|
cve-2025-37164
|
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2025-12-24 |
|
cve-2025-13773
|
tychesoftwares print_invoice_\&_delivery_notes_for_woocommerce Improper Control of Generation of Code |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-12-24 |
|
cve-2025-49844
|
Redis redis Use After Free |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2025-12-23 |
|
cve-2025-11953
|
React Native Community CLI OS Command Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-21 |
|
cve-2025-34469
|
CVE-2025-34469 |
MEDIUM
|
6.9
|
N/A
|
cvelistv5 |
|
|
cve-2025-32778
|
Improper Neutralization of Special Elements used in an OS Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-19 |
|
cve-2025-14733
|
WatchGuard Firebox Out of Bounds Write Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2025-12-19 |
|
cve-2024-55890
|
D-Tale Custom Filter Input 'update-settings' Remote Code Execution |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-19 |
|
cve-2024-3408
|
man d-tale Use of Hard-coded Credentials |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-19 |
|
cve-2023-6360
|
joedolson my_calendar Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
2025-12-19 |
|
cve-2025-59374
|
ASUS Live Update Embedded Malicious Code Vulnerability |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2025-12-17 |
|
cve-2025-40602
|
SonicWall SMA1000 Missing Authorization Vulnerability |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2025-12-17 |
|
cve-2025-20393
|
Cisco Multiple Products Improper Input Validation Vulnerability |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2025-12-17 |
|
cve-2025-11924
|
ninjaforms ninja_forms Authorization Bypass Through User-Controlled Key |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2025-12-17 |
|
cve-2021-34427
|
eclipse business_intelligence_and_reporting_tools Improper Input Validation |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-16 |
|
cve-2025-9316
|
N-able N-central Improper Validation of Specified Quantity in Input |
MEDIUM
|
6.9
|
N/A
|
cvelistv5 |
2025-12-15 |
|
cve-2025-64764
|
astro astro Improper Neutralization of Script-Related HTML Tags in a Web Page |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2025-12-15 |
|
cve-2025-59719
|
Fortinet FortiWeb Improper Verification of Cryptographic Signature |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2025-12-15 |
|
cve-2025-59718
|
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2025-12-15 |
|
cve-2025-55747
|
XWiki xwiki Relative Path Traversal |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-15 |
|
cve-2025-55523
|
agent-zero agent-zero Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-15 |
|
cve-2025-13315
|
lynxtechnology twonky_server Unprotected Alternate Channel |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2025-12-15 |
|
cve-2025-12055
|
Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2025-12-15 |
|
cve-2025-11700
|
N-able N-central Improper Restriction of XML External Entity Reference |
HIGH
|
8.4
|
N/A
|
cvelistv5 |
2025-12-15 |
|
cve-2024-55963
|
appsmith appsmith Improper Access Control |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-15 |
|
cve-2018-13317
|
TOTOLINK a3002ru Improper Neutralization of Input During Web Page Generation |
HIGH
|
N/A
|
0.99%
|
cvelistv5 |
2025-12-15 |
|
cve-2020-27866
|
NETGEAR ac2100_firmware Authentication Bypass Using an Alternate Path or Channel |
HIGH
|
8.8
|
8.66%
|
cvelistv5 |
2025-12-14 |
|
cve-2025-43529
|
webkitgtk: webkitgtk: Use-after-free due to improper memory management |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-06-30 |
|
cve-2025-14611
|
Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2025-12-12 |
|
cve-2025-14174
|
Google Chromium Out of Bounds Memory Access Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-12 |
ndaal KEV