|
cve-2025-25257
|
Fortinet FortiWeb SQL Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-07-18 |
|
cve-2025-25249
|
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2026-09-09 |
|
cve-2025-25231
|
Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints. |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-2505
|
Age Gate <= 3.5.3 - Unauthenticated Local PHP File Inclusion via 'lang' |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-25037
|
Aquatronica Controller System Complete Information Disclosure |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-25034
|
SugarCRM PHP Deserialization RCE |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-24993
|
Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability |
HIGH
|
7.8
|
N/A
|
cvelistv5 |
2025-03-11 |
|
cve-2025-24990
|
Microsoft Windows Untrusted Pointer Dereference Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-10-14 |
|
cve-2025-24989
|
Microsoft Power Pages Improper Access Control Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-02-21 |
|
cve-2025-24984
|
Microsoft Windows NTFS Information Disclosure Vulnerability |
MEDIUM
|
4.6
|
N/A
|
cvelistv5 |
2025-03-11 |
|
cve-2025-24983
|
Microsoft Windows Win32k Use-After-Free Vulnerability |
HIGH
|
7.0
|
N/A
|
cvelistv5 |
2025-03-11 |
|
cve-2025-24893
|
XWiki Platform Eval Injection Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-10-30 |
|
cve-2025-24813
|
Apache Tomcat Path Equivalence Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-04-01 |
|
cve-2025-24799
|
GLPI allows unauthenticated SQL injection through the inventory endpoint |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-06-17 |
|
cve-2025-24472
|
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2025-03-18 |
|
cve-2025-24201
|
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-03-13 |
|
cve-2025-24200
|
Apple iOS and iPadOS Incorrect Authorization Vulnerability |
MEDIUM
|
6.1
|
N/A
|
cvelistv5 |
2025-02-12 |
|
cve-2025-24054
|
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2025-04-17 |
|
cve-2025-24016
|
Wazuh Server Deserialization of Untrusted Data Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-06-10 |
|
cve-2025-23209
|
Craft CMS Code Injection Vulnerability |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2025-02-20 |
|
cve-2025-23006
|
SonicWall SMA1000 Appliances Deserialization Vulnerability |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-01-24 |
|
cve-2025-2294
|
CVE-2025-2294 |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
|
|
cve-2025-22457
|
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2025-04-04 |
|
cve-2025-22226
|
VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2025-03-04 |
|
cve-2025-22225
|
VMware ESXi Arbitrary Write Vulnerability |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2025-03-04 |
|
cve-2025-22224
|
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2025-03-04 |
|
cve-2025-22214
|
CVE-2025-22214 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2025-21590
|
Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability |
MEDIUM
|
6.7
|
N/A
|
cvelistv5 |
2025-03-13 |
|
cve-2025-21480
|
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
2025-06-03 |
|
cve-2025-21479
|
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
2025-06-03 |
ndaal KEV