Lucene search
+L

2288 matches found

Microsoft CVE
Microsoft CVE
added 2025/05/13 7:00 a.m.14 views

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

6.5CVSS6.6AI score0.01267EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/05/13 7:00 a.m.60 views

Web Threat Defense (WTD.sys) Denial of Service Vulnerability

Out-of-bounds read in Web Threat Defense WTD.sys allows an unauthorized attacker to deny service over a network...

7.5CVSS6.8AI score0.64369EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/05/13 7:00 a.m.21 views

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

6.5CVSS6.6AI score0.01331EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/05/13 7:00 a.m.15 views

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...

7.5CVSS6.9AI score0.014EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/05/13 7:00 a.m.16 views

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

8.4CVSS7.8AI score0.00646EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/05/13 7:00 a.m.20 views

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS7.8AI score0.00633EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/05/13 7:00 a.m.16 views

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS7.8AI score0.0062EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/05/13 7:00 a.m.23 views

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Use of uninitialized resource in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

6.5CVSS6.8AI score0.01411EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/05/13 7:00 a.m.325 views

Windows Kernel Information Disclosure Vulnerability

Integer underflow wrap or wraparound in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network...

5.7CVSS6.6AI score0.00686EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/05/13 7:00 a.m.21 views

Windows Media Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network...

8.8CVSS7.8AI score0.14331EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/05/13 7:00 a.m.17 views

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

6.5CVSS6.6AI score0.01294EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/05/13 12:00 a.m.6 views

PT-2025-20938

Name of the Vulnerable Software and Affected Versions: Remote Desktop Gateway Service affected versions not specified Description: The issue is related to uncontrolled resource consumption in the Remote Desktop Gateway Service, allowing an unauthorized attacker to deny service over a network. Thi...

7.8CVSS7.4AI score0.01662EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2025/05/13 12:00 a.m.23 views

KB5058379: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (May 2025)

The remote Windows host is missing security update 5058379. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of uninitialized resource in Windo...

8.8CVSS9.1AI score0.26835EPSS
SaveExploits10References35
CISA KEV Catalog
CISA KEV Catalog
added 2025/05/13 12:00 a.m.112 views

Microsoft Windows Scripting Engine Type Confusion Vulnerability

Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL...

7.5CVSS6.8AI score0.26835EPSS
SaveIn wildExploits7
RedhatCVE
RedhatCVE
added 2025/05/10 11:21 p.m.21 views

CVE-2025-47733

Server-Side Request Forgery SSRF in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network...

9.1CVSS6.4AI score0.01836EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/10 11:21 p.m.19 views

CVE-2025-33072

Improper access control in Azure allows an unauthorized attacker to disclose information over a network...

8.1CVSS6.4AI score0.01678EPSS
SaveExploits0References3
CVE
CVE
added 2025/05/02 1:01 a.m.142 views

CVE-2025-29825

CVE-2025-29825 affects Microsoft Edge (Chromium-based). The flaw is a UI misrepresentation that enables a remote attacker to spoof UI over a network, requiring user interaction. Impact per the metrics is Confidentiality High, with no impacts to Integrity/Availability reported. The CVSS 3.1 vector...

6.5CVSS6.2AI score0.00805EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/05/01 8:15 p.m.13 views

CVE-2025-46628

Lack of input validation/sanitization in the 'ate' management service in the Tenda RX2 Pro 16.03.30.14 allows an unauthorized remote attacker to gain root shell access to the device by sending a crafted UDP packet to the 'ate' service when it is enabled. Authentication is not needed...

7.3CVSS5.9AI score0.00964EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
added 2025/05/01 7:00 a.m.31 views

Microsoft Edge (Chromium-based) Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS6.8AI score0.00805EPSS
SaveExploits0
attackerkb
attackerkb
added 2025/04/30 6:15 p.m.4 views

CVE-2025-30391

Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose information over a network...

8.1CVSS5.4AI score0.01275EPSS
SaveExploits0References2
Rows per page
Query Builder