Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2025-38075 Vulnerability in linux (CVE-2025-38075)
vulnerability in linux (CVE-2025-38075). Successful exploitation can lead to full system takeover.
CVE-2025-4404 Vulnerability in privilege-escalation (CVE-2025-4404)
vulnerability in privilege-escalation (CVE-2025-4404). Successful exploitation can lead to full system takeover. Exploitable via ``krbCanonicalName``.
CVE-2025-49796 Out-of-Bounds Read in dos (CVE-2025-49796)
vulnerability in dos (CVE-2025-49796). Data can be tampered with by attackers.
CVE-2025-49794 Vulnerability in CVE-2025-49794 (CVE-2025-49794)
vulnerability in CVE-2025-49794 (CVE-2025-49794). Data can be tampered with by attackers.
CVE-2025-46060 Vulnerability in totolink (CVE-2025-46060)
vulnerability in totolink (CVE-2025-46060). Successful exploitation can lead to full system takeover.
CVE-2025-44148 Cross-Site Scripting (XSS) in mailenable (CVE-2025-44148)
cross-site scripting in mailenable (CVE-2025-44148). Successful exploitation can lead to full system takeover.
CVE-2025-4517 Path Traversal in CVE-2025-4517 (CVE-2025-4517)
path traversal in CVE-2025-4517 (CVE-2025-4517). Confidential information can be exposed externally.
CVE-2025-48938 Vulnerability in go-gh (CVE-2025-48938)
vulnerability in go-gh (CVE-2025-48938). Successful exploitation can lead to full system takeover.
CVE-2025-44619 Vulnerability in tinxy (CVE-2025-44619)
vulnerability in tinxy (CVE-2025-44619). Confidential information can be exposed externally.
CVE-2025-45343 Vulnerability in tenda (CVE-2025-45343)
vulnerability in tenda (CVE-2025-45343). Successful exploitation can lead to full system takeover.
CVE-2025-34027 Vulnerability in versa-networks (CVE-2025-34027)
vulnerability in versa-networks (CVE-2025-34027). Successful exploitation can lead to full system takeover.
CVE-2025-37959 Vulnerability in linux (CVE-2025-37959)
vulnerability in linux (CVE-2025-37959). Data can be tampered with by attackers.
CVE-2025-37935 Vulnerability in linux (CVE-2025-37935)
vulnerability in linux (CVE-2025-37935). Successful exploitation can lead to full system takeover.
CVE-2025-37894 Vulnerability in linux (CVE-2025-37894)
vulnerability in linux (CVE-2025-37894). Successful exploitation can lead to full system takeover.
CVE-2025-42999 KEV [KEV] Unsafe Deserialization in Sap netweaver (CVE-2025-42999)
vulnerability in Sap netweaver (CVE-2025-42999). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-28200 Vulnerability in govicture (CVE-2025-28200)
vulnerability in govicture (CVE-2025-28200). Successful exploitation can lead to full system takeover.
CVE-2025-37879 Out-of-Bounds Read in linux (CVE-2025-37879)
vulnerability in linux (CVE-2025-37879). Successful exploitation can lead to full system takeover.
CVE-2025-3248 KEV [KEV] Code Injection in langflow (CVE-2025-3248)
code injection in langflow (CVE-2025-3248). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `1.3.0` or later.
CVE-2023-53116 Use-After-Free in linux (CVE-2023-53116)
vulnerability in linux (CVE-2023-53116). Successful exploitation can lead to full system takeover.
CVE-2023-53083 Vulnerability in linux (CVE-2023-53083)
vulnerability in linux (CVE-2023-53083). Successful exploitation can lead to full system takeover.
CVE-2025-2421 Code Injection in felisify (CVE-2025-2421)
code injection in felisify (CVE-2025-2421). Successful exploitation can lead to full system takeover.
CVE-2025-2812 SQL Injection in sqli (CVE-2025-2812)
SQL injection in sqli (CVE-2025-2812). Successful exploitation can lead to full system takeover.
CVE-2022-49770 Use-After-Free in linux (CVE-2022-49770)
vulnerability in linux (CVE-2022-49770). Successful exploitation can lead to full system takeover.
CVE-2025-37778 Use-After-Free in linux (CVE-2025-37778)
vulnerability in linux (CVE-2025-37778). Successful exploitation can lead to full system takeover.
CVE-2025-37750 Use-After-Free in linux (CVE-2025-37750)
vulnerability in linux (CVE-2025-37750). Successful exploitation can lead to full system takeover.
CVE-2025-31324 KEV [KEV] Unrestricted File Upload in Sap netweaver (CVE-2025-31324)
vulnerability in Sap netweaver (CVE-2025-31324). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-45947 Code Injection in phpgurukul (CVE-2025-45947)
code injection in phpgurukul (CVE-2025-45947). Successful exploitation can lead to full system takeover.
CVE-2025-45949 Vulnerability in phpgurukul (CVE-2025-45949)
vulnerability in phpgurukul (CVE-2025-45949). Successful exploitation can lead to full system takeover.
CVE-2025-45953 Vulnerability in phpgurukul (CVE-2025-45953)
vulnerability in phpgurukul (CVE-2025-45953). Confidential information can be exposed externally.
CVE-2025-29287 Unrestricted File Upload in mingsoft (CVE-2025-29287)
vulnerability in mingsoft (CVE-2025-29287). Successful exploitation can lead to full system takeover.
CVE-2025-22110 Vulnerability in linux (CVE-2025-22110)
vulnerability in linux (CVE-2025-22110). Successful exploitation can lead to full system takeover.
CVE-2025-22088 Use-After-Free in linux (CVE-2025-22088)
vulnerability in linux (CVE-2025-22088). Successful exploitation can lead to full system takeover.
CVE-2025-22077 Vulnerability in linux (CVE-2025-22077)
vulnerability in linux (CVE-2025-22077). Successful exploitation can lead to full system takeover.
CVE-2025-22021 Vulnerability in linux (CVE-2025-22021)
vulnerability in linux (CVE-2025-22021). Successful exploitation can lead to full system takeover.
CVE-2025-32911 Vulnerability in CVE-2025-32911 (CVE-2025-32911)
vulnerability in CVE-2025-32911 (CVE-2025-32911). Successful exploitation can lead to full system takeover.
CVE-2025-1782 Code Injection in avantfax (CVE-2025-1782)
code injection in avantfax (CVE-2025-1782). Successful exploitation can lead to full system takeover.
CVE-2025-22871 Vulnerability in spiral/roadrunner (CVE-2025-22871)
vulnerability in spiral/roadrunner (CVE-2025-22871). Confidential information can be exposed externally. Mitigation: upgrade to `2025.1.0` or later.
CVE-2025-22457 KEV [KEV] Vulnerability in Ivanti connect-secure (CVE-2025-22457)
vulnerability in Ivanti connect-secure (CVE-2025-22457). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-21988 Vulnerability in linux (CVE-2025-21988)
vulnerability in linux (CVE-2025-21988). Successful exploitation can lead to full system takeover. Exploitable via ``prev_donated``.
CVE-2025-21954 Vulnerability in linux (CVE-2025-21954)
vulnerability in linux (CVE-2025-21954). Successful exploitation can lead to full system takeover.
CVE-2025-21927 Out-of-Bounds Write in linux (CVE-2025-21927)
out-of-bounds write in linux (CVE-2025-21927). Successful exploitation can lead to full system takeover.
CVE-2025-24259 Vulnerability in apple (CVE-2025-24259)
vulnerability in apple (CVE-2025-24259). Successful exploitation can lead to full system takeover.
CVE-2023-53006 Vulnerability in linux (CVE-2023-53006)
vulnerability in linux (CVE-2023-53006). Successful exploitation can lead to full system takeover.
CVE-2025-2311 Vulnerability in CVE-2025-2311 (CVE-2025-2311)
vulnerability in CVE-2025-2311 (CVE-2025-2311). Successful exploitation can lead to full system takeover.
CVE-2024-12016 SQL Injection in sqli (CVE-2024-12016)
SQL injection in sqli (CVE-2024-12016). Successful exploitation can lead to full system takeover.
CVE-2024-8997 SQL Injection in sqli (CVE-2024-8997)
SQL injection in sqli (CVE-2024-8997). Successful exploitation can lead to full system takeover.
CVE-2025-21850 Vulnerability in linux (CVE-2025-21850)
vulnerability in linux (CVE-2025-21850). Successful exploitation can lead to full system takeover.
CVE-2024-58087 Vulnerability in linux (CVE-2024-58087)
vulnerability in linux (CVE-2024-58087). Successful exploitation can lead to full system takeover.
CVE-2025-21829 Vulnerability in linux (CVE-2025-21829)
vulnerability in linux (CVE-2025-21829). Successful exploitation can lead to full system takeover.
CVE-2024-12144 SQL Injection in sqli (CVE-2024-12144)
SQL injection in sqli (CVE-2024-12144). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →