Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper Input ValidationCWE-20 × clear
Unclassified MEDIUM 5.3
CVE-2025-4742

A vulnerability classified as problematic has been found in XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9ba856. Affected is the functi…

Mitigation only
Fix from $1,600 2025-05-16
Unclassified MEDIUM 5.3
CVE-2025-4740

A vulnerability was found in BeamCtrl Airiana up to 11.0. It has been declared as problematic. This vulnerability affects unknown code of the file co…

Mitigation only
Fix from $1,600 2025-05-16
Kernel HIGH 7.9
CVE-2024-52880

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.5…

Fix: 5.29.50 / 5.38.50+
Fix from $1,950 2025-05-15
Unclassified MEDIUM 5.3
CVE-2025-4701

A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue affects the function torch.l…

Mitigation only
Fix from $1,600 2025-05-15
Unclassified MEDIUM 6.6
CVE-2025-46836

net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to …

Patch available
Fix from $1,600 2025-05-14
Dingtalk MEDIUM 5.9
CVE-2025-47888

Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured Ding…

Fix: after 2.7.3
Fix from $1,600 2025-05-14
5ire CRITICAL 9.6
CVE-2025-47777

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Versions prior to 0.11.1 are vulnerable to stor…

Fix: 0.11.1+
Fix from $2,300 2025-05-14
Coldfusion CRITICAL 9.1
CVE-2025-43559

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary co…

Mitigation only
Fix from $2,300 2025-05-13
Coldfusion CRITICAL 9.1
CVE-2025-43560EPSS 19%

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary co…

Mitigation only
Fix from $2,300 2025-05-13
Unclassified HIGH 7.5
CVE-2025-24308

Improper input validation in the UEFI firmware error handler for the Intel(R) Server D50DNP and M50FCP may allow a privileged user to potentially ena…

Mitigation only
Fix from $1,950 2025-05-13
Unclassified HIGH 7.5
CVE-2025-21094

Improper input validation in the UEFI firmware DXE module for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to potentially…

Mitigation only
Fix from $1,950 2025-05-13
Unclassified MEDIUM 6.5
CVE-2025-20031

Improper input validation for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access.

Mitigation only
Fix from $1,600 2025-05-13
Proset\/wireless Wifi HIGH 7.9
CVE-2025-20032

Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentiall…

Fix: 23.100.0+
Fix from $1,950 2025-05-13
Unclassified MEDIUM 5.3
CVE-2025-20034

Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards before version R0…

Mitigation only
Fix from $1,600 2025-05-13
Windows 10 1507 HIGH 7.8
CVE-2025-32706 KEV

Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,950 2025-05-13
Windows Server 2008 MEDIUM 6.5
CVE-2025-29968

Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.

Fix: 10.0.14393.8066 / 10.0.17763.7314+
Fix from $1,600 2025-05-13
Windows 11 24h2 MEDIUM 5.5
CVE-2025-29955

Improper input validation in Windows Hyper-V allows an unauthorized attacker to deny service locally.

Fix: 10.0.25398.1611 / 10.0.26100.4061+
Fix from $1,600 2025-05-13
Unclassified MEDIUM 6.5
CVE-2025-40556

A vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 (All versions), BACnet ATEC 550-445 (All versions), BA…

Mitigation only
Fix from $1,600 2025-05-13
Unclassified MEDIUM 6.5
CVE-2025-24510

A vulnerability has been identified in MS/TP Point Pickup Module (All versions). Affected devices improperly handle specific incoming BACnet MSTP mes…

Mitigation only
Fix from $1,600 2025-05-13
macOS HIGH 7.8
CVE-2025-31259

A privacy issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26.…

Fix: 15.5+
Fix from $1,950 2025-05-12
macOS HIGH 7.5
CVE-2025-31240

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. Mounting a malic…

Fix: 13.7.6 / 14.7.6+
Fix from $1,950 2025-05-12
Ipados MEDIUM 6.3
CVE-2025-31233

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS S…

Fix: 2.5 / 11.5+
Fix from $1,600 2025-05-12
Safari MEDIUM 6.5
CVE-2025-31215

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 1…

Fix: 2.5 / 11.5+
Fix from $1,600 2025-05-12
Safari MEDIUM 6.5
CVE-2025-31217

The issue was addressed with improved input validation. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15…

Fix: 2.5 / 11.5+
Fix from $1,600 2025-05-12
macOS HIGH 7.8
CVE-2025-30442

The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An ap…

Fix: 13.7.6 / 14.7.6+
Fix from $1,950 2025-05-12
Ipados HIGH 7.5
CVE-2025-31208

The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6…

Fix: 2.5 / 11.5+
Fix from $1,950 2025-05-12
macOS HIGH 7.8
CVE-2025-24274

An input validation issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventur…

Fix: 13.7.6 / 14.7.6+
Fix from $1,950 2025-05-12
Unclassified CRITICAL 9.3
CVE-2025-1087

Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vuln…

Mitigation only
Fix from $2,300 2025-05-09
Unclassified HIGH 8.3
CVE-2025-4377

Improper Limitation of a Pathname caused a Path Traversal vulnerability in Sparx Systems Pro Cloud Server. This vulnerability is present in logview.…

Mitigation only
Fix from $1,950 2025-05-09
Unclassified MEDIUM 5.3
CVE-2025-4376

Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server's WebEA model search field allows Cross-Site Scripting (XSS). This issue a…

Mitigation only
Fix from $1,600 2025-05-09