|
Critical
|
7 Apr 2025 |
5 Oct 2026 |
CPAI-2024-8659
|
|
CVE-2024-48884
|
Fortinet Multiple Products Directory Traversal (CVE-2024-48884)
|
|
Medium
|
20 Aug 2025 |
4 Oct 2026 |
CPAI-2025-18903
|
|
CVE-2025-7762
|
D-Link DI-8100 Buffer Overflow (CVE-2025-7762)
|
|
High
|
15 Oct 2025 |
30 Sep 2026 |
CPAI-2025-2634
|
|
CVE-2025-6216
|
Alltena Allegra Authentication Bypass (CVE-2025-6216)
|
|
High
|
12 May 2025 |
27 Sep 2026 |
CPAI-2024-1639
|
|
CVE-2024-47962
|
Delta Electronics CNCSoft-G2 Remote Code Execution (CVE-2024-47962)
|
|
High
|
26 Jun 2025 |
23 Sep 2026 |
CPAI-2025-18643
|
|
CVE-2025-31200
|
Apple Multiple Products Memory Corruption (CVE-2025-31200)
|
|
Critical
|
15 Apr 2025 |
23 Sep 2026 |
CPAI-2026-12197
|
|
|
Sensitive Configuration File Disclosure
|
|
High
|
16 Jun 2025 |
22 Sep 2026 |
CPAI-2025-0377
|
|
CVE-2025-4123
|
Grafana Path Traversal (CVE-2025-4123)
|
|
Medium
|
9 Jun 2025 |
22 Sep 2026 |
CPAI-2024-1682
|
|
CVE-2024-45741
|
Splunk Cross-Site Scripting (CVE-2024-45741)
|
|
High
|
3 Apr 2025 |
16 Sep 2026 |
CPAI-2026-11710
|
|
CVE-2024-45811
CVE-2025-30208
CVE-2025-31125
CVE-2026-39364
|
Vite Information Disclosure (CVE-2024-45811; CVE-2025-30208; CVE-2025-31125; CVE-2026-39364)
|
|
Medium
|
22 Apr 2025 |
15 Sep 2026 |
CPAI-2024-8574
|
|
CVE-2024-44176
|
Apple Multiple Products Denial of Service (CVE-2024-44176)
|
|
Medium
|
20 Apr 2025 |
15 Sep 2026 |
CPAI-2024-8573
|
|
CVE-2024-40777
|
Apple Multiple Products Out-Of-Bounds Access (CVE-2024-40777)
|
|
High
|
8 Jun 2025 |
14 Sep 2026 |
CPAI-2024-8559
|
|
CVE-2024-13171
|
Ivanti Endpoint Manager Directory Traversal (CVE-2024-13171)
|
|
High
|
9 Jun 2025 |
14 Sep 2026 |
CPAI-2024-8560
|
|
CVE-2024-39605
|
Delta Electronics DIAScreen Buffer Overflow (CVE-2024-39605)
|
|
Medium
|
5 May 2025 |
14 Sep 2026 |
CPAI-2024-8562
|
|
CVE-2024-44236
|
Apple MacOS Out of Bounds Write (CVE-2024-44236)
|
|
High
|
14 Aug 2025 |
10 Sep 2026 |
CPAI-2025-18474
|
|
CVE-2025-6965
|
SQLite Memory Corruption (CVE-2025-6965)
|
|
High
|
14 Jul 2025 |
10 Sep 2026 |
CPAI-2025-18478
|
|
CVE-2025-2449
|
National Instruments FlexLogger Directory Traversal (CVE-2025-2449)
|
|
Critical
|
14 Apr 2025 |
7 Sep 2026 |
CPAI-2026-10903
|
|
CVE-2024-48061
CVE-2025-3248
CVE-2026-0768
CVE-2026-0770
CVE-2026-9198
|
Langflow Remote Code Execution (CVE-2024-48061; CVE-2025-3248; CVE-2026-0768; CVE-2026-0770; CVE-2026-9198)
|
|
High
|
4 Dec 2025 |
30 Aug 2026 |
CPAI-2025-7763
|
|
CVE-2025-43989
|
Shenzhen Tuoshi NR500-EA Command Injection (CVE-2025-43989)
|
|
High
|
30 Mar 2025 |
30 Aug 2026 |
CPAI-2024-1521
|
|
CVE-2024-12971
|
Pandora FMS Command Injection (CVE-2024-12971)
|
|
High
|
23 Jan 2025 |
25 Aug 2026 |
CPAI-2024-8462
|
|
CVE-2024-34787
|
Ivanti Endpoint Manager Directory Traversal (CVE-2024-34787)
|
|
Critical
|
27 Apr 2025 |
20 Aug 2026 |
CPAI-2025-0245
|
|
CVE-2024-58136
CVE-2025-32432
|
Craft CMS Remote Code Execution (CVE-2024-58136; CVE-2025-32432)
|
|
High
|
29 Jul 2025 |
18 Aug 2026 |
CPAI-2025-18296
|
|
CVE-2025-40596
CVE-2025-40597
|
SonicWall SMA100 Stack Overflow (CVE-2025-40596; CVE-2025-40597)
|
|
Medium
|
17 Jul 2025 |
17 Aug 2026 |
CPAI-2025-0536
|
|
CVE-2025-31121
|
OpenEMR Cross-Site Scripting (CVE-2025-31121)
|
|
High
|
29 May 2025 |
17 Aug 2026 |
CPAI-2025-0345
|
|
CVE-2025-2725
|
H3C Multiple Products Command Injection (CVE-2025-2725)
|
|
High
|
13 Mar 2025 |
17 Aug 2026 |
CPAI-2025-0086
|
|
CVE-2025-27636
CVE-2025-29891
|
Apache Camel Remote Code Execution (CVE-2025-27636; CVE-2025-29891)
|
|
High
|
11 Dec 2025 |
12 Aug 2026 |
CPAI-2025-18289
|
|
CVE-2025-55752
|
Apache Tomcat Directory Traversal (CVE-2025-55752)
|
|
High
|
10 Apr 2025 |
12 Aug 2026 |
CPAI-2025-18285
|
|
CVE-2025-2945
|
PostgreSQL pgAdmin Remote Code Execution (CVE-2025-2945)
|
|
Critical
|
4 Dec 2025 |
11 Aug 2026 |
CPAI-2025-18274
|
|
CVE-2025-55182
|
React Server Components Remote Code Execution (CVE-2025-55182)
|
|
High
|
15 Apr 2025 |
11 Aug 2026 |
CPAI-2026-10066
|
|
|
Aiohttp Directory Traversal
|
|
Critical
|
25 Mar 2025 |
10 Aug 2026 |
CPAI-2025-18260
|
|
CVE-2025-29927
|
Next.js Authentication Bypass (CVE-2025-29927)
|
|
Critical
|
14 Apr 2025 |
6 Aug 2026 |
CPAI-2026-10003
|
|
CVE-2024-48061
CVE-2025-3248
CVE-2026-0770
CVE-2026-9198
|
Langflow Remote Code Execution (CVE-2024-48061; CVE-2025-3248; CVE-2026-0770; CVE-2026-9198)
|
|
Medium
|
6 Apr 2025 |
6 Aug 2026 |
CPAI-2024-1578
|
|
CVE-2024-0305
|
Ncast Project Ncast Information Disclosure (CVE-2024-0305)
|
|
High
|
31 Mar 2025 |
5 Aug 2026 |
CPAI-2024-8369
|
|
CVE-2024-50322
|
Ivanti Endpoint Manager Directory Traversal (CVE-2024-50322)
|
|
High
|
6 Apr 2025 |
2 Aug 2026 |
CPAI-2017-1954
|
|
CVE-2017-12637
|
SAP NetWeaver Application Server Java Directory Traversal (CVE-2017-12637)
|
|
Medium
|
13 Feb 2025 |
2 Aug 2026 |
CPAI-2025-0033
|
|
CVE-2025-25181
|
Advantive VeraCore SQL Injection (CVE-2025-25181)
|
|
Critical
|
19 Jun 2025 |
23 Jul 2026 |
CPAI-2025-18055
|
|
CVE-2025-27651
CVE-2025-27652
|
Vasion Print Server-Side Request Forgery (CVE-2025-27651; CVE-2025-27652)
|
|
Critical
|
17 Jul 2025 |
22 Jul 2026 |
CPAI-2025-18053
|
|
CVE-2021-27137
CVE-2025-4448
CVE-2025-4449
CVE-2025-4450
CVE-2025-4451
CVE-2025-55599
CVE-2025-6367
CVE-2025-6368
CVE-2025-6369
CVE-2025-6370
CVE-2025-6371
CVE-2025-6372
CVE-2025-6373
CVE-2025-6374
|
D-Link DIR-619L Buffer Overflow (CVE-2021-27137; CVE-2025-4448; CVE-2025-4449; CVE-2025-4450; CVE-2025-4451; CVE-2025-55599; CVE-2025-6367; CVE-2025-6368; CVE-2025-6369; CVE-2025-6370; CVE-2025-6371; CVE-2025-6372; CVE-2025-6373; CVE-2025-6374)
|
|
High
|
12 Nov 2025 |
21 Jul 2026 |
CPAI-2025-4304
|
|
CVE-2025-64459
|
Django SQL Injection (CVE-2025-64459)
|
|
Critical
|
31 Mar 2025 |
28 Jun 2026 |
CPAI-2025-13138
|
|
CVE-2024-39202
CVE-2024-39962
CVE-2025-10123
CVE-2025-10634
CVE-2025-10814
CVE-2025-11095
CVE-2025-11096
CVE-2025-11097
CVE-2025-11098
CVE-2025-11099
CVE-2025-29040
CVE-2025-29041
CVE-2025-29635
|
D-Link DIR-823X Command Injection (CVE-2024-39202; CVE-2024-39962; CVE-2025-10123; CVE-2025-10634; CVE-2025-10814; CVE-2025-11095; CVE-2025-11096; CVE-2025-11097; CVE-2025-11098; CVE-2025-11099; CVE-2025-29040; CVE-2025-29041; CVE-2025-29635)
|
|
High
|
10 Dec 2025 |
22 Jun 2026 |
CPAI-2025-7566
|
|
CVE-2025-11833
|
WordPress Post SMTP Plugin Information Disclosure (CVE-2025-11833)
|
|
Critical
|
25 Mar 2025 |
22 Jun 2026 |
CPAI-2025-17018
|
|
CVE-2019-10955
CVE-2021-23385
CVE-2021-23393
CVE-2021-32618
CVE-2022-45402
CVE-2025-59775
|
Open Redirect Attempt (CVE-2019-10955; CVE-2021-23385; CVE-2021-23393; CVE-2021-32618; CVE-2022-45402; CVE-2025-59775)
|
|
Critical
|
12 Feb 2025 |
16 Jun 2026 |
CPAI-2026-7310
|
|
CVE-2022-45506
CVE-2023-49403
CVE-2023-49406
CVE-2023-49999
CVE-2024-32292
CVE-2024-3880
CVE-2026-38834
CVE-2026-38835
|
Tenda W30E Command Injection (CVE-2022-45506; CVE-2023-49403; CVE-2023-49406; CVE-2023-49999; CVE-2024-32292; CVE-2024-3880; CVE-2026-38834; CVE-2026-38835)
|
|
High
|
2 Nov 2025 |
11 Jun 2026 |
CPAI-2025-3613
|
|
CVE-2025-62168
|
Squid Information Disclosure (CVE-2025-62168)
|
|
High
|
4 Sep 2025 |
11 Jun 2026 |
CPAI-2025-1038
|
|
CVE-2025-5419
|
Google Chrome V8 Out-Of-Bounds Read (CVE-2025-5419)
|
|
Critical
|
7 Jul 2025 |
11 Jun 2026 |
CPAI-2025-0503
|
|
CVE-2025-6554
|
Google Chrome Type Confusion (CVE-2025-6554)
|
|
High
|
6 Nov 2025 |
9 Jun 2026 |
CPAI-2025-3895
|
|
CVE-2025-48826
|
Planet WGR-500 Memory Corruption (CVE-2025-48826)
|
|
High
|
23 Dec 2025 |
4 Jun 2026 |
CPAI-2026-5858
|
|
|
Dify Information Disclosure
|
|
High
|
16 Jan 2025 |
2 Jun 2026 |
CPAI-2024-6943
|
|
CVE-2024-21182
|
Oracle WebLogic Server Remote Code Execution (CVE-2024-21182)
|
|
Critical
|
21 Jul 2025 |
31 May 2026 |
CPAI-2025-16391
|
|
CVE-2025-49706
CVE-2025-53771
|
Microsoft SharePoint Server Authentication Bypass (CVE-2025-49706; CVE-2025-53771)
|
|
Critical
|
14 Apr 2025 |
28 May 2026 |
CPAI-2026-5553
|
|
CVE-2024-48061
CVE-2025-3248
CVE-2026-0770
|
Langflow Remote Code Execution (CVE-2024-48061; CVE-2025-3248; CVE-2026-0770)
|
Feedback