Database CVE
Archivio delle vulnerabilità note (CVE) con punteggio CVSS, gravità, prodotti e vendor coinvolti. Filtra per anno e severità, collegato ai nostri articoli.
- CVE-2025-20337Critica10.0
A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.
- CVE-2025-6558Alta8.8
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
- CVE-2025-47813Media4.3
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
- CVE-2025-47812Critica10.0
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). This is thus a remote code execution vulnerability that guarantees a total server compromise. This is also exploitable via anonymous FTP accounts.
- CVE-2025-48384Alta8.0
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.
- CVE-2025-49706Media6.5
Autenticazione impropria in Microsoft Office SharePoint consente a un utente malintenzionato non autorizzato di eseguire spoofing su una rete.
- CVE-2025-49704Alta8.8
Controllo improprio della generazione di codice ('code injection') in Microsoft Office SharePoint consente a un utente malintenzionato autorizzato di eseguire codice in rete.
- CVE-2025-6554Alta8.1
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
- CVE-2025-32463Critica9.3
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
- CVE-2025-26074Critica9.8
Orkes Conductor v3.21.11 consente agli attaccanti remoti di eseguire comandi OS arbitrari tramite l'accesso non limitato alle classi Java.
- CVE-2025-20281Critica10.0
A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.
- CVE-2025-6543Critica9.8
Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
- CVE-2025-32975Critica10.0
Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid credentials. The vulnerability exists in the SSO authentication handling mechanism and can lead to complete administrative takeover.
- CVE-2025-34037
An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability was reported to be exploited in the wild by the "TheMoon" worm in 2014 to deploy a MIPS ELF payload, enabling arbitrary code execution on the router. Additionally, this vulnerability may affect other Linksys products to include, but not limited to, WAG/WAP/WES/WET/WRT-series router models and Wireless-N access points and routers. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC.
- CVE-2025-48700Media6.1
È stato scoperto un problema in Zimbra Collaboration (ZCS) 8.8.15 e 9.0 e 10.0 e 10.1. Una vulnerabilità Cross-Site Scripting (XSS) in Zimbra Classic UI consente agli attaccanti di eseguire JavaScript arbitrario all'interno della sessione dell'utente, portando potenzialmente all'accesso non autorizzato a informazioni sensibili. Questo problema deriva da una sanificazione insufficiente del contenuto HTML, che coinvolge nello specifico strutture di tag appositamente create e valori di attributo che includono una direttiva @import e altri vettori di script injection. La vulnerabilità si attiva quando un utente visualizza un messaggio e-mail appositamente creato in Classic UI, senza richiedere alcuna ulteriore interazione da parte dell'utente.
- CVE-2025-6218Alta7.8
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of file paths within archive files. A crafted file path can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27198.
- CVE-2025-5777Alta7.5
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
- CVE-2025-43200Media4.2
This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
- CVE-2025-1055Media5.6
Una vulnerabilità nel driver K7RKScan.sys, parte della suite K7 Security Anti-Malware, consente a un utente locale con privilegi bassi di inviare richieste IOCTL appositamente create per terminare un'ampia gamma di processi in esecuzione con privilegi amministrativi o a livello di sistema, ad eccezione di quelli intrinsecamente protetti dal sistema operativo. Questo difetto deriva dal controllo degli accessi mancante nell'handler IOCTL del driver, consentendo agli utenti non privilegiati di eseguire azioni privilegiate in kernel space. Lo sfruttamento riuscito può portare a denial of service interrompendo servizi critici o applicazioni privilegiate.
- CVE-2025-33073Alta8.8
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
This product uses the NVD API but is not endorsed or certified by the NVD.