| CVE-2021-43798 | Grafana Path Traversal Vulnerability | Grafana | 2021-12-07 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- None
AAvailability- None
| 2025-10-09 |
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | Synacor | 2025-03-12 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- Low
UIUser Interaction- Required
SScope- Changed
CConfidentiality- Low
IIntegrity- Low
AAvailability- None
| 2025-10-07 |
| CVE-2025-61882 | Oracle E-Business Suite Unspecified Vulnerability | Oracle | 2025-10-05 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-10-06 |
| CVE-2021-43226 | Microsoft Windows Privilege Escalation Vulnerability | Microsoft | 2021-12-15 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Local
ACAttack Complexity- Low
PRPrivileges Required- Low
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-10-06 |
| CVE-2021-22555 | Linux Kernel Heap Out-of-Bounds Write Vulnerability | Netapp | 2021-07-07 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Local
ACAttack Complexity- Low
PRPrivileges Required- Low
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-10-06 |
| CVE-2013-3918 | Microsoft Windows Out-of-Bounds Write Vulnerability | Microsoft | 2013-11-12 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- Required
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-10-06 |
| CVE-2011-3402 | Microsoft Windows Remote Code Execution Vulnerability | Microsoft | 2011-11-04 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- Required
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-10-06 |
| CVE-2010-3962 | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | Microsoft | 2010-11-05 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- High
PRPrivileges Required- None
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-10-06 |
| CVE-2010-3765 | Mozilla Multiple Products Remote Code Execution Vulnerability | Mozilla | 2010-10-28 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-10-06 |
| CVE-2025-4008 | Smartbedded Meteobridge Command Injection Vulnerability | Smartbedded | 2025-05-21 | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
AVAttack Vector- Adjacent
ACAttack Complexity- Low
ATAttack Requirements- None
PRPrivileges Required- None
UIUser Interaction- None
VCVulnerable System Confidentiality- High
VIVulnerable System Integrity- High
VAVulnerable System Availability- High
SCSubsequent System Confidentiality- None
SISubsequent System Integrity- None
SASubsequent System Availability- None
| 2025-10-02 |
| CVE-2025-21043 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability | Samsung | 2025-09-12 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-10-02 |
| CVE-2017-1000353 | Jenkins Remote Code Execution Vulnerability | Jenkins | 2018-01-29 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-10-02 |
| CVE-2015-7755 | Juniper ScreenOS Improper Authentication Vulnerability | Juniper | 2015-12-19 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-10-02 |
| CVE-2014-6278 | GNU Bash OS Command Injection Vulnerability | Gnu | 2014-09-30 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- Required
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-10-02 |
| CVE-2025-59689 | Libraesva Email Security Gateway Command Injection Vulnerability | Libraesva | 2025-09-19 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- Required
SScope- Changed
CConfidentiality- Low
IIntegrity- Low
AAvailability- None
| 2025-09-29 |
| CVE-2025-32463 | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability | Sudo Project | 2025-06-30 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Local
ACAttack Complexity- Low
PRPrivileges Required- Low
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-09-29 |
| CVE-2025-20352 | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | Cisco | 2025-09-24 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- Low
UIUser Interaction- None
SScope- Changed
CConfidentiality- None
IIntegrity- None
AAvailability- High
| 2025-09-29 |
| CVE-2025-10035 | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | Fortra | 2025-09-18 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-09-29 |
| CVE-2021-21311 | Adminer Server-Side Request Forgery Vulnerability | Adminer | 2021-02-11 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Changed
CConfidentiality- Low
IIntegrity- Low
AAvailability- None
| 2025-09-29 |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | Cisco | 2025-09-25 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- Low
IIntegrity- Low
AAvailability- High
| 2025-09-25 |
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | Cisco | 2025-09-25 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- Low
UIUser Interaction- None
SScope- Changed
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-09-25 |
| CVE-2025-10585 | Google Chromium V8 Type Confusion Vulnerability | Google | 2025-09-24 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-09-23 |
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability | 3ds | 2025-06-02 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- High
PRPrivileges Required- None
UIUser Interaction- None
SScope- Changed
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-09-11 |
| CVE-2025-53690 | Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | Sitecore | 2025-09-03 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- High
PRPrivileges Required- None
UIUser Interaction- None
SScope- Changed
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-09-04 |
| CVE-2025-48543 | Android Runtime Use-After-Free Vulnerability | Google | 2025-09-04 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector- Local
ACAttack Complexity- Low
PRPrivileges Required- Low
UIUser Interaction- None
SScope- Changed
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-09-04 |
| CVE-2025-38352 | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability | Linux | 2025-07-22 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Local
ACAttack Complexity- Low
PRPrivileges Required- Low
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-09-04 |
| CVE-2025-9377 | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability | Tp-link | 2025-08-29 | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
AVAttack Vector- Network
ACAttack Complexity- Low
ATAttack Requirements- None
PRPrivileges Required- High
UIUser Interaction- None
VCVulnerable System Confidentiality- High
VIVulnerable System Integrity- High
VAVulnerable System Availability- High
SCSubsequent System Confidentiality- None
SISubsequent System Integrity- None
SASubsequent System Availability- None
| 2025-09-03 |
| CVE-2023-50224 | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability | Tp-link | 2024-05-03 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AVAttack Vector- Adjacent
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- None
AAvailability- None
| 2025-09-03 |
| CVE-2025-55177 | Meta Platforms WhatsApp Incorrect Authorization Vulnerability | Whatsapp | 2025-08-29 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- Low
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- Low
IIntegrity- Low
AAvailability- None
| 2025-09-02 |
| CVE-2020-24363 | TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability | Tp-link | 2020-08-31 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Adjacent
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-09-02 |
| CVE-2025-57819 | Sangoma FreePBX Authentication Bypass Vulnerability | Sangoma | 2025-08-28 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
AVAttack Vector- Network
ACAttack Complexity- Low
ATAttack Requirements- None
PRPrivileges Required- None
UIUser Interaction- None
VCVulnerable System Confidentiality- High
VIVulnerable System Integrity- High
VAVulnerable System Availability- High
SCSubsequent System Confidentiality- High
SISubsequent System Integrity- High
SASubsequent System Availability- High
| 2025-08-29 |
| CVE-2025-7775 | Citrix NetScaler Memory Overflow Vulnerability | Citrix | 2025-08-26 | CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
AVAttack Vector- Network
ACAttack Complexity- High
ATAttack Requirements- Present
PRPrivileges Required- None
UIUser Interaction- None
VCVulnerable System Confidentiality- High
VIVulnerable System Integrity- High
VAVulnerable System Availability- High
SCSubsequent System Confidentiality- Low
SISubsequent System Integrity- Low
SASubsequent System Availability- Low
| 2025-08-26 |
| CVE-2025-48384 | Git Link Following Vulnerability | Git-scm | 2025-07-08 | CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- High
PRPrivileges Required- Low
UIUser Interaction- Required
SScope- Changed
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-08-25 |
| CVE-2024-8069 | Citrix Session Recording Deserialization of Untrusted Data Vulnerability | Citrix | 2024-11-12 | CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
AVAttack Vector- Adjacent
ACAttack Complexity- Low
ATAttack Requirements- None
PRPrivileges Required- Low
UIUser Interaction- None
VCVulnerable System Confidentiality- Low
VIVulnerable System Integrity- Low
VAVulnerable System Availability- Low
SCSubsequent System Confidentiality- None
SISubsequent System Integrity- None
SASubsequent System Availability- None
| 2025-08-25 |
| CVE-2024-8068 | Citrix Session Recording Improper Privilege Management Vulnerability | Citrix | 2024-11-12 | CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
AVAttack Vector- Adjacent
ACAttack Complexity- Low
ATAttack Requirements- None
PRPrivileges Required- Low
UIUser Interaction- None
VCVulnerable System Confidentiality- Low
VIVulnerable System Integrity- Low
VAVulnerable System Availability- Low
SCSubsequent System Confidentiality- None
SISubsequent System Integrity- None
SASubsequent System Availability- None
| 2025-08-25 |
| CVE-2025-43300 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | Apple | 2025-08-21 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Changed
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-08-21 |
| CVE-2025-54948 | Trend Micro Apex One OS Command Injection Vulnerability | Trendmicro | 2025-08-05 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector- Network
ACAttack Complexity- Low
PRPrivileges Required- None
UIUser Interaction- None
SScope- Unchanged
CConfidentiality- High
IIntegrity- High
AAvailability- High
| 2025-08-18 |
| CVE-2025-8876 | N-able N-Central Command Injection Vulnerability | N-able | 2025-08-14 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
AVAttack Vector- Network
ACAttack Complexity- Low
ATAttack Requirements- None
PRPrivileges Required- Low
UIUser Interaction- None
VCVulnerable System Confidentiality- High
VIVulnerable System Integrity- High
VAVulnerable System Availability- High
SCSubsequent System Confidentiality- High
SISubsequent System Integrity- High
SASubsequent System Availability- High
| 2025-08-13 |
| CVE-2025-8875 | N-able N-Central Insecure Deserialization Vulnerability | N-able | 2025-08-14 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
AVAttack Vector- Network
ACAttack Complexity- Low
ATAttack Requirements- None
PRPrivileges Required- Low
UIUser Interaction- None
VCVulnerable System Confidentiality- High
VIVulnerable System Integrity- High
VAVulnerable System Availability- High
SCSubsequent System Confidentiality- High
SISubsequent System Integrity- High
SASubsequent System Availability- High
| 2025-08-13 |
| CVE-2025-8088 | RARLAB WinRAR Path Traversal Vulnerability | Rarlab | 2025-08-08 | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
AVAttack Vector- Local
ACAttack Complexity- Low
ATAttack Requirements- None
PRPrivileges Required- None
UIUser Interaction- Active
VCVulnerable System Confidentiality- High
VIVulnerable System Integrity- High
VAVulnerable System Availability- High
SCSubsequent System Confidentiality- None
SISubsequent System Integrity- None
SASubsequent System Availability- None
| 2025-08-12 |
