Vulnerability index

Browse CVEs

47 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wazuh HIGH 7.5
CVE-2025-62790

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fim_fetch_attributes_state() implement…

Fix: 4.11.0+
Fix from $1,950 2025-10-29
Wazuh HIGH 8.1
CVE-2025-62786

Wazuh is a free and open source platform used for threat prevention, detection, and response. A heap-based out-of-bounds WRITE occurs in decode_win_p…

Fix: 4.10.2+
Fix from $1,950 2025-10-29
Wazuh HIGH 7.5
CVE-2025-62785

Wazuh is a free and open source platform used for threat prevention, detection, and response. fillData() implementation does not check whether value …

Fix: 4.10.2+
Fix from $1,950 2025-10-29
Wazuh MEDIUM 6.5
CVE-2025-59938

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh…

Fix: 4.11.0+
Fix from $1,600 2025-09-27
Wazuh HIGH 7.2
CVE-2024-1243

Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to…

Fix: 4.8.0+
Fix from $1,950 2025-06-11
Wazuh CRITICAL 9.9
CVE-2025-24016 KEVEPSS 94%

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, a…

Fix: 4.9.1+
Fix from $2,300 2025-02-10
Wazuh HIGH 8.0
CVE-2024-47770

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premise…

Fix: 4.9.1+
Fix from $1,950 2025-02-03
Wazuh HIGH 7.8
CVE-2024-35177

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premise…

Fix: 4.9.0+
Fix from $1,950 2025-02-03
Wazuh CRITICAL 9.8
CVE-2024-32038

Wazuh is a free and open source platform used for threat prevention, detection, and response. There is a buffer overflow hazard in wazuh-analysisd wh…

Fix: 4.7.2+
Fix from $2,300 2024-04-19
Wazuh HIGH 8.8
CVE-2023-50260EPSS 41%

Wazuh is a free and open source platform used for threat prevention, detection, and response. A wrong validation in the `host_deny` script allows to …

Fix: 4.7.2+
Fix from $1,950 2024-04-19
Wazuh MEDIUM 6.5
CVE-2023-49275

Wazuh is a free and open source platform used for threat prevention, detection, and response. A NULL pointer dereference was detected during fuzzing …

Fix: 4.7.1+
Fix from $1,600 2024-04-19
Wazuh HIGH 7.8
CVE-2023-42463

Wazuh is a free and open source platform used for threat prevention, detection, and response. This bug introduced a stack overflow hazard that could …

Fix: 4.5.3+
Fix from $1,950 2024-01-12
Wazuh Dashboard HIGH 8.8
CVE-2023-42455

Wazuh is a security detection, visibility, and compliance open source project. In versions 4.4.0 and 4.4.1, it is possible to get the Wazuh API admin…

Fix: 4.4.2+
Fix from $1,950 2023-10-09
Wazuh HIGH 8.8
CVE-2022-40497

Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability vi…

Fix: after 4.3.7
Fix from $1,950 2022-09-28
Wazuh CRITICAL 9.8
CVE-2021-44079

In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl command line, potentially resulting…

Fix: 4.2.5+
Fix from $2,300 2021-11-22
Wazuh MEDIUM 6.5
CVE-2021-41821

Wazuh Manager in Wazuh through 4.1.5 is affected by a remote Integer Underflow vulnerability that might lead to denial of service. A crafted message …

Fix: after 4.1.5
Fix from $1,600 2021-09-29
Wazuh HIGH 8.8
CVE-2021-26814EPSS 9%

Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An…

Fix: after 4.0.3
Fix from $1,950 2021-03-06