|
cve-2025-59287
|
Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-10-24 |
|
cve-2025-59230
|
Microsoft Windows Improper Access Control Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-10-14 |
|
cve-2025-58360
|
OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-11 |
|
cve-2025-5821
|
CVE-2025-5821 |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
|
|
cve-2025-58034
|
Fortinet FortiWeb OS Command Injection Vulnerability |
MEDIUM
|
6.7
|
N/A
|
cvelistv5 |
2025-11-18 |
|
cve-2025-57819
|
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-09-26 |
|
cve-2025-5777
|
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2025-07-10 |
|
cve-2025-5605
|
Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure |
MEDIUM
|
4.3
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-5571
|
CVE-2025-5571 |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
|
|
cve-2025-55346
|
Unintended dynamic code execution leads to remote code execution by network attackers |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-55190
|
github.com/argoproj/argo-cd: Project API Token Exposes Repository Credentials |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-06-28 |
|
cve-2025-55182
|
Meta React Server Components Remote Code Execution Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2025-12-05 |
|
cve-2025-55177
|
Meta Platforms WhatsApp Incorrect Authorization Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-09-02 |
|
cve-2025-55161
|
CVE-2025-55161 |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
|
|
cve-2025-54948
|
Trend Micro Apex One OS Command Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-08-18 |
|
cve-2025-54782
|
@nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-54313
|
Prettier eslint-config-prettier Embedded Malicious Code Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2025-54309
|
CrushFTP Unprotected Alternate Channel Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-07-22 |
|
cve-2025-54254
|
Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-54253
|
Adobe Experience Manager Forms Code Execution Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-10-15 |
|
cve-2025-54236
|
Adobe Commerce and Magento Improper Input Validation Vulnerability |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2025-10-24 |
|
cve-2025-5419
|
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-06-05 |
|
cve-2025-54123
|
SUSE CVE CVE-2025-54123 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2025-09-19 |
|
cve-2025-54068
|
Laravel Livewire Code Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-20 |
|
cve-2025-5394
|
Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-53770
|
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-07-20 |
|
cve-2025-53690
|
Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability |
CRITICAL
|
9.0
|
N/A
|
cvelistv5 |
2025-09-04 |
|
cve-2025-53521
|
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-27 |
|
cve-2025-53364
|
CVE-2025-53364 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2025-53118
|
Securden Unified PAM Authentication Bypass |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-06-17 |
ndaal KEV