD
• CVE-2026-50522criticalCVE-2026-50522 updated by NVD
• CVE-2026-60137mediumCVE-2026-60137 updated by NVD
• CVE-2021-27137highCVE-2021-27137 updated by NVD
• CVE-2026-0770criticalCVE-2026-0770 updated by NVD
• CVE-2026-63030criticalCVE-2026-63030 updated by NVD
• CVE-2026-58644unknownMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability
• CVE-2026-25089criticalCVE-2026-25089 updated by NVD
• CVE-2026-39808unknownFortinet FortiSandbox OS Command Injection Vulnerability
• CVE-2023-4346unknownKNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vu
• CVE-2026-46817criticalCVE-2026-46817 updated by NVD
• CVE-2026-56164unknownMicrosoft SharePoint Server Missing Authentication for Critical Function Vulnerability
• CVE-2026-56155unknownMicrosoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
• CVE-2026-15410unknownSonicWall SMA1000 Appliances Code Injection Vulnerability
• CVE-2026-15409unknownSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
• CVE-2008-4128unknownCisco IOS Cross-Site Request Forgery Vulnerability
• CVE-2026-56291criticalCVE-2026-56291 updated by NVD
• CVE-2026-48939unknowniCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
• CVE-2026-48908unknownJoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
• CVE-2026-48282unknownAdobe ColdFusion Path Traversal Vulnerability
• CVE-2026-55255unknownLangflow Authorization Bypass Through User-Controlled Key Vulnerability
• CVE-2026-56290criticalCVE-2026-56290 updated by NVD
• CVE-2026-45659highCVE-2026-45659 updated by NVD
• CVE-2026-48558unknownSimpleHelp Authentication Bypass Vulnerability
• CVE-2026-12569unknownPTC Windchill and FlexPLM Improper Input Validation Vulnerability
• CVE-2026-20230highCVE-2026-20230 updated by NVD
• CVE-2026-34908criticalCVE-2026-34908 updated by NVD
• CVE-2026-34910criticalCVE-2026-34910 updated by NVD
• CVE-2026-34909criticalCVE-2026-34909 updated by NVD
• CVE-2025-67038unknownLantronix EDS5000 Code Injection Vulnerability
• CVE-2026-20253criticalCVE-2026-20253 updated by NVD
• CVE-2026-48907criticalCVE-2026-48907 updated by NVD
• CVE-2026-54420highCVE-2026-54420 updated by NVD
• CVE-2026-20262mediumCVE-2026-20262 updated by NVD
• CVE-2026-35273criticalCVE-2026-35273 updated by NVD
• CVE-2026-10520criticalCVE-2026-10520 updated by NVD
• CVE-2026-20245highCVE-2026-20245 updated by NVD
• CVE-2026-11645highCVE-2026-11645 updated by NVD
• CVE-2026-7473unknownArista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
• CVE-2026-42271unknownBerriAI LiteLLM Command Injection Vulnerability
• CVE-2026-50751criticalCVE-2026-50751 updated by NVD
• CVE-2026-28318highCVE-2026-28318 updated by NVD
• CVE-2026-45247criticalCVE-2026-45247 updated by NVD
• CVE-2025-48595highCVE-2025-48595 updated by NVD
• CVE-2022-0492unknownLinux Kernel Improper Authentication Vulnerability
• CVE-2024-21182unknownOracle WebLogic Server Unspecified Vulnerability
• CVE-2026-0257unknownPalo Alto Networks PAN-OS Authentication Bypass Vulnerability
• CVE-2026-45321unknownTanStack Unspecified Vulnerability
• CVE-2026-48027unknownNx Console Embedded Malicious Code Vulnerability
• CVE-2026-8398unknownDaemon Tools Lite Embedded Malicious Code Vulnerability
• CVE-2026-48172criticalCVE-2026-48172 updated by NVD
• CVE-2026-9082criticalCVE-2026-9082 updated by NVD
• CVE-2025-34291unknownLangflow Origin Validation Error Vulnerability
• CVE-2026-34926mediumCVE-2026-34926 updated by NVD
• CVE-2026-41091highCVE-2026-41091 updated by NVD
• CVE-2026-45498mediumCVE-2026-45498 updated by NVD
• CVE-2009-1537unknownMicrosoft DirectX NULL Byte Overwrite Vulnerability
• CVE-2008-4250unknownMicrosoft Windows Buffer Overflow Vulnerability
• CVE-2010-0249unknownMicrosoft Internet Explorer Use-After-Free Vulnerability
• CVE-2009-3459unknownAdobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
• CVE-2010-0806unknownMicrosoft Internet Explorer Use-After-Free Vulnerability
• CVE-2026-42897unknownMicrosoft Exchange Server Cross-Site Scripting Vulnerability
• CVE-2026-20182unknownCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
• CVE-2026-42208unknownBerriAI LiteLLM SQL Injection Vulnerability
• CVE-2026-6973unknownIvanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
• CVE-2026-0300unknownPalo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
• CVE-2026-31431highCVE-2026-31431 updated by NVD
• CVE-2026-41940unknownWebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerabilit
• CVE-2026-32202unknownMicrosoft Windows Protection Mechanism Failure Vulnerability
• CVE-2024-1708unknownConnectWise ScreenConnect Path Traversal Vulnerability
• CVE-2025-29635unknownD-Link DIR-823X Command Injection Vulnerability
• CVE-2024-57728unknownSimpleHelp Path Traversal Vulnerability
• CVE-2024-57726unknownSimpleHelp Missing Authorization Vulnerability
• CVE-2024-7399unknownSamsung MagicINFO 9 Server Path Traversal Vulnerability
• CVE-2026-39987unknownMarimo Remote Code Execution Vulnerability
• CVE-2026-33825highCVE-2026-33825 updated by NVD
• CVE-2026-20122unknownCisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
• CVE-2026-20128unknownCisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
• CVE-2026-20133unknownCisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
• CVE-2024-27199unknownJetBrains TeamCity Relative Path Traversal Vulnerability
• CVE-2025-32975unknownQuest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
• CVE-2025-48700unknownSynacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
• CVE-2023-27351unknownPaperCut NG/MF Improper Authentication Vulnerability
• CVE-2025-2749unknownKentico Xperience Path Traversal Vulnerability
• CVE-2026-34197unknownApache ActiveMQ Improper Input Validation Vulnerability
• CVE-2026-32201unknownMicrosoft SharePoint Server Improper Input Validation Vulnerability
• CVE-2009-0238unknownMicrosoft Office Remote Code Execution
• CVE-2023-36424unknownMicrosoft Windows Out-of-Bounds Read Vulnerability
• CVE-2023-21529unknownMicrosoft Exchange Server Deserialization of Untrusted Data Vulnerability
• CVE-2025-60710unknownMicrosoft Windows Link Following Vulnerability
• CVE-2020-9715unknownAdobe Acrobat Use-After-Free Vulnerability
• CVE-2012-1854unknownMicrosoft Visual Basic for Applications Insecure Library Loading Vulnerability
• CVE-2026-21643unknownFortinet FortiClient EMS SQL Injection Vulnerability
• CVE-2026-34621unknownAdobe Acrobat and Reader Prototype Pollution Vulnerability
• CVE-2026-1340unknownIvanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
• CVE-2026-35616criticalCVE-2026-35616 updated by NVD
• CVE-2026-3502unknownTrueConf Client Download of Code Without Integrity Check Vulnerability
• CVE-2026-5281highCVE-2026-5281 updated by NVD
• CVE-2026-3055unknownCitrix NetScaler Out-of-Bounds Read Vulnerability
• CVE-2025-53521unknownF5 BIG-IP Stack-Based Buffer Overflow Vulnerability
• CVE-2026-33634unknownAquasecurity Trivy Embedded Malicious Code Vulnerability
• CVE-2026-33017unknownLangflow Code Injection Vulnerability
• CVE-2025-31277unknownApple Multiple Products Buffer Overflow Vulnerability
• CVE-2025-54068unknownLaravel Livewire Code Injection Vulnerability
• CVE-2025-32432unknownCraft CMS Code Injection Vulnerability
• CVE-2025-43510unknownApple Multiple Products Improper Locking Vulnerability
• CVE-2025-43520unknownApple Multiple Products Classic Buffer Overflow Vulnerability
• CVE-2026-20131unknownCisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Managem
• CVE-2026-20963unknownMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability
• CVE-2025-66376unknownSynacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
• CVE-2025-47813unknownWing FTP Server Information Disclosure Vulnerability
• CVE-2026-3909unknownGoogle Skia Out-of-Bounds Write Vulnerability
• CVE-2026-3910unknownGoogle Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
• CVE-2025-68613unknownn8n Improper Control of Dynamically-Managed Code Resources Vulnerability
• CVE-2021-22054unknownOmnissa Workspace ONE Server-Side Request Forgery
• CVE-2025-26399unknownSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
• CVE-2026-1603unknownIvanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
• CVE-2021-22681unknownRockwell Multiple Products Insufficient Protected Credentials Vulnerability
• CVE-2023-41974unknownApple iOS and iPadOS Use-After-Free Vulnerability
• CVE-2023-43000unknownApple Multiple products Use-After-Free Vulnerability
• CVE-2021-30952unknownApple Multiple Products Integer Overflow or Wraparound Vulnerability
• CVE-2017-7921unknownHikvision Multiple Products Improper Authentication Vulnerability
• CVE-2026-21385unknownQualcomm Multiple Chipsets Memory Corruption Vulnerability
• CVE-2026-22719unknownBroadcom VMware Aria Operations Command Injection Vulnerability
• CVE-2026-20127unknownCisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
• CVE-2022-20775unknownCisco SD-WAN Path Traversal Vulnerability
• CVE-2026-25108unknownSoliton Systems K.K FileZen OS Command Injection Vulnerability
• CVE-2025-68461unknownRoundCube Webmail Cross-site Scripting Vulnerability
• CVE-2025-49113unknownRoundCube Webmail Deserialization of Untrusted Data Vulnerability
• CVE-2021-22175unknownGitLab Server-Side Request Forgery (SSRF) Vulnerability
• CVE-2026-22769unknownDell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
• CVE-2026-2441unknownGoogle Chromium CSS Use-After-Free Vulnerability
• CVE-2020-7796unknownSynacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
• CVE-2024-7694unknownTeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability
• CVE-2008-0015unknownMicrosoft Windows Video ActiveX Control Remote Code Execution Vulnerability
• CVE-2026-1731unknownBeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
• CVE-2026-20700unknownApple Multiple Buffer Overflow Vulnerability
• CVE-2025-40536unknownSolarWinds Web Help Desk Security Control Bypass Vulnerability
• CVE-2025-15556unknownNotepad++ Download of Code Without Integrity Check Vulnerability
• CVE-2024-43468unknownMicrosoft Configuration Manager SQL Injection Vulnerability
• CVE-2026-21510unknownMicrosoft Windows Shell Protection Mechanism Failure Vulnerability
• CVE-2026-21513unknownMicrosoft MSHTML Framework Protection Mechanism Failure Vulnerability
• CVE-2026-21514unknownMicrosoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
• CVE-2026-21519unknownMicrosoft Windows Type Confusion Vulnerability
• CVE-2026-21525unknownMicrosoft Windows NULL Pointer Dereference Vulnerability
• CVE-2026-21533unknownMicrosoft Windows Improper Privilege Management Vulnerability
• CVE-2026-24423unknownSmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
• CVE-2025-11953unknownReact Native Community CLI OS Command Injection Vulnerability
• CVE-2021-39935unknownGitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
• CVE-2025-64328unknownSangoma FreePBX OS Command Injection Vulnerability
• CVE-2019-19006unknownSangoma FreePBX Improper Authentication Vulnerability
• CVE-2025-40551unknownSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
• CVE-2026-1281unknownIvanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
• CVE-2026-24858unknownFortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2026-24061unknownGNU InetUtils Argument Injection Vulnerability
• CVE-2026-23760unknownSmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2026-21509unknownMicrosoft Office Security Feature Bypass Vulnerability
• CVE-2025-52691unknownSmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
• CVE-2018-14634unknownLinux Kernel Integer Overflow Vulnerability
• CVE-2024-37079unknownBroadcom VMware vCenter Server Out-of-bounds Write Vulnerability
• CVE-2025-31125unknownVite Vitejs Improper Access Control Vulnerability
• CVE-2025-34026unknownVersa Concerto Improper Authentication Vulnerability
• CVE-2025-54313unknownPrettier eslint-config-prettier Embedded Malicious Code Vulnerability
• CVE-2025-68645unknownSynacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
• CVE-2026-20045unknownCisco Unified Communications Products Code Injection Vulnerability
• CVE-2026-20805mediumCVE-2026-20805 updated by NVD
• CVE-2025-8110unknownGogs Path Traversal Vulnerability
• CVE-2025-37164unknownHewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
• CVE-2009-0556unknownMicrosoft Office PowerPoint Code Injection Vulnerability
• CVE-2025-14847unknownMongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability
• CVE-2023-52163unknownDigiever DS-2105 Pro Missing Authorization Vulnerability
• CVE-2025-14733unknownWatchGuard Firebox Out of Bounds Write Vulnerability
• CVE-2025-20393unknownCisco Multiple Products Improper Input Validation Vulnerability
• CVE-2025-59374unknownASUS Live Update Embedded Malicious Code Vulnerability
• CVE-2025-40602unknownSonicWall SMA1000 Missing Authorization Vulnerability
• CVE-2025-59718unknownFortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
• CVE-2025-43529unknownApple Multiple Products Use-After-Free WebKit Vulnerability
• CVE-2025-14611unknownGladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
• CVE-2025-14174unknownGoogle Chromium Out of Bounds Memory Access Vulnerability
• CVE-2018-4063unknownSierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
• CVE-2025-58360unknownOSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability
• CVE-2025-6218unknownRARLAB WinRAR Path Traversal Vulnerability
• CVE-2025-62221unknownMicrosoft Windows Use After Free Vulnerability
• CVE-2025-66644unknownArray Networks ArrayOS AG OS Command Injection Vulnerability
• CVE-2022-37055unknownD-Link Routers Buffer Overflow Vulnerability
• CVE-2025-55182unknownMeta React Server Components Remote Code Execution Vulnerability
• CVE-2021-26828unknownOpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
• CVE-2025-48633unknownAndroid Framework Information Disclosure Vulnerability
• CVE-2025-48572unknownAndroid Framework Privilege Escalation Vulnerability
• CVE-2021-26829unknownOpenPLC ScadaBR Cross-site Scripting Vulnerability
• CVE-2025-61757unknownOracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
• CVE-2025-13223unknownGoogle Chromium V8 Type Confusion Vulnerability
• CVE-2025-58034unknownFortinet FortiWeb OS Command Injection Vulnerability
• CVE-2025-64446unknownFortinet FortiWeb Path Traversal Vulnerability
• CVE-2025-9242unknownWatchGuard Firebox Out-of-Bounds Write Vulnerability
• CVE-2025-62215unknownMicrosoft Windows Race Condition Vulnerability
• CVE-2025-12480unknownGladinet Triofox Improper Access Control Vulnerability
• CVE-2025-21042unknownSamsung Mobile Devices Out-of-Bounds Write Vulnerability
• CVE-2025-48703unknownCWP Control Web Panel OS Command Injection Vulnerability
• CVE-2025-11371unknownGladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability
• CVE-2025-24893unknownXWiki Platform Eval Injection Vulnerability
• CVE-2025-41244unknownBroadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
• CVE-2025-6204unknownDassault Systèmes DELMIA Apriso Code Injection Vulnerability
• CVE-2025-6205unknownDassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
• CVE-2025-54236unknownAdobe Commerce and Magento Improper Input Validation Vulnerability
• CVE-2025-59287unknownMicrosoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
• CVE-2025-61932unknownMotex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
• CVE-2022-48503unknownApple Multiple Products Unspecified Vulnerability
• CVE-2025-33073unknownMicrosoft Windows SMB Client Improper Access Control Vulnerability
• CVE-2025-61884unknownOracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
• CVE-2025-2747unknownKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2025-2746unknownKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2025-54253unknownAdobe Experience Manager Forms Code Execution Vulnerability
• CVE-2025-47827unknownIGEL OS Use of a Key Past its Expiration Date Vulnerability
• CVE-2016-7836unknownSKYSEA Client View Improper Authentication Vulnerability
• CVE-2025-59230unknownMicrosoft Windows Improper Access Control Vulnerability
• CVE-2025-24990unknownMicrosoft Windows Untrusted Pointer Dereference Vulnerability
• CVE-2021-43798unknownGrafana Path Traversal Vulnerability
• CVE-2025-27915unknownSynacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
• CVE-2021-43226unknownMicrosoft Windows Privilege Escalation Vulnerability
• CVE-2021-22555unknownLinux Kernel Heap Out-of-Bounds Write Vulnerability
• CVE-2010-3765unknownMozilla Multiple Products Remote Code Execution Vulnerability
• CVE-2013-3918unknownMicrosoft Windows Out-of-Bounds Write Vulnerability
• CVE-2010-3962unknownMicrosoft Internet Explorer Uninitialized Memory Corruption Vulnerability
• CVE-2025-61882unknownOracle E-Business Suite Unspecified Vulnerability
• CVE-2011-3402unknownMicrosoft Windows Remote Code Execution Vulnerability
• CVE-2015-7755unknownJuniper ScreenOS Improper Authentication Vulnerability
• CVE-2025-21043unknownSamsung Mobile Devices Out-of-Bounds Write Vulnerability
• CVE-2017-1000353unknownJenkins Remote Code Execution Vulnerability
• CVE-2014-6278unknownGNU Bash OS Command Injection Vulnerability
• CVE-2025-4008unknownSmartbedded Meteobridge Command Injection Vulnerability
• CVE-2025-32463unknownSudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
• CVE-2025-59689unknownLibraesva Email Security Gateway Command Injection Vulnerability
• CVE-2025-10035unknownFortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability
• CVE-2025-20352unknownCisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
• CVE-2021-21311unknownAdminer Server-Side Request Forgery Vulnerability
• CVE-2025-20362unknownCisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Autho
• CVE-2025-20333unknownCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overfl
• CVE-2025-10585unknownGoogle Chromium V8 Type Confusion Vulnerability
• CVE-2025-5086unknownDassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability
• CVE-2025-38352highCVE-2025-38352 updated by NVD
• CVE-2025-53690unknownSitecore Multiple Products Deserialization of Untrusted Data Vulnerability
• CVE-2025-48543unknownAndroid Runtime Use-After-Free Vulnerability
• CVE-2023-50224unknownTP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
• CVE-2025-9377unknownTP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability
• CVE-2020-24363unknownTP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability
• CVE-2025-55177unknownMeta Platforms WhatsApp Incorrect Authorization Vulnerability
• CVE-2025-57819unknownSangoma FreePBX Authentication Bypass Vulnerability
• CVE-2025-7775unknownCitrix NetScaler Memory Overflow Vulnerability
• CVE-2024-8068unknownCitrix Session Recording Improper Privilege Management Vulnerability
• CVE-2024-8069unknownCitrix Session Recording Deserialization of Untrusted Data Vulnerability
• CVE-2025-48384unknownGit Link Following Vulnerability
• CVE-2025-43300unknownApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
• CVE-2025-54948unknownTrend Micro Apex One OS Command Injection Vulnerability
• CVE-2025-8876unknownN-able N-Central Command Injection Vulnerability
• CVE-2025-8875unknownN-able N-Central Insecure Deserialization Vulnerability
• CVE-2025-8088unknownRARLAB WinRAR Path Traversal Vulnerability
• CVE-2007-0671unknownMicrosoft Office Excel Remote Code Execution Vulnerability
• CVE-2013-3893unknownMicrosoft Internet Explorer Resource Management Errors Vulnerability
• CVE-2022-40799unknownD-Link DNR-322L Download of Code Without Integrity Check Vulnerability
• CVE-2020-25079unknownD-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
• CVE-2020-25078unknownD-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
• CVE-2025-20337unknownCisco Identity Services Engine Injection Vulnerability
• CVE-2023-2533unknownPaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability
• CVE-2025-20281unknownCisco Identity Services Engine Injection Vulnerability
• CVE-2025-49704unknownMicrosoft SharePoint Code Injection Vulnerability
• CVE-2025-6558unknownGoogle Chromium ANGLE and GPU Improper Input Validation Vulnerability
• CVE-2025-49706unknownMicrosoft SharePoint Improper Authentication Vulnerability
• CVE-2025-2775unknownSysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
• CVE-2025-2776unknownSysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
• CVE-2025-54309unknownCrushFTP Unprotected Alternate Channel Vulnerability
• CVE-2025-53770unknownMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability
• CVE-2025-25257unknownFortinet FortiWeb SQL Injection Vulnerability
• CVE-2025-47812unknownWing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability
• CVE-2025-5777unknownCitrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
• CVE-2016-10033unknownPHPMailer Command Injection Vulnerability
• CVE-2014-3931unknownMulti-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
• CVE-2019-9621unknownSynacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability
• CVE-2019-5418unknownRails Ruby on Rails Path Traversal Vulnerability
• CVE-2025-6554unknownGoogle Chromium V8 Type Confusion Vulnerability
• CVE-2025-48928unknownTeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability
• CVE-2025-48927unknownTeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
• CVE-2025-6543unknownCitrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
• CVE-2024-0769unknownD-Link DIR-859 Router Path Traversal Vulnerability
• CVE-2024-54085unknownAMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability
• CVE-2019-6693unknownFortinet FortiOS Use of Hard-Coded Credentials Vulnerability
• CVE-2023-0386unknownLinux Kernel Improper Ownership Management Vulnerability
• CVE-2025-43200unknownApple Multiple Products Unspecified Vulnerability
• CVE-2023-33538unknownTP-Link Multiple Routers Command Injection Vulnerability
• CVE-2025-24016unknownWazuh Server Deserialization of Untrusted Data Vulnerability
• CVE-2025-33053unknownMicrosoft Windows External Control of File Name or Path Vulnerability
• CVE-2024-42009unknownRoundCube Webmail Cross-Site Scripting Vulnerability
• CVE-2025-32433unknownErlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
• CVE-2025-5419unknownGoogle Chromium V8 Out-of-Bounds Read and Write Vulnerability
• CVE-2025-21480unknownQualcomm Multiple Chipsets Incorrect Authorization Vulnerability
• CVE-2025-27038unknownQualcomm Multiple Chipsets Use-After-Free Vulnerability
• CVE-2025-21479unknownQualcomm Multiple Chipsets Incorrect Authorization Vulnerability
• CVE-2025-3935unknownConnectWise ScreenConnect Improper Authentication Vulnerability
• CVE-2021-32030unknownASUS Routers Improper Authentication Vulnerability
• CVE-2023-39780unknownASUS RT-AX55 Routers OS Command Injection Vulnerability
• CVE-2024-56145unknownCraft CMS Code Injection Vulnerability
• CVE-2025-35939unknownCraft CMS External Control of Assumed-Immutable Web Parameter Vulnerability
• CVE-2025-4632unknownSamsung MagicINFO 9 Server Path Traversal Vulnerability
• CVE-2023-38950unknownZKTeco BioTime Path Traversal Vulnerability
• CVE-2025-4427unknownIvanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
• CVE-2024-27443unknownSynacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
• CVE-2025-27920unknownSrimax Output Messenger Directory Traversal Vulnerability
• CVE-2025-4428unknownIvanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
• CVE-2024-11182unknownMDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
• CVE-2024-12987unknownDrayTek Vigor Routers OS Command Injection Vulnerability
• CVE-2025-42999unknownSAP NetWeaver Deserialization Vulnerability
• CVE-2025-32756unknownFortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
• CVE-2025-32701unknownMicrosoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
• CVE-2025-30397unknownMicrosoft Windows Scripting Engine Type Confusion Vulnerability
• CVE-2025-30400unknownMicrosoft Windows DWM Core Library Use-After-Free Vulnerability
• CVE-2025-32706unknownMicrosoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
• CVE-2025-32709unknownMicrosoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
• CVE-2025-47729unknownTeleMessage TM SGNL Hidden Functionality Vulnerability
• CVE-2024-11120unknownGeoVision Devices OS Command Injection Vulnerability
• CVE-2024-6047unknownGeoVision Devices OS Command Injection Vulnerability
• CVE-2025-27363unknownFreeType Out-of-Bounds Write Vulnerability
• CVE-2025-3248unknownLangflow Missing Authentication Vulnerability
• CVE-2025-34028unknownCommvault Command Center Path Traversal Vulnerability
• CVE-2024-58136unknownYiiframework Yii Improper Protection of Alternate Path Vulnerability
• CVE-2023-44221unknownSonicWall SMA100 Appliances OS Command Injection Vulnerability
• CVE-2024-38475unknownApache HTTP Server Improper Escaping of Output Vulnerability
• CVE-2025-31324unknownSAP NetWeaver Unrestricted File Upload Vulnerability
• CVE-2025-1976unknownBroadcom Brocade Fabric OS Code Injection Vulnerability
• CVE-2025-42599unknownQualitia Active! Mail Stack-Based Buffer Overflow Vulnerability
• CVE-2025-3928unknownCommvault Web Server Unspecified Vulnerability
• CVE-2025-31201unknownApple Multiple Products Arbitrary Read and Write Vulnerability
• CVE-2025-24054unknownMicrosoft Windows NTLM Hash Disclosure Spoofing Vulnerability
• CVE-2025-31200unknownApple Multiple Products Memory Corruption Vulnerability
• CVE-2021-20035unknownSonicWall SMA100 Appliances OS Command Injection Vulnerability
• CVE-2024-53150unknownLinux Kernel Out-of-Bounds Read Vulnerability
• CVE-2024-53197unknownLinux Kernel Out-of-Bounds Access Vulnerability
• CVE-2025-29824unknownMicrosoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
• CVE-2025-30406unknownGladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
• CVE-2025-31161unknownCrushFTP Authentication Bypass Vulnerability
• CVE-2025-22457unknownIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
• CVE-2025-24813unknownApache Tomcat Path Equivalence Vulnerability
• CVE-2024-20439unknownCisco Smart Licensing Utility Static Credential Vulnerability
• CVE-2025-2783unknownGoogle Chromium Mojo Sandbox Escape Vulnerability
• CVE-2019-9874unknownSitecore CMS and Experience Platform (XP) Deserialization Vulnerability
• CVE-2019-9875unknownSitecore CMS and Experience Platform (XP) Deserialization Vulnerability
• CVE-2025-30154unknownreviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
• CVE-2025-1316unknownEdimax IC-7100 IP Camera OS Command Injection Vulnerability
• CVE-2017-12637unknownSAP NetWeaver Directory Traversal Vulnerability
• CVE-2024-48248unknownNAKIVO Backup and Replication Absolute Path Traversal Vulnerability
• CVE-2025-30066unknowntj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
• CVE-2025-24472unknownFortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
• CVE-2025-21590unknownJuniper Junos OS Improper Isolation or Compartmentalization Vulnerability
• CVE-2025-24201unknownApple Multiple Products WebKit Out-of-Bounds Write Vulnerability
• CVE-2025-24984unknownMicrosoft Windows NTFS Information Disclosure Vulnerability
• CVE-2025-24993unknownMicrosoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
• CVE-2025-24983unknownMicrosoft Windows Win32k Use-After-Free Vulnerability
• CVE-2025-24991unknownMicrosoft Windows NTFS Out-Of-Bounds Read Vulnerability
• CVE-2025-26633unknownMicrosoft Windows Management Console (MMC) Improper Neutralization Vulnerability
• CVE-2025-24985unknownMicrosoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
• CVE-2024-13161unknownIvanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
• CVE-2024-13159unknownIvanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
• CVE-2024-13160unknownIvanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
• CVE-2024-57968unknownAdvantive VeraCore Unrestricted File Upload Vulnerability
• CVE-2025-25181unknownAdvantive VeraCore SQL Injection Vulnerability
• CVE-2025-22226unknownVMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
• CVE-2025-22224unknownVMware ESXi and Workstation TOCTOU Race Condition Vulnerability
• CVE-2025-22225unknownVMware ESXi Arbitrary Write Vulnerability
• CVE-2024-50302unknownLinux Kernel Use of Uninitialized Resource Vulnerability
• CVE-2022-43939unknownHitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
• CVE-2024-4885unknownProgress WhatsUp Gold Path Traversal Vulnerability
• CVE-2023-20118unknownCisco Small Business RV Series Routers Command Injection Vulnerability
• CVE-2018-8639unknownMicrosoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
• CVE-2022-43769unknownHitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
• CVE-2023-34192unknownSynacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
• CVE-2024-49035unknownMicrosoft Partner Center Improper Access Control Vulnerability
• CVE-2024-20953unknownOracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
• CVE-2017-3066unknownAdobe ColdFusion Deserialization Vulnerability
• CVE-2025-24989unknownMicrosoft Power Pages Improper Access Control Vulnerability
• CVE-2025-23209unknownCraft CMS Code Injection Vulnerability
• CVE-2025-0111unknownPalo Alto Networks PAN-OS File Read Vulnerability
• CVE-2024-53704unknownSonicWall SonicOS SSLVPN Improper Authentication Vulnerability
• CVE-2025-0108unknownPalo Alto Networks PAN-OS Authentication Bypass Vulnerability
• CVE-2024-57727unknownSimpleHelp Path Traversal Vulnerability
• CVE-2024-41710unknownMitel SIP Phones Argument Injection Vulnerability
• CVE-2025-24200unknownApple iOS and iPadOS Incorrect Authorization Vulnerability
• CVE-2025-21418unknownMicrosoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
• CVE-2025-21391unknownMicrosoft Windows Storage Link Following Vulnerability
• CVE-2024-40890unknownZyxel DSL CPE OS Command Injection Vulnerability
• CVE-2024-40891unknownZyxel DSL CPE OS Command Injection Vulnerability
• CVE-2025-0994unknownTrimble Cityworks Deserialization Vulnerability
• CVE-2020-29574unknownCyberoamOS (CROS) SQL Injection Vulnerability
• CVE-2020-15069unknownSophos XG Firewall Buffer Overflow Vulnerability
• CVE-2022-23748unknownDante Discovery Process Control Vulnerability
• CVE-2025-0411unknown7-Zip Mark of the Web Bypass Vulnerability
• CVE-2024-21413unknownMicrosoft Outlook Improper Input Validation Vulnerability
• CVE-2024-53104unknownLinux Kernel Out-of-Bounds Write Vulnerability
• CVE-2024-45195unknownApache OFBiz Forced Browsing Vulnerability
• CVE-2018-9276unknownPaessler PRTG Network Monitor OS Command Injection Vulnerability
• CVE-2018-19410unknownPaessler PRTG Network Monitor Local File Inclusion Vulnerability
• CVE-2024-29059unknownMicrosoft .NET Framework Information Disclosure Vulnerability
• CVE-2025-24085unknownApple Multiple Products Use-After-Free Vulnerability
• CVE-2025-23006unknownSonicWall SMA1000 Appliances Deserialization Vulnerability
• CVE-2020-11023unknownJQuery Cross-Site Scripting (XSS) Vulnerability
• CVE-2024-50603unknownAviatrix Controllers OS Command Injection Vulnerability
• CVE-2025-21333unknownMicrosoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
• CVE-2024-55591unknownFortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
• CVE-2025-21335unknownMicrosoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
• CVE-2025-21334unknownMicrosoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
• CVE-2023-48365unknownQlik Sense HTTP Tunneling Vulnerability
• CVE-2024-12686unknownBeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
• CVE-2025-0282unknownIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
• CVE-2024-55550unknownMitel MiCollab Path Traversal Vulnerability
• CVE-2024-41713unknownMitel MiCollab Path Traversal Vulnerability
• CVE-2020-2883unknownOracle WebLogic Server Unspecified Vulnerability
• CVE-2024-3393unknownPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
• CVE-2021-44207unknownAcclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
• CVE-2024-12356unknownBeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
• CVE-2019-11001unknownReolink Multiple IP Cameras OS Command Injection Vulnerability
• CVE-2022-23227unknownNUUO NVRmini2 Devices Missing Authentication Vulnerability
• CVE-2021-40407unknownReolink RLC-410W IP Camera OS Command Injection Vulnerability
• CVE-2018-14933unknownNUUO NVRmini Devices OS Command Injection Vulnerability
• CVE-2024-55956unknownCleo Multiple Products Unauthenticated File Upload Vulnerability
• CVE-2024-20767unknownAdobe ColdFusion Improper Access Control Vulnerability
• CVE-2024-35250unknownMicrosoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
• CVE-2024-50623unknownCleo Multiple Products Unrestricted File Upload Vulnerability
• CVE-2024-49138unknownMicrosoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
• CVE-2024-51378unknownCyberPanel Incorrect Default Permissions Vulnerability
• CVE-2023-45727unknownNorth Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability
• CVE-2024-11667unknownZyxel Multiple Firewalls Path Traversal Vulnerability
• CVE-2024-11680unknownProjectSend Improper Authentication Vulnerability
• CVE-2023-28461unknownArray Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
• CVE-2024-21287unknownOracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
• CVE-2024-44309unknownApple Multiple Products Cross-Site Scripting (XSS) Vulnerability
• CVE-2024-44308unknownApple Multiple Products Code Execution Vulnerability
• CVE-2024-38813unknownVMware vCenter Server Privilege Escalation Vulnerability
• CVE-2024-38812unknownVMware vCenter Server Heap-Based Buffer Overflow Vulnerability
• CVE-2024-1212unknownProgress Kemp LoadMaster OS Command Injection Vulnerability
• CVE-2024-0012unknownPalo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
• CVE-2024-9474unknownPalo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
• CVE-2024-9463unknownPalo Alto Networks Expedition OS Command Injection Vulnerability
• CVE-2024-9465unknownPalo Alto Networks Expedition SQL Injection Vulnerability
• CVE-2021-41277unknownMetabase GeoJSON API Local File Inclusion Vulnerability
• CVE-2024-49039unknownMicrosoft Windows Task Scheduler Privilege Escalation Vulnerability
• CVE-2014-2120unknownCisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
• CVE-2024-43451unknownMicrosoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
• CVE-2021-26086unknownAtlassian Jira Server and Data Center Path Traversal Vulnerability
• CVE-2024-43093unknownAndroid Framework Privilege Escalation Vulnerability
• CVE-2024-5910unknownPalo Alto Networks Expedition Missing Authentication Vulnerability
• CVE-2024-51567unknownCyberPanel Incorrect Default Permissions Vulnerability
• CVE-2019-16278unknownNostromo nhttpd Directory Traversal Vulnerability
• CVE-2024-8957unknownPTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability
• CVE-2024-8956unknownPTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
• CVE-2024-20481unknownCisco ASA and FTD Denial-of-Service Vulnerability
• CVE-2024-37383unknownRoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
• CVE-2024-47575unknownFortinet FortiManager Missing Authentication Vulnerability
• CVE-2024-38094unknownMicrosoft SharePoint Deserialization Vulnerability
• CVE-2024-9537unknownScienceLogic SL1 Unspecified Vulnerability
• CVE-2024-40711unknownVeeam Backup and Replication Deserialization Vulnerability
• CVE-2024-30088unknownMicrosoft Windows Kernel TOCTOU Race Condition Vulnerability
• CVE-2024-9680unknownMozilla Firefox Use-After-Free Vulnerability
• CVE-2024-28987unknownSolarWinds Web Help Desk Hardcoded Credential Vulnerability
• CVE-2024-9379unknownIvanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
• CVE-2024-9380unknownIvanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
• CVE-2024-23113unknownFortinet Multiple Products Format String Vulnerability
• CVE-2024-43047unknownQualcomm Multiple Chipsets Use-After-Free Vulnerability
• CVE-2024-43573unknownMicrosoft Windows MSHTML Platform Spoofing Vulnerability
• CVE-2024-43572unknownMicrosoft Windows Management Console Remote Code Execution Vulnerability
• CVE-2024-45519unknownSynacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
• CVE-2024-29824unknownIvanti Endpoint Manager (EPM) SQL Injection Vulnerability
• CVE-2020-15415unknownDrayTek Multiple Vigor Routers OS Command Injection Vulnerability
• CVE-2023-25280unknownD-Link DIR-820 Router OS Command Injection Vulnerability
• CVE-2019-0344unknownSAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
• CVE-2024-7593unknownIvanti Virtual Traffic Manager Authentication Bypass Vulnerability
• CVE-2024-8963unknownIvanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
• CVE-2022-21445unknownOracle ADF Faces Deserialization of Untrusted Data Vulnerability
• CVE-2024-27348unknownApache HugeGraph-Server Improper Access Control Vulnerability
• CVE-2020-14644unknownOracle WebLogic Server Remote Code Execution Vulnerability
• CVE-2020-0618unknownMicrosoft SQL Server Reporting Services Remote Code Execution Vulnerability
• CVE-2014-0497unknownAdobe Flash Player Integer Underflow Vulnerablity
• CVE-2014-0502unknownAdobe Flash Player Double Free Vulnerablity
• CVE-2013-0643unknownAdobe Flash Player Incorrect Default Permissions Vulnerability
• CVE-2013-0648unknownAdobe Flash Player Code Execution Vulnerability
• CVE-2024-43461unknownMicrosoft Windows MSHTML Platform Spoofing Vulnerability
• CVE-2024-6670unknownProgress WhatsUp Gold SQL Injection Vulnerability
• CVE-2024-8190unknownIvanti Cloud Services Appliance OS Command Injection Vulnerability
• CVE-2024-38014unknownMicrosoft Windows Installer Improper Privilege Management Vulnerability
• CVE-2024-38217unknownMicrosoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
• CVE-2024-38226unknownMicrosoft Publisher Protection Mechanism Failure Vulnerability
• CVE-2024-40766unknownSonicWall SonicOS Improper Access Control Vulnerability
• CVE-2017-1000253unknownLinux Kernel PIE Stack Buffer Corruption Vulnerability
• CVE-2016-3714unknownImageMagick Improper Input Validation Vulnerability
• CVE-2024-7262unknownKingsoft WPS Office Path Traversal Vulnerability
• CVE-2021-20123unknownDraytek VigorConnect Path Traversal Vulnerability
• CVE-2021-20124unknownDraytek VigorConnect Path Traversal Vulnerability
• CVE-2024-7965unknownGoogle Chromium V8 Inappropriate Implementation Vulnerability
• CVE-2024-38856unknownApache OFBiz Incorrect Authorization Vulnerability
• CVE-2024-7971unknownGoogle Chromium V8 Type Confusion Vulnerability