Lucene search
K

6728 matches found

CNNVD
CNNVD
added 2025/12/11 12:0 a.m.3 views

TeamViewer DEX Client 安全漏洞

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. A security vulnerability exists in versions prior to TeamViewer DEX Client V21 that stems from improper input validation and could lead to remote execution of arbitrary commands...

7.2CVSS6.8AI score0.00231EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.2 views

TeamViewer DEX Client 安全漏洞

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. A security vulnerability exists in versions prior to TeamViewer DEX Client V15 that stems from improper input validation and could lead to remote execution of arbitrary commands...

7.2CVSS6.8AI score0.00063EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 6:13 p.m.4 views

CVE-2025-62455

Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.00048EPSS
Exploits0References1
OSV
OSV
added 2025/12/10 12:16 a.m.1 views

CVE-2025-61822

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could exploit this vulnerability to write malicious files to arbitrary locations on the file system. Exploitation of this...

6.2CVSS5.9AI score0.0005EPSS
Exploits0References1
OSV
OSV
added 2025/12/10 12:16 a.m.0 views

CVE-2025-61809

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation o...

9.1CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/12/10 12:16 a.m.3 views

CVE-2025-61809

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation o...

9.1CVSS0.00574EPSS
Exploits0References1
OSV
OSV
added 2025/12/10 12:16 a.m.3 views

CVE-2025-61812

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could allow a high privileged attacker to gain arbitrary code execution. Exploitation of this issue does not require user interaction...

8.4CVSS6AI score0.00055EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 11:41 p.m.23 views

CVE-2025-61812

Adobe ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability (CVE-2025-61812) that could allow a high-privileged attacker to gain arbitrary code execution. Exploitation reportedly does not require user interaction. The issue is listed a...

8.4CVSS7.2AI score0.00055EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/09 11:41 p.m.4 views

CVE-2025-61809 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation o...

9.1CVSS6.2AI score0.00574EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/09 11:41 p.m.25 views

CVE-2025-61809 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation o...

9.1CVSS0.00574EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 11:41 p.m.1 views

CVE-2025-61822 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could exploit this vulnerability to write malicious files to arbitrary locations on the file system. Exploitation of this...

6.2CVSS6.5AI score0.0005EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/09 11:41 p.m.24 views

CVE-2025-61822 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could exploit this vulnerability to write malicious files to arbitrary locations on the file system. Exploitation of this...

6.2CVSS0.0005EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 11:41 p.m.12 views

CVE-2025-61822

CVE-2025-61822 is an Adobe ColdFusion vulnerability (improper input validation) affecting ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier. The issue could allow an attacker to write arbitrary files to the filesystem without user interaction and with changed scope. Public notices in the c...

6.2CVSS6.5AI score0.0005EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/12/09 6:16 p.m.2 views

CVE-2025-62571

Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00089EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 5:55 p.m.4 views

EUVD-2025-202236

Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

7.5CVSS6.2AI score0.00049EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/09 5:2 p.m.4 views

CVE-2025-12946 Improper input validation in NETGEAR Nighthawk routers

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

7.3CVSS6.9AI score0.00053EPSS
Exploits0References18
Microsoft CVE
Microsoft CVE
added 2025/12/09 8:0 a.m.3 views

Windows Installer Elevation of Privilege Vulnerability

Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.00089EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-2296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDK2 contains a vulnerability in BIOS where an attacker may cause Improper Input Validation by local access. Successful exploitation of this vulnerability could...

8.4CVSS6.1AI score0.0013EPSS
Exploits0References4
EUVD
EUVD
added 2025/12/08 6:30 p.m.2 views

EUVD-2025-201757

In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.2AI score0.0001EPSS
Exploits0References2
NVD
NVD
added 2025/12/08 5:16 p.m.3 views

CVE-2025-48525

In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS0.00013EPSS
Exploits0References3
Rows per page
Query Builder