Latest CVE Feed
-
8.7
HIGHCVE-2024-12556
Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal.... Read more
Affected Products : kibana- Published: Apr. 08, 2025
- Modified: Apr. 09, 2025
- Vuln Type: Injection
-
3.7
LOWCVE-2025-3416
A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input a... Read more
Affected Products :- Published: Apr. 08, 2025
- Modified: Apr. 09, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2025-30309
XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue re... Read more
Affected Products : xmp_toolkit_software_development_kit- Published: Apr. 08, 2025
- Modified: Apr. 22, 2025
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2025-30308
XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue re... Read more
Affected Products : xmp_toolkit_software_development_kit- Published: Apr. 08, 2025
- Modified: Apr. 22, 2025
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2025-30307
XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue re... Read more
Affected Products : xmp_toolkit_software_development_kit- Published: Apr. 08, 2025
- Modified: Apr. 22, 2025
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2025-30306
XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue re... Read more
Affected Products : xmp_toolkit_software_development_kit- Published: Apr. 08, 2025
- Modified: Apr. 22, 2025
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2025-30305
XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue re... Read more
Affected Products : xmp_toolkit_software_development_kit- Published: Apr. 08, 2025
- Modified: Apr. 23, 2025
- Vuln Type: Information Disclosure
-
7.8
HIGHCVE-2025-30304
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict... Read more
- Published: Apr. 08, 2025
- Modified: Apr. 11, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2025-30303
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of t... Read more
- Published: Apr. 08, 2025
- Modified: Apr. 11, 2025
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2025-30302
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of t... Read more
- Published: Apr. 08, 2025
- Modified: Apr. 11, 2025
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2025-30301
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial... Read more
- Published: Apr. 08, 2025
- Modified: Apr. 11, 2025
- Vuln Type: Denial of Service
-
5.5
MEDIUMCVE-2025-30300
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial... Read more
- Published: Apr. 08, 2025
- Modified: Apr. 11, 2025
- Vuln Type: Denial of Service
-
7.8
HIGHCVE-2025-30299
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that ... Read more
- Published: Apr. 08, 2025
- Modified: Apr. 11, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-30298
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that... Read more
- Published: Apr. 08, 2025
- Modified: Apr. 11, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-30297
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict... Read more
- Published: Apr. 08, 2025
- Modified: Apr. 11, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-30296
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac... Read more
- Published: Apr. 08, 2025
- Modified: Apr. 11, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-30295
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that ... Read more
- Published: Apr. 08, 2025
- Modified: Apr. 11, 2025
- Vuln Type: Memory Corruption
-
6.5
MEDIUMCVE-2025-32036
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. The algorithm used to generate the captcha image shows the least complexity of the desired image. For this reason, the created image can be easil... Read more
- Published: Apr. 08, 2025
- Modified: Aug. 26, 2025
- Vuln Type: Authentication
-
7.5
HIGHCVE-2025-32035
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 9.13.2, when uploading files (e.g. when uploading assets), the file extension is checked to see if it's an allowed file type but the act... Read more
Affected Products : dotnetnuke- Published: Apr. 08, 2025
- Modified: Aug. 26, 2025
- Vuln Type: Misconfiguration
-
7.8
HIGHCVE-2025-29824
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products- Actively Exploited
- Published: Apr. 08, 2025
- Modified: May. 14, 2025
- Vuln Type: Memory Corruption