CVE-2025-21410

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2025-21198

Microsoft High Performance Compute HPC Pack Remote Code Execution Vulnerability...

CVE-2025-24039 Visual Studio Code Elevation of Privilege Vulnerability

...

CVE-2025-21391 Windows Storage Elevation of Privilege Vulnerability

...

CVE-2025-21182

CVE-2025-21182 is a Windows ReFS Deduplication Service elevation of privilege vulnerability. The connected MSRC/MSKB advisories confirm a local-elevation flaw in the ReFS Deduplication component, with exploitation requiring local access and no user interaction. CVSS metrics show local access, hig...

CVE-2025-21351 Windows Active Directory Domain Services API Denial of Service Vulnerability

...

CVE-2025-22399

creationtimestamp| type| source ---|---|--- 2025-02-11 17:17:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5zep27c2z 2025-02-11 19:52:40+00:00| seen| https://t.me/cvedetector/17712...

CVE-2025-21158

creationtimestamp| type| source ---|---|--- 2025-02-11 17:17:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5zcjpfd2x 2025-02-11 17:27:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113986426904540437 2025-02-11 19:52:47+00:00| seen|...

CVE-2024-13842

creationtimestamp| type| source ---|---|--- 2025-02-11 16:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw2mofonk2a 2025-02-11 19:05:13+00:00| seen| https://vulnerability.circl.lu/bundle/85f9fd3a-b2ef-443b-b091-2cad7418236f 2025-02-11 19:13:31+00:00| seen|...

CVE-2024-54015

CVE-2024-54015 affects Siemens SIPROTEC 5 devices (multiple CP300/CP150 variants) with SNMP GET handling. The root cause is improper validation of SNMP GET requests, allowing an unauthenticated remote attacker to retrieve sensitive information via SNMPv2 GET using default credentials. Publicly st...

CVE-2025-1179

A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfdputl64 of the file bfd/libbfd.c of the component ld. The manipulation leads to memory corruption. The attack may be launched remotely. The complexity of an attack is rather hig...

CVE-2025-1178 GNU Binutils ld libbfd.c bfd_putl64 memory corruption

A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfdputl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is...

CVE-2025-1176 GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function bfdelfgcmarkrsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather...

CVE-2024-6140

creationtimestamp| type| source ---|---|--- 2025-02-11 02:19:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuluibqka27...

CVE-2024-3702

creationtimestamp| type| source ---|---|--- 2025-02-11 02:18:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulst5yzy2x...

CVE-2025-24869

SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose information about deployed server components, including their XML definitions. This information should ideally be restricted to customer administrators, even though they may not need it. These XML fil...

CVE-2025-24869 Information Disclosure vulnerability in SAP NetWeaver Application Server Java

SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose information about deployed server components, including their XML definitions. This information should ideally be restricted to customer administrators, even though they may not need it. These XML fil...

CVE-2022-37660

CVE-2022-37660 affects hostapd up to version 2.10, where the PKEX code remains active after a successful PKEX association. An attacker who has bootstrapped public keys with another entity in the past can subvert a future bootstrapping by passively observing public keys and manipulating the encryp...

CVE-2025-1162

CVE-2025-1162 affects code-projects Job Recruitment 1.0. The vulnerability resides in an unknown portion of the file /_parse/load_user-profile.php, where improper handling of the userhash parameter enables SQL injection. This can be triggered remotely and, per the published descriptions, the expl...

CVE-2025-24970

Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead...