|
Critical
|
27 Apr 2025 |
27 Apr 2025 |
CPAI-2025-0224
|
|
CVE-2025-34028
|
Commvault Command Center Remote Code Execution (CVE-2025-34028)
|
|
Critical
|
27 Apr 2025 |
27 Apr 2025 |
CPAI-2023-2031
|
|
CVE-2023-51123
|
D-Link DIR-815 Command Injection (CVE-2023-51123)
|
|
Critical
|
27 Apr 2025 |
27 Apr 2025 |
CPAI-2024-1588
|
|
CVE-2024-12828
|
Webmin Command Injection (CVE-2024-12828)
|
|
Critical
|
27 Apr 2025 |
27 Apr 2025 |
CPAI-2025-0212
|
|
CVE-2025-28146
|
Edimax AC1200 Command Injection (CVE-2025-28146)
|
|
Critical
|
27 Apr 2025 |
27 Apr 2025 |
CPAI-2022-2211
|
|
CVE-2022-26187
|
TOTOLINK N600R Firmware Command Injection (CVE-2022-26187)
|
|
High
|
15 Apr 2025 |
24 Apr 2025 |
CPAI-2025-0193
|
|
CVE-2025-3102
|
WordPress OttoKit Plugin Authentication Bypass (CVE-2025-3102)
|
|
High
|
24 Apr 2025 |
24 Apr 2025 |
CPAI-2024-1614
|
|
CVE-2024-9054
|
Microchip TimeProvider 4100 Command Injection (CVE-2024-9054)
|
|
Medium
|
24 Apr 2025 |
24 Apr 2025 |
CPAI-2024-1613
|
|
CVE-2024-43686
|
Microchip TimeProvider 4100 Cross-Site Scripting (CVE-2024-43686)
|
|
High
|
24 Apr 2025 |
24 Apr 2025 |
CPAI-2024-1612
|
|
CVE-2024-6119
|
OpenSSL Denial of Service (CVE-2024-6119)
|
|
Medium
|
24 Apr 2025 |
24 Apr 2025 |
CPAI-2020-4303
|
|
CVE-2020-8143
|
Revive Adserver Open Redirect (CVE-2020-8143)
|
|
High
|
24 Apr 2025 |
24 Apr 2025 |
CPAI-2017-1957
|
|
CVE-2017-7696
|
SAP AS JAVA SSO Authentication Library Denial of Service (CVE-2017-7696)
|
|
Critical
|
24 Apr 2025 |
24 Apr 2025 |
CPAI-2021-2314
|
|
CVE-2021-20045
|
SonicWall Sma 200 Firmware Buffer Overflow (CVE-2021-20045)
|
|
High
|
24 Apr 2025 |
24 Apr 2025 |
CPAI-2023-2036
|
|
CVE-2023-22047
|
Oracle PeopleSoft Enterprise Remote Code Execution (CVE-2023-22047)
|
|
High
|
24 Apr 2025 |
24 Apr 2025 |
CPAI-2021-2311
|
|
CVE-2021-20044
|
SonicWall Sma 200 Firmware Command Injection (CVE-2021-20044)
|
|
Critical
|
24 Apr 2025 |
24 Apr 2025 |
CPAI-2021-2307
|
|
CVE-2021-22175
CVE-2021-22214
CVE-2021-39935
|
GitLab Server-Side Request Forgery (CVE-2021-22175; CVE-2021-22214; CVE-2021-39935)
|
|
Medium
|
24 Apr 2025 |
24 Apr 2025 |
CPAI-2022-2206
|
|
CVE-2022-1058
|
Gitea Open Redirect (CVE-2022-1058)
|
|
Critical
|
24 Apr 2025 |
24 Apr 2025 |
CPAI-2024-1583
|
|
CVE-2024-38289
|
R-HUB TurboMeeting SQL Injection (CVE-2024-38289)
|
|
Critical
|
7 Apr 2025 |
24 Apr 2025 |
CPAI-2025-0168
|
|
CVE-2025-22457
|
Ivanti Buffer Overflow (CVE-2025-22457)
|
|
High
|
17 Jan 2025 |
24 Apr 2025 |
CPAI-2024-1224
|
|
CVE-2024-49113
|
Microsoft Windows LDAP Denial of Service (CVE-2024-49113)
|
|
High
|
23 Apr 2025 |
23 Apr 2025 |
CPAI-2017-1956
|
|
CVE-2017-2827
CVE-2017-2828
CVE-2017-2832
CVE-2017-2833
CVE-2017-2841
CVE-2017-2842
CVE-2017-2843
CVE-2017-2844
CVE-2017-2845
CVE-2017-2846
CVE-2017-2847
CVE-2017-2848
|
Foscam C1 Command Injection (CVE-2017-2827; CVE-2017-2828; CVE-2017-2832; CVE-2017-2833; CVE-2017-2841; CVE-2017-2842; CVE-2017-2843; CVE-2017-2844; CVE-2017-2845; CVE-2017-2846; CVE-2017-2847; CVE-2017-2848)
|
|
Critical
|
23 Apr 2025 |
23 Apr 2025 |
CPAI-2023-2035
|
|
CVE-2023-7095
|
TOTOLINK A7100RU Buffer Overflow (CVE-2023-7095)
|
|
High
|
23 Apr 2025 |
23 Apr 2025 |
CPAI-2023-2034
|
|
CVE-2023-50780
|
Apache ActiveMQ Artemis Remote Code Execution (CVE-2023-50780)
|
|
Critical
|
23 Apr 2025 |
23 Apr 2025 |
CPAI-2023-2033
|
|
CVE-2023-36177
|
Badaix Snapcast Remote Code Execution (CVE-2023-36177)
|
|
High
|
23 Apr 2025 |
23 Apr 2025 |
CPAI-2025-0198
|
|
CVE-2025-30066
|
Tj-Actions Changed-Files Information Disclosure (CVE-2025-30066)
|
|
Critical
|
16 Mar 2025 |
23 Apr 2025 |
CPAI-2025-0090
|
|
CVE-2025-1316
|
Edimax Multiple Products Command Injection (CVE-2025-1316)
|
|
High
|
22 Apr 2025 |
22 Apr 2025 |
CPAI-2024-1606
|
|
CVE-2024-44871
|
MoziloCMS Arbitrary File Upload (CVE-2024-44871)
|
|
Critical
|
22 Apr 2025 |
22 Apr 2025 |
CPAI-2024-1600
|
|
CVE-2024-12084
|
Rsync Buffer Overflow (CVE-2024-12084)
|
|
Medium
|
22 Apr 2025 |
22 Apr 2025 |
CPAI-2024-1597
|
|
CVE-2024-44176
|
Apple Multiple Products Denial of Service (CVE-2024-44176)
|
|
Medium
|
22 Apr 2025 |
22 Apr 2025 |
CPAI-2020-4302
|
|
CVE-2020-8264
|
Ruby on Rails Cross-Site Scripting (CVE-2020-8264)
|
|
Medium
|
22 Apr 2025 |
22 Apr 2025 |
CPAI-2021-2306
|
|
CVE-2021-29490
|
Jellyfin Server-Side Request Forgery (CVE-2021-29490)
|
|
High
|
22 Apr 2025 |
22 Apr 2025 |
CPAI-2021-2305
|
|
CVE-2021-21311
|
Adminer Server-Side Request Forgery (CVE-2021-21311)
|
|
High
|
22 Apr 2025 |
22 Apr 2025 |
CPAI-2025-0194
|
|
CVE-2025-3539
CVE-2025-3540
CVE-2025-3541
CVE-2025-3542
CVE-2025-3543
CVE-2025-3544
CVE-2025-3545
CVE-2025-3546
|
H3C Magic Series Command Injection (CVE-2025-3539; CVE-2025-3540; CVE-2025-3541; CVE-2025-3542; CVE-2025-3543; CVE-2025-3544; CVE-2025-3545; CVE-2025-3546)
|
|
Critical
|
20 Feb 2025 |
22 Apr 2025 |
CPAI-2024-1410
|
|
CVE-2024-10811
CVE-2024-13159
CVE-2024-13160
CVE-2024-13161
|
Ivanti Endpoint Manager Path Traversal (CVE-2024-10811; CVE-2024-13159; CVE-2024-13160; CVE-2024-13161)
|
|
High
|
21 Apr 2025 |
21 Apr 2025 |
CPAI-2024-1601
|
|
CVE-2024-12849
|
WordPress Error Log Viewer Plugin Arbitrary File Read (CVE-2024-12849)
|
|
Critical
|
21 Apr 2025 |
21 Apr 2025 |
CPAI-2024-1589
|
|
CVE-2024-37843
|
Craft CMS SQL Injection (CVE-2024-37843)
|
|
High
|
31 Mar 2025 |
21 Apr 2025 |
CPAI-2025-0135
|
|
CVE-2025-24054
|
Microsoft Windows NTLM Relay (CVE-2025-24054)
|
|
Medium
|
20 Apr 2025 |
20 Apr 2025 |
CPAI-2024-1605
|
|
CVE-2024-45598
|
Cacti Remote Code Execution (CVE-2024-45598)
|
|
Critical
|
20 Apr 2025 |
20 Apr 2025 |
CPAI-2024-1604
|
|
CVE-2024-45324
|
Fortinet FortiOS Format String (CVE-2024-45324)
|
|
High
|
20 Apr 2025 |
20 Apr 2025 |
CPAI-2021-2310
|
|
CVE-2021-20041
|
SonicWall Sma 200 Firmware Authentication Bypass (CVE-2021-20041)
|
|
Critical
|
20 Apr 2025 |
20 Apr 2025 |
CPAI-2021-2309
|
|
CVE-2021-20042
|
SonicWall Sma 200 Firmware Authentication Bypass (CVE-2021-20042)
|
|
High
|
20 Apr 2025 |
20 Apr 2025 |
CPAI-2024-1602
|
|
CVE-2024-33342
|
D-Link DIR-822 Command Injection (CVE-2024-33342)
|
|
Medium
|
20 Apr 2025 |
20 Apr 2025 |
CPAI-2022-2207
|
|
CVE-2022-1045
|
Trudesk Arbitrary File Upload (CVE-2022-1045)
|
|
High
|
20 Apr 2025 |
20 Apr 2025 |
CPAI-2025-0196
|
|
CVE-2025-25291
|
SAML-Toolkits ruby-saml Authentication Bypass (CVE-2025-25291)
|
|
Critical
|
20 Apr 2025 |
20 Apr 2025 |
CPAI-2022-2204
|
|
CVE-2022-24310
|
Schneider Electric Interactive Graphical SCADA System Integer Overflow (CVE-2022-24310)
|
|
High
|
20 Apr 2025 |
20 Apr 2025 |
CPAI-2024-1579
|
|
CVE-2024-31449
|
Redis Buffer Overflow (CVE-2024-31449)
|
|
Medium
|
20 Apr 2025 |
20 Apr 2025 |
CPAI-2024-1530
|
|
CVE-2024-40777
|
Apple Multiple Products Out-Of-Bounds Access (CVE-2024-40777)
|
|
Critical
|
20 Apr 2025 |
20 Apr 2025 |
CPAI-2024-1452
|
|
CVE-2024-47009
|
Ivanti Avalanche Authentication Bypass (CVE-2024-47009)
|
|
Medium
|
17 Apr 2025 |
17 Apr 2025 |
CPAI-2025-0195
|
|
CVE-2025-1758
|
Kemp LoadMaster Buffer Overflow (CVE-2025-1758)
|
|
High
|
17 Apr 2025 |
17 Apr 2025 |
CPAI-2023-2030
|
|
CVE-2023-36969
|
CMS Made Simple Arbitrary File Upload (CVE-2023-36969)
|
|
Critical
|
12 Mar 2025 |
17 Apr 2025 |
CPAI-2025-0077
|
|
|
Argument Injection Over HTTP
|
Feedback