Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2025-38075 |
|
Vulnerability in linux (CVE-2025-38075)
vulnerability in linux (CVE-2025-38075). Successful exploitation can lead to full system takeover.
|
| CVE-2025-4404 |
|
Vulnerability in privilege-escalation (CVE-2025-4404)
vulnerability in privilege-escalation (CVE-2025-4404). Successful exploitation can lead to full system takeover. Exploitable via ``krbCanonicalName``.
|
| CVE-2025-49796 |
|
Out-of-Bounds Read in dos (CVE-2025-49796)
vulnerability in dos (CVE-2025-49796). Data can be tampered with by attackers.
|
| CVE-2025-49794 |
|
Vulnerability in CVE-2025-49794 (CVE-2025-49794)
vulnerability in CVE-2025-49794 (CVE-2025-49794). Data can be tampered with by attackers.
|
| CVE-2025-46060 |
|
Vulnerability in totolink (CVE-2025-46060)
vulnerability in totolink (CVE-2025-46060). Successful exploitation can lead to full system takeover.
|
| CVE-2025-44148 |
|
Cross-Site Scripting (XSS) in mailenable (CVE-2025-44148)
cross-site scripting in mailenable (CVE-2025-44148). Successful exploitation can lead to full system takeover.
|
| CVE-2025-4517 |
|
Path Traversal in CVE-2025-4517 (CVE-2025-4517)
path traversal in CVE-2025-4517 (CVE-2025-4517). Confidential information can be exposed externally.
|
| CVE-2025-48938 |
|
Vulnerability in go-gh (CVE-2025-48938)
vulnerability in go-gh (CVE-2025-48938). Successful exploitation can lead to full system takeover.
|
| CVE-2025-44619 |
|
Vulnerability in tinxy (CVE-2025-44619)
vulnerability in tinxy (CVE-2025-44619). Confidential information can be exposed externally.
|
| CVE-2025-45343 |
|
Vulnerability in tenda (CVE-2025-45343)
vulnerability in tenda (CVE-2025-45343). Successful exploitation can lead to full system takeover.
|
| CVE-2025-34027 |
|
Vulnerability in versa-networks (CVE-2025-34027)
vulnerability in versa-networks (CVE-2025-34027). Successful exploitation can lead to full system takeover.
|
| CVE-2025-37959 |
|
Vulnerability in linux (CVE-2025-37959)
vulnerability in linux (CVE-2025-37959). Data can be tampered with by attackers.
|
| CVE-2025-37935 |
|
Vulnerability in linux (CVE-2025-37935)
vulnerability in linux (CVE-2025-37935). Successful exploitation can lead to full system takeover.
|
| CVE-2025-37894 |
|
Vulnerability in linux (CVE-2025-37894)
vulnerability in linux (CVE-2025-37894). Successful exploitation can lead to full system takeover.
|
| CVE-2025-42999 KEV |
|
[KEV] Unsafe Deserialization in Sap netweaver (CVE-2025-42999)
vulnerability in Sap netweaver (CVE-2025-42999). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2025-28200 |
|
Vulnerability in govicture (CVE-2025-28200)
vulnerability in govicture (CVE-2025-28200). Successful exploitation can lead to full system takeover.
|
| CVE-2025-37879 |
|
Out-of-Bounds Read in linux (CVE-2025-37879)
vulnerability in linux (CVE-2025-37879). Successful exploitation can lead to full system takeover.
|
| CVE-2025-3248 KEV |
|
[KEV] Code Injection in langflow (CVE-2025-3248)
code injection in langflow (CVE-2025-3248). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `1.3.0` or later.
|
| CVE-2023-53116 |
|
Use-After-Free in linux (CVE-2023-53116)
vulnerability in linux (CVE-2023-53116). Successful exploitation can lead to full system takeover.
|
| CVE-2023-53083 |
|
Vulnerability in linux (CVE-2023-53083)
vulnerability in linux (CVE-2023-53083). Successful exploitation can lead to full system takeover.
|
| CVE-2025-2421 |
|
Code Injection in felisify (CVE-2025-2421)
code injection in felisify (CVE-2025-2421). Successful exploitation can lead to full system takeover.
|
| CVE-2025-2812 |
|
SQL Injection in sqli (CVE-2025-2812)
SQL injection in sqli (CVE-2025-2812). Successful exploitation can lead to full system takeover.
|
| CVE-2022-49770 |
|
Use-After-Free in linux (CVE-2022-49770)
vulnerability in linux (CVE-2022-49770). Successful exploitation can lead to full system takeover.
|
| CVE-2025-37778 |
|
Use-After-Free in linux (CVE-2025-37778)
vulnerability in linux (CVE-2025-37778). Successful exploitation can lead to full system takeover.
|
| CVE-2025-37750 |
|
Use-After-Free in linux (CVE-2025-37750)
vulnerability in linux (CVE-2025-37750). Successful exploitation can lead to full system takeover.
|
| CVE-2025-31324 KEV |
|
[KEV] Unrestricted File Upload in Sap netweaver (CVE-2025-31324)
vulnerability in Sap netweaver (CVE-2025-31324). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2025-45947 |
|
Code Injection in phpgurukul (CVE-2025-45947)
code injection in phpgurukul (CVE-2025-45947). Successful exploitation can lead to full system takeover.
|
| CVE-2025-45949 |
|
Vulnerability in phpgurukul (CVE-2025-45949)
vulnerability in phpgurukul (CVE-2025-45949). Successful exploitation can lead to full system takeover.
|
| CVE-2025-45953 |
|
Vulnerability in phpgurukul (CVE-2025-45953)
vulnerability in phpgurukul (CVE-2025-45953). Confidential information can be exposed externally.
|
| CVE-2025-29287 |
|
Unrestricted File Upload in mingsoft (CVE-2025-29287)
vulnerability in mingsoft (CVE-2025-29287). Successful exploitation can lead to full system takeover.
|
| CVE-2025-22110 |
|
Vulnerability in linux (CVE-2025-22110)
vulnerability in linux (CVE-2025-22110). Successful exploitation can lead to full system takeover.
|
| CVE-2025-22088 |
|
Use-After-Free in linux (CVE-2025-22088)
vulnerability in linux (CVE-2025-22088). Successful exploitation can lead to full system takeover.
|
| CVE-2025-22077 |
|
Vulnerability in linux (CVE-2025-22077)
vulnerability in linux (CVE-2025-22077). Successful exploitation can lead to full system takeover.
|
| CVE-2025-22021 |
|
Vulnerability in linux (CVE-2025-22021)
vulnerability in linux (CVE-2025-22021). Successful exploitation can lead to full system takeover.
|
| CVE-2025-32911 |
|
Vulnerability in CVE-2025-32911 (CVE-2025-32911)
vulnerability in CVE-2025-32911 (CVE-2025-32911). Successful exploitation can lead to full system takeover.
|
| CVE-2025-1782 |
|
Code Injection in avantfax (CVE-2025-1782)
code injection in avantfax (CVE-2025-1782). Successful exploitation can lead to full system takeover.
|
| CVE-2025-22871 |
|
Vulnerability in spiral/roadrunner (CVE-2025-22871)
vulnerability in spiral/roadrunner (CVE-2025-22871). Confidential information can be exposed externally. Mitigation: upgrade to `2025.1.0` or later.
|
| CVE-2025-22457 KEV |
|
[KEV] Vulnerability in Ivanti connect-secure (CVE-2025-22457)
vulnerability in Ivanti connect-secure (CVE-2025-22457). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2025-21988 |
|
Vulnerability in linux (CVE-2025-21988)
vulnerability in linux (CVE-2025-21988). Successful exploitation can lead to full system takeover. Exploitable via ``prev_donated``.
|
| CVE-2025-21954 |
|
Vulnerability in linux (CVE-2025-21954)
vulnerability in linux (CVE-2025-21954). Successful exploitation can lead to full system takeover.
|
| CVE-2025-21927 |
|
Out-of-Bounds Write in linux (CVE-2025-21927)
out-of-bounds write in linux (CVE-2025-21927). Successful exploitation can lead to full system takeover.
|
| CVE-2025-24259 |
|
Vulnerability in apple (CVE-2025-24259)
vulnerability in apple (CVE-2025-24259). Successful exploitation can lead to full system takeover.
|
| CVE-2023-53006 |
|
Vulnerability in linux (CVE-2023-53006)
vulnerability in linux (CVE-2023-53006). Successful exploitation can lead to full system takeover.
|
| CVE-2025-2311 |
|
Vulnerability in CVE-2025-2311 (CVE-2025-2311)
vulnerability in CVE-2025-2311 (CVE-2025-2311). Successful exploitation can lead to full system takeover.
|
| CVE-2024-12016 |
|
SQL Injection in sqli (CVE-2024-12016)
SQL injection in sqli (CVE-2024-12016). Successful exploitation can lead to full system takeover.
|
| CVE-2024-8997 |
|
SQL Injection in sqli (CVE-2024-8997)
SQL injection in sqli (CVE-2024-8997). Successful exploitation can lead to full system takeover.
|
| CVE-2025-21850 |
|
Vulnerability in linux (CVE-2025-21850)
vulnerability in linux (CVE-2025-21850). Successful exploitation can lead to full system takeover.
|
| CVE-2024-58087 |
|
Vulnerability in linux (CVE-2024-58087)
vulnerability in linux (CVE-2024-58087). Successful exploitation can lead to full system takeover.
|
| CVE-2025-21829 |
|
Vulnerability in linux (CVE-2025-21829)
vulnerability in linux (CVE-2025-21829). Successful exploitation can lead to full system takeover.
|
| CVE-2024-12144 |
|
SQL Injection in sqli (CVE-2024-12144)
SQL injection in sqli (CVE-2024-12144). Successful exploitation can lead to full system takeover.
|