2852 matches found
CVE-2025-21245 Windows Telephony Service Remote Code Execution Vulnerability
...
CVE-2025-21245 Windows Telephony Service Remote Code Execution Vulnerability
...
CVE-2025-21223 Windows Telephony Service Remote Code Execution Vulnerability
...
CVE-2025-21240 Windows Telephony Service Remote Code Execution Vulnerability
...
CVE-2025-21402
CVE-2025-21402 is a Microsoft Office OneNote remote code execution vulnerability. The NVD entry notes a HIGH risk with CVSS 3.1: Local attack vector, low attack complexity, user interaction required, and impact to confidentiality, integrity, and availability. Multiple connected sources corroborat...
CVE-2025-21356 Microsoft Office Visio Remote Code Execution Vulnerability
...
CVE-2025-21348
CVE-2025-21348 is a Microsoft SharePoint Server remote code execution vulnerability. The CVSSv3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) indicates network access with low attack complexity, requiring high privileges and no user interaction. The impact is high on confidentiality, integrity, ...
CVE-2025-21348 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2025-21345 Microsoft Office Visio Remote Code Execution Vulnerability
...
CVE-2025-21344 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2025-21291 Windows Direct Show Remote Code Execution Vulnerability
...
CVE-2025-21248 Windows Telephony Service Remote Code Execution Vulnerability
...
CVE-2025-21243 Windows Telephony Service Remote Code Execution Vulnerability
...
CVE-2025-21244 Windows Telephony Service Remote Code Execution Vulnerability
...
CVE-2025-21171 .NET Remote Code Execution Vulnerability
...
CVE-2024-39370
CVE-2024-39370 affects the Wavlink AC3000 M33A8.V5030.210505: the adm.cgi set_MeshAp() function is vulnerable to a buffer overflow via crafted POST data (e.g., wlan_ssid2), enabling arbitrary code execution after passing authentication. TALOS cites a CVSSv3.1 score of 9.1 (CRITICAL) with network ...
CVE-2024-47572
An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker to execute unauthorized code or commands via manipulating csv file...
CVE-2024-54021
An Improper Neutralization of CRLF Sequences in HTTP Headers 'http response splitting' vulnerability CWE-113 in Fortinet FortiOS 7.2.0 through 7.6.0, FortiProxy 7.2.0 through 7.4.5 may allow a remote unauthenticated attacker to bypass the file filter via crafted HTTP headers...
