CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

32397 matches found

CVE•added 2025/12/09 5:56 p.m.•34 views

CVE-2025-64661

CVE-2025-64661 – Windows Shell Elevation of Privilege is supported by connected sources. The vulnerability involves a race condition in concurrent execution using a shared resource in Windows Shell, allowing an authorized local attacker to elevate privileges. Connected documents confirm impact as...

7.8CVSS6.6AI score0.00244EPSS

SaveExploits0References1Affected Software12

Cvelist•added 2025/12/09 5:56 p.m.•32 views

CVE-2025-64661 Windows Shell Elevation of Privilege Vulnerability

...

7.8CVSS0.00244EPSS

SaveExploits0References1

EUVD•added 2025/12/09 5:56 p.m.•8 views

EUVD-2025-202207

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Shell allows an authorized attacker to elevate privileges locally...

7.8CVSS6.5AI score0.00244EPSS

SaveExploits0References2

EUVD•added 2025/12/09 5:56 p.m.•10 views

EUVD-2025-202208

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

7.3CVSS6.5AI score0.00553EPSS

SaveExploits0References2

EUVD•added 2025/12/09 5:55 p.m.•9 views

EUVD-2025-202238

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Shell allows an authorized attacker to elevate privileges locally...

7.5CVSS6.5AI score0.00305EPSS

SaveExploits0References2

NVD•added 2025/12/09 4:17 p.m.•21 views

CVE-2025-41693

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected...

4.3CVSS0.00504EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•8 views

CVE-2024-56836

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.0, RUGGEDCOM ROX MX5000RE All versions V2.17.0, RUGGEDCOM ROX RX1400 All versions V2.17.0, RUGGEDCOM ROX RX1500 All versions V2.17.0, RUGGEDCOM ROX RX1501 All versions V2.17.0, RUGGEDCOM ROX RX1510 All versions V2.17.0...

8.8CVSS0.0044EPSS

SaveExploits0References1

OSV•added 2025/12/09 4:17 p.m.•6 views

CVE-2024-56836

8.8CVSS5.8AI score0.0044EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•8 views

CVE-2024-56837

8.6CVSS0.00524EPSS

SaveExploits0References1

OSV•added 2025/12/09 4:17 p.m.•8 views

CVE-2024-56837

8.6CVSS5.7AI score0.00524EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•10 views

CVE-2024-56835

8.8CVSS0.00515EPSS

SaveExploits0References1

OSV•added 2025/12/09 11:38 a.m.•6 views

BIT-APACHE-2025-58098 Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...

Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query string to exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue...

8.3CVSS6.8AI score0.01515EPSS

SaveExploits0References3

Vulnrichment•added 2025/12/09 10:44 a.m.•4 views

CVE-2024-56837

8.6CVSS8.9AI score0.00524EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•29 views

CVE-2024-56837

8.6CVSS0.00524EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•16 views

CVE-2024-56837

Siemens RUGGEDCOM ROX II family devices (ROX II) prior to v2.17.0 are affected by a code-injection vulnerability caused by insufficient validation during installation and loading of certain configuration files. Several sources document that an attacker could exploit this to spawn a reverse shell ...

8.6CVSS8.9AI score0.00524EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2025/12/09 10:44 a.m.•33 views

CVE-2024-56836

7.7CVSS0.0044EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 10:44 a.m.•4 views

CVE-2024-56836

7.7CVSS8.9AI score0.0044EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•19 views

CVE-2024-56836

The CVE-2024-56836 issue affects Siemens RUGGEDCOM ROX II devices (MX5000/MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) with versions before 2.17.0. According to connected documents, the vulnerability arises during Dynamic DNS configuration where additional con...

8.8CVSS8.9AI score0.0044EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2025/12/09 10:44 a.m.•24 views

CVE-2024-56835

8.8CVSS0.00515EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 10:44 a.m.•3 views

CVE-2024-56835

8.8CVSS9AI score0.00515EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by