6722 matches found
CVE-2025-0448 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-55577
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user...
BELL-CVE-2025-21176
Bulletin has no description...
CVE-2025-23013
In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module PAM that can be deployed to support authentication using a YubiKey or other FIDO compliant authenticators on macOS or Linux. This software package has an issue...
CVE-2024-57764
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add...
CVE-2024-50857
The ipdojob request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting XSS. It allows data exfiltration and enables CSRF attacks. The vulnerability requires specific user permissions within the application to exploit successfully...
CVE-2024-50349
A flaw was found in Git. This vulnerability occurs when Git requests credentials via a terminal prompt, for example, without the use of a credential helper. During this process, Git displays the host name for which the credentials are needed, but any URL-encoded parts are decoded and displayed...
CVE-2025-21135
Summary: CVE-2025-21135 affects Adobe Animate versions 24.0.6, 23.0.9 and earlier. It is an Integer Underflow (Wrap/wraparound) that could lead to arbitrary code execution in the current user context . Exploitation requires user interaction via opening a malicious file. Remediation: Adobe has rel...
CVE-2024-52006
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems mos...
CVE-2025-21307
Windows Reliable Multicast Transport Driver RMCAST Remote Code Execution Vulnerability...
CVE-2025-21278
Windows Remote Desktop Gateway RD Gateway Denial of Service Vulnerability...
CVE-2025-21242
Windows Kerberos Information Disclosure Vulnerability...
CVE-2024-13165
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-12085
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...
CVE-2025-21409
CVE-2025-21409 is a Windows Telephony Service Remote Code Execution vulnerability exploitable over the network (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this CVE entry and link it to Windows Telephony Service across Microsoft advisories; updates KB5050009, KB5050...
CVE-2025-21246 Windows Telephony Service Remote Code Execution Vulnerability
...
CVE-2025-21339 Windows Telephony Service Remote Code Execution Vulnerability
...
CVE-2025-21338 GDI+ Remote Code Execution Vulnerability
...