|
High
|
12 May 2025 |
12 May 2025 |
CPAI-2024-1639
|
|
CVE-2024-47962
|
Delta Electronics CNCSoft-G2 Remote Code Execution (CVE-2024-47962)
|
|
High
|
12 May 2025 |
12 May 2025 |
CPAI-2025-0252
|
|
CVE-2025-43864
|
React Router Denial of Service (CVE-2025-43864)
|
|
High
|
16 Mar 2025 |
12 May 2025 |
CPAI-2025-0094
|
|
CVE-2025-24799
|
GLPI SQL Injection (CVE-2025-24799)
|
|
Critical
|
15 Apr 2025 |
12 May 2025 |
CPAI-2025-0125
|
|
|
Sensitive Configuration File Disclosure
|
|
Medium
|
12 May 2025 |
12 May 2025 |
CPAI-2022-2215
|
|
CVE-2022-45402
|
Apache Airflow Open Redirect (CVE-2022-45402)
|
|
Critical
|
12 May 2025 |
12 May 2025 |
CPAI-2024-1643
|
|
CVE-2024-24116
|
Ruijie RG-NBS2009G-P Authentication Bypass (CVE-2024-24116)
|
|
Medium
|
12 May 2025 |
12 May 2025 |
CPAI-2024-1645
|
|
CVE-2024-39932
|
Gogs Argument Injection (CVE-2024-39932)
|
|
High
|
20 Apr 2025 |
12 May 2025 |
CPAI-2024-1604
|
|
CVE-2024-45324
|
Fortinet Multiple Products Format String Injection (CVE-2024-45324)
|
|
Critical
|
12 May 2025 |
12 May 2025 |
CPAI-2024-1642
|
|
CVE-2024-10081
|
CodeChecker Authentication Bypass (CVE-2024-10081)
|
|
Critical
|
12 May 2025 |
12 May 2025 |
CPAI-2023-2052
|
|
CVE-2023-41887
|
OpenRefine Remote Code Execution (CVE-2023-41887)
|
|
Critical
|
12 May 2025 |
12 May 2025 |
CPAI-2020-4305
|
|
CVE-2020-26214
|
Alerta Authentication Bypass (CVE-2020-26214)
|
|
High
|
11 May 2025 |
11 May 2025 |
CPAI-2025-0273
|
|
CVE-2025-32819
CVE-2025-32820
CVE-2025-32821
|
SonicWall SMA100 Remote Code Execution (CVE-2025-32819; CVE-2025-32820; CVE-2025-32821)
|
|
Critical
|
11 May 2025 |
11 May 2025 |
CPAI-2024-1637
|
|
CVE-2024-52961
|
Fortinet FortiSandbox Command Injection (CVE-2024-52961)
|
|
Critical
|
11 May 2025 |
11 May 2025 |
CPAI-2025-0263
|
|
CVE-2025-28137
|
TOTOLINK A810R Firmware Command Injection (CVE-2025-28137)
|
|
Critical
|
11 May 2025 |
11 May 2025 |
CPAI-2019-3280
|
|
CVE-2019-16932
|
WordPress Themeisle Visualizer Plugin Server-Side Request Forgery (CVE-2019-16932)
|
|
Critical
|
11 May 2025 |
11 May 2025 |
CPAI-2020-4307
|
|
CVE-2020-24881
|
OsTicket Server-Side Request Forgery (CVE-2020-24881)
|
|
Critical
|
27 Apr 2025 |
11 May 2025 |
CPAI-2025-0224
|
|
CVE-2025-34028
|
Commvault Command Center Remote Code Execution (CVE-2025-34028)
|
|
High
|
11 May 2025 |
11 May 2025 |
CPAI-2025-0202
|
|
CVE-2025-27423
|
Vim Command Injection (CVE-2025-27423)
|
|
Critical
|
8 May 2025 |
8 May 2025 |
CPAI-2025-0269
|
|
CVE-2025-2775
CVE-2025-2776
CVE-2025-2777
|
SysAid On-Premise XML External Entity Injection (CVE-2025-2775; CVE-2025-2776; CVE-2025-2777)
|
|
Critical
|
8 May 2025 |
8 May 2025 |
CPAI-2025-0268
|
|
CVE-2025-2778
|
SysAid On-Premise Command Injection (CVE-2025-2778)
|
|
Critical
|
8 May 2025 |
8 May 2025 |
CPAI-2024-1640
|
|
CVE-2024-11120
CVE-2024-6047
|
GeoVision Devices Command Injection (CVE-2024-11120; CVE-2024-6047)
|
|
High
|
4 May 2025 |
8 May 2025 |
CPAI-2023-2049
|
|
CVE-2023-44221
|
SonicWall SMA Command Injection (CVE-2023-44221)
|
|
High
|
8 May 2025 |
8 May 2025 |
CPAI-2024-1633
|
|
CVE-2024-13179
|
Ivanti Avalanche Directory Traversal (CVE-2024-13179)
|
|
Critical
|
8 May 2025 |
8 May 2025 |
CPAI-2019-3277
|
|
CVE-2019-17382
|
Zabbix Authentication Bypass (CVE-2019-17382)
|
|
Critical
|
8 May 2025 |
8 May 2025 |
CPAI-2021-2319
|
|
CVE-2021-43421
|
Studio-42 elFinder Arbitrary File Upload (CVE-2021-43421)
|
|
High
|
8 May 2025 |
8 May 2025 |
CPAI-2020-4306
|
|
CVE-2020-19364
|
OpenEMR Arbitrary File Upload (CVE-2020-19364)
|
|
High
|
29 Apr 2025 |
8 May 2025 |
CPAI-2025-0229
|
|
CVE-2025-3538
|
D-Link DI-8100 Buffer Overflow (CVE-2025-3538)
|
|
Critical
|
8 May 2025 |
8 May 2025 |
CPAI-2025-0213
|
|
CVE-2025-29659
CVE-2025-29660
|
Yi XY-3820 Remote Code Execution (CVE-2025-29659; CVE-2025-29660)
|
|
Critical
|
7 Apr 2025 |
8 May 2025 |
CPAI-2025-0168
|
|
CVE-2025-22457
|
Ivanti Buffer Overflow (CVE-2025-22457)
|
|
Critical
|
17 Mar 2025 |
7 May 2025 |
CPAI-2024-1459
|
|
CVE-2024-22660
CVE-2024-22662
CVE-2024-37631
CVE-2024-37632
CVE-2024-37633
CVE-2024-37634
CVE-2024-37635
CVE-2024-37637
CVE-2024-37639
CVE-2024-37640
|
TOTOLINK A3700R Stack Overflow (CVE-2024-22660; CVE-2024-22662; CVE-2024-37631; CVE-2024-37632; CVE-2024-37633; CVE-2024-37634; CVE-2024-37635; CVE-2024-37637; CVE-2024-37639; CVE-2024-37640)
|
|
High
|
7 May 2025 |
7 May 2025 |
CPAI-2024-1638
|
|
CVE-2024-7399
|
Samsung MagicINFO Remote Code Execution (CVE-2024-7399)
|
|
Medium
|
7 May 2025 |
7 May 2025 |
CPAI-2022-2214
|
|
CVE-2022-32206
|
Haxx Curl Denial of Service (CVE-2022-32206)
|
|
Critical
|
7 May 2025 |
7 May 2025 |
CPAI-2021-2321
|
|
CVE-2021-41649
|
Online Shopping System Advanced SQL Injection (CVE-2021-41649)
|
|
High
|
7 May 2025 |
7 May 2025 |
CPAI-2021-2320
|
|
CVE-2021-21251
|
OneDev Arbitrary File Write (CVE-2021-21251)
|
|
Critical
|
7 May 2025 |
7 May 2025 |
CPAI-2025-0192
|
|
CVE-2025-1661
|
WordPress HUSKY Plugin Path Traversal (CVE-2025-1661)
|
|
Critical
|
3 Feb 2025 |
7 May 2025 |
CPAI-2024-1293
|
|
CVE-2024-55591
|
Fortinet Multiple Products Authentication Bypass (CVE-2024-55591)
|
|
Medium
|
6 May 2025 |
6 May 2025 |
CPAI-2025-0258
|
|
CVE-2025-1103
|
D-Link DIR-823X Denial of Service (CVE-2025-1103)
|
|
Critical
|
6 May 2025 |
6 May 2025 |
CPAI-2023-2048
|
|
CVE-2023-42818
CVE-2023-43650
CVE-2023-46123
|
FIT2CLOUD JumpServer Brute Force Login Attempt (CVE-2023-42818; CVE-2023-43650; CVE-2023-46123)
|
|
Critical
|
6 May 2025 |
6 May 2025 |
CPAI-2023-2044
|
|
CVE-2023-5830
|
ColumbiaSoft Document Locator Server-Side Request Forgery (CVE-2023-5830)
|
|
Critical
|
14 Apr 2025 |
6 May 2025 |
CPAI-2025-0191
|
|
CVE-2025-3248
|
Langflow Remote Code Execution (CVE-2025-3248)
|
|
Critical
|
5 May 2025 |
5 May 2025 |
CPAI-2021-2318
|
|
CVE-2021-27670
|
Appspace Server-Side Request Forgery (CVE-2021-27670)
|
|
Critical
|
5 May 2025 |
5 May 2025 |
CPAI-2018-2914
|
|
CVE-2018-10931
|
Cobbler Improper Access Control (CVE-2018-10931)
|
|
Critical
|
5 May 2025 |
5 May 2025 |
CPAI-2021-2317
|
|
CVE-2021-37538
|
SmartDataSoft SmartBlog for PrestaShop SQL Injection (CVE-2021-37538)
|
|
Medium
|
5 May 2025 |
5 May 2025 |
CPAI-2024-1630
|
|
CVE-2024-44236
|
Apple MacOS Out of Bounds Write (CVE-2024-44236)
|
|
Critical
|
27 Apr 2025 |
5 May 2025 |
CPAI-2025-0245
|
|
CVE-2024-58136
CVE-2025-32432
|
Craft CMS Remote Code Execution (CVE-2024-58136; CVE-2025-32432)
|
|
Critical
|
5 May 2025 |
5 May 2025 |
CPAI-2024-1617
|
|
CVE-2024-56511
|
DataEase Directory Traversal (CVE-2024-56511)
|
|
Critical
|
20 Apr 2025 |
5 May 2025 |
CPAI-2024-1602
|
|
CVE-2023-51984
CVE-2024-33342
|
D-Link DIR-822 Command Injection (CVE-2023-51984; CVE-2024-33342)
|
|
Critical
|
8 Apr 2025 |
5 May 2025 |
CPAI-2023-2015
|
|
CVE-2023-51092
CVE-2023-51095
|
Tenda M3 Stack Overflow (CVE-2023-51092; CVE-2023-51095)
|
|
Critical
|
25 Mar 2025 |
5 May 2025 |
CPAI-2021-2302
|
|
CVE-2019-10955
CVE-2021-23385
CVE-2021-23393
CVE-2021-32618
|
Open Redirect Attempt (CVE-2019-10955; CVE-2021-23385; CVE-2021-23393; CVE-2021-32618)
|
|
Critical
|
4 May 2025 |
4 May 2025 |
CPAI-2022-2213
|
|
CVE-2022-46020
|
WBCE CMS Arbitrary File Upload (CVE-2022-46020)
|
Feedback