İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2025: sömürülen ve yeni ciddi CVE kayıtları

207 kayıt · 26 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 3

  • CVE-2024-12824
    40Planlayın

    Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    scriptsbundle · nokri – job board wordpress theme1 Mar 2025

  • CVE-2025-1799
    21İzleyin

    Zorlan SkyCaiji Tool.php previewAction server-side request forgery

    OrtaCVSS 5,3İstismar yokEPSS %0

    skycaiji · skycaiji1 Mar 2025

  • CVE-2025-1829
    25İzleyin

    TOTOLINK X18 cstecgi.cgi setMtknatCfg os command injection

    OrtaCVSS 5,3İstismar yokEPSS %12

    totolink · x18 firmware2 Mar 2025

  • CVE-2025-27590
    47Planlayın

    In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux us

    KritikCVSS 9,8Kavram kanıtıEPSS %27

    oxidized web project · oxidized web3 Mar 2025

  • CVE-2025-1851
    34İzleyin

    Tenda AC7 SetFirewallCfg formSetFirewallCfg stack-based overflow

    YüksekCVSS 8,7İstismar yokEPSS %1

    tenda · ac7 firmware3 Mar 2025

  • CVE-2024-53027
    30İzleyin

    Buffer Copy Without Checking Size of Input in WLAN Host

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    qualcomm · qca9367 firmware3 Mar 2025

  • CVE-2025-1868
    27İzleyin

    Information display on multiple products from Famatech Corp

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    famatech corp · advanced ip scanner3 Mar 2025

  • CVE-2025-0288
    31İzleyin

    Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function,

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    paragon-software · paragon backup \& recovery3 Mar 2025

  • CVE-2025-27423
    35İzleyin

    Improper Input Validation in Vim

    YüksekCVSS 7,1İstismar yokEPSS %22

    vim · vim3 Mar 2025

  • CVE-2023-49031
    20İzleyin

    Directory Traversal (Local File Inclusion) vulnerability in Tikit (now Advanced) eMarketing platform 6.8.3.0 allows a remote attacker to rea

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    oneadvanced · tikit emarketing3 Mar 2025

  • CVE-2025-25967
    35İzleyin

    Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery (CSRF).

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    ddsn · acora cms3 Mar 2025

  • CVE-2025-26206
    36İzleyin

    Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker to escalate privileges via the index.html co

    KritikCVSS 9,0Kavram kanıtıEPSS %0

    selldone · storefront3 Mar 2025

  • CVE-2024-51962
    34İzleyin

    SQL injection vulnerability in ArcGIS Server

    YüksekCVSS 8,7İstismar yokEPSS %0

    esri · arcgis server3 Mar 2025

  • CVE-2025-1639
    35İzleyin

    Animation Addons for Elementor Pro <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    crowdytheme · arolax4 Mar 2025

  • CVE-2025-1306
    35İzleyin

    Newscrunch <= 1.8.4 - Cross-Site Request Forgery to Arbitrary File Upload

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    spicethemes · newscrunch4 Mar 2025

  • CVE-2025-1307
    40Planlayın

    Newscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    spicethemes · newscrunch4 Mar 2025

  • CVE-2024-48248
    92Hemen

    NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may l

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %94

    nakivo · backup \& replication director4 Mar 2025

  • CVE-2025-0370
    32İzleyin

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via src Parameter

    OrtaCVSS 5,4İstismar yokEPSS %35

    vanokhin · shortcodes ultimate4 Mar 2025

  • CVE-2025-22224
    62Bu hafta

    VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write.

    YüksekCVSS 8,2KEVSilahlaştırılmışEPSS %1

    vmware · esxi4 Mar 2025

  • CVE-2025-22225
    62Bu hafta

    VMware ESXi contains an arbitrary write vulnerability.

    YüksekCVSS 8,2KEVSilahlaştırılmışEPSS %1

    vmware · esxi4 Mar 2025

  • CVE-2025-22226
    55Planlayın

    VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS.

    OrtaCVSS 6,0KEVSilahlaştırılmışEPSS %1

    vmware · esxi4 Mar 2025

  • CVE-2024-10930
    28İzleyin

    Carrier Block Load Privilege Escalation

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    carrier · block load4 Mar 2025

  • CVE-2025-26202
    17İzleyin

    Cross-Site Scripting (XSS) vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings (2.4GHz & 5GHz bands) in

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    4 Mar 2025

  • CVE-2025-26318
    23İzleyin

    hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected

    OrtaCVSS 5,8Kavram kanıtıEPSS %0

    tsplus · tsplus remote access4 Mar 2025

  • CVE-2025-1316
    89Hemen

    Edimax IC-7100 IP Camera OS Command Injection

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %74

    edimax · ic-7100 firmware4 Mar 2025

  • CVE-2025-26319
    56Planlayın

    FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.

    KritikCVSS 9,8Kavram kanıtıEPSS %55

    flowiseai · flowise4 Mar 2025

  • CVE-2024-8682
    21İzleyin

    JNews - WordPress Newspaper Magazine Blog AMP Theme <= 11.6.6 - Unauthorized User Registration

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    https://themeforest.net/item/jnews-one-stop-solution-for-web-publishing/20566392 · jnews - wordpress newspaper magazine blog amp theme5 Mar 2025

  • CVE-2024-48246
    21İzleyin

    Vehicle Management System 1.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the "Name" parameter of /vehicle-management/book

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    janobe · vehicle management system5 Mar 2025

  • CVE-2025-27515
    27İzleyin

    Laravel has a File Validation Bypass

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    laravel · framework5 Mar 2025

  • CVE-2025-27506
    24İzleyin

    NocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Page

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    nocodb · nocodb6 Mar 2025

  • CVE-2024-57972
    27İzleyin

    The pairing API request handler in Microsoft HoloLens 1 (Windows Holographic) through 10.0.17763.3046 and HoloLens 2 (Windows Holographic) t

    OrtaCVSS 6,5Kavram kanıtıEPSS %2

    microsoft · hololens6 Mar 2025

  • CVE-2025-25763
    39İzleyin

    crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead() in /system/SystemDatabackupServices.php

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    crmeb · crmeb6 Mar 2025

  • CVE-2024-9458
    19İzleyin

    Reservit Hotel < 3.0 - Admin+ Stored XSS

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    reservit · reservit hotel7 Mar 2025

  • CVE-2025-25617
    17İzleyin

    Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus.

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    7 Mar 2025

  • CVE-2025-27152
    30İzleyin

    Possible SSRF and Credential Leakage via Absolute URL in axios Requests

    YüksekCVSS 7,7Kavram kanıtıEPSS %0

    axios · axios7 Mar 2025

  • CVE-2025-27519
    37İzleyin

    Cognita Arbitrary File Write

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    truefoundry · cognita7 Mar 2025

  • CVE-2025-27607
    35İzleyin

    Python JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependency

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    nhairs · python json logger7 Mar 2025

  • CVE-2025-2094
    25İzleyin

    TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig os command injection

    OrtaCVSS 5,3İstismar yokEPSS %12

    totolink · ex1800t firmware7 Mar 2025

  • CVE-2025-1323
    40Planlayın

    WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    plechevandrey · wp-recall8 Mar 2025

  • CVE-2025-27840
    27İzleyin

    Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    espressif · esp32 firmware8 Mar 2025

  • CVE-2025-27636
    51Planlayın

    Apache Camel: Camel Message Header Injection via Improper Filtering

    OrtaCVSS 5,6Kavram kanıtıEPSS %97

    apache · camel9 Mar 2025

  • CVE-2025-2126
    24İzleyin

    JoomlaUX JUX Real Estate GET Parameter realties sql injection

    OrtaCVSS 5,3Kavram kanıtıEPSS %11

    joomlaux · jux real estate9 Mar 2025

  • CVE-2025-2127
    21İzleyin

    JoomlaUX JUX Real Estate realties cross site scripting

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    joomlaux · jux real estate9 Mar 2025

  • CVE-2025-2129
    25İzleyin

    Mage AI insecure default initialization of resource

    OrtaCVSS 6,3Kavram kanıtıEPSS %1

    9 Mar 2025

  • CVE-2025-25615
    10İzleyin

    Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections.

    DüşükCVSS 2,7Kavram kanıtıEPSS %0

    changeweb · unifiedtransform10 Mar 2025

  • CVE-2025-25616
    17İzleyin

    Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams.

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    changeweb · unifiedtransform10 Mar 2025

  • CVE-2025-26865
    14İzleyin

    Apache OFBiz: Server-Side Template Injection affecting the ecommerce plugin leading to possible RCE

    DüşükCVSS 3,5Kavram kanıtıEPSS %0

    apache · ofbiz10 Mar 2025

  • CVE-2025-25614
    35İzleyin

    Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which allows teachers to update the personal data of fellow

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    changeweb · unifiedtransform10 Mar 2025

  • CVE-2025-25620
    21İzleyin

    Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    changeweb · unifiedtransform10 Mar 2025

  • CVE-2025-24813
    99Hemen

    Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · tomcat10 Mar 2025

  • CVE-2025-27136
    22İzleyin

    LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    robothy · local-s310 Mar 2025

  • CVE-2025-2135
    37İzleyin

    Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted

    YüksekCVSS 8,8Kavram kanıtıEPSS %6

    google · chrome10 Mar 2025

  • CVE-2025-1661
    56Planlayın

    HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion

    KritikCVSS 9,8Kavram kanıtıEPSS %56

    pluginus · husky - products filter professional for woocommerce11 Mar 2025

  • CVE-2024-13853
    24İzleyin

    SEO Tools <= 4.0.7 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    zynit · seo tools11 Mar 2025

  • CVE-2025-2190
    32İzleyin

    The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks.

    YüksekCVSS 8,1İstismar yokEPSS %0

    tecno · com.transsnet.store11 Mar 2025

  • CVE-2025-1550
    30İzleyin

    Arbitrary Code Execution via Crafted Keras Config for Model Loading

    YüksekCVSS 7,3Kavram kanıtıEPSS %2

    keras · keras11 Mar 2025

  • CVE-2025-27893
    17İzleyin

    In Archer Platform 6 through 6.14.00202.10024, an authenticated user with record creation privileges can manipulate immutable fields, such a

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    archerirm · archer11 Mar 2025

  • CVE-2024-54085
    88Hemen

    Redfish Authentication Bypass

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %60

    ami · megarac sp-x11 Mar 2025

  • CVE-2025-27363
    70Bu hafta

    An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %27

    freetype · freetype11 Mar 2025

  • CVE-2024-54018
    31İzleyin

    Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox before 4.4.5 allows a pr

    YüksekCVSS 7,2İstismar yokEPSS %10

    fortinet · fortisandbox11 Mar 2025

  • CVE-2025-25747
    21İzleyin

    Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and obtain sensitive info

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    digitaldruid · hoteldruid11 Mar 2025

  • CVE-2025-24035
    33İzleyin

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    YüksekCVSS 8,1Kavram kanıtıEPSS %1

    microsoft · windows 10 150711 Mar 2025

  • CVE-2025-24054
    70Bu hafta

    NTLM Hash Disclosure Spoofing Vulnerability

    OrtaCVSS 5,4KEVSilahlaştırılmışEPSS %62

    microsoft · windows 10 150711 Mar 2025

  • CVE-2025-24071
    33İzleyin

    Microsoft Windows File Explorer Spoofing Vulnerability

    OrtaCVSS 6,5Kavram kanıtıEPSS %23

    microsoft · windows 10 150711 Mar 2025

  • CVE-2025-24076
    30İzleyin

    Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

    YüksekCVSS 7,3Kavram kanıtıEPSS %3

    microsoft · windows 11 22h211 Mar 2025

  • CVE-2025-24983
    58Planlayın

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

    YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %1

    microsoft · windows 10 150711 Mar 2025

  • CVE-2025-24984
    49Planlayın

    Windows NTFS Information Disclosure Vulnerability

    OrtaCVSS 4,6KEVSilahlaştırılmışEPSS %1

    microsoft · windows 10 150711 Mar 2025

  • CVE-2025-24985
    62Bu hafta

    Windows Fast FAT File System Driver Remote Code Execution Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %3

    microsoft · windows 10 150711 Mar 2025

  • CVE-2025-24991
    53Planlayın

    Windows NTFS Information Disclosure Vulnerability

    OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %2

    microsoft · windows 10 150711 Mar 2025

  • CVE-2025-24993
    62Bu hafta

    Windows NTFS Remote Code Execution Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %2

    microsoft · windows 10 150711 Mar 2025

  • CVE-2025-26633
    67Bu hafta

    Microsoft Management Console Security Feature Bypass Vulnerability

    YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %30

    microsoft · windows 10 150711 Mar 2025

  • CVE-2021-37787
    26İzleyin

    The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnerability via a HTTP POS

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    abocms · abo.cms11 Mar 2025

  • CVE-2025-24201
    71Bu hafta

    An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %3

    apple · safari11 Mar 2025

  • CVE-2025-25748
    29İzleyin

    A CSRF vulnerability in the gestione_utenti.php endpoint of HotelDruid 3.0.7 allows attackers to perform unauthorized actions (e.g., modifyi

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    digitaldruid · hoteldruid11 Mar 2025

  • CVE-2025-25749
    28İzleyin

    An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the lack of enforcement of password strength poli

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    digitaldruid · hoteldruid11 Mar 2025

  • CVE-2025-27591
    27İzleyin

    A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    facebook · below11 Mar 2025

  • CVE-2025-28906
    23İzleyin

    WordPress Skitter Slideshow plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    thiago s.f. · skitter slideshow11 Mar 2025

  • CVE-2025-28915
    36İzleyin

    WordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerability

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    theme egg · themeegg toolkit11 Mar 2025

  • CVE-2025-22954
    48Planlayın

    GetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl via the supplierid or

    KritikCVSS 10,0Kavram kanıtıEPSS %25

    koha · koha12 Mar 2025

  • CVE-2025-27915
    52Planlayın

    An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1.

    OrtaCVSS 5,4KEVSilahlaştırılmışEPSS %4

    synacor · zimbra collaboration suite12 Mar 2025

  • CVE-2025-29891
    42Planlayın

    Apache Camel: Camel Message Header Injection through request parameters

    OrtaCVSS 4,8İstismar yokEPSS %76

    apache · camel12 Mar 2025

  • CVE-2025-20115
    34İzleyin

    Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    cisco · ios xr12 Mar 2025

  • CVE-2025-21590
    57Planlayın

    Junos OS: An local attacker with shell access can execute arbitrary code

    OrtaCVSS 6,7KEVSilahlaştırılmışEPSS %1

    juniper · junos12 Mar 2025

  • CVE-2025-0117
    28İzleyin

    GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    palo alto networks · globalprotect app12 Mar 2025

  • CVE-2025-22870
    17İzleyin

    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

    OrtaCVSS 4,4Kavram kanıtıEPSS %0

    go standard library · net/http12 Mar 2025

  • CVE-2025-27407
    37İzleyin

    Remote code execution when loading a crafted GraphQL schema

    KritikCVSS 9,0Kavram kanıtıEPSS %3

    rmosolgo · graphql-ruby12 Mar 2025

  • CVE-2025-25291
    43Planlayın

    ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)

    KritikCVSS 9,3Kavram kanıtıEPSS %20

    omniauth · omniauth saml12 Mar 2025

  • CVE-2025-25292
    57Planlayın

    Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)

    KritikCVSS 9,3İstismar yokEPSS %65

    omniauth · omniauth saml12 Mar 2025

  • CVE-2025-2264
    41Planlayın

    Santesoft Sante PACS Server Path Traversal Information Disclosure

    YüksekCVSS 7,5SilahlaştırılmışEPSS %35

    santesoft · sante pacs server13 Mar 2025

  • CVE-2024-55060
    24İzleyin

    A cross-site scripting (XSS) vulnerability in the component index.php of Rafed CMS Website v1.44 allows attackers to execute arbitrary web s

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    rafed-system · rafed cms website13 Mar 2025

  • CVE-2025-2221
    31İzleyin

    WPCOM Member <= 1.7.6 - Unauthenticated Time-Based SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    wpcom · wpcom member14 Mar 2025

  • CVE-2024-8176
    30İzleyin

    Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    red hat · red hat enterprise linux 1014 Mar 2025

  • CVE-2025-2304
    37İzleyin

    Camaleon CMS Privilege Escalation

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    owen2345 · camaleon-cms14 Mar 2025

  • CVE-2023-33300
    25İzleyin

    A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earl

    OrtaCVSS 5,3İstismar yokEPSS %13

    fortinet · fortinac14 Mar 2025

  • CVE-2025-29384
    40Planlayın

    In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    tenda · ac9 firmware14 Mar 2025

  • CVE-2025-29774
    40Planlayın

    xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References

    KritikCVSS 9,3Kavram kanıtıEPSS %9

    node-saml · xml-crypto14 Mar 2025

  • CVE-2025-29775
    40Planlayın

    xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment

    KritikCVSS 9,3Kavram kanıtıEPSS %9

    node-saml · xml-crypto14 Mar 2025

  • CVE-2023-52927
    31İzleyin

    netfilter: allow exp not to be removed in nf_ct_find_expectation

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel14 Mar 2025

  • CVE-2025-30066
    86Hemen

    tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs.

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %72

    tj-actions · changed-files15 Mar 2025

  • CVE-2024-13126
    18İzleyin

    Download Manager < 3.3.07 - Unauthenticated Data Exposure

    OrtaCVSS 4,6Kavram kanıtıEPSS %0

    w3eden · download manager16 Mar 2025