CVE Alert: CVE-2025-1651
Vulnerability Summary: CVE-2025-1651 A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A...
Vulnerability Summary: CVE-2025-1651 A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A...
Vulnerability Summary: CVE-2025-1429 A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A...
Vulnerability Summary: CVE-2025-1652 A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A...
Vulnerability Summary: CVE-2025-1767 This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from...
Vulnerability Summary: CVE-2025-2265 The password of a web user in "Sante PACS Server.exe" is zero-padded to 0x2000 bytes, SHA1-hashed, base64-encoded,...
Vulnerability Summary: CVE-2025-2264 A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit...
Vulnerability Summary: CVE-2025-2284 A denial-of-service vulnerability exists in the "GetWebLoginCredentials" function in "Sante PACS Server.exe". Affected Endpoints: No affected endpoints...
Vulnerability Summary: CVE-2025-29768 Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files...
Vulnerability Summary: CVE-2025-2263 During login to the web server in "Sante PACS Server.exe", OpenSSL function EVP_DecryptUpdate is called to decrypt...
Vulnerability Summary: CVE-2025-27496 Snowflake, a platform for using artificial intelligence in the context of cloud computing, has a vulnerability in...
Vulnerability Summary: CVE-2024-30143 HCL AppScan Traffic Recorder fails to adequately neutralize special characters within the filename, potentially allowing it to...
Vulnerability Summary: CVE-2025-24053 Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network. Affected Endpoints:...
Vulnerability Summary: CVE-2025-2229 A token is created using the username, current date/time, and a fixed AES-128 encryption key, which is...
Vulnerability Summary: CVE-2025-2230 A flaw exists in the Windows login flow where an AuthContext token can be exploited for replay...
Vulnerability Summary: CVE-2025-27794 Flarum is open-source forum software. A session hijacking vulnerability exists in versions prior to 1.8.10 when an...
Vulnerability Summary: CVE-2025-25709 An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the...
Vulnerability Summary: CVE-2025-27788 JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and prior to version 2.10.2, a...
Vulnerability Summary: CVE-2025-27914 An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A Reflected Cross-Site Scripting...
Vulnerability Summary: CVE-2025-27915 An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site scripting...
Vulnerability Summary: CVE-2025-22954 Koha
Vulnerability Summary: CVE-2025-29891 Bypass/Injection vulnerability in Apache Camel. This issue affects Apache Camel: from 4.10.0 before 4.10.2, from 4.8.0 before...
Vulnerability Summary: CVE-2025-2240 A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue. This vulnerability...
Vulnerability Summary: CVE-2025-1984 Xerox Desktop Print Experience application contains a Local Privilege Escalation (LPE) vulnerability, which allows a low-privileged user...
Vulnerability Summary: CVE-2024-27763 XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is...