آخرین آسیب‌پذیری‌ها

Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass

Multiple Reviewdog actions were compromised during a specific time period

tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 because they were modified by a threat acto…

Junos OS: An local attacker with shell access can execute arbitrary code

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site scripting (XSS) vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS fil…

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS …

Microsoft Management Console Security Feature Bypass Vulnerability

Windows NTFS Remote Code Execution Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Redfish Authentication Bypass

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The v…

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

Edimax IC-7100 IP Camera OS Command Injection

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit thi…

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this …

NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery ha…

Remote code execution as guest via SolrSearchMacros request in xwiki

Microsoft Power Pages Elevation of Privilege Vulnerability

PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface

PAN-OS: Authentication Bypass in the Management Web Interface