|
cve-2025-45988
|
Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bs_SetCmd function. |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-44846
|
CVE-2025-44846 |
MEDIUM
|
6.3
|
N/A
|
cvelistv5 |
|
|
cve-2025-4428
|
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-05-19 |
|
cve-2025-4427
|
Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2025-05-19 |
|
cve-2025-44177
|
A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences. |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-43529
|
Apple Multiple Products Use-After-Free WebKit Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-15 |
|
cve-2025-43520
|
Apple Multiple Products Classic Buffer Overflow Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-20 |
|
cve-2025-43510
|
Apple Multiple Products Improper Locking Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-03-20 |
|
cve-2025-43300
|
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2025-08-21 |
|
cve-2025-4322
|
Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-43200
|
Apple Multiple Products Unspecified Vulnerability |
MEDIUM
|
4.2
|
N/A
|
cvelistv5 |
2025-06-16 |
|
cve-2025-42999
|
SAP NetWeaver Deserialization Vulnerability |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2025-05-15 |
|
cve-2025-4281
|
CVE-2025-4281 |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
|
|
cve-2025-4270
|
CVE-2025-4270 |
MEDIUM
|
6.9
|
N/A
|
cvelistv5 |
|
|
cve-2025-42599
|
Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-04-28 |
|
cve-2025-4210
|
SUSE CVE CVE-2025-4210 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2026-08-27 |
|
cve-2025-41646
|
CVE-2025-41646 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2025-41244
|
SUSE CVE CVE-2025-41244 |
HIGH
|
7.8
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2025-4123
|
SUSE CVE CVE-2025-4123 |
HIGH
|
7.6
|
N/A
|
cvelistv5 |
2026-08-25 |
|
cve-2025-40602
|
SonicWall SMA1000 Missing Authorization Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-17 |
|
cve-2025-40551
|
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-02-03 |
|
cve-2025-40536
|
SolarWinds Web Help Desk Security Control Bypass Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-02-12 |
|
cve-2025-4009
|
CVE-2025-4009 |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
|
|
cve-2025-4008
|
Smartbedded Meteobridge Command Injection Vulnerability |
HIGH
|
8.7
|
N/A
|
cvelistv5 |
2025-10-02 |
|
cve-2025-3987
|
TOTOLINK N150RT formWsc command injection |
MEDIUM
|
6.3
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-3935
|
ConnectWise ScreenConnect Improper Authentication Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-06-02 |
|
cve-2025-3928
|
Commvault Web Server Unspecified Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-04-28 |
|
cve-2025-38352
|
Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-09-04 |
|
cve-2025-37164
|
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-01-07 |
|
cve-2025-35939
|
Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability |
MEDIUM
|
6.9
|
N/A
|
cvelistv5 |
2025-06-02 |
ndaal KEV