|
cve-2025-34026
|
Versa Concerto Improper Authentication Vulnerability |
CRITICAL
|
9.2
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2025-34023
|
Karel IP Phone IP1211 Path Traversal |
HIGH
|
8.5
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34022
|
Selea Targa IP OCR-ANPR Camera Path Traversal |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-34021
|
Selea Targa IP OCR-ANPR Camera Server-Side Request Forgery |
HIGH
|
7.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-33073
|
Microsoft Windows SMB Client Improper Access Control Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-10-20 |
|
cve-2025-33053
|
Microsoft Windows External Control of File Name or Path Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-06-10 |
|
cve-2025-32975
|
Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-04-20 |
|
cve-2025-32814
|
CVE-2025-32814 |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
|
|
cve-2025-32756
|
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability |
CRITICAL
|
9.6
|
N/A
|
cvelistv5 |
2025-05-14 |
|
cve-2025-32709
|
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-05-13 |
|
cve-2025-32706
|
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-05-13 |
|
cve-2025-32701
|
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-05-13 |
|
cve-2025-3248
|
Langflow Missing Authentication Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2025-05-05 |
|
cve-2025-32463
|
Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-09-29 |
|
cve-2025-32433
|
SUSE CVE CVE-2025-32433 |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-08-29 |
|
cve-2025-32432
|
Craft CMS Code Injection Vulnerability |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-03-20 |
|
cve-2025-31324
|
SAP NetWeaver Unrestricted File Upload Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2025-04-29 |
|
cve-2025-31277
|
SUSE CVE CVE-2025-31277 |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-08-30 |
|
cve-2025-31201
|
Apple Multiple Products Arbitrary Read and Write Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-04-17 |
|
cve-2025-31200
|
Apple Multiple Products Memory Corruption Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-04-17 |
|
cve-2025-31161
|
CrushFTP Authentication Bypass Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-04-07 |
|
cve-2025-31125
|
Vite Vitejs Improper Access Control Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-22 |
|
cve-2025-3102
|
SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-30567
|
WordPress WP01 plugin <= 2.6.2 - Arbitrary File Download Vulnerability |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-30406
|
Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-04-08 |
|
cve-2025-30400
|
Microsoft Windows DWM Core Library Use-After-Free Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-05-13 |
|
cve-2025-30397
|
Microsoft Windows Scripting Engine Type Confusion Vulnerability |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2025-05-13 |
|
cve-2025-30349
|
CVE-2025-30349 |
HIGH
|
7.2
|
N/A
|
cvelistv5 |
|
|
cve-2025-30259
|
The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL. |
LOW
|
3.5
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-30220
|
GeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handling |
CRITICAL
|
9.9
|
N/A
|
cvelistv5 |
2026-06-17 |
ndaal KEV