Browse CVEs

MEDIUM 5.3 CVE-2025-48888 Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.41.3 and prior to versions 2.1.13, 2.2.13, and 2.3.2, `deno run --al… Deno 2.1.13 / 2.2.13+ Fix from $1,6002025-06-04 HIGH 8.6 CVE-2025-21479 KEV Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. Aqt1000 Firmware No fix yet Fix from $1,9502025-06-03 HIGH 8.6 CVE-2025-21480 KEV Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. Aqt1000 Firmware Mitigation only Fix from $1,9502025-06-03 HIGH 8.3 CVE-2025-3260 A security vulnerability in the /apis/dashboard.grafana.app/* endpoints allows authenticated users to bypass dashboard and folder permissions. The vu… Mitigation only Fix from $1,9502025-06-02 CRITICAL 9.8 CVE-2025-20674 In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of priv… Openwrt after 7.6.7.2 Fix from $2,3002025-06-02 MEDIUM 6.5 CVE-2025-48948 Navidrome is an open source web-based music collection server and streamer. A permission verification flaw in versions prior to 0.56.0 allows any aut… Navidrome 0.56.0+ Fix from $1,6002025-05-30 MEDIUM 5.4 CVE-2024-7096 A privilege escalation vulnerability exists in multiple WSO2 products due to a business logic flaw in SOAP admin services. A malicious actor can crea… Api Manager Mitigation only Fix from $1,6002025-05-30 HIGH 8.3 CVE-2025-48881 Valtimo is a platform for Business Process Automation. In versions starting from 11.0.0.RELEASE to 11.3.3.RELEASE and 12.0.0.RELEASE to 12.12.0.RELEA… Patch available Fix from $1,9502025-05-30 CRITICAL 9.3 CVE-2025-48757 An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrar… Mitigation only Fix from $2,3002025-05-30 HIGH 8.1 CVE-2025-48475 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the System does not provide a check on which "clients" of the… Freescout 1.8.180+ Fix from $1,9502025-05-29 HIGH 8.1 CVE-2025-48474 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application incorrectly checks user access rights for con… Freescout 1.8.180+ Fix from $1,9502025-05-29 HIGH 8.1 CVE-2025-48472 FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, there is no check to ensure that the user is disabling notifi… Freescout 1.8.179+ Fix from $1,9502025-05-29 HIGH 7.8 CVE-2025-25251 An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may allow a loca… Forticlient 7.2.9 / 7.4.3+ Fix from $1,9502025-05-28 CRITICAL 9.1 CVE-2025-48373 Schule is open-source school management system software. The application relies on client-side JavaScript (index.js) to redirect users to different p… Schule School Management System Patch available Fix from $2,3002025-05-22 CRITICAL 9.8 CVE-2024-6914 An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin ser… Api Manager Mitigation only Fix from $2,3002025-05-22 MEDIUM 6.0 CVE-2024-13947 Device commissioning parameters in ASPECT may be modified by an external source if administrative credentials become compromisedThis issue affects AS… Mitigation only Fix from $1,6002025-05-22 CRITICAL 9.0 CVE-2025-30171 System File Deletion vulnerabilities in ASPECT provide attackers access to delete system files if session administrator credentials become compromise… Mitigation only Fix from $2,3002025-05-22 MEDIUM 6.5 CVE-2025-20257 A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authe… Secure Network Analytics Mitigation only Fix from $1,6002025-05-21 MEDIUM 5.1 CVE-2025-1418 A low-privileged user can access information about profiles created in Proget MDM (Mobile Device Management), which contain details about allowed/pro… Mitigation only Fix from $1,6002025-05-21 HIGH 7.0 CVE-2025-1416 In Proget MDM, a low-privileged user can retrieve passwords for managed devices and subsequently use functionalities restricted by the MDM (Mobile De… Mitigation only Fix from $1,9502025-05-21 MEDIUM 5.1 CVE-2025-1415 A low-privileged user is able to obtain information about tasks executed on devices controlled by Proget MDM (Mobile Device Management), as well as d… Mitigation only Fix from $1,6002025-05-21 MEDIUM 5.3 CVE-2025-47937 TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 … TYPO3 9.5.51 / 10.4.50+ Fix from $1,6002025-05-20 MEDIUM 5.3 CVE-2025-47930 Zulip is an open-source team chat application. Starting in version 10.0 and prior to version 10.3, the "Who can create public channels" access contro… Zulip 10.3+ Fix from $1,6002025-05-16 MEDIUM 6.6 CVE-2025-46834 Alchemy's Modular Account is a smart contract account that is compatible with ERC-4337 and ERC-6900. In versions on the 2.x branch prior to commit 5e… Patch available Fix from $1,6002025-05-15 CRITICAL 9.1 CVE-2025-43564EPSS 15% ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file… Coldfusion Mitigation only Fix from $2,3002025-05-13 HIGH 8.4 CVE-2025-43565EPSS 16% ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary code e… Coldfusion Mitigation only Fix from $1,9502025-05-13 CRITICAL 9.1 CVE-2025-43561EPSS 21% ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code… Coldfusion Mitigation only Fix from $2,3002025-05-13 HIGH 7.2 CVE-2025-4646 Incorrect Authorization vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.0… Centreon Web 24.04.10 / 24.10.4+ Fix from $1,9502025-05-13 HIGH 8.8 CVE-2025-27696 Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read… Superset 4.1.2+ Fix from $1,9502025-05-13 MEDIUM 5.5 CVE-2025-30440 The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be abl… macOS 13.7.6 / 14.7.6+ Fix from $1,6002025-05-12