6722 matches found
CVE-2025-21276 Windows MapUrlToZone Denial of Service Vulnerability
...
CVE-2025-21224 Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
...
CVE-2025-21329 MapUrlToZone Security Feature Bypass Vulnerability
...
CVE-2025-21314
Technical details on CVE-2025-21314 are not publicly provided in the supplied documents. The materials reference Windows updates addressing vulnerabilities and general guidance, but do not specify affected components, root cause, or remediation for this CVE. Monitor for updates.
CVE-2025-21295 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
...
CVE-2025-21277 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
...
CVE-2025-21265 Windows Digital Media Elevation of Privilege Vulnerability
...
CVE-2025-21248 Windows Telephony Service Remote Code Execution Vulnerability
...
CVE-2025-21234 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
...
CVE-2024-39357
creationtimestamp| type| source ---|---|--- 2025-01-14 15:16:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkaecuyb2n...
CVE-2024-39288
creationtimestamp| type| source ---|---|--- 2025-01-14 15:16:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpk7zxw5t2b...
CVE-2024-39608
A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can send an unauthenticated message to trigger this vulnerability...
CVE-2024-11497 Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation
An authenticated attacker can use this vulnerability to perform a privilege escalation to gain root access...
CVE-2024-11497 Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation
An authenticated attacker can use this vulnerability to perform a privilege escalation to gain root access...
CVE-2024-13323
The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'booking' shortcode in all versions up to, and including, 10.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-11637
creationtimestamp| type| source ---|---|--- 2025-01-14 02:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo6lqxmqw2f 2025-01-14 04:52:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfohebhbw62g...
CVE-2025-23031
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionaralergia.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in...
CVE-2025-23032
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarescala.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts int...
