Browse CVEs

HIGH 7.5 CVE-2025-32724 Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over … Windows 10 1507 10.0.10240.21034 / 10.0.14393.8148+ Fix from $1,9502025-06-10 MEDIUM 6.5 CVE-2025-3112 CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated malicious user sends manipul… Mitigation only Fix from $1,6002025-06-10 HIGH 7.5 CVE-2025-5896 A vulnerability was found in tarojs taro up to 4.1.1. It has been declared as problematic. This vulnerability affects unknown code of the file taro/p… Taro 4.1.2+ Fix from $1,9502025-06-09 HIGH 7.5 CVE-2025-5897 A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file p… Vue Cli after 5.0.8 Fix from $1,9502025-06-09 HIGH 7.5 CVE-2025-5892 A vulnerability, which was classified as problematic, has been found in RocketChat up to 7.6.1. This issue affects the function parseMessage of the f… Rocket.chat after 7.6.1 Fix from $1,9502025-06-09 HIGH 7.5 CVE-2025-5895 A vulnerability was found in Metabase 54.10. It has been classified as problematic. This affects the function parseDataUri of the file frontend/src/m… Metabase Patch available Fix from $1,9502025-06-09 MEDIUM 5.3 CVE-2025-5891 A vulnerability classified as problematic was found in Unitech pm2 up to 6.0.6. This vulnerability affects unknown code of the file /lib/tools/Config… Pm2 after 6.0.6 Fix from $1,6002025-06-09 HIGH 7.5 CVE-2025-48053 Discourse is an open-source discussion platform. Prior to version 3.4.4 of the `stable` branch, version 3.5.0.beta5 of the `beta` branch, and version… Discourse 3.4.4 / 3.5.0+ Fix from $1,9502025-06-09 MEDIUM 5.7 CVE-2025-25208 A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster Mitigation only Fix from $1,6002025-06-09 HIGH 8.7 CVE-2025-41360 Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The device is vulnerable to a packet flooding denial … Mitigation only Fix from $1,9502025-06-06 HIGH 8.3 CVE-2025-41361 Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The devices improperly handle TLS requests associated… Mitigation only Fix from $1,9502025-06-06 MEDIUM 5.7 CVE-2025-49000 InvenTree is an Open Source Inventory Management System. Prior to version 0.17.13, the skip field in the built-in `label-sheet` plugin lacks an upper… Inventree 0.17.13+ Fix from $1,6002025-06-03 MEDIUM 5.6 CVE-2024-53423 An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted packets. Onos No fix yet Fix from $1,6002025-05-29 HIGH 7.4 CVE-2025-5024 A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resou… Mitigation only Fix from $1,9502025-05-22 MEDIUM 6.8 CVE-2025-41226 VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious actor with guest operation privileg… Mitigation only Fix from $1,6002025-05-20 MEDIUM 5.5 CVE-2025-41227 VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrativ… Mitigation only Fix from $1,6002025-05-20 HIGH 7.5 CVE-2025-26481 Dell PowerScale OneFS, versions 9.4.0.0 through 9.9.0.0, contains an uncontrolled resource consumption vulnerability. A remote unprivileged attacker … Powerscale Onefs after 9.9.0.0 Fix from $1,9502025-05-15 HIGH 7.5 CVE-2025-30476 Dell PowerScale InsightIQ, version 5.2, contains an uncontrolled resource consumption vulnerability. An unauthenticated attacker with remote access c… Insightiq Mitigation only Fix from $1,9502025-05-15 HIGH 7.5 CVE-2025-26783 An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, W1000, Mod… Exynos 2100 Firmware Mitigation only Fix from $1,9502025-05-14 MEDIUM 6.5 CVE-2025-22892 Uncontrolled resource consumption for some OpenVINO™ model server software maintained by Intel(R) before version 2024.4 may allow an unauthenticated … Mitigation only Fix from $1,6002025-05-13 MEDIUM 5.5 CVE-2025-20616 Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentiall… No fix yet Fix from $1,6002025-05-13 MEDIUM 5.9 CVE-2025-29954 Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a netw… Windows 10 1507 10.0.10240.21014 / 10.0.14393.8066+ Fix from $1,6002025-05-13 MEDIUM 6.2 CVE-2025-29957 Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally. Windows 10 1507 10.0.10240.21014 / 10.0.14393.8066+ Fix from $1,6002025-05-13 HIGH 7.5 CVE-2025-26677 Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network. Windows Server 2016 10.0.14393.8066 / 10.0.17763.7314+ Fix from $1,9502025-05-13 MEDIUM 5.5 CVE-2025-31251 The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS S… Ipados 2.5 / 11.5+ Fix from $1,6002025-05-12 MEDIUM 5.5 CVE-2025-31245 The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6… Ipados 2.5 / 13.7.6+ Fix from $1,6002025-05-12 MEDIUM 5.5 CVE-2025-31226 A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visi… Ipados 2.5 / 11.5+ Fix from $1,6002025-05-12 MEDIUM 6.5 CVE-2025-31210 The issue was addressed with improved UI. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing web content may lead to a denial… Ipados 17.7.7 / 18.5+ Fix from $1,6002025-05-12 HIGH 7.5 CVE-2025-47270 nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. The `nimiq-network-… Patch available Fix from $1,9502025-05-12 HIGH 7.5 CVE-2025-4533 A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-bo… Jeecg Boot after 3.8.0 Fix from $1,9502025-05-11