CVE-2025-42999 is a critical deserialization vulnerability in SAP NetWeaver Visual Composer Metadata Uploader. It allows a privileged attacker to execute deserialization of untrusted or malicious content, potentially compromising the confidentiality, integrity, and availability of the host system. The vulnerability has a high CVSS score of 9.1 and is known to be exploited in the wild, including use in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
A critical stack-based buffer overflow vulnerability exists in multiple Fortinet products including FortiFone, FortiVoice, FortiNDR, and FortiMail. This flaw allows remote unauthenticated attackers to execute arbitrary code or commands via specially crafted HTTP requests. The vulnerability has a high CVSS score of 9.6 and is known to be exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2025-32706 is a heap-based buffer overflow vulnerability in the Microsoft Windows Common Log File System (CLFS) driver. It allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been exploited in the wild. The CVSS score is 7.8, indicating high severity. No specific affected versions or patch information is provided in the available data.
CVE-2025-32701 is a use-after-free vulnerability in the Microsoft Windows Common Log File System (CLFS) Driver. It allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity score of 7.8 and has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2025-30400 is a use-after-free vulnerability in the Microsoft Windows DWM Core Library that allows a local authorized attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2025-32709 is a use-after-free vulnerability in the Microsoft Windows Ancillary Function Driver for WinSock. This flaw allows an authorized attacker with limited privileges to escalate their privileges to administrator level. The vulnerability has a high severity score of 7.8 and has been exploited in the wild. No specific affected Windows versions or patch information is provided in the available data.
CVE-2025-30397 is a high-severity type confusion vulnerability in the Microsoft Windows Scripting Engine. It allows an unauthorized attacker to execute arbitrary code remotely via a specially crafted URL. The vulnerability has been exploited in the wild, increasing its risk profile. No specific affected versions or patch information is provided in the available data.
CVE-2025-47729 is a low-severity vulnerability in TeleMessage TM SGNL where the archiving backend retains cleartext copies of user messages. This hidden functionality exposes message content in an unencrypted form. The vulnerability has been exploited in the wild. The affected versions include all releases up to and including 2025-05-05. No official patch or remediation guidance is provided in the available data.
Multiple GeoVision devices have an OS command injection vulnerability (CVE-2024-6047) that allows remote, unauthenticated attackers to execute arbitrary system commands. The vulnerability is critical with a CVSS score of 9.8 and is known to be exploited in the wild. Affected products may be end-of-life or end-of-service, and users are advised to discontinue use.
Multiple GeoVision devices are affected by a critical OS command injection vulnerability (CVE-2024-11120) that allows remote, unauthenticated attackers to execute arbitrary system commands. The affected devices may be end-of-life or end-of-service, and users are advised to discontinue their use. The vulnerability has a high CVSS score of 9.8 and is known to be exploited in the wild.
This Red Hat security advisory addresses multiple vulnerabilities in the mingw-freetype library and libsoup components affecting Red Hat Enterprise Linux 8. The issues include out-of-bounds writes, integer overflows, heap buffer overflows, null pointer dereferences, double frees, and denial of service conditions. These vulnerabilities impact font parsing and HTTP request handling functionality. The advisory rates the overall security impact as Important and provides updates to mitigate these issues.
Langflow has a critical missing authentication vulnerability in the /api/v1/validate/code endpoint. This flaw allows remote, unauthenticated attackers to execute arbitrary code by sending crafted HTTP requests. The vulnerability has a CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. It is known to be exploited in the wild and has been linked to ransomware campaigns. No specific affected versions or patches are provided in the available data.
CVE-2024-58136 is a critical vulnerability in the Yii Framework involving improper protection of alternate paths, which may allow remote attackers to execute arbitrary code. This vulnerability has a high CVSS score of 9.0 and is known to be exploited in the wild. It potentially affects other products built on Yii, such as Craft CMS. No specific affected versions or patch information are provided.
Commvault Command Center has a critical path traversal vulnerability (CVE-2025-34028) that enables remote, unauthenticated attackers to execute arbitrary code. The vulnerability is actively exploited in the wild. No specific affected versions or patch information is provided.
CVE-2023-44221 is an OS command injection vulnerability in SonicWall SMA100 appliances affecting the SSL-VPN management interface. It allows a remote, authenticated attacker with administrative privileges to execute arbitrary commands as the 'nobody' user. The vulnerability has a high severity score of 7.2 and has been exploited in the wild.
CVE-2024-38475 is a critical vulnerability in Apache HTTP Server's mod_rewrite module involving improper escaping of output. This flaw allows attackers to map URLs to filesystem locations that are accessible by the server but not intended to be directly reachable via URLs. Exploitation can lead to remote code execution or source code disclosure. The vulnerability has a high CVSS score of 9.1 and is known to be exploited in the wild. No specific affected versions or patch information is provided in the available data.
SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.
Qualitia Active! Mail has a critical stack-based buffer overflow vulnerability (CVE-2025-42599) that permits remote, unauthenticated attackers to execute arbitrary code or cause denial-of-service via specially crafted requests. The vulnerability is actively exploited in the wild and has a CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.
CVE-2025-3928 is a high-severity vulnerability in Commvault Web Server that allows a remote, authenticated attacker to create and execute webshells. This vulnerability has been exploited in the wild. The CVSS score is 8.8, indicating a critical impact on confidentiality, integrity, and availability. No specific affected versions or patch information is provided.