Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2025-40082 |
|
Out-of-Bounds Read in c (CVE-2025-40082)
vulnerability in c (CVE-2025-40082). Confidential information can be exposed externally.
|
| CVE-2025-40070 |
|
Vulnerability in c (CVE-2025-40070)
vulnerability in c (CVE-2025-40070). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40040 |
|
Vulnerability in c (CVE-2025-40040)
vulnerability in c (CVE-2025-40040). Successful exploitation can lead to full system takeover. Exploitable via ``VM_MERGEABLE``.
|
| CVE-2025-34292 |
|
Unsafe Deserialization in deserialization (CVE-2025-34292)
vulnerability in deserialization (CVE-2025-34292). Risk of unauthorized operations or information disclosure. Exploitable via ``formkit_memory_recovery``.
|
| CVE-2025-40022 |
|
Vulnerability in c (CVE-2025-40022)
vulnerability in c (CVE-2025-40022). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-54236 KEV |
|
[KEV] Vulnerability in Adobe commerce (CVE-2025-54236)
vulnerability in Adobe commerce (CVE-2025-54236). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2025-60837 |
|
Cross-Site Scripting (XSS) in mingsoft (CVE-2025-60837)
cross-site scripting in mingsoft (CVE-2025-60837). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-49662 |
|
Vulnerability in c (CVE-2022-49662)
vulnerability in c (CVE-2022-49662). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-11023 |
|
Vulnerability in CVE-2025-11023 (CVE-2025-11023)
vulnerability in CVE-2025-11023 (CVE-2025-11023). Successful exploitation can lead to full system takeover.
|
| CVE-2023-53718 |
|
Vulnerability in c (CVE-2023-53718)
vulnerability in c (CVE-2023-53718). Successful exploitation can lead to full system takeover.
|
| CVE-2023-53726 |
|
Vulnerability in c (CVE-2023-53726)
vulnerability in c (CVE-2023-53726). Confidential information can be exposed externally.
|
| CVE-2023-53692 |
|
Vulnerability in c (CVE-2023-53692)
vulnerability in c (CVE-2023-53692). Successful exploitation can lead to full system takeover.
|
| CVE-2022-50581 |
|
Vulnerability in c (CVE-2022-50581)
vulnerability in c (CVE-2022-50581). Successful exploitation can lead to full system takeover.
|
| CVE-2022-50560 |
|
Vulnerability in c (CVE-2022-50560)
vulnerability in c (CVE-2022-50560). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-60511 |
|
Vulnerability in CVE-2025-60511 (CVE-2025-60511)
vulnerability in CVE-2025-60511 (CVE-2025-60511). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-61884 KEV |
|
[KEV] Path Traversal in Oracle e-business-suite (CVE-2025-61884)
path traversal in Oracle e-business-suite (CVE-2025-61884). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2025-57567 |
|
Code Injection in CVE-2025-57567 (CVE-2025-57567)
code injection in CVE-2025-57567 (CVE-2025-57567). Successful exploitation can lead to full system takeover.
|
| CVE-2025-60641 |
|
SQL Injection in sqli (CVE-2025-60641)
SQL injection in sqli (CVE-2025-60641). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-34512 |
|
Cross-Site Scripting (XSS) in ilevia (CVE-2025-34512)
cross-site scripting in ilevia (CVE-2025-34512). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-11840 |
|
Buffer Overflow in c (CVE-2025-11840)
vulnerability in c (CVE-2025-11840). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-11839 |
|
Vulnerability in c (CVE-2025-11839)
vulnerability in c (CVE-2025-11839). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-40000 |
|
Vulnerability in c (CVE-2025-40000)
vulnerability in c (CVE-2025-40000). Successful exploitation can lead to full system takeover.
|
| CVE-2025-39983 |
|
Vulnerability in c (CVE-2025-39983)
vulnerability in c (CVE-2025-39983). Successful exploitation can lead to full system takeover.
|
| CVE-2025-39993 |
|
Vulnerability in c (CVE-2025-39993)
vulnerability in c (CVE-2025-39993). Successful exploitation can lead to full system takeover.
|
| CVE-2025-39982 |
|
Vulnerability in c (CVE-2025-39982)
vulnerability in c (CVE-2025-39982). Successful exploitation can lead to full system takeover.
|
| CVE-2025-39998 |
|
Vulnerability in c (CVE-2025-39998)
vulnerability in c (CVE-2025-39998). Confidential information can be exposed externally.
|
| CVE-2025-39972 |
|
Vulnerability in c (CVE-2025-39972)
vulnerability in c (CVE-2025-39972). Successful exploitation can lead to full system takeover.
|
| CVE-2025-39981 |
|
Vulnerability in Kernel (CVE-2025-39981)
vulnerability in Kernel (CVE-2025-39981). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.12.59, 6.16.10` or later.
|
| CVE-2025-39966 |
|
Vulnerability in c (CVE-2025-39966)
vulnerability in c (CVE-2025-39966). Successful exploitation can lead to full system takeover.
|
| CVE-2025-60308 |
|
Cross-Site Scripting (XSS) in fabian (CVE-2025-60308)
cross-site scripting in fabian (CVE-2025-60308). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-60302 |
|
Cross-Site Scripting (XSS) in fabian (CVE-2025-60302)
cross-site scripting in fabian (CVE-2025-60302). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-39962 |
|
Out-of-Bounds Write in c (CVE-2025-39962)
out-of-bounds write in c (CVE-2025-39962). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-39955 |
|
Vulnerability in c (CVE-2025-39955)
vulnerability in c (CVE-2025-39955). Successful exploitation can lead to full system takeover.
|
| CVE-2025-39956 |
|
Vulnerability in c (CVE-2025-39956)
vulnerability in c (CVE-2025-39956). Successful exploitation can lead to full system takeover.
|
| CVE-2025-11494 |
|
Buffer Overflow in c (CVE-2025-11494)
vulnerability in c (CVE-2025-11494). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-11495 |
|
Buffer Overflow in c (CVE-2025-11495)
vulnerability in c (CVE-2025-11495). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-60828 |
|
Unsafe Deserialization in deserialization (CVE-2025-60828)
vulnerability in deserialization (CVE-2025-60828). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-11414 |
|
Buffer Overflow in c (CVE-2025-11414)
vulnerability in c (CVE-2025-11414). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-11412 |
|
Buffer Overflow in c (CVE-2025-11412)
vulnerability in c (CVE-2025-11412). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-11413 |
|
Buffer Overflow in c (CVE-2025-11413)
vulnerability in c (CVE-2025-11413). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-53673 |
|
Use-After-Free in c (CVE-2023-53673)
vulnerability in c (CVE-2023-53673). Successful exploitation can lead to full system takeover.
|
| CVE-2023-53660 |
|
Vulnerability in c (CVE-2023-53660)
vulnerability in c (CVE-2023-53660). Successful exploitation can lead to full system takeover.
|
| CVE-2023-53645 |
|
Use-After-Free in c (CVE-2023-53645)
vulnerability in c (CVE-2023-53645). Successful exploitation can lead to full system takeover.
|
| CVE-2023-53630 |
|
Vulnerability in c (CVE-2023-53630)
vulnerability in c (CVE-2023-53630). Successful exploitation can lead to full system takeover.
|
| CVE-2022-50555 |
|
Vulnerability in c (CVE-2022-50555)
vulnerability in c (CVE-2022-50555). Successful exploitation can lead to full system takeover.
|
| CVE-2022-50536 |
|
Vulnerability in c (CVE-2022-50536)
vulnerability in c (CVE-2022-50536). Successful exploitation can lead to full system takeover.
|
| CVE-2025-0609 |
|
Cross-Site Scripting (XSS) in c (CVE-2025-0609)
cross-site scripting in c (CVE-2025-0609). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-61882 KEV |
|
[KEV] Authentication Bypass in Oracle e-business-suite (CVE-2025-61882)
authentication bypass in Oracle e-business-suite (CVE-2025-61882). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2023-53616 |
|
Vulnerability in c (CVE-2023-53616)
vulnerability in c (CVE-2023-53616). Successful exploitation can lead to full system takeover.
|
| CVE-2023-53599 |
|
Vulnerability in c (CVE-2023-53599)
vulnerability in c (CVE-2023-53599). Successful exploitation can lead to full system takeover.
|