CVE-2025-30400 is a use-after-free vulnerability in the Microsoft Windows DWM Core Library that allows a local authorized attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2025-32709 is a use-after-free vulnerability in the Microsoft Windows Ancillary Function Driver for WinSock. This flaw allows an authorized attacker with limited privileges to escalate their privileges to administrator level. The vulnerability has a high severity score of 7.8 and has been exploited in the wild. No specific affected Windows versions or patch information is provided in the available data.
CVE-2025-30397 is a high-severity type confusion vulnerability in the Microsoft Windows Scripting Engine. It allows an unauthorized attacker to execute arbitrary code remotely via a specially crafted URL. The vulnerability has been exploited in the wild, increasing its risk profile. No specific affected versions or patch information is provided in the available data.
CVE-2025-47729 is a low-severity vulnerability in TeleMessage TM SGNL where the archiving backend retains cleartext copies of user messages. This hidden functionality exposes message content in an unencrypted form. The vulnerability has been exploited in the wild. The affected versions include all releases up to and including 2025-05-05. No official patch or remediation guidance is provided in the available data.
Multiple GeoVision devices have an OS command injection vulnerability (CVE-2024-6047) that allows remote, unauthenticated attackers to execute arbitrary system commands. The vulnerability is critical with a CVSS score of 9.8 and is known to be exploited in the wild. Affected products may be end-of-life or end-of-service, and users are advised to discontinue use.
Multiple GeoVision devices are affected by a critical OS command injection vulnerability (CVE-2024-11120) that allows remote, unauthenticated attackers to execute arbitrary system commands. The affected devices may be end-of-life or end-of-service, and users are advised to discontinue their use. The vulnerability has a high CVSS score of 9.8 and is known to be exploited in the wild.
This Red Hat security advisory addresses multiple vulnerabilities in the mingw-freetype library and libsoup components affecting Red Hat Enterprise Linux 8. The issues include out-of-bounds writes, integer overflows, heap buffer overflows, null pointer dereferences, double frees, and denial of service conditions. These vulnerabilities impact font parsing and HTTP request handling functionality. The advisory rates the overall security impact as Important and provides updates to mitigate these issues.
Langflow has a critical missing authentication vulnerability in the /api/v1/validate/code endpoint. This flaw allows remote, unauthenticated attackers to execute arbitrary code by sending crafted HTTP requests. The vulnerability has a CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. It is known to be exploited in the wild and has been linked to ransomware campaigns. No specific affected versions or patches are provided in the available data.
CVE-2024-58136 is a critical vulnerability in the Yii Framework involving improper protection of alternate paths, which may allow remote attackers to execute arbitrary code. This vulnerability has a high CVSS score of 9.0 and is known to be exploited in the wild. It potentially affects other products built on Yii, such as Craft CMS. No specific affected versions or patch information are provided.
Commvault Command Center has a critical path traversal vulnerability (CVE-2025-34028) that enables remote, unauthenticated attackers to execute arbitrary code. The vulnerability is actively exploited in the wild. No specific affected versions or patch information is provided.
CVE-2023-44221 is an OS command injection vulnerability in SonicWall SMA100 appliances affecting the SSL-VPN management interface. It allows a remote, authenticated attacker with administrative privileges to execute arbitrary commands as the 'nobody' user. The vulnerability has a high severity score of 7.2 and has been exploited in the wild.
CVE-2024-38475 is a critical vulnerability in Apache HTTP Server's mod_rewrite module involving improper escaping of output. This flaw allows attackers to map URLs to filesystem locations that are accessible by the server but not intended to be directly reachable via URLs. Exploitation can lead to remote code execution or source code disclosure. The vulnerability has a high CVSS score of 9.1 and is known to be exploited in the wild. No specific affected versions or patch information is provided in the available data.
SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.
Qualitia Active! Mail has a critical stack-based buffer overflow vulnerability (CVE-2025-42599) that permits remote, unauthenticated attackers to execute arbitrary code or cause denial-of-service via specially crafted requests. The vulnerability is actively exploited in the wild and has a CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.
CVE-2025-3928 is a high-severity vulnerability in Commvault Web Server that allows a remote, authenticated attacker to create and execute webshells. This vulnerability has been exploited in the wild. The CVSS score is 8.8, indicating a critical impact on confidentiality, integrity, and availability. No specific affected versions or patch information is provided.
CVE-2025-1976 is a high-severity code injection vulnerability in Broadcom Brocade Fabric OS that allows a local user with administrative privileges to execute arbitrary code with full root privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2025-24054 is a vulnerability in Microsoft Windows NTLM that involves external control of file name or path, enabling an unauthorized attacker to perform spoofing over a network. It affects multiple Windows versions prior to specific fixed releases. The vulnerability has been exploited in the wild and has a medium severity rating with a CVSS score of 6.5. Fixed versions have been released by Microsoft.
CVE-2025-31200 is a critical memory corruption vulnerability in Apple operating systems that process audio streams from maliciously crafted media files. The flaw allows remote code execution without user interaction. Apple fixed this issue in iOS 18.4.1, iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, and watchOS 11.5. The vulnerability has been exploited in highly sophisticated targeted attacks on iOS versions prior to 18.4.1.
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.