Browse CVEs

CRITICAL 9.8 CVE-2025-2618 A vulnerability, which was classified as critical, has been found in D-Link DAP-1620 1.03. Affected by this issue is the function set_ws_action of th… Dap 1620 Firmware No fix yet Fix from $2,3002025-03-22 CRITICAL 9.8 CVE-2025-2619 A vulnerability, which was classified as critical, was found in D-Link DAP-1620 1.03. This affects the function check_dws_cookie of the file /storage… Dap 1620 Firmware No fix yet Fix from $2,3002025-03-22 CRITICAL 9.8 CVE-2025-30472 Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_con… Corosync after 3.1.9 Fix from $2,3002025-03-22 MEDIUM 6.8 CVE-2025-2584 A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function BinaryReaderInterp::G… Wabt No fix yet Fix from $1,6002025-03-21 HIGH 7.5 CVE-2024-13903 A vulnerability was found in quickjs-ng QuickJS up to 0.8.0. It has been declared as problematic. Affected by this vulnerability is the function JS_G… Quickjs 0.9.0+ Fix from $1,9502025-03-21 CRITICAL 9.8 CVE-2025-26336 Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller… Chassis Management Controller For Poweredge Fx2 Firmware 2.40.200.202101130302 / 3.41.200.202209300499+ Fix from $2,3002025-03-21 HIGH 7.8 CVE-2025-2480 Santesoft Sante DICOM Viewer Pro is vulnerable to an out-of-bounds write, which requires a user to open a malicious DCM file, resulting in execution … Dicom Viewer Pro 14.2.0+ Fix from $1,9502025-03-20 CRITICAL 9.8 CVE-2025-29911 CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communication… Cryptolib No fix yet Fix from $2,3002025-03-17 CRITICAL 9.8 CVE-2025-29912 CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communication… Cryptolib 1.4.0+ Fix from $2,3002025-03-17 CRITICAL 9.8 CVE-2025-29909 CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communication… Cryptolib 1.4.0+ Fix from $2,3002025-03-17 MEDIUM 5.5 CVE-2025-24185 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Vent… macOS 13.7.3 / 14.7.3+ Fix from $1,6002025-03-17 CRITICAL 9.8 CVE-2025-2370 A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been declared as critical. Affected by this vulnerability is the f… Ex1800t Firmware after 9.1.0cu.2112_b20220316 Fix from $2,3002025-03-17 CRITICAL 9.8 CVE-2025-2369 A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been classified as critical. Affected is the function setPasswordC… Ex1800t Firmware after 9.1.0cu.2112_b20220316 Fix from $2,3002025-03-17 HIGH 8.8 CVE-2025-2368 A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::interp::(anonymous namespace):… Wabt Patch available Fix from $1,9502025-03-17 HIGH 7.8 CVE-2025-2308 A vulnerability, which was classified as critical, was found in HDF5 1.14.6. This affects the function H5Z__scaleoffset_decompress_one_byte of the co… Hdf5 No fix yet Fix from $1,9502025-03-14 HIGH 7.8 CVE-2025-2309 A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5T__bit_copy of the component Type… Hdf5 No fix yet Fix from $1,9502025-03-14 HIGH 7.8 CVE-2025-2310 A vulnerability was found in HDF5 1.14.6 and classified as critical. This issue affects the function H5MM_strndup of the component Metadata Attribute… Hdf5 No fix yet Fix from $1,9502025-03-14 CRITICAL 9.8 CVE-2025-29384 In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote ar… Ac9 Firmware No fix yet Fix from $2,3002025-03-14 CRITICAL 9.8 CVE-2025-29385 In Tenda AC9 v1.0 V15.03.05.14_multi, the cloneType parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote… Ac9 Firmware No fix yet Fix from $2,3002025-03-14 CRITICAL 9.8 CVE-2025-29386 In Tenda AC9 v1.0 V15.03.05.14_multi, the mac parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbit… Ac9 Firmware No fix yet Fix from $2,3002025-03-14 HIGH 7.1 CVE-2025-29387 In Tenda AC9 v1.0 V15.03.05.14_multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote … Ac9 Firmware No fix yet Fix from $1,9502025-03-14 CRITICAL 9.8 CVE-2025-29030 Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function. Ac6 Firmware No fix yet Fix from $2,3002025-03-14 CRITICAL 9.8 CVE-2025-29031 Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function. Ac6 Firmware No fix yet Fix from $2,3002025-03-14 CRITICAL 9.8 CVE-2025-29029 Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function. Ac6 Firmware No fix yet Fix from $2,3002025-03-14 CRITICAL 9.8 CVE-2025-2263 During login to the web server in "Sante PACS Server.exe", OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password. A fixed… Sante Pacs Server No fix yet Fix from $2,3002025-03-13 HIGH 7.8 CVE-2025-1651 A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage… Autocad Mechanical 2022.1.6 / 2023.1.7+ Fix from $1,9502025-03-13 HIGH 7.8 CVE-2025-1429 A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage… Autocad 2022.1.6 / 2023.1.7+ Fix from $1,9502025-03-13 HIGH 7.8 CVE-2025-1430 A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage … Autocad 2022.1.6 / 2023.1.7+ Fix from $1,9502025-03-13 MEDIUM 5.5 CVE-2025-21865 In the Linux kernel, the following vulnerability has been resolved: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). Brad Spengler… Linux Kernel 6.1.130 / 6.6.80+ Fix from $1,6002025-03-12 HIGH 7.8 CVE-2025-2020 Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute … Cobalt Mitigation only Fix from $1,9502025-03-11