|
High
|
21 May 2025 |
12 Jun 2025 |
CPAI-2025-0319
|
Microsoft CVE-2025-33053
|
CVE-2025-33053
|
Microsoft Web Distributed Authoring and Versioning Remote Code Execution (CVE-2025-33053)
|
|
High
|
12 Jun 2025 |
12 Jun 2025 |
CPAI-2025-0387
|
|
CVE-2025-2605
|
Honeywell Mb-Secure Command Injection (CVE-2025-2605)
|
|
Critical
|
12 Jun 2025 |
12 Jun 2025 |
CPAI-2024-1694
|
|
CVE-2024-7971
|
Google Chrome V8 Type Confusion (CVE-2024-7971)
|
|
High
|
12 Jun 2025 |
12 Jun 2025 |
CPAI-2025-0360
|
|
CVE-2025-4270
|
TOTOLINK A720R Information Disclosure (CVE-2025-4270)
|
|
High
|
12 Jun 2025 |
12 Jun 2025 |
CPAI-2025-0383
|
|
CVE-2025-2563
|
WordPress Registration and Membership Plugin Privilege Escalation (CVE-2025-2563)
|
|
Critical
|
12 Jun 2025 |
12 Jun 2025 |
CPAI-2025-0381
|
|
CVE-2025-2294
|
WordPress Kubio AI Page Builder Plugin Local File Inclusion (CVE-2025-2294)
|
|
Critical
|
11 Jun 2025 |
11 Jun 2025 |
CPAI-2022-2216
|
|
CVE-2022-0479
|
WordPress Popup Builder Plugin SQL Injection (CVE-2022-0479)
|
|
Medium
|
11 Jun 2025 |
11 Jun 2025 |
CPAI-2024-1674
|
|
CVE-2024-37732
|
Anchor CMS Cross-Site Scripting (CVE-2024-37732)
|
|
Critical
|
28 Apr 2025 |
11 Jun 2025 |
CPAI-2025-0221
|
|
CVE-2025-32433
|
Erlang/OTP SSH Server Remote Code Execution (CVE-2025-32433)
|
|
High
|
3 Apr 2025 |
11 Jun 2025 |
CPAI-2025-0158
|
|
CVE-2024-45811
CVE-2025-30208
CVE-2025-31125
|
Vite Information Disclosure (CVE-2024-45811; CVE-2025-30208; CVE-2025-31125)
|
|
Critical
|
23 Mar 2025 |
11 Jun 2025 |
CPAI-2025-0083
|
|
CVE-2025-24016
|
Wazuh Remote Code Execution (CVE-2025-24016)
|
|
High
|
11 Jun 2025 |
11 Jun 2025 |
CPAI-2018-2396
|
|
CVE-2018-17614
|
Losant Arduino MQTT Client Buffer Overflow (CVE-2018-17614)
|
|
High
|
10 Jun 2025 |
10 Jun 2025 |
CPAI-2025-0396
|
Microsoft CVE-2025-33070
|
CVE-2025-33070
|
Microsoft Windows Netlogon Elevation of Privilege (CVE-2025-33070)
|
|
High
|
10 Jun 2025 |
10 Jun 2025 |
CPAI-2025-0395
|
Microsoft CVE-2025-33071
|
CVE-2025-33071
|
Microsoft Windows KDC Proxy Service Remote Code Execution (CVE-2025-33071)
|
|
High
|
9 Jun 2025 |
9 Jun 2025 |
CPAI-2024-1685
|
|
CVE-2024-52874
|
Infoblox NETMRI SQL Injection (CVE-2024-52874)
|
|
Critical
|
9 Jun 2025 |
9 Jun 2025 |
CPAI-2025-0380
|
|
CVE-2025-32814
|
Infoblox NETMRI SQL Injection (CVE-2025-32814)
|
|
Medium
|
9 Jun 2025 |
9 Jun 2025 |
CPAI-2025-0379
|
|
CVE-2025-32815
|
Infoblox NETMRI Authentication Bypass (CVE-2025-32815)
|
|
High
|
9 Jun 2025 |
9 Jun 2025 |
CPAI-2025-0378
|
|
CVE-2025-32813
|
Infoblox NETMRI Command Injection (CVE-2025-32813)
|
|
Medium
|
9 Jun 2025 |
9 Jun 2025 |
CPAI-2025-0374
|
|
CVE-2025-44176
|
Tenda FH451 Buffer Overflow (CVE-2025-44176)
|
|
Medium
|
9 Jun 2025 |
9 Jun 2025 |
CPAI-2024-1682
|
|
CVE-2024-45741
|
Splunk Cross-Site Scripting (CVE-2024-45741)
|
|
High
|
9 Jun 2025 |
9 Jun 2025 |
CPAI-2024-1681
|
|
CVE-2024-39605
|
Delta Electronics DIAScreen Buffer Overflow (CVE-2024-39605)
|
|
High
|
9 Jun 2025 |
9 Jun 2025 |
CPAI-2025-0325
|
|
CVE-2025-44883
CVE-2025-44884
CVE-2025-44885
CVE-2025-44886
CVE-2025-44887
CVE-2025-44888
CVE-2025-44890
CVE-2025-44891
CVE-2025-44892
CVE-2025-44893
CVE-2025-44894
CVE-2025-44895
CVE-2025-44896
CVE-2025-44897
|
Planet Technology WGS-804HPT Stack Overflow (CVE-2025-44883; CVE-2025-44884; CVE-2025-44885; CVE-2025-44886; CVE-2025-44887; CVE-2025-44888; CVE-2025-44890; CVE-2025-44891; CVE-2025-44892; CVE-2025-44893; CVE-2025-44894; CVE-2025-44895; CVE-2025-44896; CVE-2025-44897)
|
|
Critical
|
28 Apr 2025 |
9 Jun 2025 |
CPAI-2025-0220
|
|
CVE-2025-30406
|
Gladinet CentreStack Insecure Deserialization (CVE-2025-30406)
|
|
Critical
|
8 Jun 2025 |
8 Jun 2025 |
CPAI-2025-0390
|
|
CVE-2025-49113
|
Roundcube Webmail Remote Code Execution (CVE-2025-49113)
|
|
Medium
|
8 Jun 2025 |
8 Jun 2025 |
CPAI-2025-0373
|
|
CVE-2025-4858
CVE-2025-4859
CVE-2025-4860
|
D-Link DAP-2695 Cross-Site Scripting (CVE-2025-4858; CVE-2025-4859; CVE-2025-4860)
|
|
Medium
|
8 Jun 2025 |
8 Jun 2025 |
CPAI-2021-2323
|
|
CVE-2021-44261
|
Netgear WAC104 Authentication Bypass (CVE-2021-44261)
|
|
Medium
|
8 Jun 2025 |
8 Jun 2025 |
CPAI-2025-0369
|
|
CVE-2025-4269
CVE-2025-4271
|
TOTOLINK A720R Authentication Bypass (CVE-2025-4269; CVE-2025-4271)
|
|
High
|
8 Jun 2025 |
8 Jun 2025 |
CPAI-2024-1679
|
|
CVE-2024-30571
|
Netgear R6850 Authentication Bypass (CVE-2024-30571)
|
|
High
|
3 Jun 2025 |
8 Jun 2025 |
CPAI-2025-0332
|
|
CVE-2025-31650
|
Apache Tomcat Memory Corruption (CVE-2025-31650)
|
|
Medium
|
8 Jun 2025 |
8 Jun 2025 |
CPAI-2024-1683
|
|
CVE-2024-13171
|
Ivanti Endpoint Manager Directory Traversal (CVE-2024-13171)
|
|
Medium
|
8 Jun 2025 |
8 Jun 2025 |
CPAI-2024-1678
|
|
CVE-2024-57041
|
NodeBB Stored Cross-Site Scripting (CVE-2024-57041)
|
|
Critical
|
8 Jun 2025 |
8 Jun 2025 |
CPAI-2021-2322
|
|
CVE-2021-44567
|
RosarioSIS SQL Injection (CVE-2021-44567)
|
|
High
|
8 Jun 2025 |
8 Jun 2025 |
CPAI-2018-2919
|
|
CVE-2018-7583
|
DualDesk Buffer Overflow (CVE-2018-7583)
|
|
High
|
8 Jun 2025 |
8 Jun 2025 |
CPAI-2025-0331
|
|
CVE-2025-0317
|
Ollama Denial of Service (CVE-2025-0317)
|
|
Critical
|
27 Apr 2025 |
8 Jun 2025 |
CPAI-2025-0245
|
|
CVE-2024-58136
CVE-2025-32432
|
Craft CMS Remote Code Execution (CVE-2024-58136; CVE-2025-32432)
|
|
High
|
13 Mar 2025 |
8 Jun 2025 |
CPAI-2024-1470
|
|
CVE-2024-32640
|
Mura/Masa CMS SQL Injection (CVE-2024-32640)
|
|
Critical
|
6 Jan 2025 |
8 Jun 2025 |
CPAI-2024-1218
|
|
CVE-2024-12987
|
DrayTek Vigor Command Injection (CVE-2024-12987)
|
|
Medium
|
5 Jun 2025 |
5 Jun 2025 |
CPAI-2014-2717
|
|
CVE-2014-9636
|
Unzip Denial of Service (CVE-2014-9636)
|
|
Critical
|
5 Jun 2025 |
5 Jun 2025 |
CPAI-2025-0317
|
|
CVE-2025-4978
|
Netgear DGND3700 Authentication Bypass (CVE-2025-4978)
|
|
Critical
|
5 Jun 2025 |
5 Jun 2025 |
CPAI-2025-0303
|
|
CVE-2025-45859
CVE-2025-45861
CVE-2025-45862
CVE-2025-45863
CVE-2025-45864
CVE-2025-45865
CVE-2025-45866
CVE-2025-45867
|
TOTOLINK A3002R Buffer Overflow (CVE-2025-45859; CVE-2025-45861; CVE-2025-45862; CVE-2025-45863; CVE-2025-45864; CVE-2025-45865; CVE-2025-45866; CVE-2025-45867)
|
|
Critical
|
14 Apr 2025 |
5 Jun 2025 |
CPAI-2025-0171
|
|
CVE-2025-25579
CVE-2025-45858
|
TOTOLINK A3002R Command Injection (CVE-2025-25579; CVE-2025-45858)
|
|
Critical
|
4 Jun 2025 |
4 Jun 2025 |
CPAI-2025-0367
|
|
CVE-2025-48827
CVE-2025-48828
|
vBulletin Remote Code Execution (CVE-2025-48827; CVE-2025-48828)
|
|
High
|
3 Jun 2025 |
4 Jun 2025 |
CPAI-2023-2061
|
|
CVE-2023-39780
|
ASUS RT-AX55 Firmware Command Injection (CVE-2023-39780)
|
|
High
|
4 Jun 2025 |
4 Jun 2025 |
CPAI-2014-2698
|
|
CVE-2014-0239
|
Samba Denial of Service (CVE-2014-0239)
|
|
Critical
|
31 Mar 2025 |
4 Jun 2025 |
CPAI-2025-0141
|
|
CVE-2025-2825
CVE-2025-31161
|
CrushFTP Authentication Bypass (CVE-2025-2825; CVE-2025-31161)
|
|
Medium
|
3 Jun 2025 |
3 Jun 2025 |
CPAI-2025-0364
|
|
CVE-2025-32103
|
CrushFTP Directory Traversal (CVE-2025-32103)
|
|
Medium
|
3 Jun 2025 |
3 Jun 2025 |
CPAI-2025-0365
|
|
CVE-2025-32102
|
CrushFTP Server-Side Request Forgery (CVE-2025-32102)
|
|
Critical
|
3 Jun 2025 |
3 Jun 2025 |
CPAI-2025-0351
|
|
CVE-2025-24434
|
Adobe Commerce Privilege Escalation (CVE-2025-24434)
|
|
Medium
|
3 Jun 2025 |
3 Jun 2025 |
CPAI-2025-0355
|
|
CVE-2025-3577
|
Zyxel AMG1302-T10B Directory Traversal (CVE-2025-3577)
|
|
High
|
3 Jun 2025 |
3 Jun 2025 |
CPAI-2019-3281
|
|
CVE-2019-12527
|
Squid Buffer Overflow (CVE-2019-12527)
|
Feedback