Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2025-6018 |
|
Authorization Flaw in privilege-escalation (CVE-2025-6018)
vulnerability in privilege-escalation (CVE-2025-6018). Successful exploitation can lead to full system takeover.
|
| CVE-2025-44654 |
|
Vulnerability in privilege-escalation (CVE-2025-44654)
vulnerability in privilege-escalation (CVE-2025-44654). Successful exploitation can lead to full system takeover.
|
| CVE-2025-44655 |
|
Vulnerability in privilege-escalation (CVE-2025-44655)
vulnerability in privilege-escalation (CVE-2025-44655). Successful exploitation can lead to full system takeover.
|
| CVE-2025-44657 |
|
Vulnerability in privilege-escalation (CVE-2025-44657)
vulnerability in privilege-escalation (CVE-2025-44657). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-4040 |
|
Vulnerability in privilege-escalation (CVE-2025-4040)
vulnerability in privilege-escalation (CVE-2025-4040). Confidential information can be exposed externally.
|
| CVE-2025-4334 |
|
Privilege Escalation in wordpress (CVE-2025-4334)
vulnerability in wordpress (CVE-2025-4334). Successful exploitation can lead to full system takeover.
|
| CVE-2025-6019 |
|
Vulnerability in privilege-escalation (CVE-2025-6019)
vulnerability in privilege-escalation (CVE-2025-6019). Successful exploitation can lead to full system takeover.
|
| CVE-2025-4404 |
|
Vulnerability in privilege-escalation (CVE-2025-4404)
vulnerability in privilege-escalation (CVE-2025-4404). Successful exploitation can lead to full system takeover. Exploitable via ``krbCanonicalName``.
|
| CVE-2025-4211 |
|
Vulnerability in privilege-escalation (CVE-2025-4211)
vulnerability in privilege-escalation (CVE-2025-4211). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-46836 |
|
Vulnerability in c (CVE-2025-46836)
vulnerability in c (CVE-2025-46836). Risk of unauthorized operations or information disclosure. Exploitable via ``interface.c``.
|
| CVE-2025-2786 |
|
Information Disclosure in github.com/grafana/tempo-operator (CVE-2025-2786)
vulnerability in github.com/grafana/tempo-operator (CVE-2025-2786). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.16.0` or later.
|
| CVE-2025-24170 |
|
A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13...
A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13...
|
| CVE-2025-2241 |
|
Vulnerability in privilege-escalation (CVE-2025-2241)
vulnerability in privilege-escalation (CVE-2025-2241). Confidential information can be exposed externally.
|
| CVE-2025-25968 |
|
Vulnerability in privilege-escalation (CVE-2025-25968)
vulnerability in privilege-escalation (CVE-2025-25968). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-21702 |
|
Vulnerability in privilege-escalation (CVE-2025-21702)
vulnerability in privilege-escalation (CVE-2025-21702). Successful exploitation can lead to full system takeover. Exploitable via ``NET_XMIT_CN``.
|
| CVE-2025-21692 |
|
Vulnerability in c (CVE-2025-21692)
vulnerability in c (CVE-2025-21692). Successful exploitation can lead to full system takeover.
|
| CVE-2024-12747 |
|
Vulnerability in privilege-escalation (CVE-2024-12747)
vulnerability in privilege-escalation (CVE-2024-12747). Confidential information can be exposed externally.
|
| CVE-2024-55550 KEV |
|
[KEV] Path Traversal in Mitel micollab (CVE-2024-55550)
path traversal in Mitel micollab (CVE-2024-55550). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2024-52336 |
|
Privilege Escalation in privilege-escalation (CVE-2024-52336)
vulnerability in privilege-escalation (CVE-2024-52336). Successful exploitation can lead to full system takeover. Exploitable via ``script_pre``.
|
| CVE-2024-8781 |
|
Vulnerability in privilege-escalation (CVE-2024-8781)
vulnerability in privilege-escalation (CVE-2024-8781). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-9474 KEV |
|
[KEV] OS Command Injection in Palo alto networks palo-alto-networks (CVE-2024-9474)
OS command injection in Palo alto networks palo-alto-networks (CVE-2024-9474). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2024-0012 KEV |
|
[KEV] Vulnerability in Palo alto networks palo-alto-networks (CVE-2024-0012)
vulnerability in Palo alto networks palo-alto-networks (CVE-2024-0012). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2024-10035 |
|
Command Injection in privilege-escalation (CVE-2024-10035)
command injection in privilege-escalation (CVE-2024-10035). Successful exploitation can lead to full system takeover.
|
| CVE-2024-50066 |
|
Vulnerability in privilege-escalation (CVE-2024-50066)
vulnerability in privilege-escalation (CVE-2024-50066). Successful exploitation can lead to full system takeover.
|
| CVE-2024-9050 |
|
Code Injection in privilege-escalation (CVE-2024-9050)
code injection in privilege-escalation (CVE-2024-9050). Successful exploitation can lead to full system takeover. Exploitable via ``leftupdown``.
|
| CVE-2024-8698 |
|
Vulnerability in privilege-escalation (CVE-2024-8698)
vulnerability in privilege-escalation (CVE-2024-8698). Confidential information can be exposed externally.
|
| CVE-2022-23817 |
|
Vulnerability in privilege-escalation (CVE-2022-23817)
vulnerability in privilege-escalation (CVE-2022-23817). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-4944 |
|
Command Injection in privilege-escalation (CVE-2024-4944)
command injection in privilege-escalation (CVE-2024-4944). Successful exploitation can lead to full system takeover.
|
| CVE-2024-1086 KEV |
|
[KEV] Use-After-Free in Linux kernel (CVE-2024-1086)
vulnerability in Linux kernel (CVE-2024-1086). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2023-6246 |
|
Vulnerability in privilege-escalation (CVE-2023-6246)
vulnerability in privilege-escalation (CVE-2023-6246). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6931 |
|
Out-of-Bounds Write in privilege-escalation (CVE-2023-6931)
out-of-bounds write in privilege-escalation (CVE-2023-6931). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6932 |
|
Use-After-Free in privilege-escalation (CVE-2023-6932)
vulnerability in privilege-escalation (CVE-2023-6932). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6817 |
|
Use-After-Free in privilege-escalation (CVE-2023-6817)
vulnerability in privilege-escalation (CVE-2023-6817). Successful exploitation can lead to full system takeover.
|
| CVE-2023-47322 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2023-47322)
vulnerability in csrf (CVE-2023-47322). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6377 |
|
Out-of-Bounds Read in privilege-escalation (CVE-2023-6377)
vulnerability in privilege-escalation (CVE-2023-6377). Successful exploitation can lead to full system takeover.
|
| CVE-2023-4664 |
|
Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege...
Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege...
|
| CVE-2023-4665 |
|
Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows...
Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows...
|
| CVE-2023-4244 |
|
Use-After-Free in privilege-escalation (CVE-2023-4244)
vulnerability in privilege-escalation (CVE-2023-4244). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3374 |
|
Vulnerability in privilege-escalation (CVE-2023-3374)
vulnerability in privilege-escalation (CVE-2023-3374). Successful exploitation can lead to full system takeover.
|
| CVE-2023-39004 |
|
Vulnerability in privilege-escalation (CVE-2023-39004)
vulnerability in privilege-escalation (CVE-2023-39004). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3609 |
|
Use-After-Free in privilege-escalation (CVE-2023-3609)
vulnerability in privilege-escalation (CVE-2023-3609). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3390 |
|
Use-After-Free in c (CVE-2023-3390)
vulnerability in c (CVE-2023-3390). Successful exploitation can lead to full system takeover.
|
| CVE-2023-34671 |
|
Vulnerability in privilege-escalation (CVE-2023-34671)
vulnerability in privilege-escalation (CVE-2023-34671). Successful exploitation can lead to full system takeover.
|
| CVE-2023-33779 |
|
Authorization Flaw in privilege-escalation (CVE-2023-33779)
vulnerability in privilege-escalation (CVE-2023-33779). Successful exploitation can lead to full system takeover.
|
| CVE-2023-2235 |
|
Use-After-Free in privilege-escalation (CVE-2023-2235)
vulnerability in privilege-escalation (CVE-2023-2235). Successful exploitation can lead to full system takeover.
|
| CVE-2023-1829 |
|
Use-After-Free in privilege-escalation (CVE-2023-1829)
vulnerability in privilege-escalation (CVE-2023-1829). Successful exploitation can lead to full system takeover.
|
| CVE-2023-1281 |
|
Use-After-Free in privilege-escalation (CVE-2023-1281)
vulnerability in privilege-escalation (CVE-2023-1281). Successful exploitation can lead to full system takeover.
|
| CVE-2021-32415 |
|
Vulnerability in privilege-escalation (CVE-2021-32415)
vulnerability in privilege-escalation (CVE-2021-32415). Successful exploitation can lead to full system takeover.
|
| CVE-2022-46152 |
|
OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The funct...
OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function `cleanup_shm_refs()` is called by both `entry_invoke_command()` and `entry_open_session()`. The...
|
| CVE-2022-37721 |
|
Cross-Site Scripting (XSS) in privilege-escalation (CVE-2022-37721)
cross-site scripting in privilege-escalation (CVE-2022-37721). Successful exploitation can lead to full system takeover.
|