Medium
|
29 May 2025 |
22 Jun 2025 |
CPAI-2025-0347
|
|
CVE-2025-0133
|
Palo Alto Networks PAN-OS Cross-Site Scripting (CVE-2025-0133)
|
Medium
|
29 May 2025 |
22 Jun 2025 |
CPAI-2025-0344
|
|
CVE-2025-45864
|
TOTOLINK A3002R Buffer Overflow (CVE-2025-45864)
|
Medium
|
29 May 2025 |
22 Jun 2025 |
CPAI-2025-0340
|
|
CVE-2025-45867
|
TOTOLINK A3002R Buffer Overflow (CVE-2025-45867)
|
Low
|
29 May 2025 |
22 Jun 2025 |
CPAI-2025-0335
|
|
CVE-2025-3994
|
TOTOLINK N150RT Firmware Cross-Site Scripting (CVE-2025-3994)
|
Critical
|
5 Jun 2025 |
22 Jun 2025 |
CPAI-2025-0303
|
|
CVE-2025-45859 CVE-2025-45861 CVE-2025-45862 CVE-2025-45863 CVE-2025-45864 CVE-2025-45865 CVE-2025-45866 CVE-2025-45867
|
TOTOLINK A3002R Buffer Overflow (CVE-2025-45859; CVE-2025-45861; CVE-2025-45862; CVE-2025-45863; CVE-2025-45864; CVE-2025-45865; CVE-2025-45866; CVE-2025-45867)
|
Medium
|
15 May 2025 |
22 Jun 2025 |
CPAI-2025-0281
|
|
CVE-2025-3987
|
TOTOLINK N150RT Firmware Command Injection (CVE-2025-3987)
|
Medium
|
15 May 2025 |
22 Jun 2025 |
CPAI-2025-0278
|
|
CVE-2025-2094
|
TOTOLINK EX1800T Firmware Command Injection (CVE-2025-2094)
|
High
|
12 May 2025 |
22 Jun 2025 |
CPAI-2024-1639
|
|
CVE-2024-47962
|
Delta Electronics CNCSoft-G2 Remote Code Execution (CVE-2024-47962)
|
Critical
|
11 May 2025 |
22 Jun 2025 |
CPAI-2025-0263
|
|
CVE-2025-28137
|
TOTOLINK A810R Firmware Command Injection (CVE-2025-28137)
|
Medium
|
29 Apr 2025 |
22 Jun 2025 |
CPAI-2025-0233
|
|
CVE-2025-3663
|
TOTOLINK A3700R Improper Access Control (CVE-2025-3663)
|
Critical
|
4 May 2025 |
22 Jun 2025 |
CPAI-2025-0210
|
|
CVE-2025-28038 CVE-2025-28039
|
TOTOLINK EX1200T Remote Command Execution (CVE-2025-28038; CVE-2025-28039)
|
Critical
|
27 Apr 2025 |
22 Jun 2025 |
CPAI-2022-2211
|
|
CVE-2022-26187
|
TOTOLINK N600R Firmware Command Injection (CVE-2022-26187)
|
Critical
|
23 Apr 2025 |
22 Jun 2025 |
CPAI-2023-2035
|
|
CVE-2023-7095
|
TOTOLINK A7100RU Buffer Overflow (CVE-2023-7095)
|
Critical
|
24 Apr 2025 |
22 Jun 2025 |
CPAI-2021-2307
|
|
CVE-2021-22175 CVE-2021-22214 CVE-2021-39935
|
GitLab Server-Side Request Forgery (CVE-2021-22175; CVE-2021-22214; CVE-2021-39935)
|
Medium
|
16 Apr 2025 |
22 Jun 2025 |
CPAI-2019-3273
|
|
CVE-2019-13068
|
Grafana Cross-Site Scripting (CVE-2019-13068)
|
Critical
|
14 Apr 2025 |
22 Jun 2025 |
CPAI-2025-0171
|
|
CVE-2025-25579 CVE-2025-45858
|
TOTOLINK A3002R Command Injection (CVE-2025-25579; CVE-2025-45858)
|
High
|
6 Apr 2025 |
22 Jun 2025 |
CPAI-2022-2200
|
|
CVE-2022-2230
|
GitLab Cross-Site Scripting (CVE-2022-2230)
|
Critical
|
1 Apr 2025 |
22 Jun 2025 |
CPAI-2024-1508
|
|
CVE-2024-7464
|
TOTOLINK CP900 Command Injection (CVE-2024-7464)
|
High
|
31 Mar 2025 |
22 Jun 2025 |
CPAI-2020-4288
|
|
CVE-2020-13340
|
GitLab Cross-Site Scripting (CVE-2020-13340)
|
High
|
27 Mar 2025 |
22 Jun 2025 |
CPAI-2019-3263
|
|
CVE-2019-15043
|
Grafana Denial of Service (CVE-2019-15043)
|
Critical
|
26 Mar 2025 |
22 Jun 2025 |
CPAI-2024-1509
|
|
CVE-2024-7463
|
TOTOLINK CP900 Buffer Overflow (CVE-2024-7463)
|
High
|
23 Mar 2025 |
22 Jun 2025 |
CPAI-2025-0076
|
|
CVE-2025-2097
|
TOTOLINK EX1800T Stack Overflow (CVE-2025-2097)
|
Critical
|
17 Mar 2025 |
22 Jun 2025 |
CPAI-2024-1459
|
|
CVE-2024-22660 CVE-2024-22662 CVE-2024-37631 CVE-2024-37632 CVE-2024-37633 CVE-2024-37634 CVE-2024-37635 CVE-2024-37637 CVE-2024-37639 CVE-2024-37640
|
TOTOLINK A3700R Stack Overflow (CVE-2024-22660; CVE-2024-22662; CVE-2024-37631; CVE-2024-37632; CVE-2024-37633; CVE-2024-37634; CVE-2024-37635; CVE-2024-37637; CVE-2024-37639; CVE-2024-37640)
|
High
|
24 Feb 2025 |
22 Jun 2025 |
CPAI-2025-0053
|
|
CVE-2025-0110
|
Palo Alto Networks PAN-OS OpenConfig Plugin Command Injection (CVE-2025-0110)
|
High
|
23 Feb 2025 |
22 Jun 2025 |
CPAI-2025-0045
|
|
CVE-2025-1340
|
TOTOLINK X18 Stack Overflow (CVE-2025-1340)
|
Critical
|
20 Feb 2025 |
22 Jun 2025 |
CPAI-2024-1404
|
|
CVE-2024-34204 CVE-2024-34206 CVE-2024-34210
|
TOTOLINK CP450 Command Injection (CVE-2024-34204; CVE-2024-34206; CVE-2024-34210)
|
Critical
|
23 Feb 2025 |
22 Jun 2025 |
CPAI-2024-1403
|
|
CVE-2024-34200 CVE-2024-34201 CVE-2024-34203 CVE-2024-34207 CVE-2024-34209 CVE-2024-34212 CVE-2024-34213 CVE-2024-34215
|
TOTOLINK CP450 Buffer Overflow (CVE-2024-34200; CVE-2024-34201; CVE-2024-34203; CVE-2024-34207; CVE-2024-34209; CVE-2024-34212; CVE-2024-34213; CVE-2024-34215)
|
High
|
13 Feb 2025 |
22 Jun 2025 |
CPAI-2025-0038
|
|
CVE-2025-0108
|
Palo Alto Networks PAN-OS Authentication Bypass (CVE-2025-0108)
|
High
|
30 Jan 2025 |
22 Jun 2025 |
CPAI-2025-0020
|
|
CVE-2025-0105
|
Palo Alto Networks Expedition Arbitrary File Deletion (CVE-2025-0105)
|
High
|
23 Jan 2025 |
22 Jun 2025 |
CPAI-2025-0009
|
|
CVE-2025-0107
|
Palo Alto Networks Expedition Command Injection (CVE-2025-0107)
|
High
|
1 Jan 2025 |
22 Jun 2025 |
CPAI-2023-1950
|
|
CVE-2023-1162
|
DrayTek Vigor 2960 Firmware Command Injection (CVE-2023-1162)
|
High
|
1 Jan 2025 |
22 Jun 2025 |
CPAI-2023-1949
|
|
CVE-2023-24229
|
Draytek Vigor2960 Firmware Command Injection (CVE-2023-24229)
|
High
|
6 Jan 2025 |
22 Jun 2025 |
CPAI-2024-0848
|
|
CVE-2024-8124
|
GitLab Denial-of-Service (CVE-2024-8124)
|
Critical
|
19 Jun 2025 |
19 Jun 2025 |
CPAI-2025-0418
|
|
CVE-2025-49002
|
DataEase Remote Code Execution (CVE-2025-49002)
|
Medium
|
19 Jun 2025 |
19 Jun 2025 |
CPAI-2025-0415
|
|
CVE-2025-4755
|
D-Link DI-7003G Authentication Bypass (CVE-2025-4755)
|
Medium
|
19 Jun 2025 |
19 Jun 2025 |
CPAI-2025-0413
|
|
CVE-2025-4901
|
D-Link DI-7003G Information Disclosure (CVE-2025-4901)
|
High
|
19 Jun 2025 |
19 Jun 2025 |
CPAI-2024-1693
|
|
CVE-2024-33610
|
Sharp Printers Authentication Bypass (CVE-2024-33610)
|
Critical
|
19 Jun 2025 |
19 Jun 2025 |
CPAI-2025-0389
|
|
CVE-2025-27651 CVE-2025-27652
|
Vasion Print Server Side Request Forgery (CVE-2025-27651; CVE-2025-27652)
|
High
|
19 Jun 2025 |
19 Jun 2025 |
CPAI-2025-0372
|
|
CVE-2025-2760
|
GIMP Integer Overflow (CVE-2025-2760)
|
High
|
19 May 2025 |
19 Jun 2025 |
CPAI-2014-2667
|
|
CVE-2014-8500
|
ISC BIND Denial of Service (CVE-2014-8500)
|
Critical
|
9 Feb 2025 |
19 Jun 2025 |
CPAI-2024-1360
|
|
CVE-2024-37184 CVE-2024-39288 CVE-2024-39359 CVE-2024-39757 CVE-2024-39774
|
Wavlink AC3000 Buffer Overflow (CVE-2024-37184; CVE-2024-39288; CVE-2024-39359; CVE-2024-39757; CVE-2024-39774)
|
High
|
18 Jun 2025 |
18 Jun 2025 |
CPAI-2025-0444
|
|
CVE-2025-5503
|
TOTOLINK X15 Buffer Overflow (CVE-2025-5503)
|
Critical
|
18 Jun 2025 |
18 Jun 2025 |
CPAI-2023-2065
|
|
CVE-2023-6329
|
Control iD iDSecure Authentication Bypass (CVE-2023-6329)
|
High
|
18 Jun 2025 |
18 Jun 2025 |
CPAI-2024-1691
|
|
CVE-2024-22476
|
Intel Neural Compressor Privilege Escalation (CVE-2024-22476)
|
Medium
|
18 Jun 2025 |
18 Jun 2025 |
CPAI-2025-0311
|
|
CVE-2025-27892
|
Shopware SQL Injection (CVE-2025-27892)
|
High
|
22 May 2025 |
18 Jun 2025 |
CPAI-2015-1708
|
|
CVE-2015-2790
|
Foxit Software Multiple Products Memory Corruption (CVE-2015-2790)
|
Critical
|
18 Jun 2025 |
18 Jun 2025 |
CPAI-2018-2915
|
|
CVE-2018-17440
|
D-Link Central WiFiManager Hardcoded Credentials (CVE-2018-17440)
|
High
|
17 Jun 2025 |
17 Jun 2025 |
CPAI-2025-0439
|
|
CVE-2025-27817
|
Apache Kafka Information Disclosure (CVE-2025-27817)
|
High
|
17 Jun 2025 |
17 Jun 2025 |
CPAI-2024-1702
|
|
CVE-2024-6587
|
LiteLLM Server-Side Request Forgery (CVE-2024-6587)
|
High
|
17 Jun 2025 |
17 Jun 2025 |
CPAI-2024-1700
|
|
CVE-2024-33623
|
LevelOne WBR-6012 Denial of Service (CVE-2024-33623)
|