CVE Tracker

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

JFrog Artifactory Improper Authentication Vulnerability

JFrog Artifactory Incorrect Authorization Vulnerability

ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

PaperCut NG/MF Unsafe Reflection Vulnerability

JFrog Artifactory Improper Authentication Vulnerability

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

Google Chromium V8 Memory Corruption Vulnerability

MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

Google Chromium V8 Out of Bounds Write Vulnerability

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

Microsoft Windows Heap-Based Buffer Overflow Vulnerability

Google Chromium V8 Type Confusion Vulnerability

BerriAI LiteLLM Command Injection Vulnerability

BerriAI LiteLLM Improper Authentication Vulnerability

Microsoft Windows Link Following Vulnerability

Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

N-able N-central Static Code Injection Vulnerability

Google Chromium CSS Use-After-Free Vulnerability

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

Google Skia Out-of-Bounds Write Vulnerability

Google Dawn Use-After-Free Vulnerability

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

Metabase SQL Injection Vulnerability

SonicWall SMA1000 Appliances OS Command Injection Vulnerability

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

Palo Alto Networks PAN-OS Command Injection Vulnerability

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

Sangoma Switchvox SQL Injection Vulnerability

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

Broadcom VMware vCenter Path Traversal Vulnerability

Kludex Starlette HTTP Request/Response Smuggling Vulnerability

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

Gitea Code Injection Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Linux Kernel Unspecified Vulnerability

ownCloud Improper Authentication Vulnerability

Red Hat Libuser Race Condition Vulnerability

Linux Kernel Out-of-Bounds Write Vulnerability

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Microsoft SQL Server Remote Code Execution Vulnerability

PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

Microsoft SharePoint Weak Authentication Vulnerability

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

TrueConf Server Code Injection Vulnerability

TrueConf Server Missing Authentication for Critical Function Vulnerability

PTC Windchill and FlexPLM Improper Input Validation Vulnerability