Browse CVEs

MEDIUM 6.1 CVE-2025-67634 The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attack… Software Acquisition Guide 2025-12-11+ Fix from $1,6002025-12-12 HIGH 7.5 CVE-2025-35436 CISA Thorium uses '.unwrap()' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash… Thorium after 1.1.2 Fix from $1,9502025-09-17 CRITICAL 9.8 CVE-2025-35434 CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. An unauthenticated attacker with access to a Thorium cluster could … Thorium 1.1.2+ Fix from $2,3002025-09-17 HIGH 8.8 CVE-2025-35433 CISA Thorium does not properly invalidate previously used tokens when resetting passwords. An attacker that possesses a previously used token could s… Thorium Patch available Fix from $1,9502025-09-17 HIGH 7.5 CVE-2025-35432 CISA Thorium does not rate limit requests to send account verification email messages. A remote unauthenticated attacker can send unlimited messages … Thorium Patch available Fix from $1,9502025-09-17 MEDIUM 6.5 CVE-2025-35430 CISA Thorium does not adequately validate the paths of downloaded files via 'download_ephemeral' and 'download_children'. A remote, authenticated att… Thorium 1.1.2+ Fix from $1,6002025-09-17 MEDIUM 5.4 CVE-2025-35431 CISA Thorium does not escape user controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data such a… Thorium 1.1.1+ Fix from $1,6002025-09-17 CRITICAL 9.8 CVE-2023-7243 Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds writ… Icsnpp Ethercat Mitigation only Fix from $2,3002024-03-01 CRITICAL 9.8 CVE-2023-7244 Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds writ… Icsnpp Ethercat Mitigation only Fix from $2,3002024-03-01 HIGH 8.2 CVE-2023-7242 Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read… Icsnpp Ethercat Mitigation only Fix from $1,9502024-03-01