5569 matches found
EUVD-2025-20552
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-49701
CVE-2025-49701 is a Microsoft SharePoint remote code execution vulnerability caused by improper authorization, enabling an authenticated attacker to execute code over the network. Public advisories confirm impact as remote code execution in SharePoint environments, with patched updates released i...
CVE-2025-49719
CVE-2025-49719 is an information-disclosure vulnerability in Microsoft SQL Server reported as an information disclosure due to improper input validation. Public sources indicate it affects SQL Server versions dating back to 2016 and is being addressed by Microsoft with security updates; specific ...
CVE-2025-49717
CVE-2025-49717 is a Microsoft SQL Server remote code execution vulnerability caused by a heap-based buffer overflow in SQL Server. The impact is network-exploitable with authenticated attacker privileges (low) and no user interaction, under changed scope, per the CVSS data. Public disclosures and...
Windows Hyper-V Denial of Service Vulnerability
Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network...
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
Microsoft SharePoint Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2025-41224
A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X All versions V5.10.0, RUGGEDCOM RMC8388NC V5.X All versions V5.10.0, RUGGEDCOM RS416NCv2 V5.X All versions V5.10.0, RUGGEDCOM RS416PNCv2 V5.X All versions V5.10.0, RUGGEDCOM RS416Pv2 V5.X All versions V5.10.0, RUGGEDCOM RS416v2 V5.X Al...
CVE-2024-31854
A vulnerability has been identified in SICAM TOOLBOX II All versions V07.11. During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check device's certificate common name against an expected value. This could allow an attacker to execute...
CVE-2025-49740: Protection Mechanism Failure
Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
CVE-2025-49657: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...
CVE-2025-49688: Double Free
Double free in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...
CVE-2025-47972: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges over a network...
CVE-2025-48817: Relative Path Traversal
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2025-48823: Inadequate Encryption Strength
Cryptographic issues in Windows Cryptographic Services allows an unauthorized attacker to disclose information over a network...
CVE-2025-47998: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...
CVE-2025-49731: Improper Handling of Insufficient Permissions or Privileges
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network...
CVE-2025-49669: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...