Browse CVEs

HIGH 7.5 CVE-2025-21230 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Windows 10 1507 10.0.10240.20890 / 10.0.14393.7699+ Fix from $1,9502025-01-14 HIGH 7.3 CVE-2025-0465 A vulnerability was found in AquilaCMS 1.412.13. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api… Mitigation only Fix from $1,9502025-01-14 CRITICAL 9.8 CVE-2024-42175 HCL MyXalytics is affected by a weak input validation vulnerability. The application accepts special characters and there is no length validation. T… Dryice Myxalytics Mitigation only Fix from $2,3002025-01-11 CRITICAL 9.8 CVE-2025-22137 Pingvin Share is a self-hosted file sharing platform and an alternative for WeTransfer. This vulnerability allows an authenticated or unauthenticated… Patch available Fix from $2,3002025-01-08 HIGH 7.5 CVE-2024-54121 Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. Harmonyos No fix yet Fix from $1,9502025-01-08 MEDIUM 5.3 CVE-2024-47934 Improper Input Validation vulnerability in Management Program in TXOne Networks Portable Inspector and Portable Inspector Pro Edition allows remote a… Mitigation only Fix from $1,6002025-01-08 HIGH 7.5 CVE-2024-56437 Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect … Harmonyos No fix yet Fix from $1,9502025-01-08 CRITICAL 9.8 CVE-2024-13136 A vulnerability was found in wangl1989 mysiteforme 1.0 and classified as critical. Affected by this issue is the function rememberMeManager of the fi… Mysiteforme No fix yet Fix from $2,3002025-01-05 HIGH 7.2 CVE-2024-12912 An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution. Refer to the '01/02/2025 ASUS … Mitigation only Fix from $1,9502025-01-02 MEDIUM 6.3 CVE-2024-12994 A vulnerability was found in running-elephant Datart 1.0.0-rc3. It has been rated as critical. Affected by this issue is the function extractModel of… Mitigation only Fix from $1,6002024-12-28 HIGH 7.5 CVE-2021-22484 Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability… Harmonyos Mitigation only Fix from $1,9502024-12-28 HIGH 8.6 CVE-2024-21549 Versions of the package spatie/browsershot before 5.0.3 are vulnerable to Improper Input Validation due to improper URL validation in the setUrl meth… Patch available Fix from $1,9502024-12-20 HIGH 7.5 CVE-2022-32204 There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulnerability may cause service abno… Cv81 Wdm Firmware No fix yet Fix from $1,9502024-12-20 HIGH 7.5 CVE-2022-34159 Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause device service exceptions. (Vulnera… Cv81 Wdm Firmware Mitigation only Fix from $1,9502024-12-20 HIGH 8.6 CVE-2022-32144 There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerability may lead to service abnorm… Cv81 Wdm Firmware No fix yet Fix from $1,9502024-12-20 HIGH 8.8 CVE-2024-25131 A flaw was found in the MustGather.managed.openshift.io Custom Defined Resource (CRD) of OpenShift Dedicated. A non-privileged user on the cluster ca… Patch available Fix from $1,9502024-12-19 MEDIUM 5.4 CVE-2024-52579 Misskey is an open source, federated social media platform. Some APIs using `HttpRequestService` do not properly check the target host. This vulnerab… Misskey 2024.11.0+ Fix from $1,6002024-12-18 MEDIUM 6.5 CVE-2024-52590 Misskey is an open source, federated social media platform. In affected versions missing validation in `ApRequestService.signedGet` allows an attacke… Misskey 2024.11.0+ Fix from $1,6002024-12-18 CRITICAL 9.3 CVE-2024-52591 Misskey is an open source, federated social media platform. In affected versions missing validation in `ApRequestService.signedGet` and `HttpRequestS… Misskey 2024.11.0+ Fix from $2,3002024-12-18 MEDIUM 5.3 CVE-2024-52592 Misskey is an open source, federated social media platform. In affected versions missing validation in `ApInboxService.update` allows an attacker to … Misskey 2024.11.0+ Fix from $1,6002024-12-18 MEDIUM 5.3 CVE-2024-52593 Misskey is an open source, federated social media platform.In affected versions missing validation in `NoteCreateService.insertNote`, `ApPersonServic… Misskey 2024.11.0+ Fix from $1,6002024-12-18 HIGH 8.8 CVE-2024-55952 DataEase is an open source business analytics tool. Authenticated users can remotely execute code through the backend JDBC connection. When construct… Dataease 1.18.27+ Fix from $1,9502024-12-18 HIGH 7.0 CVE-2020-12487 Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some … Mitigation only Fix from $1,9502024-12-17 HIGH 8.6 CVE-2024-21544 Versions of the package spatie/browsershot before 5.0.1 are vulnerable to Improper Input Validation due to improper URL validation in the setUrl meth… Patch available Fix from $1,9502024-12-13 MEDIUM 6.7 CVE-2024-47238 Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with l… Embedded Box Pc 3000 Firmware 1.19.0 / 1.25.0+ Fix from $1,6002024-12-12 HIGH 7.5 CVE-2024-54100 Vulnerability of improper access control in the secure input module Impact: Successful exploitation of this vulnerability may cause features to perfo… Emui No fix yet Fix from $1,9502024-12-12 MEDIUM 5.5 CVE-2024-54101 Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availability. Emui No fix yet Fix from $1,6002024-12-12 MEDIUM 6.8 CVE-2024-49073 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.6659 / 10.0.19044.5247+ Fix from $1,6002024-12-12 HIGH 8.1 CVE-2024-49057 Microsoft Defender for Endpoint on Android Spoofing Vulnerability Defender For Endpoint 1.0.7128.0101+ Fix from $1,9502024-12-12 CRITICAL 9.8 CVE-2024-11737 CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of the control… Mitigation only Fix from $2,3002024-12-11