Critical
|
3 Jul 2025 |
15 Aug 2025 |
CPAI-2025-0708
|
|
CVE-2025-47812 CVE-2025-5196
|
Wing FTP Server Remote Code Execution (CVE-2025-47812; CVE-2025-5196)
|
Critical
|
14 Aug 2025 |
14 Aug 2025 |
CPAI-2024-1761
|
|
CVE-2024-10655 CVE-2024-10656 CVE-2024-10657 CVE-2024-10658
|
Tongda Office Anywhere SQL Injection (CVE-2024-10655; CVE-2024-10656; CVE-2024-10657; CVE-2024-10658)
|
Critical
|
14 Aug 2025 |
14 Aug 2025 |
CPAI-2025-0691
|
|
CVE-2025-6965
|
SQLite Memory Corruption (CVE-2025-6965)
|
Critical
|
14 Aug 2025 |
14 Aug 2025 |
CPAI-2025-0690
|
|
CVE-2025-8184
|
D-Link DIR-513 Buffer Overflow (CVE-2025-8184)
|
Critical
|
14 Aug 2025 |
14 Aug 2025 |
CPAI-2019-3306
|
|
CVE-2019-9670
|
Synacor Zimbra Collaboration Suite XML External Entity Injection (CVE-2019-9670)
|
High
|
14 Aug 2025 |
14 Aug 2025 |
CPAI-2024-1759
|
|
CVE-2024-56325
|
Apache Pinot Authentication Bypass (CVE-2024-56325)
|
High
|
29 Jul 2025 |
14 Aug 2025 |
CPAI-2023-2094
|
|
CVE-2023-2533
|
PaperCut NG/MF Cross-Site Request Forgery (CVE-2023-2533)
|
High
|
29 Jul 2025 |
14 Aug 2025 |
CPAI-2025-0623
|
|
CVE-2025-40596 CVE-2025-40597
|
SonicWall SMA100 Stack Overflow (CVE-2025-40596; CVE-2025-40597)
|
High
|
9 Feb 2025 |
14 Aug 2025 |
CPAI-2024-1360
|
|
CVE-2024-36272 CVE-2024-36290 CVE-2024-36493 CVE-2024-37184 CVE-2024-39288 CVE-2024-39299 CVE-2024-39357 CVE-2024-39359 CVE-2024-39757 CVE-2024-39768 CVE-2024-39769 CVE-2024-39770 CVE-2024-39774
|
Wavlink AC3000 Buffer Overflow (CVE-2024-36272; CVE-2024-36290; CVE-2024-36493; CVE-2024-37184; CVE-2024-39288; CVE-2024-39299; CVE-2024-39357; CVE-2024-39359; CVE-2024-39757; CVE-2024-39768; CVE-2024-39769; CVE-2024-39770; CVE-2024-39774)
|
High
|
13 Aug 2025 |
13 Aug 2025 |
CPAI-2025-0694
|
Microsoft CVE-2025-53778
|
CVE-2025-53778
|
Windows NTLM Elevation of Privilege (CVE-2025-53778)
|
High
|
13 Aug 2025 |
13 Aug 2025 |
CPAI-2025-0676
|
|
CVE-2025-52080 CVE-2025-52081 CVE-2025-52082
|
NETGEAR XR300 Buffer Overflow (CVE-2025-52080; CVE-2025-52081; CVE-2025-52082)
|
Critical
|
27 Apr 2025 |
13 Aug 2025 |
CPAI-2016-1435
|
|
CVE-2015-6004 CVE-2015-6027 CVE-2016-5077 CVE-2016-5642
|
SNMP Cross-Site Scripting (CVE-2015-6004; CVE-2015-6027; CVE-2016-5077; CVE-2016-5642)
|
High
|
12 Aug 2025 |
12 Aug 2025 |
CPAI-2025-0685
|
Microsoft CVE-2025-50177
|
CVE-2025-50177
|
Microsoft Message Queuing Remote Code Execution (CVE-2025-50177)
|
High
|
12 Aug 2025 |
12 Aug 2025 |
CPAI-2025-0598
|
|
CVE-2025-27363
|
FreeType Out of Bounds Write (CVE-2025-27363)
|
High
|
29 May 2025 |
12 Aug 2025 |
CPAI-2025-0347
|
|
CVE-2025-0133
|
Palo Alto Networks PAN-OS Cross-Site Scripting (CVE-2025-0133)
|
Critical
|
27 Apr 2025 |
12 Aug 2025 |
CPAI-2025-0245
|
|
CVE-2024-58136 CVE-2025-32432
|
Craft CMS Remote Code Execution (CVE-2024-58136; CVE-2025-32432)
|
High
|
11 Aug 2025 |
11 Aug 2025 |
CPAI-2025-0673
|
|
CVE-2025-7530 CVE-2025-7531 CVE-2025-7532 CVE-2025-7548 CVE-2025-7549 CVE-2025-7550 CVE-2025-7551
|
Tenda FH1202 Buffer Overflow (CVE-2025-7530; CVE-2025-7531; CVE-2025-7532; CVE-2025-7548; CVE-2025-7549; CVE-2025-7550; CVE-2025-7551)
|
High
|
11 Aug 2025 |
11 Aug 2025 |
CPAI-2025-0672
|
|
CVE-2025-7414 CVE-2025-7415
|
Tenda O3 Command Injection (CVE-2025-7414; CVE-2025-7415)
|
High
|
11 Aug 2025 |
11 Aug 2025 |
CPAI-2025-0671
|
|
CVE-2025-7407
|
NETGEAR D6400 Command Injection (CVE-2025-7407)
|
High
|
11 Aug 2025 |
11 Aug 2025 |
CPAI-2025-0670
|
|
CVE-2025-7084 CVE-2025-7085 CVE-2025-7086 CVE-2025-7087 CVE-2025-7088 CVE-2025-7089 CVE-2025-7094
|
Belkin F9K1122 Buffer Overflow (CVE-2025-7084; CVE-2025-7085; CVE-2025-7086; CVE-2025-7087; CVE-2025-7088; CVE-2025-7089; CVE-2025-7094)
|
High
|
11 Aug 2025 |
11 Aug 2025 |
CPAI-2025-0669
|
|
CVE-2025-7082
|
Belkin F9K1122 Command Injection (CVE-2025-7082)
|
Critical
|
11 Aug 2025 |
11 Aug 2025 |
CPAI-2024-1758
|
|
CVE-2024-8309
|
LangChain SQL Injection (CVE-2024-8309)
|
High
|
11 Aug 2025 |
11 Aug 2025 |
CPAI-2025-0652
|
|
CVE-2025-52877
|
JetBrains TeamCity Cross-Site Scripting (CVE-2025-52877)
|
High
|
11 Aug 2025 |
11 Aug 2025 |
CPAI-2025-0648
|
|
CVE-2025-3943
|
Tridium Niagara Information Disclosure (CVE-2025-3943)
|
High
|
11 Aug 2025 |
11 Aug 2025 |
CPAI-2025-0647
|
|
CVE-2025-40598
|
SonicWall SMA 500v Cross-Site Scripting (CVE-2025-40598)
|
High
|
11 Aug 2025 |
11 Aug 2025 |
CPAI-2025-0640
|
|
CVE-2025-22206
|
Joomla JS Jobs Plugin SQL Injection (CVE-2025-22206)
|
High
|
11 Aug 2025 |
11 Aug 2025 |
CPAI-2025-0620
|
|
CVE-2025-5306
|
Pandora FMS Command Injection (CVE-2025-5306)
|
High
|
11 Aug 2025 |
11 Aug 2025 |
CPAI-2025-0583
|
|
CVE-2025-52690
|
Alcatel-Lucent Enterprise OmniAccess Stellar Command Injection (CVE-2025-52690)
|
Critical
|
23 Apr 2025 |
11 Aug 2025 |
CPAI-2023-2035
|
|
CVE-2023-6906 CVE-2023-7095
|
TOTOLINK A7100RU Buffer Overflow (CVE-2023-6906; CVE-2023-7095)
|
High
|
7 Aug 2025 |
7 Aug 2025 |
CPAI-2025-0658
|
|
CVE-2025-6514
|
Mcp-remote Command Injection (CVE-2025-6514)
|
High
|
7 Aug 2025 |
7 Aug 2025 |
CPAI-2025-0621
|
|
CVE-2025-49484
|
Joomla! JS Jobs Plugin SQL Injection (CVE-2025-49484)
|
Medium
|
7 Aug 2025 |
7 Aug 2025 |
CPAI-2018-2895
|
|
CVE-2018-14493
|
Opmantek Open-Audit Cross-Site Scripting (CVE-2018-14493)
|
High
|
6 Aug 2025 |
6 Aug 2025 |
CPAI-2025-0677
|
|
CVE-2025-49533
|
Adobe Experience Manager Insecure Deserialization (CVE-2025-49533)
|
High
|
6 Aug 2025 |
6 Aug 2025 |
CPAI-2020-4336
|
|
CVE-2020-25079
|
D-Link Multiple Products Command Injection (CVE-2020-25079)
|
High
|
6 Aug 2025 |
6 Aug 2025 |
CPAI-2022-2229
|
|
CVE-2022-40799
|
D-Link DNR-322L Remote Code Execution (CVE-2022-40799)
|
High
|
6 Aug 2025 |
6 Aug 2025 |
CPAI-2025-0674
|
|
CVE-2025-54253
|
Adobe Experience Manager Remote Code Execution (CVE-2025-54253)
|
High
|
6 Aug 2025 |
6 Aug 2025 |
CPAI-2025-0644
|
|
CVE-2025-34143
|
Hexagon ETQ Reliance Authentication Bypass (CVE-2025-34143)
|
Medium
|
6 Aug 2025 |
6 Aug 2025 |
CPAI-2018-2937
|
|
CVE-2018-1000528
|
GONICUS GOsa Cross-Site Scripting (CVE-2018-1000528)
|
High
|
6 Aug 2025 |
6 Aug 2025 |
CPAI-2024-1743
|
|
CVE-2024-58258
|
SugarCRM Server-Side Request Forgery (CVE-2024-58258)
|
High
|
6 Aug 2025 |
6 Aug 2025 |
CPAI-2025-0526
|
|
CVE-2025-28395 CVE-2025-28398
|
D-Link DI-8100 Buffer overflow (CVE-2025-28395; CVE-2025-28398)
|
High
|
5 Aug 2025 |
5 Aug 2025 |
CPAI-2024-1755
|
|
CVE-2024-36295
|
Wavlink AC3000 Command Injection (CVE-2024-36295)
|
Critical
|
3 Jul 2025 |
4 Aug 2025 |
CPAI-2025-0495
|
|
CVE-2025-47812 CVE-2025-5196
|
Wing FTP Server Remote Code Execution (CVE-2025-47812; CVE-2025-5196)
|
High
|
4 Aug 2025 |
4 Aug 2025 |
CPAI-2025-0639
|
|
CVE-2025-5394
|
WordPress Alone Theme Arbitrary File Upload (CVE-2025-5394)
|
High
|
4 Aug 2025 |
4 Aug 2025 |
CPAI-2025-0635
|
|
CVE-2025-31700 CVE-2025-31701
|
Dahua Multiple Products Buffer Overflow (CVE-2025-31700; CVE-2025-31701)
|
High
|
4 Aug 2025 |
4 Aug 2025 |
CPAI-2024-1756
|
|
CVE-2024-32937
|
Grandstream GXP2135 Command Injection (CVE-2024-32937)
|
High
|
4 Aug 2025 |
4 Aug 2025 |
CPAI-2024-1754
|
|
CVE-2024-39786 CVE-2024-39787
|
Wavlink AC3000 Directory Traversal (CVE-2024-39786; CVE-2024-39787)
|
High
|
4 Aug 2025 |
4 Aug 2025 |
CPAI-2024-1753
|
|
CVE-2024-39360 CVE-2024-39367 CVE-2024-39759 CVE-2024-39760 CVE-2024-39761 CVE-2024-39762 CVE-2024-39763 CVE-2024-39764 CVE-2024-39765
|
Wavlink AC3000 Command Injection (CVE-2024-39360; CVE-2024-39367; CVE-2024-39759; CVE-2024-39760; CVE-2024-39761; CVE-2024-39762; CVE-2024-39763; CVE-2024-39764; CVE-2024-39765)
|
Medium
|
4 Aug 2025 |
4 Aug 2025 |
CPAI-2025-0633
|
|
CVE-2025-20297
|
Splunk Cross-Site Scripting (CVE-2025-20297)
|
High
|
4 Aug 2025 |
4 Aug 2025 |
CPAI-2025-0630
|
|
CVE-2025-30394
|
Microsoft Windows Server Denial of Service (CVE-2025-30394)
|
High
|
4 Aug 2025 |
4 Aug 2025 |
CPAI-2025-0618
|
|
CVE-2025-26633
|
Microsoft Management Console Security Bypass (CVE-2025-26633)
|