Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2025-40149 |
|
Use-After-Free in linux (CVE-2025-40149)
vulnerability in linux (CVE-2025-40149). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40139 |
|
Vulnerability in CVE-2025-40139 (CVE-2025-40139)
vulnerability in CVE-2025-40139 (CVE-2025-40139). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40135 |
|
Vulnerability in CVE-2025-40135 (CVE-2025-40135)
vulnerability in CVE-2025-40135 (CVE-2025-40135). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40140 |
|
Vulnerability in CVE-2025-40140 (CVE-2025-40140)
vulnerability in CVE-2025-40140 (CVE-2025-40140). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40141 |
|
Vulnerability in CVE-2025-40141 (CVE-2025-40141)
vulnerability in CVE-2025-40141 (CVE-2025-40141). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40129 |
|
Vulnerability in c (CVE-2025-40129)
vulnerability in c (CVE-2025-40129). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40118 |
|
Vulnerability in c (CVE-2025-40118)
vulnerability in c (CVE-2025-40118). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40111 |
|
Vulnerability in CVE-2025-40111 (CVE-2025-40111)
vulnerability in CVE-2025-40111 (CVE-2025-40111). Successful exploitation can lead to full system takeover.
|
| CVE-2025-12480 KEV |
|
[KEV] Vulnerability in Gladinet triofox (CVE-2025-12480)
vulnerability in Gladinet triofox (CVE-2025-12480). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-62215 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2025-62215)
vulnerability in Microsoft windows (CVE-2025-62215). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-62199 |
|
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
|
| CVE-2025-30398 |
|
Vulnerability in microsoft (CVE-2025-30398)
vulnerability in microsoft (CVE-2025-30398). Confidential information can be exposed externally.
|
| CVE-2025-11959 |
|
Vulnerability in CVE-2025-11959 (CVE-2025-11959)
vulnerability in CVE-2025-11959 (CVE-2025-11959). Confidential information can be exposed externally.
|
| CVE-2025-10161 |
|
Vulnerability in CVE-2025-10161 (CVE-2025-10161)
vulnerability in CVE-2025-10161 (CVE-2025-10161). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-21042 KEV |
|
[KEV] Out-of-Bounds Write in Samsung mobile-devices (CVE-2025-21042)
out-of-bounds write in Samsung mobile-devices (CVE-2025-21042). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-10968 |
|
SQL Injection in sqli (CVE-2025-10968)
SQL injection in sqli (CVE-2025-10968). Successful exploitation can lead to full system takeover.
|
| CVE-2025-63560 |
|
Vulnerability in dos (CVE-2025-63560)
vulnerability in dos (CVE-2025-63560). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-11956 |
|
Cross-Site Scripting (XSS) in CVE-2025-11956 (CVE-2025-11956)
cross-site scripting in CVE-2025-11956 (CVE-2025-11956). Confidential information can be exposed externally.
|
| CVE-2025-57130 |
|
Vulnerability in zwiicms (CVE-2025-57130)
vulnerability in zwiicms (CVE-2025-57130). Confidential information can be exposed externally.
|
| CVE-2025-43433 |
|
Out-of-Bounds Write in apple (CVE-2025-43433)
out-of-bounds write in apple (CVE-2025-43433). Successful exploitation can lead to full system takeover.
|
| CVE-2025-43407 |
|
This issue was addressed with improved entitlements. This issue is fixed in visionOS 26.1, macOS...
This issue was addressed with improved entitlements. This issue is fixed in visionOS 26.1, macOS...
|
| CVE-2025-48703 KEV |
|
[KEV] OS Command Injection in Cwp control-web-panel (CVE-2025-48703)
OS command injection in Cwp control-web-panel (CVE-2025-48703). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-11371 KEV |
|
[KEV] Vulnerability in Gladinet centrestack-and-triofox (CVE-2025-11371)
vulnerability in Gladinet centrestack-and-triofox (CVE-2025-11371). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-60749 |
|
Vulnerability in CVE-2025-60749 (CVE-2025-60749)
vulnerability in CVE-2025-60749 (CVE-2025-60749). Successful exploitation can lead to full system takeover.
|
| CVE-2025-61498 |
|
Vulnerability in dos (CVE-2025-61498)
vulnerability in dos (CVE-2025-61498). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40095 |
|
Vulnerability in CVE-2025-40095 (CVE-2025-40095)
vulnerability in CVE-2025-40095 (CVE-2025-40095). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40096 |
|
Vulnerability in CVE-2025-40096 (CVE-2025-40096)
vulnerability in CVE-2025-40096 (CVE-2025-40096). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40104 |
|
Vulnerability in CVE-2025-40104 (CVE-2025-40104)
vulnerability in CVE-2025-40104 (CVE-2025-40104). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40092 |
|
Vulnerability in CVE-2025-40092 (CVE-2025-40092)
vulnerability in CVE-2025-40092 (CVE-2025-40092). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40105 |
|
Vulnerability in CVE-2025-40105 (CVE-2025-40105)
vulnerability in CVE-2025-40105 (CVE-2025-40105). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40090 |
|
Vulnerability in linux (CVE-2025-40090)
vulnerability in linux (CVE-2025-40090). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40087 |
|
Vulnerability in CVE-2025-40087 (CVE-2025-40087)
vulnerability in CVE-2025-40087 (CVE-2025-40087). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40088 |
|
Vulnerability in CVE-2025-40088 (CVE-2025-40088)
vulnerability in CVE-2025-40088 (CVE-2025-40088). Confidential information can be exposed externally.
|
| CVE-2025-40093 |
|
Vulnerability in CVE-2025-40093 (CVE-2025-40093)
vulnerability in CVE-2025-40093 (CVE-2025-40093). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40094 |
|
Vulnerability in CVE-2025-40094 (CVE-2025-40094)
vulnerability in CVE-2025-40094 (CVE-2025-40094). Successful exploitation can lead to full system takeover.
|
| CVE-2025-62230 |
|
Use-After-Free in xorg (CVE-2025-62230)
vulnerability in xorg (CVE-2025-62230). Confidential information can be exposed externally.
|
| CVE-2025-62231 |
|
Vulnerability in xorg (CVE-2025-62231)
vulnerability in xorg (CVE-2025-62231). Confidential information can be exposed externally.
|
| CVE-2025-41244 KEV |
|
[KEV] Vulnerability in Broadcom vmware-aria-operations-and-vmware-tools (CVE-2025-41244)
vulnerability in Broadcom vmware-aria-operations-and-vmware-tools (CVE-2025-41244). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-24893 KEV |
|
[KEV] Vulnerability in Xwiki platform (CVE-2025-24893)
vulnerability in Xwiki platform (CVE-2025-24893). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-7324 |
|
Vulnerability in CVE-2023-7324 (CVE-2023-7324)
vulnerability in CVE-2023-7324 (CVE-2023-7324). Confidential information can be exposed externally.
|
| CVE-2025-40084 |
|
Vulnerability in CVE-2025-40084 (CVE-2025-40084)
vulnerability in CVE-2025-40084 (CVE-2025-40084). Confidential information can be exposed externally.
|
| CVE-2025-60805 |
|
Information Disclosure in CVE-2025-60805 (CVE-2025-60805)
vulnerability in CVE-2025-60805 (CVE-2025-60805). Confidential information can be exposed externally.
|
| CVE-2025-60349 |
|
Vulnerability in dos (CVE-2025-60349)
vulnerability in dos (CVE-2025-60349). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-56399 |
|
Code Injection in laravel (CVE-2025-56399)
code injection in laravel (CVE-2025-56399). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40058 |
|
Vulnerability in CVE-2025-40058 (CVE-2025-40058)
vulnerability in CVE-2025-40058 (CVE-2025-40058). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40064 |
|
Vulnerability in c (CVE-2025-40064)
vulnerability in c (CVE-2025-40064). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40063 |
|
Vulnerability in CVE-2025-40063 (CVE-2025-40063)
vulnerability in CVE-2025-40063 (CVE-2025-40063). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40068 |
|
Vulnerability in CVE-2025-40068 (CVE-2025-40068)
vulnerability in CVE-2025-40068 (CVE-2025-40068). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40069 |
|
Vulnerability in CVE-2025-40069 (CVE-2025-40069)
vulnerability in CVE-2025-40069 (CVE-2025-40069). Successful exploitation can lead to full system takeover.
|
| CVE-2025-40075 |
|
Vulnerability in CVE-2025-40075 (CVE-2025-40075)
vulnerability in CVE-2025-40075 (CVE-2025-40075). Successful exploitation can lead to full system takeover.
|