Published Advisories

The following is a list of all publicly disclosed vulnerabilities discovered by TrendAI™ Zero Day Initiative™ (ZDI) researchers. While the affected vendor is working on a patch for these vulnerabilities, TrendAI™ customers are protected from exploitation by security filters delivered ahead of public disclosure.

All security vulnerabilities that are acquired by TrendAI™ ZDI are handled according to TrendAI™ ZDI's disclosure policy. Once the affected vendor patches the vulnerability, we publish an accompanying security advisory that describes the issue, including links to the vendor's fixes.

Published Upcoming
ZDI ID ZDI CAN Vendor/Product CVE CVSS Published Updated
ZDI-CAN-27040
Anritsu
CVE-2025-15351
7.8
2025-12-30
2025-12-30
(0Day) Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27039
Anritsu
CVE-2025-15350
7.8
2025-12-30
2025-12-30
(0Day) Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27315
Anritsu
CVE-2025-15349
7.5
2025-12-30
2025-12-30
(0Day) Anritsu ShockLine SCPI Race Condition Remote Code Execution Vulnerability
ZDI-CAN-27833
Anritsu
CVE-2025-15348
7.8
2025-12-30
2025-12-30
(0Day) Anritsu ShockLine CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27769
Trimble
CVE-2025-15062
7.8
2025-12-29
2025-12-29
Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-27877
Framelink
CVE-2025-15061
9.8
2025-12-29
2025-12-29
Framelink Figma MCP Server fetchWithRetry Command Injection Remote Code Execution Vulnerability
ZDI-CAN-28232
GIMP
CVE-2025-15059
7.8
2025-12-29
2025-12-29
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-28564
FontForge
CVE-2025-15269
8.8
2025-12-29
2026-01-08
(0Day) FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-28563
FontForge
CVE-2025-15270
8.8
2025-12-29
2026-01-08
(0Day) FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability
ZDI-CAN-28562
FontForge
CVE-2025-15271
8.8
2025-12-29
2026-01-08
(0Day) FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability
ZDI-CAN-28547
FontForge
CVE-2025-15272
8.8
2025-12-29
2026-01-08
(0Day) FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-28546
FontForge
CVE-2025-15273
8.8
2025-12-29
2026-01-08
(0Day) FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-28544
FontForge
CVE-2025-15274
8.8
2025-12-29
2026-01-08
(0Day) FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-28543
FontForge
CVE-2025-15275
8.8
2025-12-29
2026-01-08
(0Day) FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-28525
FontForge
CVE-2025-15280
8.8
2025-12-29
2026-01-08
(0Day) FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-28198
FontForge
CVE-2025-15276
7.8
2025-12-29
2026-01-08
(0Day) FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27920
FontForge
CVE-2025-15277
7.8
2025-12-29
2026-01-08
(0Day) FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27865
FontForge
CVE-2025-15278
7.8
2025-12-29
2026-01-08
(0Day) FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27517
FontForge
CVE-2025-15279
7.8
2025-12-29
2026-01-08
(0Day) FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27197
Tencent
CVE-2025-13715
7.8
2025-12-23
2025-12-23
Tencent FaceDetection-DSFD resnet Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-28575
LibreNMS
CVE-2025-68614
4.3
2025-12-23
2025-12-23
LibreNMS Alert Rule API Cross-Site Scripting Vulnerability
ZDI-CAN-27507
Net-SNMP
CVE-2025-68615
9.8
2025-12-23
2025-12-23
Net-SNMP SnmpTrapd Agent Message Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-28558
Foxit
CVE-2025-66499
7.8
2025-12-19
2025-12-19
Foxit PDF Reader PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-28532
Foxit
CVE-2025-66498
3.3
2025-12-19
2025-12-19
Foxit PDF Reader U3D File Parsing Use-After-Free Information Disclosure Vulnerability
ZDI-CAN-28531
Foxit
CVE-2025-66497
3.3
2025-12-19
2025-12-19
Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-28523
Foxit
CVE-2025-66496
7.8
2025-12-19
2025-12-19
Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-28403
Foxit
CVE-2025-66495
7.8
2025-12-19
2025-12-19
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-28306
Foxit
CVE-2025-66494
7.8
2025-12-19
2025-12-19
Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-28210
Foxit
CVE-2025-66493
7.8
2025-12-19
2025-12-19
Foxit PDF Reader AcroForm User-After-Free Remote Code Execution Vulnerability
ZDI-CAN-28053
Foxit
CVE-2025-13941
7.8
2025-12-19
2025-12-19
Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability
ZDI-CAN-27668
RealDefense
CVE-2025-14492
7.8
2025-12-19
2025-12-19
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI-CAN-27678
RealDefense
CVE-2025-14496
7.8
2025-12-19
2025-12-19
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI-CAN-27675
RealDefense
CVE-2025-14493
7.8
2025-12-19
2025-12-19
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI-CAN-27677
RealDefense
CVE-2025-14495
7.8
2025-12-19
2025-12-19
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI-CAN-27680
RealDefense
CVE-2025-14497
7.8
2025-12-19
2025-12-19
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI-CAN-27657
RealDefense
CVE-2025-14488
7.8
2025-12-19
2025-12-19
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI-CAN-27659
RealDefense
CVE-2025-14490
7.8
2025-12-19
2025-12-19
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI-CAN-27658
RealDefense
CVE-2025-14489
7.8
2025-12-19
2025-12-19
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI-CAN-27660
RealDefense
CVE-2025-14491
7.8
2025-12-19
2025-12-19
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI-CAN-27676
RealDefense
CVE-2025-14494
7.8
2025-12-19
2025-12-19
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI-CAN-26837
AzeoTech
CVE-2025-66590
7.8
2025-12-19
2025-12-19
AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26840
AzeoTech
CVE-2025-66589
7.8
2025-12-19
2025-12-19
AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26836
AzeoTech
CVE-2025-66589
7.8
2025-12-19
2025-12-19
AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26835
AzeoTech
CVE-2025-66589
7.8
2025-12-19
2025-12-19
AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-25521
AzeoTech
CVE-2025-66589
7.8
2025-12-19
2025-12-19
AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-25511
AzeoTech
CVE-2025-66589
7.8
2025-12-19
2025-12-19
AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-25510
AzeoTech
CVE-2025-66589
7.8
2025-12-19
2025-12-19
AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27269
NSF Unidata
CVE-2025-14936
7.8
2025-12-18
2025-12-18
(0Day) NSF Unidata NetCDF-C Attribute Name Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27168
NSF Unidata
CVE-2025-14935
7.8
2025-12-18
2025-12-18
(0Day) NSF Unidata NetCDF-C Dimension Name Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27273
NSF Unidata
CVE-2025-14932
7.8
2025-12-18
2025-12-18
(0Day) NSF Unidata NetCDF-C Time Unit Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27267
NSF Unidata
CVE-2025-14934
7.8
2025-12-18
2025-12-18
(0Day) NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27266
NSF Unidata
CVE-2025-14933
7.8
2025-12-18
2025-12-18
(0Day) NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25423
Hugging Face
CVE-2025-14920
7.8
2025-12-18
2025-12-18
(0Day) Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25424
Hugging Face
CVE-2025-14921
7.8
2025-12-18
2025-12-18
(0Day) Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-28252
Hugging Face
CVE-2025-14927
7.8
2025-12-18
2025-12-18
(0Day) Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability
ZDI-CAN-28251
Hugging Face
CVE-2025-14926
7.8
2025-12-18
2025-12-18
(0Day) Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability
ZDI-CAN-28253
Hugging Face
CVE-2025-14928
7.8
2025-12-18
2025-12-18
(0Day) Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability
ZDI-CAN-28309
Hugging Face
CVE-2025-14930
7.8
2025-12-18
2025-12-18
(0Day) Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-28308
Hugging Face
CVE-2025-14929
7.8
2025-12-18
2025-12-18
(0Day) Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-28312
Hugging Face
CVE-2025-14931
10.0
2025-12-18
2025-12-18
(0Day) Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27424
Hugging Face
CVE-2025-14922
7.8
2025-12-18
2025-12-30
(0Day) Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27984
Hugging Face
CVE-2025-14924
7.8
2025-12-18
2025-12-18
(0Day) Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27985
Hugging Face
CVE-2025-14925
7.8
2025-12-18
2025-12-18
(0Day) Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-28248
GIMP
CVE-2025-14425
7.8
2025-12-17
2025-12-17
GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-28376
GIMP
CVE-2025-14424
7.8
2025-12-17
2025-12-17
GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-28311
GIMP
CVE-2025-14423
7.8
2025-12-17
2025-12-17
GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-28273
GIMP
CVE-2025-14422
7.8
2025-12-17
2025-12-17
GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27960
Autodesk
CVE-2025-10881
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD CATPRODUCT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26883
AzeoTech
CVE-2025-66586
7.8
2025-12-17
2025-12-17
AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-25515
AzeoTech
CVE-2025-66586
7.8
2025-12-17
2025-12-17
AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-25513
AzeoTech
CVE-2025-66586
7.8
2025-12-17
2025-12-17
AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-27523
AzeoTech
CVE-2025-66586
7.8
2025-12-17
2025-12-17
AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-25512
AzeoTech
CVE-2025-66590
7.8
2025-12-17
2025-12-17
AzeoTech DAQFactory CTL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27811
AzeoTech
CVE-2025-66590
7.8
2025-12-17
2025-12-17
AzeoTech DAQFactory CTL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25514
AzeoTech
CVE-2025-66585
7.8
2025-12-17
2025-12-17
AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-28038
Apple
CVE-2025-43541
8.8
2025-12-17
2025-12-17
Apple Safari JavaScriptCore FTL DataView byteLength Property Handling Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-28284
Apple
CVE-2025-43501
8.8
2025-12-17
2025-12-17
Apple Safari JavaScriptCore HashTable Expansion Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27644
Trend Micro
CVE-2025-53503
7.3
2025-12-17
2025-12-17
Trend Micro Cleaner One Pro Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-27146
Siemens
CVE-2025-40829
7.8
2025-12-17
2025-12-17
Siemens Simcenter Femap SLDPRT File Parsing Uninitialized Memory Remote Code Execution Vulnerability
ZDI-CAN-28421
Autodesk
CVE-2025-14593
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-28179
Autodesk
CVE-2025-10900
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-28180
Autodesk
CVE-2025-10899
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27970
Autodesk
CVE-2025-9452
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD SLDPRT File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27971
Autodesk
CVE-2025-9453
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-27972
Autodesk
CVE-2025-9454
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-27963
Autodesk
CVE-2025-9455
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD CATPRODUCT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-27964
Autodesk
CVE-2025-9456
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD SLDPRT File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27961
Autodesk
CVE-2025-9457
7.8
2025-12-17
2026-01-26
Autodesk AutoCAD PRT File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27966
Autodesk
CVE-2025-9459
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-27967
Autodesk
CVE-2025-9460
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-27973
Autodesk
CVE-2025-10882
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27974
Autodesk
CVE-2025-10883
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD CATPRODUCT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-27998
Autodesk
CVE-2025-10884
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-28120
Autodesk
CVE-2025-10886
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD MODEL File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-28126
Autodesk
CVE-2025-10886
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD MODEL File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-28127
Autodesk
CVE-2025-10888
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-28128
Autodesk
CVE-2025-10889
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD CATPART File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-28181
Autodesk
CVE-2025-10898
7.8
2025-12-17
2025-12-17
Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26770
Sante
CVE-2025-14501
7.5
2025-12-17
2025-12-17
Sante PACS Server HTTP Content-Length Header Handling NULL Pointer Dereference Denial-of-Service Vulnerability
ZDI-CAN-27360
Fuji Electric
CVE-2025-53524
7.8
2025-12-17
2025-12-17
Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27436
Fuji Electric
CVE-2025-53524
7.8
2025-12-17
2025-12-17
Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27438
Fuji Electric
CVE-2025-53524
7.8
2025-12-17
2025-12-17
Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27440
Fuji Electric
CVE-2025-53524
7.8
2025-12-17
2025-12-17
Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27795
Microsoft
CVE-2025-60711
8.8
2025-12-17
2025-12-17
Microsoft Edge Mark-Of-The-Web Removal Remote Code Execution Vulnerability
ZDI-CAN-27306
Fortinet
CVE-2025-54353
5.5
2025-12-16
2025-12-16
Fortinet FortiSandbox hcproxy Cross-Site Scripting Remote Code Execution Vulnerability
ZDI-CAN-27309
Fortinet
CVE-2025-53949
8.8
2025-12-16
2025-12-16
Fortinet FortiSandbox name Parameter Command Injection Remote Code Execution Vulnerability
ZDI-CAN-27308
Fortinet
CVE-2025-53949
8.8
2025-12-16
2025-12-16
Fortinet FortiSandbox upload_vdi_file Command Injection Remote Code Execution Vulnerability
ZDI-CAN-27305
Fortinet
CVE-2025-53949
8.8
2025-12-16
2025-12-16
Fortinet FortiSandbox names admindel_confirm Command Injection Remote Code Execution Vulnerability
ZDI-CAN-28211
Fortinet
CVE-2025-64447
8.1
2025-12-16
2025-12-16
Fortinet FortiWeb ApacheCookie_parse Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability
ZDI-CAN-27867
PDFsam
CVE-2025-14405
6.6
2025-12-11
2025-12-11
(0Day) PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-27498
PDFsam
CVE-2025-14404
7.0
2025-12-11
2025-12-11
(0Day) PDFsam Enhanced XLS File Insufficient UI Warning Remote Code Execution Vulnerability
ZDI-CAN-27500
PDFsam
CVE-2025-14403
7.8
2025-12-11
2025-12-11
(0Day) PDFsam Enhanced Launch Insufficient UI Warning Remote Code Execution Vulnerability
ZDI-CAN-27499
PDFsam
CVE-2025-14402
7.0
2025-12-11
2025-12-11
(0Day) PDFsam Enhanced DOC File Insufficient UI Warning Remote Code Execution Vulnerability
ZDI-CAN-27260
PDFsam
CVE-2025-14401
7.8
2025-12-11
2025-12-11
(0Day) PDFsam Enhanced App Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-27494
Soda PDF
CVE-2025-14415
7.0
2025-12-11
2025-12-11
(0Day) Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability
ZDI-CAN-27496
Soda PDF
CVE-2025-14414
7.8
2025-12-11
2025-12-11
(0Day) Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability
ZDI-CAN-27509
Soda PDF
CVE-2025-14413
7.8
2025-12-11
2025-12-11
(0Day) Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-27495
Soda PDF
CVE-2025-14412
7.8
2025-12-11
2025-12-11
(0Day) Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability
ZDI-CAN-27140
Soda PDF
CVE-2025-14411
3.3
2025-12-11
2025-12-11
(0Day) Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-27142
Soda PDF
CVE-2025-14410
3.3
2025-12-11
2025-12-11
(0Day) Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-27120
Soda PDF
CVE-2025-14409
7.8
2025-12-11
2025-12-11
(0Day) Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27143
Soda PDF
CVE-2025-14408
3.3
2025-12-11
2025-12-11
(0Day) Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-27141
Soda PDF
CVE-2025-14407
3.3
2025-12-11
2025-12-11
(0Day) Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability
ZDI-CAN-25793
Soda PDF
CVE-2025-14406
7.8
2025-12-11
2025-12-11
(0Day) Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-27915
pdfforge
CVE-2025-14421
3.3
2025-12-11
2025-12-11
(0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-27514
pdfforge
CVE-2025-14420
7.8
2025-12-11
2025-12-11
(0Day) pdfforge PDF Architect CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-27902
pdfforge
CVE-2025-14419
7.8
2025-12-11
2025-12-11
(0Day) pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27502
pdfforge
CVE-2025-14418
7.0
2025-12-11
2025-12-11
(0Day) pdfforge PDF Architect XLS File Insufficient UI Warning Remote Code Execution Vulnerability
ZDI-CAN-27501
pdfforge
CVE-2025-14417
7.8
2025-12-11
2025-12-11
(0Day) pdfforge PDF Architect Launch Insufficient UI Warning Remote Code Execution Vulnerability
ZDI-CAN-27503
pdfforge
CVE-2025-14416
7.0
2025-12-11
2025-12-11
(0Day) pdfforge PDF Architect DOC File Insufficient UI Warning Remote Code Execution Vulnerability
ZDI-CAN-27394
IceWarp
CVE-2025-14500
9.8
2025-12-10
2025-12-10
IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability
ZDI-CAN-25441
IceWarp
CVE-2025-14499
8.8
2025-12-10
2025-12-11
IceWarp gmaps Cross-Site Scripting Authentication Bypass Vulnerability
ZDI-CAN-27395
TradingView
CVE-2025-14498
7.8
2025-12-10
2025-12-10
TradingView Desktop Electron Uncontrolled Search Path Local Privilege Escalation Vulnerability
ZDI-CAN-23193
oFono
CVE-2024-7539
7.8
2025-12-10
2025-12-10
(Pwn2Own) oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability
ZDI-CAN-27353
Fuji Electric
CVE-2025-54496
7.8
2025-12-10
2025-12-10
Fuji Electric Monitouch V-SFT V7 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27358
Fuji Electric
CVE-2025-54526
7.8
2025-12-10
2025-12-10
Fuji Electric Monitouch V-SFT V7 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27352
Fuji Electric
CVE-2025-54526
7.8
2025-12-10
2025-12-10
Fuji Electric Monitouch V-SFT V7 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27350
Fuji Electric
CVE-2025-54496
7.8
2025-12-10
2025-12-10
Fuji Electric Monitouch V-SFT V7 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27527
Fuji Electric
CVE-2025-54526
7.8
2025-12-10
2025-12-10
Fuji Electric Monitouch V-SFT V7 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27399
Fuji Electric
CVE-2025-54526
7.8
2025-12-10
2025-12-10
Fuji Electric Monitouch V-SFT V7 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27351
Fuji Electric
CVE-2025-54496
7.8
2025-12-10
2025-12-10
Fuji Electric Monitouch V-SFT V7 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27873
Windscribe
CVE-2025-14400
7.8
2025-12-10
2025-12-10
Windscribe Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-26908
Senstar
CVE-2025-12491
7.5
2025-12-10
2025-12-10
Senstar Symphony FetchStoredLicense Information Disclosure Vulnerability
ZDI-CAN-28569
Vim
CVE-2025-66476
7.8
2025-12-10
2025-12-10
Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability
ZDI-CAN-27311
Microsoft
 
3.3
2025-12-10
2025-12-10
(0Day) Microsoft Windows TAR File UI Misrepresentation Vulnerability
ZDI-CAN-26574
Microsoft
 
7.8
2025-12-10
2025-12-10
(0Day) Microsoft Visual Studio VsDevCmd Uncontrolled Search Path Element Remote Code Execution Vulnerability
ZDI-CAN-27220
Microsoft
 
5.0
2025-12-10
2025-12-10
(0Day) Microsoft ASP.NET SOAP Execution Restriction Bypass Remote Code Execution Vulnerability
ZDI-CAN-27835
Microsoft
 
4.3
2025-12-10
2025-12-10
(0Day) Microsoft Windows MP4 File Parsing Null Pointer Dereference Denial-of-Service Vulnerability
ZDI-CAN-26750
Microsoft
 
3.3
2025-12-10
2025-12-10
(0Day) Microsoft Windows dir Command Improper Character Neutralization Vulnerability
ZDI-CAN-27955
Microsoft
 
3.5
2025-12-10
2025-12-10
(0Day) Microsoft SharePoint Calendar Overlay Hyperlink Injection Vulnerability
ZDI-CAN-28116
Ivanti
CVE-2025-13661
7.1
2025-12-10
2025-12-10
Ivanti Endpoint Manager CAB File Parsing Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26897
Ivanti
CVE-2025-13662
7.8
2025-12-10
2025-12-10
Ivanti Endpoint Manager HIIDriver Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability
ZDI-CAN-26573
Microsoft
 
7.8
2025-12-09
2025-12-09
Microsoft Azure Virtual Desktop Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-27759
Microsoft
CVE-2025-62458
8.8
2025-12-09
2025-12-09
Microsoft Windows win32kfull Out-Of-Bounds Write Local Privilege Escalation Vulnerability
ZDI-CAN-27760
Microsoft
CVE-2025-62458
8.8
2025-12-09
2025-12-09
Microsoft Windows win32kfull Out-Of-Bounds Write Local Privilege Escalation Vulnerability
ZDI-CAN-27761
Microsoft
CVE-2025-62458
8.8
2025-12-09
2025-12-09
Microsoft Windows win32kbase Out-Of-Bounds Access Local Privilege Escalation Vulnerability
ZDI-CAN-27832
Microsoft
CVE-2025-62458
8.8
2025-12-09
2025-12-09
Microsoft Windows win32kfull Type Confusion Local Privilege Escalation Vulnerability
ZDI-CAN-27376
Schneider Electric
CVE-2025-11565, CVE-2025-11566, CVE-2025-11567
6.7
2025-12-09
2025-12-09
Schneider Electric PowerChute Serial Shutdown Directory Traversal Local Privilege Escalation Vulnerability
ZDI-CAN-27954
NVIDIA
CVE-2025-33184
7.3
2025-12-09
2025-12-09
NVIDIA Isaac-GR00T secure_server Authentication Bypass Vulnerability
ZDI-CAN-27425
Adobe
CVE-2025-64899
7.8
2025-12-09
2025-12-09
Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26755
Siemens
CVE-2025-40936
7.8
2025-12-09
2025-12-09
Siemens Simcenter Femap IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-27950
NVIDIA
CVE-2025-33183
9.8
2025-12-04
2025-12-04
NVIDIA Isaac-GR00T TorchSerializer Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-28409
Synology
CVE-2025-13392
6.3
2025-12-03
2025-12-03
(Pwn2Own) Synology DiskStation DS925+ samlAuth Authentication Bypass Vulnerability
ZDI-CAN-28275
Synology
CVE-2025-12686
9.8
2025-12-03
2025-12-03
(Pwn2Own) Synology BeeStation Plus auth_info Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27201
NVIDIA
CVE-2025-23357
7.8
2025-12-01
2025-12-01
NVIDIA Megatron load_common Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27649
Emerson
CVE-2024-3871
7.8
2025-12-01
2025-12-01
Emerson Movicon RTUSERS File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27185
Tencent
CVE-2025-13709
7.8
2025-12-01
2025-12-01
Tencent TFace restore_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27187
Tencent
CVE-2025-13711
7.8
2025-12-01
2025-12-01
Tencent TFace eval Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27182
Tencent
CVE-2025-13706
7.8
2025-12-01
2025-12-01
Tencent PatrickStar merge_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27184
Tencent
CVE-2025-13708
7.8
2025-12-01
2025-12-01
Tencent NeuralNLP-NeuralClassifier _load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27208
Tencent
CVE-2025-13716
7.8
2025-12-01
2025-12-01
Tencent MimicMotion create_pipeline Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27192
Tencent
CVE-2025-13714
7.8
2025-12-01
2025-12-01
Tencent MedicalNet generate_model Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27186
Tencent
CVE-2025-13710
7.8
2025-12-01
2025-12-01
Tencent HunyuanVideo load_vae Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27183
Tencent
CVE-2025-13707
7.8
2025-12-01
2025-12-01
Tencent HunyuanDiT model_resume Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27190
Tencent
CVE-2025-13712
7.8
2025-12-01
2025-12-01
Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27191
Tencent
CVE-2025-13713
7.8
2025-12-01
2025-12-01
Tencent Hunyuan3D-1 load_pretrained Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-24122
Appleton
CVE-2024-3871
9.8
2025-11-27
2025-11-27
Appleton UPSMON-PRO UPSMONProService Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27000
MariaDB
CVE-2025-13699
7.0
2025-11-27
2025-11-27
MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26589
DreamFactory
CVE-2025-13700
7.2
2025-11-26
2025-11-26
DreamFactory saveZipFile Command Injection Remote Code Execution Vulnerability
ZDI-CAN-27147
VIPRE
CVE-2025-13703
7.8
2025-11-26
2025-11-26
VIPRE Advanced Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability
ZDI-CAN-28133
Deciso
CVE-2025-13698
6.8
2025-11-25
2026-02-24
Deciso OPNsense diag_backup.php filename Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26570
Siemens
CVE-2025-40755
8.8
2025-11-25
2025-11-25
Siemens SINEC NMS getTotalAndFilterCounts SQL Injection Privilege Escalation Vulnerability
ZDI-CAN-27310
Arista
CVE-2025-6978
7.2
2025-11-25
2025-11-25
Arista NG Firewall runTroubleshooting Command Injection Remote Code Execution Vulnerability
ZDI-CAN-27007
Arista
CVE-2025-6979
8.8
2025-11-25
2025-11-25
Arista NG Firewall replace_marker Exposed Dangerous Function Authentication Bypass Vulnerability
ZDI-CAN-27006
Arista
CVE-2025-6980
7.5
2025-11-25
2025-11-25
Arista NG Firewall load_capture_settings Exposed Dangerous Function Information Disclosure Vulnerability
ZDI-CAN-27794
ASUS
CVE-2025-59373
7.8
2025-11-25
2025-11-25
ASUS MyASUS Incorrect Permission Assignment Local Privilege Escalation Vulnerability
ZDI-CAN-27540
Wibu-Systems
 
8.8
2025-11-25
2025-11-25
Wibu-Systems WibuKey Runtime Untrusted Pointer Dereference Local Privilege Escalation Vulnerability
ZDI-CAN-26516
Parallels
CVE-2025-66288
7.3
2025-11-25
2025-12-03
Parallels Toolbox CleanDrive Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-27383
Fortinet
CVE-2025-58034
7.2
2025-11-19
2025-11-19
Fortinet FortiWeb policy_scripting_post_handler Command Injection Remote Code Execution Vulnerability
ZDI-CAN-27858
NVIDIA
CVE-2025-33186
9.8
2025-11-14
2025-11-14
NVIDIA AIStore AuthN Hard-coded Credentials Authentication Bypass Vulnerability
ZDI-CAN-27857
NVIDIA
CVE-2025-33185
7.5
2025-11-14
2025-11-14
NVIDIA AIStore AuthN users Missing Authentication for Critical Function Information Disclosure Vulnerability
ZDI-CAN-28039
Apple
CVE-2025-43432
8.8
2025-11-13
2025-11-13
Apple Safari JavaScriptCore Wasm Function Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-27991
Apple
CVE-2025-43457
8.8
2025-11-13
2025-11-13
Apple Safari JavaScriptCore DFG CSE Phase Graph Node Substitution Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-27849
Apple
CVE-2025-43384
7.8
2025-11-13
2025-11-13
Apple macOS USD readAccessorData Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27894
Apple
CVE-2025-43380
7.8
2025-11-13
2025-11-13
Apple macOS ICC Profile Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27825
Apple
CVE-2025-43438
4.3
2025-11-13
2025-11-13
Apple Safari JavaScriptCore operationMapIteratorNext Type Confusion Information Disclosure Vulnerability
ZDI-CAN-27796
Apple
CVE-2025-43445
6.3
2025-11-13
2025-11-13
Apple macOS CoreText Font Glyph Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-27348
Apple
CVE-2025-43401
4.3
2025-11-13
2025-11-13
Apple macOS WindowServer Excessive Iteration Denial-of-Service Vulnerability
ZDI-CAN-27854
Apple
CVE-2025-43386
7.8
2025-11-13
2025-11-13
Apple macOS USD importMeshJointWeights Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27853
Apple
CVE-2025-43383
7.8
2025-11-13
2025-11-13
Apple macOS USD importNodeAnimations Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27848
Apple
CVE-2025-43385
7.8
2025-11-13
2025-11-13
Apple macOS USD importMeshes Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27263
Microsoft
CVE-2025-60709
7.5
2025-11-13
2025-11-13
Microsoft Windows Common Log File System Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-28025
Adobe
CVE-2025-61844
3.3
2025-11-13
2025-11-13
Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-28023
Adobe
CVE-2025-61845
3.3
2025-11-13
2025-11-13
Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-28024
Adobe
CVE-2025-61843
3.3
2025-11-13
2025-11-13
Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-28027
Adobe
CVE-2025-61842
3.3
2025-11-13
2025-11-13
Adobe USD-Fileformat-plugins usdGltf Use-After-Free Information Disclosure Vulnerability
ZDI-CAN-28022
Adobe
CVE-2025-61841
3.3
2025-11-13
2025-11-13
Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-28026
Adobe
CVE-2025-61840
3.3
2025-11-13
2025-11-13
Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-28072
Adobe
CVE-2025-61839
7.8
2025-11-13
2025-11-13
Adobe USD-Fileformat-plugins Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-28071
Adobe
CVE-2025-61838
7.8
2025-11-13
2025-11-13
Adobe USD-Fileformat-plugins usdGltf Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-28021
Adobe
CVE-2025-61837
7.8
2025-11-13
2025-11-13
Adobe USD-Fileformat-plugins usdGltf Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27948
Academy Software Foundation
CVE-2025-12840
7.8
2025-11-11
2025-11-11
Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27947
Academy Software Foundation
CVE-2025-12839
7.8
2025-11-11
2025-11-11
Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27946
Academy Software Foundation
CVE-2025-12495
7.8
2025-11-11
2025-11-11
Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27245
MSP360
CVE-2025-12838
7.3
2025-11-11
2025-11-11
MSP360 Free Backup Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-27965
Autodesk
CVE-2025-9458
7.8
2025-11-10
2025-11-10
Autodesk AutoCAD PRT File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27900
Autodesk
CVE-2025-10885
7.8
2025-11-10
2025-11-10
Autodesk On-Demand Install Services adsk_IPCUpdaterChannel Origin Validation Error Local Privilege Escalation Vulnerability
ZDI-CAN-27323
Delta Electronics
CVE-2025-47728
7.8
2025-11-10
2025-11-10
Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26635
Alibaba
 
7.3
2025-10-30
2025-10-30
Alibaba Cloud Workspace Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-27913
evernote-mcp-server
CVE-2025-12489
7.8
2025-10-30
2025-10-30
evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability
ZDI-CAN-26681
oobabooga
CVE-2025-12487
9.8
2025-10-30
2025-10-30
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
ZDI-CAN-26680
oobabooga
CVE-2025-12488
9.8
2025-10-30
2025-10-30
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
ZDI-CAN-24755
Heimdall Data
CVE-2025-12486
8.8
2025-10-30
2025-10-30
Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability
ZDI-CAN-28085
Netgate
CVE-2025-12490
8.8
2025-10-30
2025-10-30
Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability
ZDI-CAN-27823
GIMP
CVE-2025-10934
7.8
2025-10-29
2025-10-29
GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27086
Delta Electronics
CVE-2025-62579
7.8
2025-10-29
2025-10-29
Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27128
Delta Electronics
CVE-2025-62580
7.8
2025-10-29
2025-10-29
Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27560
X.Org
CVE-2025-62231
7.8
2025-10-29
2025-10-29
X.Org Server XkbSetCompatMap Numeric Truncation Error Privilege Escalation Vulnerability
ZDI-CAN-27545
X.Org
CVE-2025-62230
7.8
2025-10-29
2025-10-29
X.Org Server XkbRemoveResourceClient Use-After-Free Privilege Escalation Vulnerability
ZDI-CAN-27238
X.Org
CVE-2025-62229
7.8
2025-10-29
2025-10-29
X.Org Server present_create_notifies Use-After-Free Privilege Escalation Vulnerability
ZDI-CAN-27830
Krita
CVE-2025-59820
7.8
2025-10-27
2025-10-27
Krita TGA File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26677
Delta Electronics
CVE-2025-59298
7.8
2025-10-27
2025-10-27
Delta Electronics DIAScreen DPA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26683
Delta Electronics
CVE-2025-59299
7.8
2025-10-27
2025-10-27
Delta Electronics DIAScreen DPA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26672
Delta Electronics
CVE-2025-59297
7.8
2025-10-27
2025-10-27
Delta Electronics DIAScreen DPA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26687
Delta Electronics
CVE-2025-59300
7.8
2025-10-27
2025-10-27
Delta Electronics DIAScreen DPA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25407
Delta Electronics
CVE-2025-58319
7.8
2025-10-27
2025-10-27
Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27536
Cisco
CVE-2025-20359
6.5
2025-10-27
2025-10-27
Cisco Snort process_mime_body Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-27165
DataChain
CVE-2025-61677
8.8
2025-10-27
2025-10-27
DataChain data_storage Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-28057
Microsoft
CVE-2025-50154
3.3
2025-10-27
2025-10-27
Microsoft Windows LNK File Parsing Improper Input Validation NTLM Relay Vulnerability
ZDI-CAN-27061
Veeam
CVE-2025-48982
7.3
2025-10-27
2025-10-27
Veeam Agent for Microsoft Windows Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-27895
Oracle
CVE-2025-62589
8.2
2025-10-27
2025-10-27
Oracle VirtualBox VMSVGA Integer Overflow Local Privilege Escalation Vulnerability
ZDI-CAN-27933
Oracle
CVE-2025-62641
8.2
2025-10-27
2025-10-27
Oracle VirtualBox USB Use-After-Free Local Privilege Escalation Vulnerability
ZDI-CAN-27924
Oracle
CVE-2025-62590
8.2
2025-10-27
2025-10-27
Oracle VirtualBox VMSVGA Stack-based Buffer Overflow Local Privilege Escalation Vulnerability
ZDI-CAN-27890
Oracle
CVE-2025-62588
8.2
2025-10-27
2025-10-27
Oracle VirtualBox VMSVGA Integer Underflow Local Privilege Escalation Vulnerability
ZDI-CAN-27871
Oracle
CVE-2025-62591
6.0
2025-10-27
2025-10-27
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-27241
Oracle
CVE-2025-61759
6.5
2025-10-27
2025-10-27
Oracle VirtualBox Virtio-net Uninitialized Memory Information Disclosure Vulnerability
ZDI-CAN-26631
Ashlar-Vellum
CVE-2025-11465
7.8
2025-10-16
2025-10-16
(0Day) Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26628
Ashlar-Vellum
CVE-2025-11464
7.8
2025-10-16
2025-10-16
(0Day) Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26626
Ashlar-Vellum
CVE-2025-11463
7.8
2025-10-16
2025-10-16
(0Day) Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27289
Microsoft
CVE-2025-59284
3.3
2025-10-14
2025-10-14
Microsoft Windows TAR File Parsing NTLM Relay Vulnerability
ZDI-CAN-26912
Ivanti
CVE-2025-9872
8.8
2025-10-10
2025-10-10
Ivanti Endpoint Manager UniqueFilename Unrestricted File Upload Remote Code Execution Vulnerability
ZDI-CAN-27136
Allegra
CVE-2025-11466
4.9
2025-10-08
2025-10-08
Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-26743
7-Zip
CVE-2025-11002
7.0
2025-10-07
2025-10-07
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26753
7-Zip
CVE-2025-11001
7.0
2025-10-07
2025-10-07
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-27130
Jaspersoft
CVE-2025-10492
7.2
2025-10-07
2025-10-07
Jaspersoft Jasper Reports JRLoader Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25369
Ivanti
CVE-2025-11622
7.8
2025-10-16
2025-11-17
(0Day) Ivanti Endpoint Manager AgentPortal Deserialization of Untrusted Data Local Privilege Escalation Vulnerability
ZDI-CAN-26859
Ivanti
CVE-2025-62386
7.2
2025-10-07
2025-10-16
(0Day) Ivanti Endpoint Manager Report_RunPatch SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-26857
Ivanti
CVE-2025-62384
7.2
2025-10-07
2025-10-16
(0Day) Ivanti Endpoint Manager MP_Report_Run2 SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-26866
Ivanti
CVE-2025-62392
7.2
2025-10-07
2025-10-16
(0Day) Ivanti Endpoint Manager DBDR SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-26865
Ivanti
CVE-2025-62391
7.2
2025-10-07
2025-10-16
(0Day) Ivanti Endpoint Manager PatchHistory SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-26864
Ivanti
CVE-2025-62390
7.2
2025-10-07
2025-10-16
(0Day) Ivanti Endpoint Manager MP_QueryDetail2 SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-26862
Ivanti
CVE-2025-62389
7.2
2025-10-07
2025-10-16
(0Day) Ivanti Endpoint Manager GetCountForQuery SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-26861
Ivanti
CVE-2025-62388
7.2
2025-10-07
2025-10-16
(0Day) Ivanti Endpoint Manager MP_QueryDetail SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-26860
Ivanti
CVE-2025-62387
7.2
2025-10-07
2025-10-16
(0Day) Ivanti Endpoint Manager MP_VistaReport SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-26858
Ivanti
CVE-2025-62385
7.2
2025-10-07
2025-10-16
(0Day) Ivanti Endpoint Manager Report_RunPatch SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-26856
Ivanti
CVE-2025-62383
7.2
2025-10-07
2025-10-16
(0Day) Ivanti Endpoint Manager Report_Run SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-26855
Ivanti
CVE-2025-11623
7.2
2025-10-07
2025-10-16
(0Day) Ivanti Endpoint Manager Report_Run2 SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-26834
Ivanti
CVE-2025-9713
8.8
2025-10-16
2025-11-17
(0Day) Ivanti Endpoint Manager OnSaveToDB Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26144
MindManager
 
7.8
2025-10-07
2025-10-07
MindManager Attachment Insufficient UI Warning Remote Code Execution Vulnerability
ZDI-CAN-27195
Redis
CVE-2025-49844
9.8
2025-10-06
2025-10-06
(Pwn2Own) Redis Lua Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26916
MLflow
CVE-2025-11200
8.1
2025-10-03
2025-10-03
MLflow Weak Password Requirements Authentication Bypass Vulnerability
ZDI-CAN-26921
MLflow
CVE-2025-11201
8.1
2025-10-03
2025-10-03
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-27787
win-cli-mcp-server
CVE-2025-11202
9.8
2025-10-03
2025-10-03
win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability
ZDI-CAN-26585
LiteLLM
CVE-2025-11203
3.5
2025-10-03
2025-10-03
LiteLLM Information health API_KEY Information Disclosure Vulnerability
ZDI-CAN-26824
Delta Electronics
CVE-2025-57704
5.5
2025-10-01
2025-10-01
Delta Electronics EIP Builder EIP File Parsing XML External Entity Processing Information Disclosure Vulnerability
ZDI-CAN-26843
Delta Electronics
CVE-2025-58320
7.3
2025-10-01
2025-10-01
Delta Electronics DIALink Directory Traversal Authentication Bypass Vulnerability
ZDI-CAN-26827
Delta Electronics
CVE-2025-58321
10.0
2025-10-01
2025-10-01
Delta Electronics DIALink Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-23861
Viessmann
CVE-2025-9494
6.8
2025-10-01
2025-10-01
Viessmann Vitogate 300 BN/MB vitogate.cgi form-0-2 Command Injection Remote Code Execution Vulnerability
ZDI-CAN-26504
Fuji Electric
CVE-2025-9365
7.8
2025-10-01
2025-10-01
Fuji Electric FRENIC-Loader 4 EXTBM File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-26503
Fuji Electric
CVE-2025-9365
7.8
2025-10-01
2025-10-01
Fuji Electric FRENIC-Loader 4 EXRTM File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-26833
Ivanti
CVE-2025-9712
8.8
2025-09-30
2025-09-30
Ivanti Endpoint Manager EFile Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26375
Razer
CVE-2025-9870
7.8
2025-09-30
2025-09-30
Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-26373
Razer
CVE-2025-9871
7.8
2025-09-30
2025-09-30
Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-26374
Razer
CVE-2025-9869
7.8
2025-09-30
2025-09-30
Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-27382
Fortinet
CVE-2025-53609
4.9
2025-09-26
2025-10-06
Fortinet FortiWeb _cmf_get_config_file_path Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-27654
Linux
CVE-2025-38562
5.3
2025-09-24
2025-09-24
Linux Kernel ksmbd generate_key context.iov_base Null Pointer Dereference Denial-of-Service Vulnerability
ZDI-CAN-27661
Linux
CVE-2025-38561
8.5
2025-09-24
2025-09-24
Linux Kernel ksmbd smb2_sess_setup Preauth_HashValue Race Condition Remote Code Execution Vulnerability
ZDI-CAN-27561
Linux
CVE-2025-39698
8.8
2025-09-24
2025-09-24
Linux Kernel io_uring Futex Request Use-After-Free Local Privilege Escalation Vulnerability
ZDI-CAN-27793
GIMP
CVE-2025-10925
7.8
2025-09-24
2025-09-24
GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27836
GIMP
CVE-2025-10924
7.8
2025-09-24
2025-09-24
GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27878
GIMP
CVE-2025-10923
7.8
2025-09-24
2025-09-24
GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27863
GIMP
CVE-2025-10922
7.8
2025-09-24
2025-09-24
GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27803
GIMP
CVE-2025-10921
7.8
2025-09-24
2025-09-24
GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27684
GIMP
CVE-2025-10920
7.8
2025-09-24
2025-09-24
GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27224
Autodesk
CVE-2025-8892
7.8
2025-09-23
2025-09-23
Autodesk AutoCAD PRT File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27557
Autodesk
CVE-2025-8354
7.8
2025-09-23
2025-09-23
Autodesk Revit RFA File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-26042
SolarWinds
CVE-2025-26399
9.8
2025-09-23
2025-09-23
SolarWinds Web Help Desk AjaxProxy Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-26474
Gen Digital
CVE-2025-3025
7.3
2025-09-23
2025-09-23
Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-27283
Dassault Systèmes
CVE-2025-9447
7.8
2025-09-22
2025-09-22
Dassault Systèmes eDrawings Viewer PAR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-27332
Dassault Systèmes
CVE-2025-9449
7.8
2025-09-22
2025-09-22
Dassault Systèmes eDrawings Viewer PAR File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-27467
Dassault Systèmes
CVE-2025-9450
7.8
2025-09-22
2025-09-22
Dassault Systèmes eDrawings Viewer JT File Parsing Uninitialized Variable Remote Code Execution Vulnerability
ZDI-CAN-27586
Apple
CVE-2025-43368
4.3
2025-09-18
2025-09-18
Apple Safari IPC Connection Invalidation Use-After-Free Information Disclosure Vulnerability
ZDI-CAN-27407
Apple
CVE-2025-43346
8.8
2025-09-18
2025-09-18
Apple macOS OGG Audio File Header Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27286
Apple
CVE-2025-43349
7.8
2025-09-18
2025-09-18
Apple macOS Audio APAC Frame Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25289
Delta Electronics
CVE-2025-53418
8.8
2025-09-18
2025-09-18
Delta Electronics COMMGR Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-22241
Avira
CVE-2024-13759
7.8
2025-09-18
2025-09-18
Avira Prime Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-26892
Wondershare
CVE-2025-10644
9.4
2025-10-08
2025-10-08
(0Day) Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability
ZDI-CAN-26902
Wondershare
CVE-2025-10643
9.1
2025-10-08
2025-10-08
(0Day) Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability
ZDI-CAN-26583
Digilent
CVE-2025-10203
7.8
2025-09-16
2025-09-16
Digilent WaveForms DWF3WORK File Parsing Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26692
Siemens
CVE-2025-40762
7.8
2025-09-12
2025-09-12
Siemens Simcenter Femap STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-24739
Microsoft
 
7.5
2025-09-09
2025-09-09
Microsoft .NET IsTypeAuthorized Deserialization of Untrusted Data Denial-of-Service Vulnerability
ZDI-CAN-26640
Digilent
CVE-2025-57778
7.8
2025-11-20
2025-11-20
(0Day) Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26615
Digilent
CVE-2025-57777
7.8
2025-11-20
2025-11-20
(0Day) Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26614
Digilent
CVE-2025-57776
7.8
2025-11-20
2025-11-20
(0Day) Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26613
Digilent
CVE-2025-57775
7.8
2025-11-20
2025-11-20
(0Day) Digilent DASYLab DSB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26612
Digilent
CVE-2025-57774
7.8
2025-11-20
2025-11-20
(0Day) Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26582
Digilent
CVE-2025-9189
7.8
2025-11-20
2025-11-20
(0Day) Digilent DASYLab DSB File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-26581
Digilent
CVE-2025-9188
7.8
2025-11-20
2025-11-20
(0Day) Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27261
QEMU
CVE-2025-8860
5.3
2025-09-04
2025-09-04
QEMU uefi-vars Uninitialized Memory Information Disclosure Vulnerability
ZDI-CAN-26552
Realtek
CVE-2025-8300
8.8
2025-09-02
2025-09-02
Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability
ZDI-CAN-25857
Realtek
CVE-2025-8299
8.8
2025-09-02
2025-09-02
Realtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PACKET Heap-based Buffer Overflow Local Privilege Escalation Vulnerability
ZDI-CAN-25864
Realtek
CVE-2025-8298
3.8
2025-09-02
2025-09-02
Realtek RTL8811AU rtwlanu.sys N6CQueryInformationHandleCustomized11nOids Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-24786
Realtek
CVE-2025-8301
7.8
2025-09-02
2025-09-02
Realtek RTL8811AU rtwlanu.sys N6CSet_DOT11_CIPHER_DEFAULT_KEY Heap-based Buffer Overflow Local Privilege Escalation Vulnerability
ZDI-CAN-26553
Realtek
CVE-2025-8302
8.8
2025-09-02
2025-09-02
Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability
ZDI-CAN-26523
Apple
CVE-2025-43284
6.5
2025-08-28
2026-02-04
Apple macOS AppleIntelKBLGraphics Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25875
Delta Electronics
CVE-2025-53419
7.8
2025-08-28
2025-08-28
Delta Electronics ISPSoft ISP File Parsing Improper Control of Dynamically-Managed Code Remote Code Execution Vulnerability
ZDI-CAN-26744
Siemens
CVE-2025-25175
7.8
2025-08-28
2025-08-28
Siemens Simcenter Femap NEU File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-26747
Siemens
CVE-2025-25175
7.8
2025-08-28
2025-08-28
Siemens Simcenter Femap NEU File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-26748
Siemens
CVE-2025-25175
7.8
2025-08-28
2025-08-28
Siemens Simcenter Femap NEU File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-27504
Linux
CVE-2025-38563
7.5
2025-08-28
2025-09-24
Linux Kernel perf Subsystem AUX Buffers Use-After-Free Local Privilege Escalation Vulnerability
ZDI-CAN-27129
TeamViewer
CVE-2025-44002
6.1
2025-08-26
2025-08-26
TeamViewer Link Following Denial-of-Service Vulnerability
ZDI-CAN-25847
QNAP
CVE-2024-13087
7.1
2025-08-26
2025-08-26
(Pwn2Own) QNAP QHora-322 miro_webserver_lib_RunExecBash Command Injection Remote Code Execution Vulnerability
ZDI-CAN-25709
Foxit
CVE-2025-9330
7.8
2025-08-21
2025-08-21
Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-27101
Foxit
CVE-2025-9323
3.3
2025-08-21
2025-08-21
Foxit PDF Reader JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26802
Foxit
CVE-2025-9324
3.3
2025-08-21
2025-08-21
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26785
Foxit
CVE-2025-9325
3.3
2025-08-21
2025-08-21
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26784
Foxit
CVE-2025-9326
7.8
2025-08-21
2025-08-21
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26774
Foxit
CVE-2025-9327
3.3
2025-08-21
2025-08-21
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26773
Foxit
CVE-2025-9328
7.8
2025-08-21
2025-08-21
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26772
Foxit
CVE-2025-9329
7.8
2025-08-21
2025-08-21
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-27085
Autodesk
CVE-2025-5048
7.8
2025-08-21
2025-08-21
Autodesk AutoCAD DGN File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27084
Autodesk
CVE-2025-5047
7.8
2025-08-21
2025-08-21
Autodesk AutoCAD DGN File Parsing Uninitialized Variable Remote Code Execution Vulnerability
ZDI-CAN-27083
Autodesk
CVE-2025-5046
7.8
2025-08-21
2025-08-21
Autodesk AutoCAD DGN File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26486
Firebird
CVE-2025-54989
7.5
2025-08-21
2025-08-21
Firebird SQL Database Server XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability
ZDI-CAN-25774
Axis Communications
 
8.8
2025-08-21
2025-08-21
Axis Communications Autodesk Plugin AzureBlobRestAPI axiscontentfiles Remote Code Execution Vulnerability
ZDI-CAN-27433
Ivanti
CVE-2025-8297
6.6
2025-08-20
2025-08-20
Ivanti Avalanche FileStoreConfig Arbitrary File Upload Remote Code Execution Vulnerability
ZDI-CAN-27134
Ivanti
CVE-2025-8296
6.6
2025-08-20
2025-08-20
Ivanti Avalanche getCountMuStatDevicePropResultsFromMuListAgentIds SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-22195
Cockroach Labs
CVE-2025-9276
9.8
2025-08-27
2025-08-27
Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability
ZDI-CAN-21655
Oxford Instruments
CVE-2025-9275
7.8
2025-08-20
2025-08-20
(0Day) Oxford Instruments Imaris Viewer IMS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-21657
Oxford Instruments
CVE-2025-9274
7.8
2025-08-20
2025-08-20
(0Day) Oxford Instruments Imaris Viewer IMS File Parsing Uninitialized Pointer Remote Code Execution Vulnerability
ZDI-CAN-23950
CData
CVE-2025-9273
4.3
2025-08-20
2025-08-20
(0Day) CData API Server MySQL Misconfiguration Information Disclosure Vulnerability
ZDI-CAN-27250
NVIDIA
CVE-2025-23318
8.1
2025-08-20
2025-08-20
(Pwn2Own) NVIDIA Triton Inference Server IPC Push Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27249
NVIDIA
CVE-2025-23333
5.9
2025-08-20
2025-08-20
(Pwn2Own) NVIDIA Triton Inference Server LoadFromSharedMemory Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-27181
NVIDIA
CVE-2025-23320
7.5
2025-08-20
2025-08-20
(Pwn2Own) NVIDIA Triton Inference Server SharedMemoryManager Error Message Information Disclosure Vulnerability
ZDI-CAN-27209
NVIDIA
CVE-2025-23296
7.3
2025-08-20
2025-08-20
NVIDIA Isaac-GR00T secure_server Authentication Bypass Vulnerability
ZDI-CAN-27210
NVIDIA
CVE-2025-23296
9.8
2025-08-20
2025-09-03
NVIDIA Isaac-GR00T TorchSerializer Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27058
Apple
CVE-2025-31281
3.3
2025-08-14
2025-08-14
Apple macOS USD importMeshJointWeights Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-27174
Microsoft
CVE-2025-53132
8.8
2025-08-14
2025-08-14
(Pwn2Own) Microsoft Windows win32kfull Race Condition Local Privilege Escalation Vulnerability
ZDI-CAN-27541
Microsoft
CVE-2025-53788
4.7
2025-08-14
2025-08-14
Microsoft Windows Subsystem for Linux WslCoreVm::Initialize Incorrect Privilege Management Information Disclosure Vulnerability
ZDI-CAN-27188
Microsoft
CVE-2025-50168
8.8
2025-08-14
2025-08-14
(Pwn2Own) Microsoft Windows win32kbase Type Confusion Local Privilege Escalation Vulnerability
ZDI-CAN-27171
Microsoft
CVE-2025-53156
3.8
2025-08-14
2025-08-14
(Pwn2Own) Microsoft Windows Exposed Dangerous Function Information Disclosure Vulnerability
ZDI-CAN-27235
Microsoft
CVE-2025-53723
8.8
2025-08-14
2025-08-14
(Pwn2Own) Microsoft Windows 11 vhdmp Integer Overflow Local Privilege Escalation Vulnerability
ZDI-CAN-27256
Microsoft
CVE-2025-53155
8.8
2025-08-14
2025-08-14
(Pwn2Own) Microsoft Windows 11 vhdmp Improper Validation of Array Index Local Privilege Escalation Vulnerability
ZDI-CAN-26363
Microsoft
CVE-2025-53783
9.8
2025-08-14
2025-08-14
Microsoft Teams Real Time Media Manager Integer Underflow Remote Code Execution Vulnerability
ZDI-CAN-27158
Microsoft
CVE-2025-50167
8.8
2025-08-14
2025-08-14
(Pwn2Own) Microsoft Windows 11 vhdmp Use-After-Free Local Privilege Escalation Vulnerability
ZDI-CAN-26559
Rockwell Automation
CVE-2025-6377
7.8
2025-08-13
2025-08-13
Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26556
Rockwell Automation
CVE-2025-6376
7.8
2025-08-13
2025-08-13
Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26766
NoMachine
CVE-2025-8614
7.8
2025-08-13
2025-09-02
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-26141
Academy Software Foundation
CVE-2025-48071
7.8
2025-08-13
2025-08-13
Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27199
NVIDIA
CVE-2025-23298
7.8
2025-08-14
2025-09-26
NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-26478
Delta Electronics
CVE-2025-53417
9.8
2025-08-13
2025-08-13
Delta Electronics DIAView Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26477
Delta Electronics
CVE-2025-53417
7.5
2025-08-13
2025-08-13
Delta Electronics DIAView Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-26463
Schneider Electric
CVE-2025-54924
7.5
2025-08-12
2025-08-25
(0Day) Schneider Electric EcoStruxure Power Monitoring Expert GetPagesAsImages Server-Side Request Forgery Information Disclosure Vulnerability
ZDI-CAN-26275
Schneider Electric
CVE-2025-54923
8.8
2025-08-12
2025-08-25
(0Day) Schneider Electric EcoStruxure Power Monitoring Expert GetFilteredSinkProvider Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-26274
Schneider Electric
CVE-2025-54927
7.2
2025-08-12
2025-08-25
(0Day) Schneider Electric EcoStruxure Power Monitoring Expert HttpPostedFile Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26273
Schneider Electric
CVE-2025-54926
4.9
2025-08-12
2025-08-25
(0Day) Schneider Electric EcoStruxure Power Monitoring Expert GetTgmlContent Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-26464
Schneider Electric
CVE-2025-54925
7.5
2025-08-12
2025-08-25
(0Day) Schneider Electric EcoStruxure Power Monitoring Expert ExportDataAsXML Server-Side Request Forgery Information Disclosure Vulnerability
ZDI-CAN-26281
Apple
 
3.3
2025-08-11
2025-08-11
Apple macOS AudioToolboxCore Audio Conversion Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26364
Microsoft
 
3.3
2025-08-06
2025-08-06
(0Day) Microsoft Windows Theme File Parsing Improper Input Validation NTLM Relay Vulnerability
ZDI-CAN-26372
Microsoft
 
3.3
2025-08-06
2025-08-06
(0Day) Microsoft Windows Theme File Parsing Improper Input Validation NTLM Relay Vulnerability
ZDI-CAN-25207
Microsoft
 
6.5
2025-08-06
2025-08-06
(0Day) Microsoft SharePoint GetTransformer Unsafe Reflection Denial-of-Service Vulnerability
ZDI-CAN-24974
Microsoft
 
7.5
2025-08-06
2025-08-06
(0Day) Microsoft Windows Internet Explorer Remote Code Execution Vulnerability
ZDI-CAN-24831
Microsoft
 
8.1
2025-08-06
2025-08-06
(0Day) Microsoft SharePoint IsAuthorizedType Deserialization of Untrusted Data Information Disclosure and Denial-of-Service Vulnerability
ZDI-CAN-24425
Microsoft
 
7.1
2025-08-06
2025-08-06
(0Day) Microsoft Windows NetBIOS Hostname SmartScreen Bypass Remote Code Execution Vulnerability
ZDI-CAN-24078
Microsoft
 
7.5
2025-08-06
2025-08-06
(0Day) Microsoft Windows OneDrive SmartScreen Bypass Vulnerability
ZDI-CAN-23584
Microsoft
 
6.5
2025-08-06
2025-08-06
(0Day) Microsoft Edge PDF NTLM Response Information Disclosure Vulnerability
ZDI-CAN-23960
Microsoft
 
5.3
2025-08-06
2025-08-06
(0Day) Microsoft Azure AP5GC gNB-ID Use of Multiple Resources with Duplicate Identifier Denial-Of-Service Vulnerability
ZDI-CAN-23990
Microsoft
 
8.8
2025-08-06
2025-08-06
(0Day) Microsoft Windows CAB File SmartScreen Bypass Vulnerability
ZDI-CAN-23548
Microsoft
 
6.5
2025-08-06
2025-08-06
(0Day) Microsoft Windows MonikerLink Information Disclosure Vulnerability
ZDI-CAN-23444
Microsoft
 
7.5
2025-08-06
2025-08-06
(0Day) Microsoft PowerShell TryModuleAutoLoading Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-23938
Microsoft
 
8.8
2025-08-06
2025-08-06
(0Day) Microsoft Windows SmartScreen Bypass Remote Code Execution Vulnerability
ZDI-CAN-23946
Microsoft
 
4.3
2025-08-06
2025-08-06
(0Day) Microsoft Office OfficeApps Unintended Proxy Information Disclosure Vulnerability
ZDI-CAN-23945
Microsoft
 
8.8
2025-08-06
2025-08-06
(0Day) Microsoft Windows ZIP File Insufficient UI Warning Remote Code Execution Vulnerability
ZDI-CAN-23450
Microsoft
 
8.8
2025-08-06
2025-08-06
(0Day) Microsoft Exchange PowerShell Exposed Dangerous Method NTLM Relay Vulnerability
ZDI-CAN-26156
AOMEI
CVE-2025-8610
9.8
2025-08-06
2025-08-06
(0Day) AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability
ZDI-CAN-26158
AOMEI
CVE-2025-8611
9.8
2025-08-06
2025-08-06
(0Day) AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability
ZDI-CAN-27059
AOMEI
CVE-2025-8612
7.3
2025-08-06
2025-08-06
(0Day) AOMEI Backupper Workstation Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25892
Vacron
CVE-2025-8613
7.2
2025-08-06
2025-08-06
(0Day) Vacron Camera ping Command Injection Remote Code Execution Vulnerability
ZDI-CAN-26355
Kenwood
CVE-2025-8656
6.8
2025-08-05
2025-08-05
(0Day) (Pwn2Own) Kenwood DMX958XR Protection Mechanism Failure Software Downgrade Vulnerability
ZDI-CAN-26314
Kenwood
CVE-2025-8655
6.8
2025-08-05
2025-08-05
(0Day) (Pwn2Own) Kenwood DMX958XR libSystemLib Command injection Remote Code Execution Vulnerability
ZDI-CAN-26313
Kenwood
CVE-2025-8654
8.8
2025-08-05
2025-08-05
(0Day) (Pwn2Own) Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability
ZDI-CAN-26312
Kenwood
CVE-2025-8653
8.8
2025-08-05
2025-08-05
(0Day) (Pwn2Own) Kenwood DMX958XR JKRadioService Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26311
Kenwood
CVE-2025-8652
6.8
2025-08-05
2025-08-05
(0Day) (Pwn2Own) Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability
ZDI-CAN-26307
Kenwood
CVE-2025-8651
6.8
2025-08-05
2025-08-05
(0Day) (Pwn2Own) Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability
ZDI-CAN-26306
Kenwood
CVE-2025-8650
6.8
2025-08-05
2025-08-05
(0Day) (Pwn2Own) Kenwood DMX958XR libSystemLib Command Injection Remote Code Execution Vulnerability
ZDI-CAN-26305
Kenwood
CVE-2025-8649
6.8
2025-08-05
2025-08-05
(0Day) (Pwn2Own) Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability
ZDI-CAN-26271
Kenwood
CVE-2025-8648
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26270
Kenwood
CVE-2025-8647
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26269
Kenwood
CVE-2025-8646
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26268
Kenwood
CVE-2025-8645
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26267
Kenwood
CVE-2025-8644
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26266
Kenwood
CVE-2025-8643
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26265
Kenwood
CVE-2025-8642
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26264
Kenwood
CVE-2025-8641
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26263
Kenwood
CVE-2025-8640
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26262
Kenwood
CVE-2025-8639
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26261
Kenwood
CVE-2025-8638
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26260
Kenwood
CVE-2025-8637
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26259
Kenwood
CVE-2025-8636
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26258
Kenwood
CVE-2025-8635
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26257
Kenwood
CVE-2025-8634
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26256
Kenwood
CVE-2025-8633
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26255
Kenwood
CVE-2025-8632
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26254
Kenwood
CVE-2025-8631
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26253
Kenwood
CVE-2025-8630
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26252
Kenwood
CVE-2025-8629
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-26064
Kenwood
CVE-2025-8628
6.8
2025-08-05
2025-08-05
(0Day) Kenwood DMX958XR Firmware Update Command Injection Vulnerability
ZDI-CAN-25494
Google
 
7.5
2025-08-05
2025-08-05
(0Day) Google Chrome SwiftShader Out-Of-Bound Write Remote Code Execution Vulnerability
ZDI-CAN-24741
Google
 
8.8
2025-08-05
2025-08-05
(0Day) Google Drive ZIP File Mark-of-the-Web Bypass Remote Code Execution Vulnerability
ZDI-CAN-24742
Google
 
8.8
2025-08-05
2025-08-05
(0Day) Google Drive File Sharing Mark-of-the-Web Bypass Vulnerability
ZDI-CAN-27855
Trend Micro
CVE-2025-54987
9.8
2025-08-05
2025-08-05
Trend Micro Apex One Console Command Injection Remote Code Execution Vulnerability
ZDI-CAN-27834
Trend Micro
CVE-2025-54948
9.8
2025-08-05
2025-08-05
Trend Micro Apex One Console Command Injection Remote Code Execution Vulnerability
ZDI-CAN-25335
Microsoft
 
8.8
2025-08-01
2025-08-01
Microsoft Skype Chromium Remote Code Execution Vulnerability
ZDI-CAN-27088
NI
CVE-2025-7849
7.8
2025-08-01
2025-08-01
NI LabVIEW VI File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27081
NI
CVE-2025-7848
7.8
2025-08-01
2025-08-01
NI LabVIEW VI File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26324
Alpine
CVE-2025-8477
7.4
2025-08-01
2025-08-01
(0Day) (Pwn2Own) Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26357
Alpine
CVE-2025-8480
8.0
2025-08-01
2025-08-01
(0Day) (Pwn2Own) Alpine iLX-507 Command Injection Remote Code Execution
ZDI-CAN-26322
Alpine
CVE-2025-8476
7.1
2025-08-01
2025-08-01
(0Day) (Pwn2Own) Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability
ZDI-CAN-26321
Alpine
CVE-2025-8475
7.4
2025-08-01
2025-08-01
(0Day) (Pwn2Own) Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26318
Alpine
CVE-2025-8474
6.8
2025-08-01
2025-08-01
(0Day) (Pwn2Own) Alpine iLX-507 CarPlay Stack-based Buffer Overflow Code Execution Vulnerability
ZDI-CAN-26317
Alpine
CVE-2025-8473
6.4
2025-08-01
2025-08-01
(0Day) (Pwn2Own) Alpine iLX-507 UPDM_wstpCBCUpdStart Command Injection Vulnerability
ZDI-CAN-26316
Alpine
CVE-2025-8472
7.4
2025-08-01
2025-08-01
(0Day) (Pwn2Own) Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25536
QNAP
CVE-2024-50388
7.5
2025-07-31
2025-07-31
(Pwn2Own) QNAP TS-464 rsync Daemon Command Injection Remote Code Execution Vulnerability
ZDI-CAN-25656
QNAP
CVE-2024-50387
7.5
2025-07-31
2025-07-31
(Pwn2Own) QNAP TS-464 Log Tool SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-25612
QNAP
 
6.3
2025-07-31
2025-07-31
(Pwn2Own) QNAP TS-464 Samba Command Argument Injection Vulnerability
ZDI-CAN-25673
QNAP
 
7.5
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 tar Command Injection Remote Code Execution Vulnerability
ZDI-CAN-25488
QNAP
 
6.3
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 Improper Restriction of Communication Channel to Intended Endpoints Vulnerability
ZDI-CAN-25672
QNAP
 
7.5
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 qsyslog-cli username Format String Remote Code Execution Vulnerability
ZDI-CAN-25653
QNAP
 
8.0
2025-07-31
2025-07-31
(Pwn2Own) QNAP TS-464 privWizard.cgi Authentication CRLF Injection Privilege Escalation Vulnerability
ZDI-CAN-25482
QNAP
 
9.8
2025-07-31
2025-07-31
(Pwn2Own) QNAP TS-464 Improper Handling of URL Encoding Authentication Bypass Vulnerability
ZDI-CAN-25667
QNAP
 
7.5
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 gRPC WAN_ADDR6 Command Injection Remote Code Execution Vulnerability
ZDI-CAN-25625
QNAP
 
5.0
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 IPv6 Incorrectly Specified Destination in a Communication Channel Network Spoofing Vulnerability
ZDI-CAN-25624
QNAP
 
8.8
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 lionic_dpi parseMIME Out-of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25596
QNAP
 
5.0
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 qfirewall Improper Restriction of Communication Channel to Intended Endpoints Firewall Bypass Vulnerability
ZDI-CAN-25657
QNAP
 
8.1
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 system.db Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability
ZDI-CAN-25646
QNAP
 
7.5
2025-07-31
2025-07-31
(Pwn2Own) QNAP TS-464 reset_password.cgi Hard-coded Cryptographic Key Authentication Bypass Vulnerability
ZDI-CAN-25645
QNAP
 
5.3
2025-07-31
2025-07-31
(Pwn2Own) QNAP TS-464 reset_password.cgi Improper Certificate Validation Information Disclosure Vulnerability
ZDI-CAN-25644
QNAP
 
5.3
2025-07-31
2025-07-31
(Pwn2Own) QNAP TS-464 reset_password.cgi Improper Certificate Validation Information Disclosure Vulnerability
ZDI-CAN-25483
QNAP
 
7.5
2025-07-31
2025-07-31
(Pwn2Own) QNAP TS-464 reset_password.cgi Improper Certificate Validation Authentication Bypass Vulnerability
ZDI-CAN-25585
QNAP
 
7.5
2025-07-31
2025-07-31
(Pwn2Own) QNAP TS-464 qnap_exec Command Injection Privilege Escalation Vulnerability
ZDI-CAN-25587
QNAP
 
8.8
2025-07-31
2025-07-31
(Pwn2Own) QNAP TS-464 Active Directory Authentication Bypass Vulnerability
ZDI-CAN-25580
QNAP
CVE-2024-50389
8.1
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 openvpn_cli user_name SQL Injection Authentication Bypass Vulnerability
ZDI-CAN-25641
QNAP
 
8.0
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 backup Use of Hard-coded Cryptographic Key Privilege Escalation Vulnerability
ZDI-CAN-25634
QNAP
 
6.6
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 Improper Restriction of Communication Channel to Intended Endpoints Remote Code Execution Vulnerability
ZDI-CAN-25635
QNAP
 
7.5
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 SSH Use of Weak Credentials Authentication Bypass Vulnerability
ZDI-CAN-25530
QNAP
 
4.3
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 do_fetch Improper Certificate Validation Vulnerability
ZDI-CAN-25632
QNAP
 
6.3
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 access_setting HTTP Request Smuggling Vulnerability
ZDI-CAN-25631
QNAP
 
6.3
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 local_pwd_reset HTTP Request Smuggling Vulnerability
ZDI-CAN-25633
QNAP
 
6.3
2025-07-31
2025-07-31
(Pwn2Own) QNAP QHora-322 IPMI Use of Weak Credentials Authentication Bypass Vulnerability
ZDI-CAN-24915
Marvell
CVE-2025-8426
9.4
2025-07-31
2025-07-31
(0Day) Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability
ZDI-CAN-25639
Lorex
CVE-2025-8389
7.5
2025-07-30
2025-07-30
(Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Improper Validation of Array Index Remote Code Execution Vulnerability
ZDI-CAN-25537
Lorex
CVE-2024-52544
8.8
2025-07-30
2025-07-30
(Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25647
Lorex
CVE-2025-3132
8.8
2025-07-30
2025-07-30
(Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-23656
Canonical
CVE-2024-50126
7.8
2025-07-30
2025-07-30
(Pwn2Own) Canonical Ubuntu Kernel taprio Scheduler Race Condition Local Privilege Escalation Vulnerability
ZDI-CAN-26782
Apple
CVE-2025-31239
7.8
2025-07-30
2025-07-30
Apple macOS MediaToolbox Framework Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-25365
Apple
 
7.8
2025-07-30
2025-07-30
Apple macOS libFontValidation kern Table Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25355
Ashlar-Vellum
CVE-2025-7993
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt LI File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26238
Ashlar-Vellum
CVE-2025-8006
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26233
Ashlar-Vellum
CVE-2025-8002
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-26236
Ashlar-Vellum
CVE-2025-8004
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26237
Ashlar-Vellum
CVE-2025-8005
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-26053
Ashlar-Vellum
CVE-2025-8001
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt CO File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26235
Ashlar-Vellum
CVE-2025-8003
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26045
Ashlar-Vellum
CVE-2025-7997
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26051
Ashlar-Vellum
CVE-2025-8000
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt LI File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-25981
Ashlar-Vellum
CVE-2025-7995
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-25982
Ashlar-Vellum
CVE-2025-7996
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26046
Ashlar-Vellum
CVE-2025-7998
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25976
Ashlar-Vellum
CVE-2025-7994
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26049
Ashlar-Vellum
CVE-2025-7999
7.8
2025-07-30
2025-07-30
(0Day) Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-26299
Tesla
CVE-2025-8321
6.8
2025-07-29
2025-07-29
(Pwn2Own) Tesla Wall Connector Firmware Downgrade Vulnerability
ZDI-CAN-26300
Tesla
CVE-2025-8320
8.8
2025-07-29
2025-07-29
(Pwn2Own) Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability
ZDI-CAN-24672
SolarWinds
CVE-2024-45710
7.8
2025-07-29
2025-07-29
SolarWinds Platform SolarWindsAgent64 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-27217
Apple
CVE-2025-43214
8.8
2025-07-29
2025-08-26
Apple Safari JavaScriptCore WasmToJSException Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-22536
Mozilla
CVE-2024-3863
7.5
2025-07-29
2025-07-29
Mozilla Firefox Web Page Download Mark-Of-The-Web Protection Mechanism Failure Vulnerability
ZDI-CAN-23383
AVG
CVE-2024-13960
7.8
2025-07-29
2025-07-29
AVG TuneUp for PC TuneUp Service Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-27226
Autodesk
CVE-2025-7675
7.8
2025-07-29
2025-07-29
Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27225
Autodesk
CVE-2025-7497
7.8
2025-07-29
2025-07-29
Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27223
Autodesk
CVE-2025-6637
7.8
2025-07-29
2025-07-29
Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27222
Autodesk
CVE-2025-6636
7.8
2025-07-29
2025-07-29
Autodesk AutoCAD PRT File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-27253
Autodesk
CVE-2025-6635
7.8
2025-07-29
2025-07-29
Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-27221
Autodesk
CVE-2025-6631
7.8
2025-07-29
2025-07-29
Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26927
Autodesk
CVE-2025-5038
7.8
2025-07-29
2025-07-29
Autodesk AutoCAD X_T File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26848
Autodesk
CVE-2025-5043
7.8
2025-07-29
2025-07-29
Autodesk AutoCAD 3DM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25548
Avast
CVE-2024-13962
7.8
2025-07-29
2025-07-29
Avast Cleanup Premium TuneupSvc Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25498
AVG
CVE-2024-13959
7.8
2025-07-29
2025-07-29
AVG TuneUp for PC TuneupSvc Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25549
Avast
CVE-2024-13961
7.8
2025-07-29
2025-07-29
Avast Cleanup Premium TuneupSvc Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25509
AVG
CVE-2024-13944
7.8
2025-07-29
2025-07-29
AVG TuneUp for PC TuneupSvc Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25406
Delta Electronics
CVE-2025-53416
7.8
2025-07-29
2025-07-29
Delta Electronics DTN Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25570
Norton
CVE-2024-13944
7.8
2025-07-29
2025-07-29
Norton Utilities Ultimate NortonUtilitiesSvc Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25015
Oracle
CVE-2024-21273
5.3
2025-07-29
2025-07-29
Oracle VirtualBox VirtIO-SCSI Uninitialized Memory Information Disclosure Vulnerability
ZDI-CAN-26915
Apple
CVE-2025-43221
3.3
2025-07-29
2025-07-29
Apple macOS USD importAnimations Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26909
Apple
CVE-2025-43221
3.3
2025-07-29
2025-07-29
Apple macOS USD importNodeAnimations Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-27107
Apple
CVE-2025-31281
7.8
2025-07-29
2025-07-29
Apple macOS USD importNodeAnimations Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26966
Apple
CVE-2025-31281
3.3
2025-07-29
2025-07-29
Apple macOS USD importNodeAnimations Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26846
Apple
CVE-2025-31281
3.3
2025-07-29
2025-07-29
Apple macOS USD readAccessorDataToFloat Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26914
Apple
CVE-2025-43224
3.3
2025-07-29
2025-07-29
Apple macOS USD importNodeAnimations Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26853
Apple
CVE-2025-43224
3.3
2025-07-29
2025-07-29
Apple macOS USD importNodeAnimations Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26830
Apple
CVE-2025-43224
3.3
2025-07-29
2025-07-29
Apple macOS USD importNodeAnimations Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-27105
Apple
CVE-2025-43264
7.8
2025-07-29
2025-07-29
Apple macOS USD importMeshJointWeights Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26829
Apple
CVE-2025-43264
7.8
2025-07-29
2025-07-29
Apple macOS USD importMeshes Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27287
Apple
CVE-2025-43210
8.8
2025-07-29
2025-07-29
Apple macOS MediaToolbox Framework Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27274
Apple
CVE-2025-43186
7.8
2025-07-29
2025-07-29
Apple macOS AudioToolbox MP4 File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27106
Apple
CVE-2025-43215
3.3
2025-07-29
2025-07-29
Apple macOS USD readColor Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-27041
Apple
CVE-2025-43239
7.8
2025-07-29
2025-07-29
Apple macOS ICC Profile Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27036
Apple
CVE-2025-43218
3.3
2025-07-29
2025-07-29
Apple macOS USD CustomLoadImageData Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26978
Apple
CVE-2025-43219
7.8
2025-07-29
2025-07-29
Apple macOS USD importSkeletons Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26847
Apple
CVE-2025-31280
3.3
2025-07-29
2025-07-29
Apple macOS USD readAccessorInts Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26636
Apple
CVE-2025-43255
6.5
2025-07-29
2025-07-29
Apple macOS AppleIntelKBLGraphics Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26616
Apple
CVE-2025-43209
8.8
2025-07-29
2025-07-29
Apple Safari getHourCycles Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25806
Samsung
CVE-2025-54442
9.8
2025-07-28
2025-07-29
Samsung MagicINFO 9 Server filenameHasExecutableType Unrestricted File Upload Remote Code Execution Vulnerability
ZDI-CAN-25978
Samsung
CVE-2025-54455
9.1
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server PremiumClientService Hard-coded Cryptographic Key Authentication Bypass Vulnerability
ZDI-CAN-25839
Samsung
CVE-2025-54454
9.1
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server PremiumClientService Hard-coded Cryptographic Key Authentication Bypass Vulnerability
ZDI-CAN-25802
Samsung
CVE-2025-54453
8.8
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server FtpMetaUploadServlet Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-25800
Samsung
CVE-2025-54452
7.3
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server ServletAuthenticationProcessingFilter Authentication Bypass Vulnerability
ZDI-CAN-26058
Samsung
CVE-2025-54451
9.8
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server MagicInfoCache Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-26057
Samsung
CVE-2025-54450
7.2
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server DeviceLogUploadServlet Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-25873
Samsung
CVE-2025-54449
9.8
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server fillLftOrLfdInfo Unrestricted File Upload Remote Code Execution Vulnerability
ZDI-CAN-25874
Samsung
CVE-2025-54448
9.8
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server copyResourceToFile Unrestricted File Upload Remote Code Execution Vulnerability
ZDI-CAN-25885
Samsung
CVE-2025-54447
8.1
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server OpenApiController Unrestricted File Upload Remote Code Execution Vulnerability
ZDI-CAN-25955
Samsung
CVE-2025-54446
9.8
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server ResponseUploadActivity Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-25860
Samsung
CVE-2025-54445
8.2
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server parseXMLString XML External Entity Processing Information Disclosure Vulnerability
ZDI-CAN-25804
Samsung
CVE-2025-54444
9.8
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server filenameHasExecutableType Unrestricted File Upload Remote Code Execution Vulnerability
ZDI-CAN-25772
Samsung
CVE-2025-54443
9.8
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server SWUpdateFileUploadServlet Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-25807
Samsung
CVE-2025-54441
8.8
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server getFontFileFromMagicInfoServer Unrestricted File Upload Remote Code Execution Vulnerability
ZDI-CAN-26519
Samsung
CVE-2025-54440
9.8
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server MagicInfoWebAuthorClient Unrestricted File Upload Remote Code Execution Vulnerability
ZDI-CAN-25809
Samsung
CVE-2025-54439
8.8
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server getZipFileListForImport Unrestricted File Upload Remote Code Execution Vulnerability
ZDI-CAN-26520
Samsung
CVE-2025-54438
9.8
2025-07-28
2025-07-28
Samsung MagicINFO 9 Server downloadChangedFiles Directory Traversal Authentication Bypass Vulnerability
ZDI-CAN-26280
SolarWinds
CVE-2025-26397
7.8
2025-07-28
2025-07-28
SolarWinds TFTP Server Deserialization of Untrusted Data Local Privilege Escalation Vulnerability
ZDI-CAN-27791
Microsoft
CVE-2025-53770
8.8
2025-07-25
2025-07-25
(Pwn2Own) Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27790
Microsoft
CVE-2025-53771
6.5
2025-07-25
2025-07-25
(Pwn2Own) Microsoft SharePoint ToolPane Authentication Bypass Vulnerability
ZDI-CAN-27159
Red Hat
CVE-2025-38350
8.8
2025-07-24
2025-07-24
(Pwn2Own) Red Hat Enterprise Linux CBS Packet Scheduling Use-After-Free Local Privilege Escalation Vulnerability
ZDI-CAN-26647
ATEN
CVE-2025-6685
8.8
2025-07-24
2025-07-24
ATEN eco DC Missing Authorization Privilege Escalation Vulnerability
ZDI-CAN-25685
Veeam
CVE-2025-24287
7.8
2025-07-24
2025-07-24
Veeam Agent for Microsoft Windows Incorrect Default Permissions Local Privilege Escalation Vulnerability
ZDI-CAN-26882
Anritsu
CVE-2025-7976
7.8
2025-07-24
2025-07-24
Anritsu ShockLine CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-26913
Anritsu
CVE-2025-7975
7.8
2025-07-24
2025-07-24
Anritsu ShockLine CHX File Parsing Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26780
Amazon
CVE-2025-8069
7.0
2025-07-24
2025-07-24
Amazon AWS Client VPN Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-27254
Autodesk
CVE-2025-5037
7.8
2025-07-22
2025-07-22
Autodesk Revit RFA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25862
Ashlar-Vellum
CVE-2025-7988
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25945
Ashlar-Vellum
CVE-2025-7991
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25972
Ashlar-Vellum
CVE-2025-7992
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25756
Ashlar-Vellum
CVE-2025-7987
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25943
Ashlar-Vellum
CVE-2025-7989
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25755
Ashlar-Vellum
CVE-2025-7986
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25944
Ashlar-Vellum
CVE-2025-7990
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25704
Ashlar-Vellum
CVE-2025-7985
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Cobalt VC6 File Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25700
Ashlar-Vellum
CVE-2025-7984
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Cobalt AR File Parsing Uninitialized Variable Remote Code Execution Vulnerability
ZDI-CAN-25477
Ashlar-Vellum
CVE-2025-7983
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25475
Ashlar-Vellum
CVE-2025-7981
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution Vulnerability
ZDI-CAN-25463
Ashlar-Vellum
CVE-2025-7979
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25459
Ashlar-Vellum
CVE-2025-7978
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution Vulnerability
ZDI-CAN-25465
Ashlar-Vellum
CVE-2025-7980
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25476
Ashlar-Vellum
CVE-2025-7982
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25354
Ashlar-Vellum
CVE-2025-7977
7.8
2025-07-22
2025-07-22
(0Day) Ashlar-Vellum Cobalt LI File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26346
Phoenix Contact
CVE-2025-25271
3.1
2025-07-22
2025-07-22
(Pwn2Own) Phoenix Contact CHARX SEC-3150 OCPP Authentication Bypass Vulnerability
ZDI-CAN-26517
rocket.chat
CVE-2025-7974
3.7
2025-07-21
2025-07-21
rocket.chat Incorrect Authorization Information Disclosure Vulnerability
ZDI-CAN-27193
NVIDIA
CVE-2025-23266
8.8
2025-07-21
2025-07-21
(Pwn2Own) NVIDIA Container Toolkit Environment Variable Handling Local Privilege Escalation Vulnerability
ZDI-CAN-26062
Veeam
CVE-2025-24286
6.8
2025-07-21
2025-07-21
Veeam Backup Enterprise Manager JobManagmentService Improper Access Control Remote Code Execution Vulnerability
ZDI-CAN-23328
Phoenix Contact
CVE-2024-25995
7.5
2025-07-21
2025-07-21
(Pwn2Own) Phoenix Contact CHARX SEC-3100 Command Injection Remote Code Execution Vulnerability
ZDI-CAN-26332
Phoenix Contact
CVE-2025-25270
6.3
2025-07-21
2025-07-21
(Pwn2Own) Phoenix Contact CHARX SEC-3150 Origin Validation Error Firewall Bypass Vulnerability
ZDI-CAN-26331
Phoenix Contact
CVE-2025-25268
8.8
2025-07-21
2025-07-21
(Pwn2Own) Phoenix Contact CHARX SEC-3150 Configuration Service Missing Authentication Vulnerability
ZDI-CAN-26350
Phoenix Contact
CVE-2025-25269
8.8
2025-07-21
2025-07-21
(Pwn2Own) Phoenix Contact CHARX SEC-3150 DHCP Configuration Command Injection Remote Code Execution Vulnerability
ZDI-CAN-26901
Dassault Systèmes
CVE-2025-6973
7.8
2025-07-17
2025-07-17
Dassault Systèmes eDrawings Viewer JT File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26813
Dassault Systèmes
CVE-2025-0831
7.8
2025-07-17
2025-07-17
Dassault Systèmes eDrawings Viewer JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26895
Dassault Systèmes
CVE-2025-6974
7.8
2025-07-17
2025-07-17
Dassault Systèmes eDrawings Viewer JT File Parsing Uninitialized Variable Remote Code Execution Vulnerability
ZDI-CAN-26971
Dassault Systèmes
CVE-2025-6972
7.8
2025-07-17
2025-07-17
Dassault Systèmes eDrawings Viewer CATPRODUCT File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26975
Dassault Systèmes
CVE-2025-6971
7.8
2025-07-17
2025-07-17
Dassault Systèmes eDrawings Viewer CATPRODUCT File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-27117
Dassault Systèmes
CVE-2025-7042
7.8
2025-07-17
2025-07-17
Dassault Systèmes eDrawings Viewer IPT File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-25791
Hewlett Packard Enterprise
CVE-2025-37107
7.3
2025-07-17
2025-07-17
Hewlett Packard Enterprise AutoPass License Server Authentication Bypass Vulnerability
ZDI-CAN-25790
Hewlett Packard Enterprise
CVE-2025-37106
7.3
2025-07-17
2025-07-17
Hewlett Packard Enterprise AutoPass License Server Hard-coded Credentials Authentication Bypass Vulnerability
ZDI-CAN-25789
Hewlett Packard Enterprise
CVE-2025-37105
7.5
2025-07-17
2025-07-17
Hewlett Packard Enterprise AutoPass License Server Hard-coded Credentials Remote Code Execution Vulnerability
ZDI-CAN-27123
VMware
CVE-2025-41239
6.5
2025-07-17
2025-07-17
VMware ESXi VMCI Uninitialized Memory Information Disclosure Vulnerability
ZDI-CAN-27391
Linux
CVE-2025-38191
5.9
2025-07-17
2025-07-17
Linux Kernel ksmbd destroy_previous_session Null Pointer Dereference Denial-of-Service Vulnerability
ZDI-CAN-27121
Cisco
CVE-2025-20281
9.8
2025-07-17
2025-07-17
Cisco Identity Services Engine invokeStrongSwanShellScript Command Injection Remote Code Execution Vulnerability
ZDI-CAN-26483
Cisco
CVE-2025-20282
9.8
2025-07-17
2025-07-17
Cisco Identity Services Engine handleFilesUpload Unrestricted File Upload Remote Code Execution Vulnerability
ZDI-CAN-26481
Cisco
CVE-2025-20337
9.8
2025-07-17
2025-07-17
Cisco Identity Services Engine enableStrongSwanTunnel Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-26482
Cisco
CVE-2025-20284
7.2
2025-07-17
2025-07-17
Cisco Identity Services Engine handleStrongSwanTunnelStatus Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-26480
Cisco
CVE-2025-20285
7.2
2025-07-17
2025-07-17
Cisco Identity Services Engine IpAccessFilter Direct Request Authentication Bypass Vulnerability
ZDI-CAN-26479
Cisco
CVE-2025-20283
7.2
2025-07-17
2025-07-17
Cisco Identity Services Engine disableStrongSwanTunnel Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27152
Autodesk
CVE-2025-5037
7.8
2025-07-16
2025-07-16
Autodesk Revit RTE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-27154
Oracle
CVE-2025-53027
8.2
2025-07-15
2025-07-15
(Pwn2Own) Oracle VirtualBox OHCI USB Controller Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
ZDI-CAN-27122
Oracle
CVE-2025-53024
8.2
2025-07-15
2025-07-15
(Pwn2Own) Oracle VirtualBox VMSVGA Integer Overflow Local Privilege Escalation Vulnerability
ZDI-CAN-27163
Oracle
CVE-2025-53028
8.2
2025-07-15
2025-07-15
(Pwn2Own) Oracle VirtualBox VMSVGA Out-Of-Bounds Write Local Privilege Escalation Vulnerability
ZDI-CAN-26653
Oracle
CVE-2025-53026
6.0
2025-07-15
2025-07-15
Oracle VirtualBox LSILogic Uninitialized Memory Information Disclosure Vulnerability
ZDI-CAN-26654
Oracle
CVE-2025-53025
6.0
2025-07-15
2025-07-15
Oracle VirtualBox BusLogic Uninitialized Memory Information Disclosure Vulnerability
ZDI-CAN-26922
Autodesk
CVE-2025-5037
7.8
2025-07-15
2025-07-18
Autodesk Revit RFA File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-26917
Autodesk
CVE-2025-5040
7.8
2025-07-15
2025-07-15
Autodesk Revit RTE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-27098
Autodesk
CVE-2025-5037
7.8
2025-07-15
2025-07-15
Autodesk Revit RFA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26963
Autodesk
CVE-2025-5037
7.8
2025-07-15
2025-07-15
Autodesk Revit RFA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26925
Autodesk
CVE-2025-5037
7.8
2025-07-15
2025-07-15
Autodesk Revit RVT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26923
Autodesk
CVE-2025-5037
7.8
2025-07-15
2025-07-15
Autodesk Revit RVT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26161
Delta Electronics
CVE-2025-53415
7.8
2025-07-11
2025-07-11
Delta Electronics DTM Soft BIN File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-26240
G DATA
CVE-2025-2790
7.8
2025-07-11
2025-07-11
G DATA Total Security GDTunerSvc Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25342
Trend Micro
CVE-2025-53378
7.6
2025-07-11
2025-07-11
Trend Micro Worry-Free Business Security Missing Authentication Vulnerability
ZDI-CAN-26484
Trend Micro
CVE-2025-53503
7.8
2025-07-11
2025-07-11
Trend Micro Cleaner One Pro Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-26473
Luxion
CVE-2025-7222
7.8
2025-07-11
2025-07-11
Luxion KeyShot 3DM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25729
Trend Micro
CVE-2025-52837
7.8
2025-07-08
2025-07-08
Trend Micro Password Manager Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-26887
Trend Micro
CVE-2025-52521
7.8
2025-07-08
2025-07-08
Trend Micro Maximum Security Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-27167
Microsoft
CVE-2025-49727
8.8
2025-07-08
2025-07-08
Microsoft Windows win32kfull Out-Of-Bounds Write Local Privilege Escalation Vulnerability
ZDI-CAN-26791
Microsoft
CVE-2025-49732
7.8
2025-07-08
2025-07-08
Microsoft Windows win32kfull Out-Of-Bounds Write Local Privilege Escalation Vulnerability
ZDI-CAN-27246
Microsoft
CVE-2025-49740
7.0
2025-07-08
2025-07-08
Microsoft Windows Startup Folder SmartScreen Bypass Vulnerability
ZDI-CAN-27247
Microsoft
CVE-2025-49704
8.8
2025-07-08
2025-07-08
(Pwn2Own) Microsoft SharePoint DataSetSurrogateSelector Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-27162
Microsoft
CVE-2025-49706
6.5
2025-07-08
2025-07-08
(Pwn2Own) Microsoft SharePoint ToolPane Authentication Bypass Vulnerability
ZDI-CAN-26249
Microsoft
CVE-2025-47993
7.8
2025-07-08
2025-07-08
Microsoft PC Manager Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-26768
Microsoft
CVE-2025-49742
7.8
2025-07-08
2025-07-08
Microsoft Windows win32kfull Integer Overflow Local Privilege Escalation Vulnerability
ZDI-CAN-26358
Microsoft
CVE-2025-48820
7.8
2025-07-08
2025-07-08
Microsoft Windows AppX Deployment Service Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-26572
Siemens
CVE-2025-40738
8.8
2025-07-08
2025-07-08
Siemens SINEC NMS uploadFWBinary Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26571
Siemens
CVE-2025-40737
8.8
2025-07-08
2025-07-08
Siemens SINEC NMS unZipJarFilestoLocation Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26569
Siemens
CVE-2025-40736
9.8
2025-07-08
2025-07-08
Siemens SINEC NMS reqToChangePassword Authentication Bypass Vulnerability
ZDI-CAN-26376
IrfanView
CVE-2025-7299
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26434
IrfanView
CVE-2025-7325
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26430
IrfanView
CVE-2025-7324
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26428
IrfanView
CVE-2025-7323
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26423
IrfanView
CVE-2025-7322
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26421
IrfanView
CVE-2025-7321
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26418
IrfanView
CVE-2025-7320
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26413
IrfanView
CVE-2025-7319
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26412
IrfanView
CVE-2025-7318
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26411
IrfanView
CVE-2025-7317
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26410
IrfanView
CVE-2025-7316
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26408
IrfanView
CVE-2025-7315
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26400
IrfanView
CVE-2025-7314
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26399
IrfanView
CVE-2025-7313
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26398
IrfanView
CVE-2025-7312
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26395
IrfanView
CVE-2025-7311
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26391
IrfanView
CVE-2025-7309
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26393
IrfanView
CVE-2025-7310
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26389
IrfanView
CVE-2025-7308
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26388
IrfanView
CVE-2025-7307
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26387
IrfanView
CVE-2025-7306
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26386
IrfanView
CVE-2025-7305
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26385
IrfanView
CVE-2025-7304
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26384
IrfanView
CVE-2025-7303
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26381
IrfanView
CVE-2025-7302
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26380
IrfanView
CVE-2025-7301
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26377
IrfanView
CVE-2025-7300
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26243
IrfanView
CVE-2025-7296
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26244
IrfanView
CVE-2025-7297
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26242
IrfanView
CVE-2025-7295
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26230
IrfanView
CVE-2025-7294
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26246
IrfanView
CVE-2025-7298
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26229
IrfanView
CVE-2025-7293
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26228
IrfanView
CVE-2025-7292
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26227
IrfanView
CVE-2025-7291
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26226
IrfanView
CVE-2025-7290
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26221
IrfanView
CVE-2025-7285
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26220
IrfanView
CVE-2025-7284
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26225
IrfanView
CVE-2025-7289
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26224
IrfanView
CVE-2025-7288
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26223
IrfanView
CVE-2025-7287
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26222
IrfanView
CVE-2025-7286
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26219
IrfanView
CVE-2025-7283
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26216
IrfanView
CVE-2025-7282
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26215
IrfanView
CVE-2025-7281
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26214
IrfanView
CVE-2025-7280
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26213
IrfanView
CVE-2025-7279
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26211
IrfanView
CVE-2025-7278
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26203
IrfanView
CVE-2025-7274
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26209
IrfanView
CVE-2025-7277
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26208
IrfanView
CVE-2025-7276
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26204
IrfanView
CVE-2025-7275
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26198
IrfanView
CVE-2025-7272
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26193
IrfanView
CVE-2025-7271
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26202
IrfanView
CVE-2025-7273
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26189
IrfanView
CVE-2025-7270
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26188
IrfanView
CVE-2025-7269
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26182
IrfanView
CVE-2025-7268
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26179
IrfanView
CVE-2025-7267
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26174
IrfanView
CVE-2025-7266
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26173
IrfanView
CVE-2025-7265
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26171
IrfanView
CVE-2025-7264
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26170
IrfanView
CVE-2025-7263
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26132
IrfanView
CVE-2025-7262
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26130
IrfanView
CVE-2025-7261
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26129
IrfanView
CVE-2025-7260
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26127
IrfanView
CVE-2025-7258
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26085
IrfanView
CVE-2025-7239
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26084
IrfanView
CVE-2025-7238
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26083
IrfanView
CVE-2025-7237
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26126
IrfanView
CVE-2025-7257
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26119
IrfanView
CVE-2025-7256
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26098
IrfanView
CVE-2025-7248
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26118
IrfanView
CVE-2025-7255
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26096
IrfanView
CVE-2025-7247
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26095
IrfanView
CVE-2025-7246
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26093
IrfanView
CVE-2025-7244
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26113
IrfanView
CVE-2025-7254
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26074
IrfanView
CVE-2025-7234
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin CGM File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26072
IrfanView
CVE-2025-7233
3.3
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26112
IrfanView
CVE-2025-7253
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26100
IrfanView
CVE-2025-7249
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26091
IrfanView
CVE-2025-7243
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26088
IrfanView
CVE-2025-7242
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26087
IrfanView
CVE-2025-7241
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26086
IrfanView
CVE-2025-7240
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26080
IrfanView
CVE-2025-7236
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26107
IrfanView
CVE-2025-7250
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26075
IrfanView
CVE-2025-7235
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26109
IrfanView
CVE-2025-7252
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26108
IrfanView
CVE-2025-7251
7.8
2025-07-08
2025-07-08
IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25724
INVT
CVE-2025-7231
7.8
2025-07-07
2025-07-07
(0Day) INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25723
INVT
CVE-2025-7230
7.8
2025-07-07
2025-07-07
(0Day) INVT VT-Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-25722
INVT
CVE-2025-7229
7.8
2025-07-07
2025-07-07
(0Day) INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25571
INVT
CVE-2025-7228
7.8
2025-07-07
2025-07-07
(0Day) INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25550
INVT
CVE-2025-7227
7.8
2025-07-07
2025-07-07
(0Day) INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25048
INVT
CVE-2025-7226
7.8
2025-07-07
2025-07-07
(0Day) INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25047
INVT
CVE-2025-7225
7.8
2025-07-07
2025-07-07
(0Day) INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25045
INVT
CVE-2025-7224
7.8
2025-07-07
2025-07-07
(0Day) INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25044
INVT
CVE-2025-7223
7.8
2025-07-07
2025-07-07
(0Day) INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25039
Parallels
CVE-2025-6812
7.3
2025-07-07
2025-07-07
Parallels Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-26720
Delta Electronics
CVE-2025-47726
7.8
2025-07-03
2025-07-03
Delta Electronics CNCSoft Screen Editor DPB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26842
Delta Electronics
CVE-2025-47727
7.8
2025-07-03
2025-07-03
Delta Electronics CNCSoft Screen Editor DPB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26719
Delta Electronics
CVE-2025-47725
7.8
2025-07-03
2025-07-03
Delta Electronics CNCSoft Screen Editor DPB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26718
Delta Electronics
CVE-2025-47724
7.8
2025-07-03
2025-07-03
Delta Electronics CNCSoft Screen Editor DPB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26061
GFI
CVE-2019-18935, CVE-2017-11317, CVE-2014-2217
9.8
2025-07-03
2025-07-03
GFI Archiver Telerik Web UI Remote Code Execution Vulnerability
ZDI-CAN-27381
GStreamer
CVE-2025-6663
7.8
2025-07-03
2025-07-03
GStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25218
Marvell
CVE-2025-6809
9.8
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole readNICParametersFromFile Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25217
Marvell
CVE-2025-6808
9.8
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole readObjectFromConfigFile Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-24922
Marvell
CVE-2025-6802
9.8
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability
ZDI-CAN-24980
Marvell
CVE-2025-6807
5.3
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole getDriverTmpPath Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-24979
Marvell
CVE-2025-6806
8.2
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole decryptFile Directory Traversal Arbitrary File Write Vulnerability
ZDI-CAN-24925
Marvell
CVE-2025-6805
8.2
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion Vulnerability
ZDI-CAN-24921
Marvell
CVE-2025-6801
8.2
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole saveNICParamsToFile Directory Traversal Arbitrary File Write Vulnerability
ZDI-CAN-24920
Marvell
CVE-2025-6800
7.5
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole restoreESwitchConfig Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-24919
Marvell
CVE-2025-6799
7.5
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-24918
Marvell
CVE-2025-6798
8.2
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole deleteAppFile Directory Traversal Arbitrary File Deletion Vulnerability
ZDI-CAN-24917
Marvell
CVE-2025-6797
7.5
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-24914
Marvell
CVE-2025-6795
5.3
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole getFileUploadSize Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-24913
Marvell
CVE-2025-6794
9.8
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole saveAsText Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-24924
Marvell
CVE-2025-6804
7.5
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole compressFirmwareDumpFiles Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-24923
Marvell
CVE-2025-6803
7.5
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole compressDriverFiles Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-24916
Marvell
CVE-2025-6796
7.5
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-24912
Marvell
CVE-2025-6793
9.4
2025-06-27
2025-06-27
(0Day) Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability
ZDI-CAN-25397
Mescius
CVE-2025-6811
9.8
2025-12-19
2026-05-19
(0Day) Mescius ActiveReports.NET TypeResolutionService Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25246
Mescius
CVE-2025-6810
9.8
2025-12-19
2026-05-19
(0Day) Mescius ActiveReports.NET ReadValue Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-26985
PDF-XChange
CVE-2025-6662
3.3
2025-06-25
2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26823
PDF-XChange
CVE-2025-6661
7.8
2025-06-25
2025-06-25
PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26734
PDF-XChange
CVE-2025-6659
7.8
2025-06-25
2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26733
PDF-XChange
CVE-2025-6658
3.3
2025-06-25
2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26763
PDF-XChange
CVE-2025-6660
7.8
2025-06-25
2025-06-25
PDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26732
PDF-XChange
CVE-2025-6657
3.3
2025-06-25
2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26731
PDF-XChange
CVE-2025-6656
3.3
2025-06-25
2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26730
PDF-XChange
CVE-2025-6655
3.3
2025-06-25
2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26729
PDF-XChange
CVE-2025-6654
7.8
2025-06-25
2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26726
PDF-XChange
CVE-2025-6653
3.3
2025-06-25
2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26724
PDF-XChange
CVE-2025-6652
3.3
2025-06-25
2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26713
PDF-XChange
CVE-2025-6651
7.8
2025-06-25
2025-06-25
PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26712
PDF-XChange
CVE-2025-6650
3.3
2025-06-25
2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26709
PDF-XChange
CVE-2025-6649
3.3
2025-06-25
2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26671
PDF-XChange
CVE-2025-6648
3.3
2025-06-25
2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26644
PDF-XChange
CVE-2025-6647
7.8
2025-06-25
2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26643
PDF-XChange
CVE-2025-6646
3.3
2025-06-25
2025-06-25
PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability
ZDI-CAN-26642
PDF-XChange
CVE-2025-6645
7.8
2025-06-25
2025-06-25
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26536
PDF-XChange
CVE-2025-6644
7.8
2025-06-25
2025-06-25
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26532
PDF-XChange
CVE-2025-6643
3.3
2025-06-25
2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26530
PDF-XChange
CVE-2025-6642
7.8
2025-06-25
2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26528
PDF-XChange
CVE-2025-6641
3.3
2025-06-25
2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26527
PDF-XChange
CVE-2025-6640
7.8
2025-06-25
2025-06-25
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26415
Mikrotik
CVE-2025-6443
7.2
2025-06-25
2025-06-25
Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability
ZDI-CAN-23719
Microsoft
 
9.8
2025-06-25
2025-06-25
Microsoft WinJS winjsdevelop Uncontrolled Search Path Element Remote Code Execution Vulnerability
ZDI-CAN-24823
Microsoft
 
3.7
2025-06-25
2025-06-25
Microsoft Azure Machine Learning Environments Denial-of-Service Vulnerability
ZDI-CAN-24622
Microsoft
 
5.3
2025-06-25
2025-06-25
Microsoft Azure App Services Information Disclosure Vulnerability
ZDI-CAN-26241
PaperCut
CVE-2024-8404
7.8
2025-06-25
2025-06-25
PaperCut NG web-print-hot-folder Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-26660
TeamViewer
CVE-2025-36537
7.8
2025-06-25
2025-06-25
TeamViewer Incorrect Permission Assignment Local Privilege Escalation Vulnerability
ZDI-CAN-26498
Apple
CVE-2025-31196
4.3
2025-06-24
2025-06-24
Apple macOS CoreGraphics PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26010
Clam AntiVirus
CVE-2025-20234
6.1
2025-06-23
2025-06-23
Clam AntiVirus UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25837
ServiceStack
CVE-2025-6445
8.1
2025-06-23
2025-06-23
ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-25834
ServiceStack
CVE-2025-6444
5.9
2025-06-23
2025-06-23
ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability
ZDI-CAN-21876
Ruby
CVE-2025-6442
6.5
2025-06-23
2025-06-23
Ruby WEBrick read_header HTTP Request Smuggling Vulnerability
ZDI-CAN-26018
Fuji Electric
CVE-2025-41388
7.8
2025-06-19
2025-06-19
Fuji Electric Smart Editor TL5 File Parsing Stack-Based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26031
Fuji Electric
CVE-2025-41413
7.8
2025-06-19
2025-06-19
Fuji Electric Smart Editor X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26167
Delta Electronics
CVE-2025-47728
7.8
2025-06-19
2025-06-19
Delta Electronics CNCSoft-G2 DPAX File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-27104
Allegra
CVE-2025-6216
9.8
2025-06-19
2025-06-19
Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability
ZDI-CAN-27198
RARLAB
CVE-2025-6218
7.8
2025-06-19
2025-06-19
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-24161
PEAK-System
CVE-2025-6217
3.8
2025-06-18
2025-06-18
PEAK-System Driver PCANFD_ADD_FILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability
ZDI-CAN-25346
SolarWinds
CVE-2024-28988
9.8
2025-06-17
2025-06-17
SolarWinds Web Help Desk AjaxProxy Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25087
SolarWinds
CVE-2024-45711
7.5
2025-06-17
2025-06-17
SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26024
Fuji Electric
CVE-2025-41388
7.8
2025-06-17
2025-06-17
Fuji Electric Smart Editor X1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26022
Fuji Electric
CVE-2025-41388
7.8
2025-06-17
2025-06-17
Fuji Electric Smart Editor X1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26020
Fuji Electric
CVE-2025-41388
7.8
2025-06-17
2025-06-17
Fuji Electric Smart Editor V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25942
Fuji Electric
CVE-2025-41388
7.8
2025-06-17
2025-06-17
Fuji Electric Smart Editor TL5 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26028
Fuji Electric
CVE-2025-41413
7.8
2025-06-17
2025-06-17
Fuji Electric Smart Editor V10 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26032
Fuji Electric
CVE-2025-32412
7.8
2025-06-17
2025-06-17
Fuji Electric Smart Editor TL5 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26026
Fuji Electric
CVE-2025-41388
7.8
2025-06-17
2025-06-17
Fuji Electric Smart Editor V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25876
Trend Micro
CVE-2025-49384
7.8
2025-06-17
2025-06-17
Trend Micro Internet Security Platinum Host Service Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25049
Delta Electronics
CVE-2025-3495
9.8
2025-06-17
2025-06-17
Delta Electronics COMMGR Insufficient Randomization Authentication Bypass Vulnerability
ZDI-CAN-25916
Siemens
CVE-2025-31353
6.5
2025-06-16
2025-06-16
Siemens TeleControl Server Basic UpdateOpcSettings SQL Injection Information Disclosure Vulnerability
ZDI-CAN-25915
Siemens
CVE-2025-31352
6.5
2025-06-16
2025-06-16
Siemens TeleControl Server Basic UpdateGateways SQL Injection Information Disclosure Vulnerability
ZDI-CAN-25917
Siemens
CVE-2025-31351
6.5
2025-06-16
2025-06-16
Siemens TeleControl Server Basic CreateProject SQL Injection Information Disclosure Vulnerability
ZDI-CAN-25918
Siemens
CVE-2025-31350
6.5
2025-06-16
2025-06-16
Siemens TeleControl Server Basic UpdateBufferingSettings SQL Injection Information Disclosure Vulnerability
ZDI-CAN-25919
Siemens
CVE-2025-31349
6.5
2025-06-16
2025-06-16
Siemens TeleControl Server Basic UpdateSmtpSettings SQL Injection Information Disclosure Vulnerability
ZDI-CAN-25920
Siemens
CVE-2025-31343
6.5
2025-06-16
2025-06-16
Siemens TeleControl Server Basic UpdateTcmSettings SQL Injection Information Disclosure Vulnerability
ZDI-CAN-25921
Siemens
CVE-2025-30032
6.5
2025-06-16
2025-06-16
Siemens TeleControl Server Basic UpdateDatabaseSettings SQL Injection Information Disclosure Vulnerability
ZDI-CAN-25922
Siemens
CVE-2025-30031
6.5
2025-06-16
2025-06-16
Siemens TeleControl Server Basic UpdateUsers SQL Injection Information Disclosure Vulnerability
ZDI-CAN-25924
Siemens
CVE-2025-30030
6.5
2025-06-16
2025-06-16
Siemens TeleControl Server Basic ImportDatabase SQL Injection Information Disclosure Vulnerability
ZDI-CAN-25910
Siemens
CVE-2025-30003
6.5
2025-06-16
2025-06-16
Siemens TeleControl Server Basic UpdateProjectConnections SQL Injection Information Disclosure Vulnerability
ZDI-CAN-25909
Siemens
CVE-2025-30002
6.5
2025-06-16
2025-06-16
Siemens TeleControl Server Basic UpdateConnectionVariables SQL Injection Information Disclosure Vulnerability
ZDI-CAN-25923
Siemens
CVE-2025-29905
8.8
2025-06-16
2025-06-16
Siemens TeleControl Server Basic RestoreFromBackup SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-25913
Siemens
CVE-2025-27540
9.8
2025-06-16
2025-06-16
Siemens TeleControl Server Basic Authenticate SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-25914
Siemens
CVE-2025-27539
9.8
2025-06-16
2025-06-16
Siemens TeleControl Server Basic VerifyUser SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-25912
Siemens
CVE-2025-32475
6.5
2025-06-16
2025-06-16
Siemens TeleControl Server Basic UpdateProject SQL Injection Information Disclosure Vulnerability
ZDI-CAN-25911
Siemens
CVE-2025-27495
9.8
2025-06-16
2025-06-16
Siemens TeleControl Server Basic CreateTrace SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-25877
Trend Micro
CVE-2025-49385
7.8
2025-06-13
2025-06-13
Trend Micro Maximum Security Platinum Host Service Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25589
Ubiquiti Networks
CVE-2025-23117
6.8
2025-06-11
2025-06-11
(Pwn2Own) Ubiquiti Networks AI Bullet Insufficient Firmware Update Validation Remote Code Execution Vulnerability
ZDI-CAN-25588
Ubiquiti Networks
CVE-2025-23116
9.6
2025-06-11
2025-06-11
(Pwn2Own) Ubiquiti Networks UniFi Console Missing Authentication for Critical Function Authentication Bypass Vulnerability
ZDI-CAN-25603
Ubiquiti Networks
CVE-2025-23119
7.5
2025-06-11
2025-06-11
(Pwn2Own) Ubiquiti Networks AI Bullet Improper Neutralization of Escape Sequences Authentication Bypass Vulnerability
ZDI-CAN-25666
Ubiquiti Networks
CVE-2025-23118
7.5
2025-06-11
2025-06-11
(Pwn2Own) Ubiquiti Networks AI Bullet Improper Certificate Validation Authentication Bypass Vulnerability
ZDI-CAN-25526
Trend Micro
CVE-2025-49218
8.8
2025-06-11
2025-06-11
Trend Micro Endpoint Encryption ProcessWhereClause SQL Injection Privilege Escalation Vulnerability
ZDI-CAN-25505
Trend Micro
CVE-2025-49217
8.1
2025-06-11
2025-06-11
Trend Micro Endpoint Encryption ValidateToken Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25519
Trend Micro
CVE-2025-49216
9.8
2025-06-11
2025-06-11
Trend Micro Endpoint Encryption DbAppDomain Authentication Bypass Vulnerability
ZDI-CAN-25527
Trend Micro
CVE-2025-49215
8.8
2025-06-11
2025-06-11
Trend Micro Endpoint Encryption GetGroupFilteredUsers SQL Injection Privilege Escalation Vulnerability
ZDI-CAN-25518
Trend Micro
CVE-2025-49212
8.8
2025-06-11
2025-06-11
Trend Micro Endpoint Encryption DeserializeFromBase64String Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25506
Trend Micro
CVE-2025-49213
9.8
2025-06-11
2025-06-11
Trend Micro Endpoint Encryption PolicyServerWindowsService Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25507
Trend Micro
CVE-2025-49212
9.8
2025-06-11
2025-06-11
Trend Micro Endpoint Encryption PolicyValueTableSerializationBinder Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25528
Trend Micro
CVE-2025-49211
8.8
2025-06-11
2025-06-11
Trend Micro Endpoint Encryption BuildEnterpriseSearchString SQL Injection Privilege Escalation Vulnerability
ZDI-CAN-25495
Trend Micro
CVE-2025-49220
9.8
2025-06-11
2025-06-11
Trend Micro Apex Central ConvertFromJson Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25286
Trend Micro
CVE-2025-49219
9.8
2025-06-11
2025-06-11
Trend Micro Apex Central GetReportDetailView Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25771
Trend Micro
CVE-2025-49158
6.7
2025-06-11
2025-06-11
Trend Micro Apex One Security Agent ntrmv Uncontrolled Search Path Local Privilege Escalation Vulnerability
ZDI-CAN-25273
Trend Micro
CVE-2025-49157
7.8
2025-06-11
2025-06-11
Trend Micro Apex One Damage Cleanup Engine Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-24973
Trend Micro
CVE-2025-49156
7.0
2025-06-11
2025-06-11
Trend Micro Apex One Virus Scan Engine Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-24571
Trend Micro
CVE-2025-49155
8.8
2025-06-11
2025-06-11
Trend Micro Apex One Data Loss Prevention Uncontrolled Search Path Remote Code Execution Vulnerability
ZDI-CAN-25574
Trend Micro
CVE-2025-48443
6.7
2025-06-11
2025-06-11
Trend Micro Password Manager Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-23056
Trend Micro
CVE-2025-49487
6.8
2025-06-11
2025-06-11
Trend Micro Worry-Free Business Security Uncontrolled Search Path Element Arbitrary Code Execution Vulnerability
ZDI-CAN-26586
Microsoft
CVE-2025-47959
7.8
2025-06-10
2025-06-11
Microsoft Visual Studio initializeCommand Insufficient UI Warning Remote Code Execution Vulnerability
ZDI-CAN-26285
Sony
CVE-2025-5820
6.3
2025-06-11
2025-06-11
(Pwn2Own) Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability
ZDI-CAN-26284
Sony
CVE-2025-5476
6.3
2025-06-11
2025-06-11
(Pwn2Own) Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability
ZDI-CAN-26290
Sony
CVE-2025-5479
7.5
2025-06-11
2025-06-11
(Pwn2Own) Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26288
Sony
CVE-2025-5478
8.8
2025-06-11
2025-06-11
(Pwn2Own) Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26286
Sony
CVE-2025-5477
7.5
2025-06-11
2025-06-11
(Pwn2Own) Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26283
Sony
CVE-2025-5475
7.5
2025-06-11
2025-06-11
(Pwn2Own) Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26079
Pioneer
CVE-2025-5832
6.8
2025-06-11
2025-08-28
Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability
ZDI-CAN-26078
Pioneer
CVE-2025-5834
4.4
2025-06-11
2025-08-28
Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability
ZDI-CAN-26077
Pioneer
CVE-2025-5833
4.6
2025-06-11
2025-08-28
Pioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity Vulnerability
ZDI-CAN-26327
Autel
CVE-2025-5830
8.8
2025-06-11
2025-06-11
(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26330
Autel
CVE-2025-5829
6.8
2025-06-11
2025-06-11
(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26328
Autel
CVE-2025-5828
6.8
2025-06-11
2025-06-11
(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26369
Autel
CVE-2025-5827
8.8
2025-06-11
2025-06-11
(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26368
Autel
CVE-2025-5826
6.3
2025-06-11
2025-06-11
(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability
ZDI-CAN-26354
Autel
CVE-2025-5825
7.5
2025-06-11
2025-06-11
(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability
ZDI-CAN-26353
Autel
CVE-2025-5824
5.0
2025-06-11
2025-06-11
(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability
ZDI-CAN-26352
Autel
 
7.5
2025-06-11
2025-06-11
(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability
ZDI-CAN-26351
Autel
CVE-2025-5823
4.9
2025-06-11
2025-06-11
(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability
ZDI-CAN-26325
Autel
CVE-2025-5822
7.1
2025-06-11
2025-06-11
(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability
ZDI-CAN-25932
Jupyter
CVE-2025-30167
7.3
2025-06-10
2025-06-10
JupyterLab Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-26593
Adobe
CVE-2025-43574
7.8
2025-06-10
2025-06-10
Adobe Acrobat Reader DC Collab Object Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26777
Adobe
CVE-2025-47112
3.3
2025-06-10
2025-06-10
Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26590
Adobe
CVE-2025-43573
7.8
2025-06-10
2025-06-10
Adobe Acrobat Reader DC Collab Object Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26342
Adobe
CVE-2025-43575
7.8
2025-06-10
2025-06-10
Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26776
Microsoft
CVE-2025-30394
8.6
2025-06-10
2025-06-10
Microsoft Windows Remote Desktop Gateway Service Null Pointer Dereference Denial-of-Service Vulnerability
ZDI-CAN-26487
Microsoft
CVE-2025-32714
7.8
2025-06-10
2025-06-10
Microsoft Windows Installer Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-26710
Microsoft
CVE-2025-33075
7.8
2025-06-10
2025-06-10
Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-26852
Autodesk
CVE-2025-5036
7.8
2025-06-06
2025-06-06
Autodesk Revit RFA File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26292
WOLFBOX
CVE-2025-5751
4.6
2025-06-06
2025-06-06
(0Day) (Pwn2Own) WOLFBOX Level 2 EV Charger Management Card Hard-coded Credentials Authentication Bypass Vulnerability
ZDI-CAN-26294
WOLFBOX
CVE-2025-5750
8.8
2025-06-06
2025-06-06
(0Day) (Pwn2Own) WOLFBOX Level 2 EV Charger tuya_svc_devos_activate_result_parse Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26295
WOLFBOX
CVE-2025-5749
6.3
2025-06-06
2025-06-06
(0Day) (Pwn2Own) WOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass Vulnerability
ZDI-CAN-26349
WOLFBOX
CVE-2025-5748
8.0
2025-06-06
2025-06-06
(0Day) (Pwn2Own) WOLFBOX Level 2 EV Charger LAN OTA Exposed Dangerous Method Remote Code Execution Vulnerability
ZDI-CAN-26501
WOLFBOX
CVE-2025-5747
8.0
2025-06-06
2025-06-06
(0Day) (Pwn2Own) WOLFBOX Level 2 EV Charger MCU Command Parsing Misinterpretation of Input Remote Code Execution Vulnerability
ZDI-CAN-25954
Hewlett Packard Enterprise
CVE-2025-37099
9.8
2025-06-05
2025-06-05
Hewlett Packard Enterprise Insight Remote Support processAttachmentDataStream Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26168
Sante
CVE-2025-5481
7.8
2025-06-03
2025-06-03
Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26767
Action1
CVE-2025-5480
7.8
2025-06-03
2025-06-06
Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-26962
2BrightSparks
CVE-2025-5474
7.3
2025-06-03
2025-06-06
2BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-26752
GIMP
CVE-2025-5473
7.8
2025-06-03
2025-06-06
GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26279
SolarWinds
CVE-2025-26396
7.8
2025-06-02
2025-06-02
SolarWinds DameWare Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability
ZDI-CAN-25316
Hewlett Packard Enterprise
CVE-2025-37096
7.2
2025-06-02
2025-06-02
Hewlett Packard Enterprise StoreOnce VSA getServerCertificate Command Injection Remote Code Execution Vulnerability
ZDI-CAN-25315
Hewlett Packard Enterprise
CVE-2025-37095
4.9
2025-06-02
2025-06-02
Hewlett Packard Enterprise StoreOnce VSA getServerPayload Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-25314
Hewlett Packard Enterprise
CVE-2025-37094
5.5
2025-06-02
2025-06-02
Hewlett Packard Enterprise StoreOnce VSA deletePackages Directory Traversal Arbitrary File Deletion Vulnerability
ZDI-CAN-24985
Hewlett Packard Enterprise
CVE-2025-37093
9.8
2025-06-02
2025-06-02
Hewlett Packard Enterprise StoreOnce VSA Authentication Bypass Vulnerability
ZDI-CAN-24984
Hewlett Packard Enterprise
CVE-2025-37092
7.2
2025-06-02
2025-06-02
Hewlett Packard Enterprise StoreOnce VSA queryHardwareReportLocally Command Injection Remote Code Execution Vulnerability
ZDI-CAN-24983
Hewlett Packard Enterprise
CVE-2025-37091
7.2
2025-06-02
2025-06-02
Hewlett Packard Enterprise StoreOnce VSA doExecute Command Injection Remote Code Execution Vulnerability
ZDI-CAN-24982
Hewlett Packard Enterprise
CVE-2025-37090
5.3
2025-06-02
2025-06-02
Hewlett Packard Enterprise StoreOnce VSA determineInclusionAndExtract Server-Side Request Forgery Vulnerability
ZDI-CAN-24981
Hewlett Packard Enterprise
CVE-2025-37089
7.2
2025-06-02
2025-06-02
Hewlett Packard Enterprise StoreOnce VSA setLocateBeaconOnHardware Command Injection Remote Code Execution Vulnerability
ZDI-CAN-25865
Sonos
CVE-2025-1051
8.8
2025-05-29
2025-05-29
(Pwn2Own) Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26505
Linux
CVE-2025-22037
6.8
2025-05-29
2025-06-03
Linux Kernel ksmbd Session Setup Null Pointer Dereference Denial-of-Service Vulnerability
ZDI-CAN-25779
Canon
CVE-2025-2146
8.8
2025-05-28
2025-05-28
(Pwn2Own) Canon imageCLASS MF656Cdw sfpcmAuthenticateSecAdmin Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25684
Adobe
CVE-2025-30310
7.8
2025-05-21
2025-05-21
Adobe Dreamweaver V8 Remote Code Execution Vulnerability
ZDI-CAN-26711
Linux
 
6.7
2025-05-21
2025-05-21
Linux Kernel OpenvSwitch Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-23513
Docker
CVE-2024-5652
7.8
2025-05-21
2025-05-21
Docker Desktop Helper Service Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-24156
Apple
CVE-2025-31219
8.8
2025-05-21
2025-05-21
Apple XNU kernel vm_map Race Condition Local Privilege Escalation Vulnerability
ZDI-CAN-26603
Apple
CVE-2025-31251
8.8
2025-05-21
2025-05-21
Apple macOS JPEG Image Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26148
Apple
CVE-2025-24222
4.3
2025-05-21
2025-05-21
Apple Safari SandboxBroker ZIP File Processing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26650
Apple
CVE-2025-31239
7.8
2025-05-21
2025-05-21
Apple macOS CoreMedia Framework Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26150
Apple
CVE-2025-31238
8.8
2025-05-21
2025-05-21
Apple Safari Scrollbar Animation Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26714
Apple
CVE-2025-31209
3.3
2025-05-21
2025-05-21
Apple macOS PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26783
Apple
CVE-2025-31208
3.3
2025-05-21
2025-05-21
Apple macOS acv2 Codec Converter Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26826
Apple
CVE-2025-31233
8.8
2025-05-21
2025-05-21
Apple macOS MP4 File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-24936
Trend Micro
CVE-2025-47867
7.5
2025-05-21
2025-05-21
Trend Micro Apex Central widget getBlock Local File Inclusion Remote Code Execution Vulnerability
ZDI-CAN-25331
Trend Micro
CVE-2025-47866
4.3
2025-05-21
2025-05-21
Trend Micro Apex Central modTMCM Unrestricted File Upload Vulnerability
ZDI-CAN-24938
Trend Micro
CVE-2025-47865
7.5
2025-05-21
2025-05-21
Trend Micro Apex Central widget getObjWGFServiceApiByApiName Local File Inclusion Remote Code Execution Vulnerability
ZDI-CAN-26137
Microsoft
CVE-2025-29975
7.8
2025-05-21
2025-05-21
Microsoft PC Manager MSPCManagerService Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-26153
Microsoft
CVE-2025-29837
6.1
2025-05-21
2025-05-21
Microsoft Windows Installer Service Link Following Information Disclosure Vulnerability
ZDI-CAN-27202
Mozilla
CVE-2025-4918
8.8
2025-05-21
2025-06-12
(Pwn2Own) Mozilla Firefox SpiderMonkey Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-27172
Mozilla
CVE-2025-4919
8.8
2025-05-21
2025-05-21
(Pwn2Own) Mozilla Firefox IonMonkey JIT Compiler Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25727
Rockwell Automation
CVE-2025-3617
7.8
2025-05-13
2025-05-21
Rockwell Automation ThinManager ThinServer Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25872
Rockwell Automation
CVE-2025-3618
7.5
2025-05-13
2025-05-13
Rockwell Automation ThinManager ThinServer Null Pointer Dereference Denial-of-Service Vulnerability
ZDI-CAN-25181
Fortinet
CVE-2025-25254
7.2
2025-05-13
2025-05-13
Fortinet FortiWeb cgi_httpcontentrouting_post Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-25977
JetBrains
CVE-2025-46618
5.4
2025-05-13
2025-05-13
JetBrains TeamCity Diagnostics Data Directory Cross-Site Scripting Vulnerability
ZDI-CAN-26017
Dassault Systèmes
CVE-2025-1883
7.8
2025-05-13
2025-05-13
Dassault Systèmes eDrawings Viewer OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26029
Dassault Systèmes
CVE-2025-1884
7.8
2025-05-13
2025-05-13
Dassault Systèmes eDrawings Viewer SLDPRT File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-22063
MATE Desktop
 
7.8
2025-05-02
2025-05-02
MATE Desktop Atril Document Viewer EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-22225
MATE Desktop
 
7.8
2025-05-02
2025-05-02
MATE Desktop Atril Document Viewer CBT File Parsing Argument Injection Remote Code Execution Vulnerability
ZDI-CAN-26502
Webmin
CVE-2025-2774
8.8
2025-05-01
2025-05-01
Webmin CRLF Injection Privilege Escalation Vulnerability
ZDI-CAN-25017
Cisco
CVE-2025-20175
8.8
2025-05-01
2025-05-01
Cisco IOS XE SNMP SET cewProxyClass Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25024
Cisco
CVE-2025-20170
6.5
2025-05-01
2025-05-01
Cisco IOS XE SNMP GET-NEXT ciscoFlashChipCode Unexpected Sign Extension Denial-of-Service Vulnerability
ZDI-CAN-25022
Cisco
CVE-2025-20173
8.8
2025-05-01
2025-05-01
Cisco IOS XE SNMP GET-NEXT cContextMappingBridgeDomainIdentifier Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25021
Cisco
CVE-2025-20176
8.8
2025-05-01
2025-05-01
Cisco IOS XE SNMP GET-NEXT ctspIpSgtValue Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25020
Cisco
CVE-2025-20175
8.8
2025-05-01
2025-05-01
Cisco IOS XE SNMP SET cewEventTime Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25019
Cisco
CVE-2025-20174
7.5
2025-05-01
2025-05-01
Cisco IOS XE SNMP GET-NEXT cilmCurrentImageLevel Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25018
Cisco
CVE-2025-20171
6.5
2025-05-01
2025-05-01
Cisco IOS XE SNMP GET-NEXT callHomeUserDefCmdName Unexpected Sign Extension Denial-of-Service Vulnerability
ZDI-CAN-25575
Cisco
CVE-2025-20172
4.3
2025-05-01
2025-05-01
Cisco IOS XE SNMP OID Handling Out-Of-Bounds Read Denial-of-Service Vulnerability
ZDI-CAN-25023
Cisco
CVE-2025-20172
4.3
2025-05-01
2025-05-01
Cisco IOS XE SNMP OID Handling Out-Of-Bounds Read Denial-of-Service Vulnerability
ZDI-CAN-25576
Cisco
CVE-2025-20172
4.3
2025-05-01
2025-05-01
Cisco IOS XE SNMP OID Handling Out-Of-Bounds Read Denial-of-Service Vulnerability
ZDI-CAN-25577
Cisco
CVE-2025-20172
4.3
2025-05-01
2025-05-01
Cisco IOS XE SNMP OID Handling Out-Of-Bounds Read Denial-of-Service Vulnerability
ZDI-CAN-25030
Cisco
CVE-2025-20169
6.5
2025-05-01
2025-05-01
Cisco IOS XE SNMP GET-NEXT ciscoFlashFileSize Unexpected Sign Extension Denial-of-Service Vulnerability
ZDI-CAN-25663
Synology
CVE-2024-10445
5.3
2025-05-01
2025-05-01
(Pwn2Own) Synology BeeStation BST150-4T Unnecessary Privileges Remote Code Execution Vulnerability
ZDI-CAN-25448
GStreamer
CVE-2025-2759
7.0
2025-04-30
2025-04-30
GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability
ZDI-CAN-26596
GStreamer
CVE-2025-3887
8.8
2025-04-30
2025-07-03
GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-22235
Apache
CVE-2025-29953
8.1
2025-04-30
2025-04-30
Apache ActiveMQ NMS Body Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-23800
Tesla
CVE-2025-2082
7.5
2025-04-30
2025-04-30
(Pwn2Own) Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-23201
Tesla
CVE-2024-6032
7.8
2025-04-30
2025-04-30
(Pwn2Own) Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability
ZDI-CAN-23200
Tesla
CVE-2024-6030
7.0
2025-04-30
2025-04-30
(Pwn2Own) Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability
ZDI-CAN-23199
Tesla
CVE-2024-13943
7.8
2025-04-30
2025-04-30
(Pwn2Own) Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability
ZDI-CAN-23198
Tesla
CVE-2024-6031
7.8
2025-04-30
2025-04-30
(Pwn2Own) Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability
ZDI-CAN-23197
Tesla
CVE-2024-6029
5.0
2025-04-30
2025-04-30
(Pwn2Own) Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability
ZDI-CAN-23843
Adobe
CVE-2024-34098
7.8
2025-04-30
2025-04-30
(Pwn2Own) Adobe Acrobat Reader DC Collab Command Injection Remote Code Execution Vulnerability
ZDI-CAN-23553
Adobe
CVE-2024-34099
7.8
2025-04-30
2025-04-30
(Pwn2Own) Adobe Acrobat Reader DC distributionURL JavaScript API Restrictions Bypass Vulnerability
ZDI-CAN-23786
Oracle
CVE-2024-21113
8.2
2025-04-30
2025-04-30
(Pwn2Own) Oracle VirtualBox OHCI USB Controller Race Condition Local Privilege Escalation Vulnerability
ZDI-CAN-26610
Avast
CVE-2025-3500
8.8
2025-04-24
2025-04-24
Avast Free Antivirus Integer Overflow Local Privilege Escalation Vulnerability
ZDI-CAN-25730
Allegra
CVE-2025-3486
7.2
2025-04-24
2025-04-24
Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-26524
Allegra
CVE-2025-3485
7.2
2025-04-24
2025-06-06
Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-25726
SonicWALL
CVE-2025-32817
6.1
2025-04-24
2025-05-21
SonicWALL Connect Tunnel Link Following Denial-of-Service Vulnerability
ZDI-CAN-23275
Cato Networks
 
7.8
2025-04-23
2025-04-24
(0Day) Cato Networks Cato Client for macOS Helper Service Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
ZDI-CAN-23942
Harman Becker
CVE-2025-3885
5.3
2025-04-23
2025-04-23
(0Day) Harman Becker MGU21 Bluetooth Improper Input Validation Denial-of-Service Vulnerability
ZDI-CAN-24332
Cloudera
CVE-2025-3884
7.5
2025-04-23
2025-04-23
(0Day) Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability
ZDI-CAN-23115
eCharge Hardy Barth
CVE-2025-3883
8.8
2025-04-23
2025-04-23
(0Day) eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability
ZDI-CAN-23114
eCharge Hardy Barth
CVE-2025-3882
8.8
2025-04-23
2025-04-23
(0Day) eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability
ZDI-CAN-23113
eCharge Hardy Barth
CVE-2025-3881
8.8
2025-04-23
2025-04-23
(0Day) eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability
ZDI-CAN-25842
MedDream
CVE-2025-3480
5.3
2025-04-09
2025-04-22
MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability
ZDI-CAN-25827
MedDream
CVE-2025-3481
9.8
2025-04-09
2025-04-22
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25826
MedDream
CVE-2025-3482
9.8
2025-04-09
2025-04-22
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25825
MedDream
CVE-2025-3483
9.8
2025-04-09
2025-04-22
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25853
MedDream
CVE-2025-3484
9.8
2025-04-09
2025-04-22
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25681
Trend Micro
CVE-2025-30642
5.5
2025-04-09
2025-04-09
Trend Micro Deep Security Agent Link Following Denial-of-Service Vulnerability
ZDI-CAN-24931
Trend Micro
CVE-2025-30641
7.8
2025-04-09
2025-04-09
Trend Micro Deep Security Anti-Malware Solution Platform Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-24930
Trend Micro
CVE-2025-30640
7.8
2025-04-09
2025-04-09
Trend Micro Deep Security Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25524
Trend Micro
CVE-2025-30680
7.1
2025-04-09
2025-04-09
Trend Micro Apex Central Query Server-Side Request Forgery Information Disclosure Vulnerability
ZDI-CAN-24934
Trend Micro
CVE-2025-30679
6.5
2025-04-09
2025-04-09
Trend Micro Apex Central modOSCE Server-Side Request Forgery Information Disclosure Vulnerability
ZDI-CAN-24939
Trend Micro
CVE-2025-30678
6.5
2025-04-09
2025-04-09
Trend Micro Apex Central modTMSM Server-Side Request Forgery Information Disclosure Vulnerability
ZDI-CAN-25953
Ivanti
CVE-2025-22461
7.2
2025-04-09
2025-04-09
Ivanti Endpoint Manager OpenRecordSet SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-25985
Microsoft
CVE-2025-29812
8.8
2025-04-09
2025-04-09
Microsoft Windows dxkrnl Untrusted Pointer Dereference Local Privilege Escalation Vulnerability
ZDI-CAN-24586
Luxion
CVE-2025-1045
7.8
2025-04-09
2025-04-09
Luxion KeyShot Viewer KSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-23694
Luxion
CVE-2025-1047
7.8
2025-04-09
2025-04-09
Luxion KeyShot PVS File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability
ZDI-CAN-23646
Luxion
CVE-2025-1046
7.8
2025-04-09
2025-04-09
Luxion KeyShot SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-25651
Samsung
CVE-2024-49413
7.5
2025-04-09
2025-04-09
(Pwn2Own) Samsung Galaxy S24 Smart Switch Agent Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability
ZDI-CAN-25650
Samsung
CVE-2024-49421
5.9
2025-04-09
2025-04-09
(Pwn2Own) Samsung Galaxy S24 Quick Share Directory Traversal Arbitrary File Write Vulnerability
ZDI-CAN-25649
Samsung
 
5.3
2025-04-09
2025-04-09
(Pwn2Own) Samsung Galaxy S24 Quick Share Insufficient UI Warning Arbitrary File Write Vulnerability
ZDI-CAN-25648
Samsung
CVE-2024-49420
5.3
2025-04-09
2025-04-09
(Pwn2Own) Samsung Galaxy S24 Gaming Hub Exposed Dangerous Method Local Privilege Escalation Vulnerability
ZDI-CAN-25581
Samsung
CVE-2024-49419, CVE-2024-49418
5.4
2025-04-09
2025-04-09
(Pwn2Own) Samsung Galaxy S24 Gaming Hub Improper Input Validation Privilege Escalation Vulnerability
ZDI-CAN-25606
Sonos
CVE-2025-1050
8.8
2025-04-09
2025-04-09
(Pwn2Own) Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25601
Sonos
CVE-2025-1049
8.8
2025-04-09
2025-04-09
(Pwn2Own) Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25535
Sonos
CVE-2025-1048
8.8
2025-04-09
2025-04-09
(Pwn2Own) Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-25674
Lexmark
CVE-2024-11346
4.3
2025-04-09
2025-04-09
(Pwn2Own) Lexmark CX331adwe concatstrings Type Confusion Information Disclosure Vulnerability
ZDI-CAN-25849
Lexmark
 
7.0
2025-04-09
2025-04-09
(Pwn2Own) Lexmark CX331adwe httpd extract-trace Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25848
Lexmark
 
6.3
2025-04-09
2025-04-09
(Pwn2Own) Lexmark CX331adwe basic_auth.cgi PATH_TRANSLATED Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-25676
Lexmark
CVE-2024-11347
8.8
2025-04-09
2025-04-09
(Pwn2Own) Lexmark CX331adwe JBIG2 File Parsing new_image Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25621
Lexmark
CVE-2024-11345
8.8
2025-04-09
2025-04-09
(Pwn2Own) Lexmark CX331adwe JPEG2000 Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-25539
Lexmark
CVE-2024-11344
8.8
2025-04-09
2025-04-09
(Pwn2Own) Lexmark CX331adwe loadCFFdata Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-25538
Synology
CVE-2024-11131
8.8
2025-04-09
2025-04-09
(Pwn2Own) Synology TC500 ONVIF Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25487
Synology
CVE-2024-10444
7.5
2025-04-09
2025-04-09
(Pwn2Own) Synology DiskStation DS1823xs+ LDAP Client Improper Certificate Validation Authentication Bypass Vulnerability
ZDI-CAN-25403
Synology
CVE-2024-10441
8.8
2025-04-09
2025-04-09
(Pwn2Own) Synology DiskStation DS1823xs+ Vue.JS Improper Neutralization of Argument Delimiters Remote Code Execution Vulnerability
ZDI-CAN-25659
Synology
CVE-2024-50631
6.4
2025-04-09
2025-04-09
(Pwn2Own) Synology BeeStation BST150-4T SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-25658
Synology
CVE-2024-50630
7.5
2025-04-09
2025-04-09
(Pwn2Own) Synology BeeStation BST150-4T Improper Authentication Vulnerability
ZDI-CAN-25613
Synology
CVE-2024-50629
6.5
2025-04-09
2025-04-09
(Pwn2Own) Synology BeeStation BST150-4T CRLF Injection Information Disclosure Vulnerability
ZDI-CAN-25662
Synology
CVE-2024-10445
7.5
2025-04-09
2025-04-09
(Pwn2Own) Synology BeeStation BST150-4T Improper Input Validation Remote Code Execution Vulnerability
ZDI-CAN-25617
Synology
CVE-2024-10445
4.3
2025-04-09
2025-04-09
(Pwn2Own) Synology BeeStation BST150-4T Cleartext Transmission of Sensitive Information Vulnerability
ZDI-CAN-25607
Synology
CVE-2024-10442
7.5
2025-04-09
2025-04-09
(Pwn2Own) Synology DiskStation DS1823xs+ Replication Service Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25623
Synology
CVE-2024-10443
8.8
2025-04-09
2025-04-09
(Pwn2Own) Synology BeeStation BST150-4T Command Injection Remote Code Execution Vulnerability
ZDI-CAN-25427
Amazon
 
9.8
2025-04-07
2025-04-07
Amazon AWS CloudFormation Templates Uncontrolled Search Path Element Remote Code Execution Vulnerability
ZDI-CAN-25426
Amazon
 
9.8
2025-04-07
2025-04-07
Amazon AWS CloudFormation Templates Uncontrolled Search Path Element Remote Code Execution Vulnerability
ZDI-CAN-25100
GIMP
CVE-2025-2761
7.8
2025-04-07
2025-04-07
GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25082
GIMP
CVE-2025-2760
7.8
2025-04-07
2025-04-07
GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25559
Fortinet
CVE-2024-55597
5.5
2025-04-07
2025-04-07
Fortinet FortiWeb cgi_xmlprotection_xmlschemafile_post Directory Traversal Arbitrary File Write Vulnerability
ZDI-CAN-25572
Trend Micro
CVE-2025-27529
4.4
2025-04-07
2025-04-07
Trend Micro Cleaner One Pro Link Following Denial-of-Service Vulnerability
ZDI-CAN-26250
Exim
CVE-2025-30232
7.8
2025-04-07
2025-04-07
Exim Use-After-Free Local Privilege Escalation Vulnerability
ZDI-CAN-25970
Autodesk
CVE-2025-1660
7.8
2025-04-03
2025-04-03
Autodesk Navisworks Freedom DWFX File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-25968
Autodesk
CVE-2025-1659
7.8
2025-04-03
2025-04-03
Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25971
Autodesk
CVE-2025-1658
7.8
2025-04-03
2025-04-03
Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25736
Apple
CVE-2025-24185
7.8
2025-04-01
2025-04-01
Apple macOS ICC Profile Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25812
Apple
CVE-2025-24210
4.3
2025-04-01
2025-04-01
Apple macOS CoreGraphics Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26063
Apple
CVE-2025-24256
6.4
2025-04-01
2025-04-01
Apple macOS AppleIntelKBLGraphics Time-Of-Check Time-Of-Use Information Disclosure Vulnerability
ZDI-CAN-26154
Apple
CVE-2025-24182
3.3
2025-04-01
2025-04-01
Apple macOS CoreText Font Glyphs Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26494
Apple
CVE-2025-24190
8.8
2025-04-01
2025-04-01
Apple macOS MP4 File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26497
Apple
CVE-2025-24211
8.8
2025-04-01
2025-04-01
Apple macOS MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-26495
Apple
CVE-2025-24230
4.3
2025-04-01
2025-04-01
Apple macOS MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26248
Apple
CVE-2025-24243
7.8
2025-04-01
2025-04-01
Apple macOS AudioToolbox AMR File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26247
Apple
CVE-2025-24244
3.3
2025-04-01
2025-04-01
Apple macOS AudioToolboxCore WAV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25903
BEC Technologies
CVE-2025-2773
7.2
2025-03-25
2025-11-24
(0Day) BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability
ZDI-CAN-25986
BEC Technologies
CVE-2025-2770
4.9
2025-03-25
2025-11-24
(0Day) BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability
ZDI-CAN-25895
BEC Technologies
CVE-2025-2772
5.3
2025-03-25
2025-11-24
(0Day) BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability
ZDI-CAN-25894
BEC Technologies
CVE-2025-2771
5.3
2025-03-25
2025-11-25
(0Day) BEC Technologies Multiple Routers Authentication Bypass Vulnerability
ZDI-CAN-25295
Bdrive
CVE-2025-2769
7.8
2025-03-25
2025-03-25
(0Day) Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-25041
Bdrive
CVE-2025-2768
7.8
2025-03-25
2025-03-25
(0Day) Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-24407
Arista
CVE-2025-2767
8.8
2025-03-25
2025-03-25
(0Day) Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability
ZDI-CAN-24996
70mai
CVE-2025-2766
8.8
2025-03-25
2025-03-25
(0Day) 70mai A510 Use of Default Password Authentication Bypass Vulnerability
ZDI-CAN-24356
CarlinKit
CVE-2025-2763
6.8
2025-03-25
2025-03-25
(0Day) CarlinKit CPC200-CCPA Improper Verification of Cryptographic Signature Code Execution Vulnerability
ZDI-CAN-24355
CarlinKit
CVE-2025-2764
8.0
2025-03-25
2025-03-25
(0Day) CarlinKit CPC200-CCPA update.cgi Improper Verification of Cryptographic Signature Code Execution Vulnerability
ZDI-CAN-24349
CarlinKit
CVE-2025-2765
7.6
2025-03-25
2025-03-25
(0Day) CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability
ZDI-CAN-25948
CarlinKit
CVE-2025-2762
7.8
2025-03-25
2025-03-25
(0Day) CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability
ZDI-CAN-23709
Luxion
CVE-2025-2532
7.8
2025-03-20
2025-03-20
(0Day) Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-23704
Luxion
CVE-2025-2531
7.8
2025-03-20
2025-03-20
(0Day) Luxion KeyShot DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-23698
Luxion
CVE-2025-2530
7.8
2025-03-20
2025-03-20
(0Day) Luxion KeyShot DAE File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability
ZDI-CAN-25319
Apple
CVE-2025-24124
8.8
2025-03-18
2025-03-18
Apple macOS MOV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25242
Apple
CVE-2024-54500
3.3
2025-03-18
2025-03-18
Apple macOS ImageIO Pixel Conversion Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25546
Apple
CVE-2024-54501
3.3
2025-03-18
2025-03-18
Apple macOS WindowServer Denial-of-Service Vulnerability
ZDI-CAN-25201
Apple
CVE-2024-54497
4.3
2025-03-18
2025-03-18
Apple macOS WindowServer Unchecked Input for Loop Condition Denial-of-Service Vulnerability
ZDI-CAN-25370
Apple
CVE-2025-24123
8.8
2025-03-18
2025-03-18
Apple macOS MOV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25735
Apple
CVE-2025-24139
3.3
2025-03-18
2025-03-18
Apple macOS ICC Profile Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25338
Apple
CVE-2024-54486
3.3
2025-03-18
2025-03-18
Apple macOS libFontParser Glyph Mapping Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25661
Apple
CVE-2024-54499
3.3
2025-03-18
2025-03-18
Apple macOS ImageIO JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25808
Apple
CVE-2025-24149
3.3
2025-03-18
2025-03-18
Apple SceneKit Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-26554
Autodesk
CVE-2025-1652
7.8
2025-03-18
2025-03-18
Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25695
Autodesk
CVE-2025-1427
7.8
2025-03-18
2025-03-18
Autodesk AutoCAD CATProduct File Parsing Uninitialized Variable Remote Code Execution Vulnerability
ZDI-CAN-25767
Autodesk
CVE-2025-1428
7.8
2025-03-18
2025-03-18
Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25784
Autodesk
CVE-2025-1429
7.8
2025-03-18
2025-03-18
Autodesk AutoCAD MODEL File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25811
Autodesk
CVE-2025-1649
7.8
2025-03-18
2025-03-18
Autodesk AutoCAD CATPRODUCT File Parsing Uninitialized Variable Remote Code Execution Vulnerability
ZDI-CAN-25951
Autodesk
CVE-2025-1650
7.8
2025-03-18
2025-03-18
Autodesk AutoCAD CATProduct File Parsing Uninitialized Variable Remote Code Execution Vulnerability
ZDI-CAN-25952
Autodesk
CVE-2025-1651
7.8
2025-03-18
2025-03-18
Autodesk AutoCAD MODEL File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25989
Autodesk
CVE-2025-1430
7.8
2025-03-18
2025-03-18
Autodesk AutoCAD SLDPRT File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-26521
Autodesk
CVE-2025-1433
7.8
2025-03-18
2025-03-18
Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26135
Autodesk
CVE-2025-1432
7.8
2025-03-18
2025-03-18
Autodesk AutoCAD 3DM File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-25997
Autodesk
CVE-2025-1431
7.8
2025-03-18
2025-03-18
Autodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25481
Rockwell Automation
CVE-2024-12130
7.8
2025-03-18
2025-03-18
Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25708
Progress Software
CVE-2025-1758
9.8
2025-03-18
2025-03-18
Progress Software Kemp LoadMaster mangle Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-26371
Microsoft
CVE-2025-26633
7.0
2025-03-18
2025-03-18
Microsoft Windows MSC File Insufficient UI Warning Remote Code Execution Vulnerability
ZDI-CAN-26251
Adobe
CVE-2025-271561
7.8
2025-03-18
2025-03-18
Adobe Acrobat Reader DC AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25373
Microsoft
CVE-2025-9491
7.0
2025-03-18
2025-10-30
(0Day) Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
ZDI-CAN-22833
NI
CVE-2025-2450
7.8
2025-03-17
2025-03-17
(0Day) NI Vision Builder AI VBAI File Processing Missing Warning Remote Code Execution Vulnerability
ZDI-CAN-21805
NI
CVE-2025-2449
7.8
2025-03-17
2025-03-17
(0Day) NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability
ZDI-CAN-25794
NVIDIA
CVE-2025-23242
7.3
2025-03-13
2025-03-13
NVIDIA Riva Triton Inference Server Missing Authentication Vulnerability
ZDI-CAN-25682
NVIDIA
CVE-2025-23243
6.5
2025-03-13
2025-03-13
NVIDIA Riva gRPC API Missing Authentication for Critical Function Authentication Bypass Vulnerability
ZDI-CAN-25544
X.Org
CVE-2025-26594
7.8
2025-03-13
2025-03-13
X.Org Server ChangeWindowAttributes Use-After-Free Privilege Escalation Vulnerability
ZDI-CAN-25545
X.Org
CVE-2025-26595
7.8
2025-03-13
2025-03-13
X.Org Server XkbVModMaskText Stack-based Buffer Overflow Privilege Escalation Vulnerability
ZDI-CAN-25543
X.Org
CVE-2025-26596
7.8
2025-03-13
2025-03-13
X.Org Server XkbSizeKeySyms Heap-based Buffer Overflow Privilege Escalation Vulnerability
ZDI-CAN-25683
X.Org
CVE-2025-26597
7.8
2025-03-13
2025-03-13
X.Org Server XkbChangeTypesOfKey Heap-based Buffer Overflow Privilege Escalation Vulnerability
ZDI-CAN-25740
X.Org
CVE-2025-26598
7.8
2025-03-13
2025-03-13
X.Org Server CreatePointerBarrierClient Out-Of-Bounds Write Local Privilege Escalation Vulnerability
ZDI-CAN-25851
X.Org
CVE-2025-26599
7.8
2025-03-13
2025-03-13
X.Org Server compRedirectWindow Type Confusion Local Privilege Escalation Vulnerability
ZDI-CAN-25871
X.Org
CVE-2025-26600
7.8
2025-03-13
2025-03-13
X.Org Server PlayReleasedEvents Use-After-Free Local Privilege Escalation Vulnerability
ZDI-CAN-25870
X.Org
CVE-2025-26601
7.8
2025-03-13
2025-03-13
X.Org Server SyncInitTrigger Use-After-Free Local Privilege Escalation Vulnerability
ZDI-CAN-26232
Adobe
CVE-2025-27162
7.8
2025-03-13
2025-03-13
Adobe Acrobat Reader DC AcroForm Use of Uninitialized Variable Remote Code Execution Vulnerability
ZDI-CAN-25734
Adobe
CVE-2025-24431
7.8
2025-03-13
2025-03-13
Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-26231
Adobe
CVE-2025-27174
7.8
2025-03-13
2025-03-13
Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26147
Adobe
CVE-2025-27159
7.8
2025-03-13
2025-03-13
Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-26169
Adobe
CVE-2025-27160
7.8
2025-03-13
2025-03-13
Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-25443
Siemens
CVE-2025-25175
7.8
2025-03-13
2025-03-13
Siemens Simcenter Femap NEU File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-25473
PDF-XChange
CVE-2025-2231
7.8
2025-03-12
2025-03-12
PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-21907
NI
CVE-2024-12742
7.8
2025-03-11
2025-03-11
NI G Web Development GWEBPROJECT File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25615
Samsung
CVE-2025-2233
8.8
2025-03-11
2025-04-16
(0Day) (Pwn2Own) Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability
ZDI-CAN-25276
Ashlar-Vellum
CVE-2025-2022
7.8
2025-03-10
2025-03-10
(0Day) Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-25264
Ashlar-Vellum
CVE-2025-2021
7.8
2025-03-10
2025-03-10
(0Day) Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25254
Ashlar-Vellum
CVE-2025-2020
7.8
2025-03-10
2025-03-10
(0Day) Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25252
Ashlar-Vellum
CVE-2025-2019
7.8
2025-03-10
2025-03-10
(0Day) Ashlar-Vellum Cobalt VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25348
Ashlar-Vellum
CVE-2025-2023
7.8
2025-03-10
2025-03-10
(0Day) Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25240
Ashlar-Vellum
CVE-2025-2017
7.8
2025-03-10
2025-03-10
(0Day) Ashlar-Vellum Cobalt CO File Parsing Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25186
Ashlar-Vellum
CVE-2025-2013
7.8
2025-03-10
2025-03-10
(0Day) Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-25185
Ashlar-Vellum
CVE-2025-2012
7.8
2025-03-10
2025-03-10
(0Day) Ashlar-Vellum Cobalt VS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25245
Ashlar-Vellum
CVE-2025-2018
7.8
2025-03-10
2025-03-10
(0Day) Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-25238
Ashlar-Vellum
CVE-2025-2016
7.8
2025-03-10
2025-03-10
(0Day) Ashlar-Vellum Cobalt VC6 File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-25236
Ashlar-Vellum
CVE-2025-2015
7.8
2025-03-10
2025-03-10
(0Day) Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-25235
Ashlar-Vellum
CVE-2025-2014
7.8
2025-03-10
2025-03-10
(0Day) Ashlar-Vellum Cobalt VS File Parsing Use of Uninitialized Variable Remote Code Execution Vulnerability
ZDI-CAN-25312
Ivanti
CVE-2024-13171
7.8
2025-03-10
2025-03-10
Ivanti Endpoint Manager Patch Unrestricted File Upload Remote Code Execution Vulnerability
ZDI-CAN-25882
Autodesk
CVE-2024-12198
7.8
2025-03-10
2025-03-10
Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25869
Autodesk
CVE-2024-12193
7.8
2025-03-10
2025-03-10
Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25210
Trimble
CVE-2025-2024
7.8
2025-03-06
2025-03-06
Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability
ZDI-CAN-25013
SEW-EURODRIVE
 
7.8
2025-03-05
2025-03-05
SEW-EURODRIVE MOVITOOLS MotionStudio mticomp0 ICP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-24001
Apache
CVE-2024-56325
9.8
2025-03-03
2025-03-03
Apache Pinot Improper Neutralization of Special Elements Authentication Bypass Vulnerability
ZDI-CAN-26611
HP
CVE-2025-26507
7.8
2025-03-03
2025-03-03
(Pwn2Own) HP LaserJet Pro MFP 3301fdw suidexec Command Injection Local Privilege Escalation Vulnerability
ZDI-CAN-25594
HP
CVE-2025-26506
8.8
2025-03-03
2025-03-03
(Pwn2Own) HP LaserJet Pro MFP 3301fdw PostScript File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25533
HP
CVE-2025-26508
8.8
2025-03-03
2025-03-03
(Pwn2Own) HP LaserJet Pro MFP 3301fdw PostScript File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI-CAN-21908
NI
CVE-2024-12741
7.8
2025-03-03
2025-03-03
NI DAQExpress LVPROJECT File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25334
SolarWinds
CVE-2024-52606
7.1
2025-03-03
2025-03-03
SolarWinds Platform TestWebsiteUrl Server-Side Request Forgery Information Disclosure Vulnerability
ZDI-CAN-25031
Delta Electronics
 
7.8
2025-03-03
2025-03-03
(0Day) Delta Electronics ISPSoft CBDGL File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25225
Delta Electronics
 
7.8
2025-03-03
2025-03-03
(0Day) Delta Electronics ISPSoft DVP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25284
Delta Electronics
 
7.8
2025-03-03
2025-03-03
(0Day) Delta Electronics ISPSoft DVP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25737
Linux
 
9.0
2025-02-27
2025-02-27
Linux Kernel ksmbd Session Setup Race Condition Remote Code Execution Vulnerability
ZDI-CAN-25350
PostHog
CVE-2025-1520
7.1
2025-02-25
2025-02-25
PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-25300
Delta Electronics
CVE-2025-22880
7.8
2025-02-25
2025-02-25
Delta Electronics CNCSoft-G2 DPAX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25358
PostHog
CVE-2025-1522
7.1
2025-02-25
2025-02-25
PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability
ZDI-CAN-25352
PostHog
CVE-2025-1521
7.1
2025-02-25
2025-02-25
PostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability
ZDI-CAN-25180
Fortinet
CVE-2024-50569
6.6
2025-02-24
2025-02-24
Fortinet FortiWeb gui_upload_compress_act Command Injection Remote Code Execution Vulnerability
ZDI-CAN-25182
Fortinet
CVE-2024-50567
7.2
2025-02-24
2025-02-24
Fortinet FortiWeb cgi_grpc_idl_file_post Command Injection Remote Code Execution Vulnerability
ZDI-CAN-26551
Apple
CVE-2024-27834
5.0
2025-02-24
2025-02-24
(Pwn2Own) Apple Safari Pointer Authentication Code Bypass Vulnerability
ZDI-CAN-23795
Apple
CVE-2024-27833
5.4
2025-02-24
2025-02-24
(Pwn2Own) Apple Safari B3 JIT Compiler Integer Underflow Remote Code Execution Vulnerability
ZDI-CAN-25761
Microsoft
CVE-2025-21373
7.8
2025-02-24
2025-02-24
Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25393
Microsoft
CVE-2025-21404
7.5
2025-02-24
2025-02-24
Microsoft Edge UI Misrepresentation Remote Code Execution Vulnerability
ZDI-CAN-24785
mySCADA
CVE-2025-20014
9.8
2025-02-19
2025-02-19
mySCADA myPRO Command Injection Remote Code Execution Vulnerability
ZDI-CAN-24784
mySCADA
CVE-2025-20061
9.8
2025-02-19
2025-02-19
mySCADA myPRO Command Injection Remote Code Execution Vulnerability
ZDI-CAN-26525
NVIDIA
CVE-2025-23359
9.0
2025-02-19
2025-02-19
NVIDIA Container Toolkit mount_files Time-Of-Check Time-Of-Use Race Condition Privilege Escalation Vulnerability
ZDI-CAN-25368
PDF-XChange
CVE-2025-0900
3.3
2025-02-11
2025-02-11
PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25336
Logsign
CVE-2025-1044
9.8
2025-02-05
2025-02-05
Logsign Unified SecOps Platform Authentication Bypass Vulnerability
ZDI-CAN-23382
Mintty
CVE-2025-1052
8.8
2025-02-05
2025-02-05
Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-24690
Microsoft
 
7.5
2025-02-04
2025-02-04
Microsoft Edge ms-its: Scheme Remote Code Execution Vulnerability
ZDI-CAN-25014
Parallels
CVE-2025-0413
7.8
2025-02-04
2025-06-25
Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25816
TeamViewer
CVE-2025-0065
7.8
2025-02-03
2025-02-03
TeamViewer Improper Neutralization of Argument Delimiters Local Privilege Escalation Vulnerability
ZDI-CAN-22834
NI
CVE-2024-12740
7.8
2025-02-03
2025-02-03
NI Vision Builder AI JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-22611
NI
CVE-2024-12740
7.8
2025-02-03
2025-02-03
NI Vision Development Module Vision Assistant JPG File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-22884
NI
CVE-2024-12740
7.8
2025-02-03
2025-02-03
NI Vision Builder AI JPG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-22663
NI
CVE-2024-12740
7.8
2025-02-03
2025-02-03
NI Vision Development Module Vision Assistant JPG File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25094
NoMachine
CVE-2024-9632
6.7
2025-02-03
2025-02-03
NoMachine Incorrect Permission Assignment Local Privilege Escalation Vulnerability
ZDI-CAN-25622
Canon
CVE-2024-12649
8.8
2025-01-31
2025-01-31
(Pwn2Own) Canon imageCLASS MF656Cdw TTF Parsing Write-What-Where Condition Remote Code Execution Vulnerability
ZDI-CAN-25592
Canon
CVE-2024-12648
8.8
2025-01-31
2025-01-31
(Pwn2Own) Canon imageCLASS MF656Cdw TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25490
Canon
CVE-2024-12647
8.8
2025-01-31
2025-01-31
(Pwn2Own) Canon imageCLASS MF656Cdw listObjects2 Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25405
PDF-XChange
CVE-2025-0902
3.3
2025-01-31
2025-01-31
PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25422
PDF-XChange
CVE-2025-0904
3.3
2025-01-31
2025-01-31
PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25421
PDF-XChange
CVE-2025-0903
7.8
2025-01-31
2025-01-31
PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25435
PDF-XChange
CVE-2025-0907
3.3
2025-01-31
2025-01-31
PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25434
PDF-XChange
CVE-2025-0906
3.3
2025-01-31
2025-01-31
PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25433
PDF-XChange
CVE-2025-0905
3.3
2025-01-31
2025-01-31
PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25957
PDF-XChange
CVE-2025-0911
3.3
2025-01-31
2025-01-31
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25748
PDF-XChange
CVE-2025-0910
7.8
2025-01-31
2025-01-31
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25678
PDF-XChange
CVE-2025-0909
3.3
2025-01-31
2025-01-31
PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25557
PDF-XChange
CVE-2025-0908
3.3
2025-01-31
2025-02-05
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25372
PDF-XChange
CVE-2025-0901
7.8
2025-01-31
2025-01-31
PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25349
PDF-XChange
CVE-2025-0899
7.8
2025-01-31
2025-01-31
PDF-XChange Editor AcroForm Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-25396
Google
CVE-2024-9954
7.5
2025-01-30
2025-01-30
Google Chrome AI Manager Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-25000
Siemens
CVE-2024-53041
7.8
2025-01-22
2025-01-22
Siemens Tecnomatix Plant Simulation WRL File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-CAN-25206
Siemens
CVE-2024-53242
7.8
2025-01-22
2025-01-22
Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
ZDI-CAN-25205
Siemens
CVE-2024-45471
7.8
2025-01-22
2025-01-22
Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25202
Siemens
CVE-2024-45469
7.8
2025-01-22
2025-01-22
Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25318
Sante
CVE-2025-0574
8.2
2025-01-20
2025-01-20
Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability
ZDI-CAN-25308
Sante
CVE-2025-0572
4.3
2025-01-20
2025-01-20
Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability
ZDI-CAN-25309
Sante
CVE-2025-0573
5.3
2025-01-20
2025-01-20
Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability
ZDI-CAN-25303
Sante
CVE-2025-0569
7.5
2025-01-20
2025-01-20
Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability
ZDI-CAN-25305
Sante
CVE-2025-0571
6.5
2025-01-20
2025-01-20
Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability
ZDI-CAN-25304
Sante
CVE-2025-0570
6.5
2025-01-20
2025-01-20
Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability
ZDI-CAN-25302
Sante
CVE-2025-0568
7.5
2025-01-20
2025-01-20
Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability
ZDI-CAN-24012
Apple
CVE-2024-27856
8.8
2025-01-20
2025-03-06
Apple WebKit WebCore ContainerNode Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-24986
WinZip Computing
CVE-2025-1240
7.8
2025-02-11
2025-05-02
WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-CAN-25333
Adobe
CVE-2025-21127
7.3
2025-01-20
2025-01-20
Adobe Photoshop node_modules Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI-CAN-25456
7-Zip
CVE-2025-0411
7.0
2025-01-19
2025-01-19
7-Zip Mark-of-the-Web Bypass Vulnerability
ZDI-CAN-25713
Ivanti
CVE-2024-13179
7.3
2025-01-19
2025-01-19
Ivanti Avalanche SecureFilter Authentication Bypass Vulnerability
ZDI-CAN-25712
Ivanti
CVE-2024-13180
7.5
2025-01-19
2025-01-19
Ivanti Avalanche Faces ResourceManager Information Disclosure Vulnerability
ZDI-CAN-25711
Ivanti
CVE-2024-13181
7.3
2025-01-19
2025-01-19
Ivanti Avalanche SecureFilter allowPassThrough Authentication Bypass Vulnerability
ZDI-CAN-25929
Ivanti
CVE-2024-13162
7.2
2025-01-19
2025-01-19
Ivanti Endpoint Manager updateAssetInfo SQL Injection Remote Code Execution Vulnerability
ZDI-CAN-25432
Ivanti
CVE-2024-13163
7.8
2025-01-19
2025-01-19
Ivanti Endpoint Manager DecodeBase64Object Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-CAN-25431
Ivanti
CVE-2024-13164
6.2
2025-01-19
2025-01-19
Ivanti Endpoint Manager AlertService Uninitialized Memory Information Disclosure Vulnerability
ZDI-CAN-25420
Ivanti
CVE-2024-13165
7.5
2025-01-19
2025-01-19
Ivanti Endpoint Manager Improper Input Validation AlertService Denial-of-Service Vulnerability
ZDI-CAN-25419
Ivanti
CVE-2024-13166
7.5
2025-01-19
2025-01-19
Ivanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability
ZDI-CAN-25418
Ivanti
CVE-2024-13167
7.5
2025-01-19
2025-01-19
Ivanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability
ZDI-CAN-25417
Ivanti
CVE-2024-13168
7.5
2025-01-19
2025-01-19
Ivanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability
ZDI-CAN-25416
Ivanti
CVE-2024-13169
5.5
2025-01-19
2025-01-19
Ivanti Endpoint Manager AlertService Type Confusion Information Disclosure Vulnerability
ZDI-CAN-25415
Ivanti
CVE-2024-13170
7.5
2025-01-19
2025-01-19
Ivanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability
ZDI-CAN-25249
Ivanti
CVE-2024-13172
7.8
2025-01-19
2025-01-19
Ivanti Endpoint Manager HIIDriver Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability
ZDI-CAN-25209
Ivanti
CVE-2024-13158
7.2
2025-01-19
2025-01-19
Ivanti Endpoint Manager MyResolveEventHandler Untrusted Search Path Remote Code Execution Vulnerability
ZDI-CAN-25187
Microsoft
CVE-2025-21363
7.8
2025-01-15
2025-01-15
Microsoft Office Word DOCX File Parsing Uninitialized Pointer Remote Code Execution Vulnerability
ZDI-CAN-25332
Microsoft
CVE-2025-21331
7.8
2025-01-15
2025-01-15
Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25188
Microsoft
CVE-2025-21298
7.8
2025-01-15
2025-01-15
Microsoft Office Word RTF File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-CAN-23793
Google
CVE-2024-2886
5.4
2025-01-12
2025-01-12
(Pwn2Own) Google Chrome VideoFrame Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-24744
Mintty
CVE-2024-45301
5.3
2025-01-10
2025-01-10
Mintty Path Conversion Improper Input Validation Information Disclosure Vulnerability
ZDI-CAN-22247
Avira
CVE-2024-9525
7.8
2025-01-09
2025-01-09
Avira Prime System Speedup Service Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-22246
Avira
CVE-2024-9524
7.8
2025-01-09
2025-01-09
Avira Prime System Speedup Service Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-22245
Avira
CVE-2024-9523
7.8
2025-01-09
2025-01-09
Avira Prime System Speedup Service Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-25404
Apple
 
3.3
2025-01-09
2025-01-09
Apple macOS libFontValidation Font Glyph YCoordinate Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25364
Apple
 
3.3
2025-01-09
2025-01-09
Apple macOS libFontValidation Font Glyph Flags Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25366
Apple
 
3.3
2025-01-09
2025-01-09
Apple macOS libFontValidation post Table Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25339
Apple
 
3.3
2025-01-09
2025-01-09
Apple macOS libFontValidation loca Table Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25341
Apple
 
3.3
2025-01-09
2025-01-09
Apple macOS libFontValidation Font Header Name Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25340
Apple
 
3.3
2025-01-09
2025-01-09
Apple macOS libFontValidation kern Table Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25263
Apple
CVE-2024-44240, CVE-2024-44302
3.3
2025-01-09
2025-01-09
Apple macOS CoreText Font Ligature Caret List Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-25213
Apple
CVE-2024-44240, CVE-2024-44302
3.3
2025-01-09
2025-01-09
Apple macOS CoreText Font Ligature Caret List Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-CAN-24821
SonicWALL
CVE-2024-53706
7.8
2025-01-09
2025-01-09
SonicWALL NSv setSshdConfig Exposed Dangerous Function Local Privilege Escalation Vulnerability
ZDI-CAN-24820
SonicWALL
CVE-2024-53705
8.1
2025-01-09
2025-01-09
SonicWALL NSv SSH Management Server-Side Request Forgery Vulnerability
ZDI-CAN-24819
SonicWALL
CVE-2024-53704
9.8
2025-01-09
2025-01-09
SonicWALL NSv Authentication Bypass Vulnerability
ZDI-CAN-24818
SonicWALL
CVE-2024-40762
8.8
2025-01-09
2025-01-09
SonicWALL NSv Cryptographically Weak PRNG Authentication Bypass Vulnerability
ZDI-CAN-24487
Redis
CVE-2024-46981
7.2
2025-01-09
2025-01-09
Redis Stack Lua Use-After-Free Remote Code Execution Vulnerability
ZDI-CAN-24143
Redis
CVE-2024-55656
8.8
2025-01-09
2025-01-09
Redis Stack RedisBloom Integer Overflow Remote Code Execution Vulnerability
ZDI-CAN-24932
Trend Micro
CVE-2024-55955
6.7
2025-01-08
2025-01-08
Trend Micro Deep Security Agent Incorrect Permissions Local Privilege Escalation Vulnerability
ZDI-CAN-23401
Trend Micro
CVE-2024-52047
7.5
2025-01-08
2025-01-08
Trend Micro Apex One widget getWidgetPoolManager Local File Inclusion Remote Code Execution Vulnerability
ZDI-CAN-24674
Trend Micro
CVE-2024-52049
7.8
2025-01-08
2025-01-08
Trend Micro Apex One LogServer Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-24675
Trend Micro
CVE-2024-52048
7.8
2025-01-08
2025-01-08
Trend Micro Apex One LogServer Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-24566
Trend Micro
CVE-2024-55917
7.8
2025-01-08
2025-01-08
Trend Micro Apex One Origin Validation Error Local Privilege Escalation Vulnerability
ZDI-CAN-24557
Trend Micro
CVE-2024-55632
7.8
2025-01-08
2025-01-08
Trend Micro Apex One Security Agent Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-24609
Trend Micro
CVE-2024-52050
7.8
2025-01-08
2025-01-08
Trend Micro Apex One LogServer Link Following Local Privilege Escalation Vulnerability
ZDI-CAN-23995
Trend Micro
CVE-2024-55631
7.8
2025-01-08
2025-01-08
Trend Micro Apex One Damage Cleanup Engine Link Following Local Privilege Escalation Vulnerability