Critical
|
12 Mar 2025 |
12 Mar 2025 |
CPAI-2025-0077
|
|
|
Argument Injection Over HTTP
|
Medium
|
12 Mar 2025 |
12 Mar 2025 |
CPAI-2018-2896
|
|
CVE-2018-11690
|
Joomla Balbooa Gridbox Cross-Site Scripting (CVE-2018-11690)
|
Medium
|
13 Feb 2025 |
12 Mar 2025 |
CPAI-2025-0033
|
|
CVE-2025-25181
|
Advantive VeraCore SQL Injection (CVE-2025-25181)
|
Critical
|
20 Feb 2025 |
12 Mar 2025 |
CPAI-2024-1410
|
|
CVE-2024-10811 CVE-2024-13159 CVE-2024-13160 CVE-2024-13161
|
Ivanti Endpoint Manager Path Traversal (CVE-2024-10811; CVE-2024-13159; CVE-2024-13160; CVE-2024-13161)
|
High
|
12 Mar 2025 |
12 Mar 2025 |
CPAI-2025-0066
|
|
|
Easy File Sharing Buffer Overflow
|
Critical
|
13 Feb 2025 |
12 Mar 2025 |
CPAI-2024-1382
|
|
CVE-2024-57968
|
Advantive VeraCore Arbitrary File Upload (CVE-2024-57968)
|
Critical
|
12 Mar 2025 |
12 Mar 2025 |
CPAI-2024-1461
|
|
CVE-2024-10470
|
WordPress LMS Theme Authentication Bypass (CVE-2024-10470)
|
High
|
14 Jan 2025 |
11 Mar 2025 |
CPAI-2025-0003
|
Microsoft CVE-2025-21309
|
CVE-2025-21309 CVE-2025-24035 CVE-2025-24045
|
Microsoft Windows Remote Desktop Services Remote Code Execution (CVE-2025-21309; CVE-2025-24035; CVE-2025-24045)
|
High
|
10 Mar 2025 |
10 Mar 2025 |
CPAI-2025-0062
|
|
CVE-2025-25897 CVE-2025-25898 CVE-2025-25899 CVE-2025-25900 CVE-2025-25901
|
TP-Link TL-WR841ND Buffer Overflow (CVE-2025-25897; CVE-2025-25898; CVE-2025-25899; CVE-2025-25900; CVE-2025-25901)
|
High
|
9 Mar 2025 |
9 Mar 2025 |
CPAI-2023-2012
|
|
CVE-2023-20128
|
Cisco RV320 Firmware Command Injection (CVE-2023-20128)
|
Critical
|
27 Feb 2025 |
9 Mar 2025 |
CPAI-2024-1448
|
|
CVE-2024-48248
|
NAKIVO Arbitrary File Read (CVE-2024-48248)
|
High
|
9 Mar 2025 |
9 Mar 2025 |
CPAI-2016-1424
|
|
CVE-2016-7256
|
Microsoft Windows Open Type Font Remote Code Execution (CVE-2016-7256)
|
High
|
13 Feb 2025 |
9 Mar 2025 |
CPAI-2025-0038
|
|
CVE-2025-0108
|
Palo Alto Networks PAN-OS Authentication Bypass (CVE-2025-0108)
|
High
|
9 Mar 2025 |
9 Mar 2025 |
CPAI-2024-1381
|
|
CVE-2024-50324
|
Ivanti Endpoint Manager Directory Traversal (CVE-2024-50324)
|
Critical
|
9 Mar 2025 |
9 Mar 2025 |
CPAI-2025-0025
|
|
|
XSLT Injection
|
Critical
|
26 Jan 2025 |
9 Mar 2025 |
CPAI-2024-1311
|
|
CVE-2024-0569 CVE-2024-31817
|
TOTOLINK Multiple Routers Information Disclosure (CVE-2024-0569; CVE-2024-31817)
|
Medium
|
6 Mar 2025 |
6 Mar 2025 |
CPAI-2018-2898
|
|
CVE-2018-12693
|
TP-Link TL-WA850RE Stack Overflow (CVE-2018-12693)
|
High
|
6 Mar 2025 |
6 Mar 2025 |
CPAI-2024-1441
|
|
CVE-2024-46506
|
NetAlertx Remote Code Execution (CVE-2024-46506)
|
Medium
|
4 Mar 2025 |
4 Mar 2025 |
CPAI-2023-2013
|
|
CVE-2023-20118
|
Cisco RV016 FIRMWARE Privilege Escalation (CVE-2023-20118)
|
High
|
4 Mar 2025 |
4 Mar 2025 |
CPAI-2024-1439
|
|
CVE-2024-34950
|
D-Link DIR-822 Stack Overflow (CVE-2024-34950)
|
Critical
|
4 Mar 2025 |
4 Mar 2025 |
CPAI-2024-1348
|
|
CVE-2024-50498
|
WordPress LUBUS WP Query Console Plugin Code Injection (CVE-2024-50498)
|
High
|
3 Mar 2025 |
3 Mar 2025 |
CPAI-2024-1379
|
|
CVE-2024-49116
|
Microsoft Windows Server Remote Code Execution (CVE-2024-49116)
|
High
|
3 Mar 2025 |
3 Mar 2025 |
CPAI-2025-0063
|
|
CVE-2025-21277
|
Microsoft Windows Denial of Service (CVE-2025-21277)
|
High
|
3 Mar 2025 |
3 Mar 2025 |
CPAI-2025-0061
|
|
|
ESF pfSense Remote Code Execution
|
High
|
3 Mar 2025 |
3 Mar 2025 |
CPAI-2024-1447
|
|
CVE-2024-38814
|
VMware HCX SQL Injection (CVE-2024-38814)
|
High
|
3 Mar 2025 |
3 Mar 2025 |
CPAI-2011-0796
|
|
CVE-2011-0041
|
Microsoft Windows GDI Integer Overflow (CVE-2011-0041)
|
Medium
|
3 Mar 2025 |
3 Mar 2025 |
CPAI-2018-2897
|
|
CVE-2018-8239
|
Microsoft Windows Graphics Component Out Of Bounds Read (CVE-2018-8239)
|
High
|
27 Feb 2025 |
27 Feb 2025 |
CPAI-2024-1437
|
|
CVE-2024-13181
|
Ivanti Avalanche Directory Traversal (CVE-2024-13181)
|
High
|
27 Feb 2025 |
27 Feb 2025 |
CPAI-2025-0052
|
|
CVE-2025-21285
|
Microsoft Windows Denial of Service (CVE-2025-21285)
|
Critical
|
26 Feb 2025 |
26 Feb 2025 |
CPAI-2023-2009
|
|
CVE-2023-34192
|
Zimbra ZCS Cross-Site Scripting (CVE-2023-34192)
|
Critical
|
26 Feb 2025 |
26 Feb 2025 |
CPAI-2025-0057
|
|
CVE-2025-27364
|
MITRE Caldera Remote Code Execution (CVE-2025-27364)
|
Critical
|
26 Feb 2025 |
26 Feb 2025 |
CPAI-2017-1953
|
|
CVE-2017-3066
|
Adobe ColdFusion Insecure Deserialization (CVE-2017-3066)
|
Critical
|
26 Feb 2025 |
26 Feb 2025 |
CPAI-2015-1681
|
|
CVE-2015-8519 CVE-2015-8520 CVE-2015-8521 CVE-2015-8522
|
IBM Tivoli Storage Manager FastBack Remote Code Execution (CVE-2015-8519; CVE-2015-8520; CVE-2015-8521; CVE-2015-8522)
|
Medium
|
26 Feb 2025 |
26 Feb 2025 |
CPAI-2024-1332
|
|
CVE-2024-38878
|
Siemens Omnivise T3000 Arbitrary File Download (CVE-2024-38878)
|
High
|
26 Feb 2025 |
26 Feb 2025 |
CPAI-2024-1223
|
|
CVE-2024-42455
|
Veeam Backup And Replication Insecure Deserialization (CVE-2024-42455)
|
Critical
|
26 Feb 2025 |
26 Feb 2025 |
CPAI-2025-0056
|
|
CVE-2024-53900 CVE-2025-23061
|
Mongoose ODM Server-Side Template Injection (CVE-2024-53900; CVE-2025-23061)
|
High
|
26 Feb 2025 |
26 Feb 2025 |
CPAI-2024-1412
|
|
CVE-2024-0918
|
TRENDnet TEW-800MB Command Injection (CVE-2024-0918)
|
Critical
|
26 Feb 2025 |
26 Feb 2025 |
CPAI-2023-2005
|
|
CVE-2023-51573
|
Voltronic Power ViewPower Authentication Bypass (CVE-2023-51573)
|
Medium
|
29 Jan 2025 |
26 Feb 2025 |
CPAI-2024-1322
|
|
CVE-2024-9234
|
WordPress GutenKit Plugin Arbitrary File Upload (CVE-2024-9234)
|
Critical
|
25 Feb 2025 |
25 Feb 2025 |
CPAI-2024-1314
|
|
CVE-2024-46045 CVE-2024-8225 CVE-2024-8227
|
Tenda Multiple Products Stack-Based Buffer Overflow (CVE-2024-46045; CVE-2024-8225; CVE-2024-8227)
|
High
|
24 Feb 2025 |
24 Feb 2025 |
CPAI-2025-0053
|
|
CVE-2025-0110
|
Palo Alto Networks PAN-OS OpenConfig Plugin Command Injection (CVE-2025-0110)
|
Critical
|
24 Feb 2025 |
24 Feb 2025 |
CPAI-2024-1421
|
|
CVE-2024-29974
|
Zyxel NAS326 firmware Remote Code Execution (CVE-2024-29974)
|
Medium
|
24 Feb 2025 |
24 Feb 2025 |
CPAI-2024-1419
|
|
CVE-2024-29976
|
Zyxel NAS326 firmware Information Disclosure (CVE-2024-29976)
|
High
|
24 Feb 2025 |
24 Feb 2025 |
CPAI-2025-0047
|
|
CVE-2025-24893
|
XWiki.org XWiki Code Injection (CVE-2025-24893)
|
High
|
23 Feb 2025 |
23 Feb 2025 |
CPAI-2025-0045
|
|
CVE-2025-1340
|
TOTOLINK X18 Stack Overflow (CVE-2025-1340)
|
Critical
|
23 Feb 2025 |
23 Feb 2025 |
CPAI-2024-1303
|
|
CVE-2024-52544
|
Lorex 2K Indoor Wi-Fi Security Camera Buffer Overflow (CVE-2024-52544)
|
Critical
|
23 Feb 2025 |
23 Feb 2025 |
CPAI-2024-1403
|
|
CVE-2024-34200 CVE-2024-34201 CVE-2024-34203 CVE-2024-34207 CVE-2024-34209 CVE-2024-34212 CVE-2024-34213 CVE-2024-34215
|
TOTOLINK CP450 Buffer Overflow (CVE-2024-34200; CVE-2024-34201; CVE-2024-34203; CVE-2024-34207; CVE-2024-34209; CVE-2024-34212; CVE-2024-34213; CVE-2024-34215)
|
High
|
23 Feb 2025 |
23 Feb 2025 |
CPAI-2023-2006
|
|
CVE-2023-51146 CVE-2023-51147
|
TRENDnet TEW-821DAP Buffer Overflow (CVE-2023-51146; CVE-2023-51147)
|
High
|
19 Feb 2025 |
23 Feb 2025 |
CPAI-2024-1401
|
|
CVE-2024-40890
|
Zyxel Multiple Products Command Injection (CVE-2024-40890)
|
High
|
30 Jan 2025 |
23 Feb 2025 |
CPAI-2025-0020
|
|
CVE-2025-0105
|
Palo Alto Networks Expedition Arbitrary File Deletion (CVE-2025-0105)
|