|
High
|
13 Feb 2025 |
13 Feb 2025 |
CPAI-2024-1383
|
|
CVE-2024-45518
|
Zimbra Collaboration Server-Side Request Forgery (CVE-2024-45518)
|
|
Medium
|
13 Feb 2025 |
13 Feb 2025 |
CPAI-2024-1367
|
|
CVE-2024-55947
|
Gogs Path Traversal (CVE-2024-55947)
|
|
High
|
13 Feb 2025 |
13 Feb 2025 |
CPAI-2024-1366
|
|
CVE-2024-47008
|
Ivanti Avalanche Server-Side Request Forgery (CVE-2024-47008)
|
|
Medium
|
13 Feb 2025 |
13 Feb 2025 |
CPAI-2018-2894
|
|
CVE-2018-11552
|
NCH AXON PBX Cross-Site Scripting (CVE-2018-11552)
|
|
High
|
30 Jan 2025 |
13 Feb 2025 |
CPAI-2024-1345
|
|
CVE-2024-41710
|
Mitel Multiple Products Command Injection (CVE-2024-41710)
|
|
Critical
|
12 Feb 2025 |
12 Feb 2025 |
CPAI-2025-0035
|
Microsoft CVE-2025-21376
|
CVE-2025-21376
|
Microsoft Windows LDAP Remote Code Execution (CVE-2025-21376)
|
|
Critical
|
12 Feb 2025 |
12 Feb 2025 |
CPAI-2023-1998
|
|
CVE-2023-49403
CVE-2023-49999
|
Tenda W30E Command Injection (CVE-2023-49403; CVE-2023-49999)
|
|
Medium
|
12 Feb 2025 |
12 Feb 2025 |
CPAI-2023-1995
|
|
CVE-2023-6065
|
WordPress Quttera Web Malware Scanner Plugin Information Disclosure (CVE-2023-6065)
|
|
Medium
|
11 Feb 2025 |
11 Feb 2025 |
CPAI-2025-0032
|
Microsoft CVE-2025-21377
|
CVE-2025-21377
|
Microsoft Windows NTLM Information Disclosure (CVE-2025-21377)
|
|
High
|
11 Feb 2025 |
11 Feb 2025 |
CPAI-2025-0030
|
Microsoft CVE-2025-21400
|
CVE-2025-21400
|
Microsoft SharePoint Server Remote Code Execution (CVE-2025-21400)
|
|
High
|
10 Feb 2025 |
10 Feb 2025 |
CPAI-2024-1355
|
|
CVE-2024-55417
|
PHP Voyager Package Arbitrary File Upload (CVE-2024-55417)
|
|
High
|
10 Feb 2025 |
10 Feb 2025 |
CPAI-2024-1302
|
|
CVE-2024-0778
|
Uniview ISC 2500-S Command Injection (CVE-2024-0778)
|
|
High
|
9 Feb 2025 |
9 Feb 2025 |
CPAI-2024-1363
|
|
CVE-2024-38653
|
Ivanti Avalanche XML External Entity Injection (CVE-2024-38653)
|
|
Medium
|
9 Feb 2025 |
9 Feb 2025 |
CPAI-2024-1361
|
|
CVE-2024-45607
|
Secreto31126 Whatsapp-Api-js Improper Access Control (CVE-2024-45607)
|
|
High
|
9 Feb 2025 |
9 Feb 2025 |
CPAI-2024-1353
|
|
CVE-2024-55416
|
PHP Voyager Package Cross-Site Scripting (CVE-2024-55416)
|
|
High
|
9 Feb 2025 |
9 Feb 2025 |
CPAI-2024-1352
|
|
CVE-2024-55415
|
PHP Voyager Package Path Traversal (CVE-2024-55415)
|
|
Critical
|
9 Feb 2025 |
9 Feb 2025 |
CPAI-2024-1335
|
|
CVE-2024-50603
|
Aviatrix Controller Remote Code Execution (CVE-2024-50603)
|
|
High
|
9 Feb 2025 |
9 Feb 2025 |
CPAI-2021-2287
|
|
CVE-2021-40410
|
Reolink RLC-410W Firmware Command Injection (CVE-2021-40410)
|
|
High
|
9 Feb 2025 |
9 Feb 2025 |
CPAI-2021-2286
|
|
CVE-2021-40412
|
Reolink RLC-410W Firmware Command Injection (CVE-2021-40412)
|
|
Critical
|
9 Feb 2025 |
9 Feb 2025 |
CPAI-2024-1334
|
|
CVE-2024-43468
|
Microsoft Configuration Manager Remote Code Execution (CVE-2024-43468)
|
|
Critical
|
6 Feb 2025 |
6 Feb 2025 |
CPAI-2018-2892
|
|
CVE-2018-19410
|
Paessler PRTG Network Monitor Authentication Bypass (CVE-2018-19410)
|
|
High
|
6 Feb 2025 |
6 Feb 2025 |
CPAI-2024-1358
|
|
CVE-2024-48766
|
NetAlertX Directory Traversal (CVE-2024-48766)
|
|
High
|
6 Feb 2025 |
6 Feb 2025 |
CPAI-2024-1327
|
|
CVE-2024-28726
|
D-Link DWR-2000M Command Injection (CVE-2024-28726)
|
|
Critical
|
6 Feb 2025 |
6 Feb 2025 |
CPAI-2025-0012
|
|
CVE-2025-22904
CVE-2025-22907
CVE-2025-22913
CVE-2025-22916
|
EDIMAX RE11S Stack Overflow (CVE-2025-22904; CVE-2025-22907; CVE-2025-22913; CVE-2025-22916)
|
|
High
|
6 Feb 2025 |
6 Feb 2025 |
CPAI-2024-1323
|
|
CVE-2024-45802
|
Squid Denial of Service (CVE-2024-45802)
|
|
Critical
|
6 Feb 2025 |
6 Feb 2025 |
CPAI-2024-1321
|
|
CVE-2024-48914
|
Vendure Asset Server Plugin Directory Traversal (CVE-2024-48914)
|
|
Medium
|
4 Feb 2025 |
4 Feb 2025 |
CPAI-2025-0015
|
|
|
Nagios Enterprises Nagios XI Command Injection
|
|
High
|
4 Feb 2025 |
4 Feb 2025 |
CPAI-2021-2292
|
|
CVE-2021-41805
|
HashiCorp Consul Improper Access Control (CVE-2021-41805)
|
|
Critical
|
3 Feb 2025 |
3 Feb 2025 |
CPAI-2024-1325
|
|
CVE-2024-11972
|
WordPress Hunk Companion Plugin Authentication Bypass (CVE-2024-11972)
|
|
Critical
|
3 Feb 2025 |
3 Feb 2025 |
CPAI-2024-1293
|
|
CVE-2024-55591
|
Fortinet Multiple Products Authentication Bypass (CVE-2024-55591)
|
|
Critical
|
2 Feb 2025 |
2 Feb 2025 |
CPAI-2024-1333
|
|
CVE-2024-45507
|
Apache OFBiz Server-Side Request Forgery (CVE-2024-45507)
|
|
Critical
|
2 Feb 2025 |
2 Feb 2025 |
CPAI-2024-1341
|
|
CVE-2024-36258
|
Wavlink AC3000 Authentication Bypass (CVE-2024-36258)
|
|
Critical
|
2 Feb 2025 |
2 Feb 2025 |
CPAI-2024-1339
|
|
CVE-2024-34166
|
Wavlink AC3000 Command Injection (CVE-2024-34166)
|
|
Critical
|
2 Feb 2025 |
2 Feb 2025 |
CPAI-2019-3255
|
|
CVE-2019-16891
|
Liferay Portal Insecure Deserialization (CVE-2019-16891)
|
|
Medium
|
29 Jan 2025 |
29 Jan 2025 |
CPAI-2024-1324
|
|
CVE-2024-45826
|
Rockwell Automation ThinManager Directory Traversal (CVE-2024-45826)
|
|
Critical
|
29 Jan 2025 |
29 Jan 2025 |
CPAI-2024-1317
|
|
CVE-2024-4320
|
LoLLMs WebUI Path Traversal (CVE-2024-4320)
|
|
Critical
|
29 Jan 2025 |
29 Jan 2025 |
CPAI-2024-1312
|
|
CVE-2024-57684
|
D-Link DIR-816 Authentication Bypass (CVE-2024-57684)
|
|
Critical
|
29 Jan 2025 |
29 Jan 2025 |
CPAI-2024-1291
|
|
CVE-2024-11773
|
Ivanti Cloud Services Appliance SQL Injection (CVE-2024-11773)
|
|
High
|
20 Jan 2025 |
28 Jan 2025 |
CPAI-2024-1230
|
|
CVE-2024-47007
CVE-2024-50317
CVE-2024-50318
CVE-2024-50319
CVE-2024-50321
|
Ivanti Avalanche Denial of Service (CVE-2024-47007; CVE-2024-50317; CVE-2024-50318; CVE-2024-50319; CVE-2024-50321)
|
|
High
|
27 Jan 2025 |
27 Jan 2025 |
CPAI-2024-1316
|
|
CVE-2024-50326
|
Ivanti Endpoint Manager SQL Injection (CVE-2024-50326)
|
|
Critical
|
27 Jan 2025 |
27 Jan 2025 |
CPAI-2024-1292
|
|
CVE-2024-46909
|
Progress WhatsUp Gold Remote Code Execution (CVE-2024-46909)
|
|
High
|
26 Jan 2025 |
26 Jan 2025 |
CPAI-2024-1313
|
|
CVE-2024-53457
|
LibreNMS Stored Cross-Site Scripting (CVE-2024-53457)
|
|
Medium
|
26 Jan 2025 |
26 Jan 2025 |
CPAI-2020-4275
|
|
CVE-2020-13563
|
PhpGACL Project PhpGACL Cross-Site Scripting (CVE-2020-13563)
|
|
Medium
|
26 Jan 2025 |
26 Jan 2025 |
CPAI-2020-4274
|
|
CVE-2020-13564
|
PhpGACL Project PhpGACL Cross-Site Scripting (CVE-2020-13564)
|
|
High
|
23 Jan 2025 |
23 Jan 2025 |
CPAI-2024-1319
|
|
CVE-2024-49112
|
Microsoft Windows LDAP Remote Code Execution (CVE-2024-49112)
|
|
High
|
23 Jan 2025 |
23 Jan 2025 |
CPAI-2024-1310
|
|
CVE-2024-52875
|
GFI Kerio Control CRLF Injection (CVE-2024-52875)
|
|
High
|
23 Jan 2025 |
23 Jan 2025 |
CPAI-2024-1305
|
|
CVE-2024-53691
|
QNAP QTS Remote Code Execution (CVE-2024-53691)
|
|
High
|
23 Jan 2025 |
23 Jan 2025 |
CPAI-2024-1304
|
|
CVE-2024-51818
|
WordPress Fancy Product Designer Plugin SQL Injection (CVE-2024-51818)
|
|
High
|
17 Jan 2025 |
23 Jan 2025 |
CPAI-2024-1224
|
|
CVE-2024-49113
|
Microsoft Windows LDAP Denial of Service (CVE-2024-49113)
|
|
Critical
|
23 Jan 2025 |
23 Jan 2025 |
CPAI-2024-1146
|
|
CVE-2024-8877
|
Riello NetMan 204 Firmware SQL Injection (CVE-2024-8877)
|
Feedback