Latest CVE Feed
-
8.8
CVSS31CVE-2025-21178
Visual Studio Remote Code Execution Vulnerability... Read more
Affected Products : visual_studio_2017- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
8.8
CVSS31CVE-2025-21176
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability... Read more
Affected Products : visual_studio_2017- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.5
CVSS31CVE-2025-21172
.NET and Visual Studio Remote Code Execution Vulnerability... Read more
Affected Products : visual_studio_2017- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.5
CVSS31- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.3
CVSS31CVE-2025-0465
A vulnerability was found in AquilaCMS 1.412.13. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/v2/categories. The manipulation of the argument PostBody.populate leads to deserialization. The attack ma... Read more
Affected Products :- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
5.9
CVSS31CVE-2024-45627
In Apache Linkis <1.7.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql JDBC parameters in the DataSource Manager Module will allow the attacker to read arbitrary files from the Linkis server. Therefore, th... Read more
Affected Products :- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.8
CVSS31CVE-2024-13172
Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.8
CVSS31CVE-2024-13171
Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.5
CVSS31CVE-2024-13170
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.8
CVSS31CVE-2024-13169
An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.5
CVSS31CVE-2024-13168
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.5
CVSS31CVE-2024-13167
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.5
CVSS31CVE-2024-13166
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.5
CVSS31CVE-2024-13165
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.8
CVSS31CVE-2024-13164
An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.8
CVSS31CVE-2024-13163
Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
7.2
CVSS31CVE-2024-13162
SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. This CVE addresses incomplete fixes from CVE-... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
9.8
CVSS31CVE-2024-13161
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
9.8
CVSS31CVE-2024-13160
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025
-
9.8
CVSS31CVE-2024-13159
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.... Read more
Affected Products : endpoint_manager- Published: Jan. 14, 2025
- Modified: Jan. 14, 2025