Command Injection in apmcfgupload endpoint for DrayTek Gateway Devices (CVE-2024-12987)
CVE number = CVE-2024-12987 A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected
Read MoreSecurity Vulnerabilities
The latest Security Vulnerabilities
Fortinet FortiWeb cgi_httpcontentrouting_post Directory Traversal Remote Code Execution Vulnerability (CVE-2025-25254)
CVE-2025-25254- This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiWeb.
Read More
Elevation of Privilege Vulnerability in Visual Studio (CVE-2025-29813)
An elevation of privilege vulnerability exists when Visual Studio improperly handles pipeline job tokens.
Read More
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability (CVE-2025-20213)
A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device.
Read MoreOut of bounds write vulnerability in FreeType versions 2.13.0 and below (CVE-2025-27363)
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files.
Read MoreCisco IOS XE Wireless Controller Software Arbitrary File Upload Vulnerability (CVE-2025-20188)
CVE number = CVE-2025-20188 A vulnerability in the Out-of-Band Access Point (AP) Image Download feature of Cisco IOS XE Software
Read MoreCisco IOS XE SNMP OID Handling Out-Of-Bounds Read Denial-of-Service Vulnerability (CVE-2025-20172)
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Cisco IOS XE.
Read More
Apache Parquet Java – Potential malicious code execution from trusted packages (CVE-2025-46762)
Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code.
Read MoreCisco IOS XE SNMP GET-NEXT ciscoFlashFileSize Unexpected Sign Extension Denial-of-Service Vulnerability (CVE-2025-20169)
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Cisco IOS XE.
Read More
Synology BeeStation BST150-4T Unnecessary Privileges Remote Code Execution Vulnerability (CVE-2024-10445)
CVE number = CVE-2024-10445 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology BeeStation BST150-4T
Read More